Edit tour

Windows Analysis Report
https://application-workspace.com/red-bull/id-38772

Overview

General Information

Sample URL:	https://application-workspace.com/red-bull/id-38772
Analysis ID:	1564666
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2008,i,57205653329076894,6228817083967904067,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://application-workspace.com/red-bull/id-38772" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /api/activity/shadow HTTP/1.1Host: glass.anotherlevel.appConnection: keep-aliveContent-Length: 148sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://application-workspace.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://application-workspace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/htmllast-modified: Wed, 18 Jan 2023 19:41:46 GMTetag: "999-63c84b7a-33ed2261a6d1b2d8;;;"accept-ranges: bytescontent-length: 2457date: Thu, 28 Nov 2024 15:56:53 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.1Date: Thu, 28 Nov 2024 15:57:00 GMTContent-Type: application/jsonContent-Length: 22Connection: closeaccess-control-allow-origin: *access-control-allow-credentials: true

Source: chromecache_70.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_70.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_92.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_86.1.dr, chromecache_76.1.dr	String found in binary or memory: https://loop.anotherlevel.app/storage/favicon.png
Source: chromecache_86.1.dr, chromecache_76.1.dr	String found in binary or memory: https://loop.anotherlevel.app/storage/redbull.png
Source: chromecache_92.1.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_70.1.dr	String found in binary or memory: https://tailwindcss.com
Source: chromecache_92.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.18:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.18:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.18:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.2:443 -> 192.168.2.18:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.186:443 -> 192.168.2.18:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.18:49736 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@17/48@18/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2008,i,57205653329076894,6228817083967904067,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://application-workspace.com/red-bull/id-38772"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2008,i,57205653329076894,6228817083967904067,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://application-workspace.com/red-bull/id-38772	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://application-workspace.com/favicon.ico	0%	Avira URL Cloud	safe
https://application-workspace.com/red-bull/id-38772/static/js/main.22cb0042.js	0%	Avira URL Cloud	safe
https://glass.anotherlevel.app/api/activity/shadow	0%	Avira URL Cloud	safe
https://loop.anotherlevel.app/storage/favicon.png	0%	Avira URL Cloud	safe
https://glass.anotherlevel.app/stealth	0%	Avira URL Cloud	safe
https://glass.anotherlevel.app/api/set_status/null/login	0%	Avira URL Cloud	safe
https://application-workspace.com/red-bull/id-38772/site.webmanifest	0%	Avira URL Cloud	safe
https://application-workspace.com/red-bull/id-38772/static/media/fb-gwrjjymgbpwlkscq.b1cfbf0dc49d882cc320.svg	0%	Avira URL Cloud	safe
https://loop.anotherlevel.app/storage/redbull.png	0%	Avira URL Cloud	safe
https://application-workspace.com/red-bull/id-38772/static/css/main.7ca1cee7.css	0%	Avira URL Cloud	safe
https://glass.anotherlevel.app/api/settings_by_stage/s9	0%	Avira URL Cloud	safe
https://glass.anotherlevel.app/api/set_status//work	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ipapi.co	104.26.9.44	true	false	high
glass.anotherlevel.app	146.70.81.214	true	false	high
www.google.com	172.217.21.36	true	false	high
application-workspace.com	45.84.207.234	true	false	high
loop.anotherlevel.app	146.70.81.214	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://application-workspace.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://glass.anotherlevel.app/api/activity/shadow	false	Avira URL Cloud: safe	unknown
https://application-workspace.com/red-bull/id-38772/static/js/main.22cb0042.js	true	Avira URL Cloud: safe	unknown
https://application-workspace.com/red-bull/id-38772/static/css/main.7ca1cee7.css	true	Avira URL Cloud: safe	unknown
https://loop.anotherlevel.app/storage/favicon.png	false	Avira URL Cloud: safe	unknown
https://application-workspace.com/red-bull/id-38772/	true		unknown
https://application-workspace.com/red-bull/id-38772	false		unknown
https://glass.anotherlevel.app/stealth	false	Avira URL Cloud: safe	unknown
https://ipapi.co/json//	false		high
https://glass.anotherlevel.app/api/set_status/null/login	false	Avira URL Cloud: safe	unknown
https://application-workspace.com/red-bull/id-38772/login	true		unknown
https://application-workspace.com/red-bull/id-38772/site.webmanifest	true	Avira URL Cloud: safe	unknown
https://loop.anotherlevel.app/storage/redbull.png	false	Avira URL Cloud: safe	unknown
https://application-workspace.com/red-bull/id-38772/static/media/fb-gwrjjymgbpwlkscq.b1cfbf0dc49d882cc320.svg	true	Avira URL Cloud: safe	unknown
https://glass.anotherlevel.app/api/settings_by_stage/s9	false	Avira URL Cloud: safe	unknown
https://glass.anotherlevel.app/api/set_status//work	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://fontawesome.com	chromecache_70.1.dr	false	high
https://tailwindcss.com	chromecache_70.1.dr	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	chromecache_92.1.dr	false	high
https://fontawesome.com/license/free	chromecache_70.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
146.70.81.214	glass.anotherlevel.app	United Kingdom	2018	TENET-1ZA	false
104.26.9.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
45.84.207.234	application-workspace.com	Germany	47583	AS-HOSTINGERLT	false

Private

IP
192.168.2.18
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1564666
Start date and time:	2024-11-28 16:56:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://application-workspace.com/red-bull/id-38772
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/48@18/8

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 2.20.68.201, 142.250.181.99, 172.217.19.202, 172.217.17.74, 142.250.181.138, 216.58.208.234, 172.217.21.42, 172.217.19.234, 172.217.17.42, 142.250.181.106, 142.250.181.10, 172.217.17.35, 172.217.19.206
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://application-workspace.com/red-bull/id-38772

Input	Output
URL: https://application-workspace.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://application-workspace.com
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a minified React PropTypes validation code. It contains standard React property type checking and DOM manipulation functionality. While it uses some DOM manipulation and contains encoded strings, these are legitimate parts of the React framework's prop-types package. No malicious patterns or suspicious behaviors are detected." }
/! For license information please see main.22cb0042.js.LICENSE.txt / (()=>{var e={497:(e,t,n)=>{"use strict";var r=n(218);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,l){if(l!==r){var i=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw i.name="Invariant Violation",i}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},173:(e,t,n)=>{e.exports=n(497)()},218:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},730:(e,t,n)=>{"use strict";var r=n(43),a=n(853);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var l=new Set,i={};function s(e,t){u(e,t),u(e+"Capture",t)}function u(e,t){for(i[e]=t,e=0;e<t.length;e++)l.add(t[e])}var c=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=Object.prototype.hasOwnProperty,f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p={},h={};function m(e,t,n,r,a,o,l){this.acceptsBooleans=2===t\|\|3===t\|\|4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=l}var g={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){g[e]=new m(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];g[t]=new m(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){g[e]=new m(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){g[e]=new m(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){g[e]=new m(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){g[e]=new m(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){g[e]=new m(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){g[e]=new m(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){g[e]=new m(e,5,!1,e.toLowerCase(),null,!1,!1)}));var v=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function b(e,t,n,r){var a=g.hasOwnProperty(t)?g[t]:null;(null!==a?0!==a.type:r\|\|!(2<t.length)\|\|"o"!==t[0]&&"O"!==t[0]\|\|"n"!==t[1]&&"N"!==t[1])&&(function(e,t,n,r){if(null===t\|\|"undefined"===typeof t\|\|function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:retu
URL: https://application-workspace.com/red-bull/id-38772/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Are you ready to work as a Social Media Manager for Red Bull?", "prominent_button_name": "Continue", "text_input_field_labels": [ "Email address *" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://application-workspace.com/red-bull/id-38772/ Model: Joe Sandbox AI	{ "brands": [ "Red Bull" ] }
	{ "brands": [ "Red Bull" ] }
URL: https://application-workspace.com/red-bull/id-38772/login Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Log in", "text_input_field_labels": [ "Email address or phone number", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://application-workspace.com/red-bull/id-38772/ Model: Joe Sandbox AI	```json{ "legit_domain": "redbull.com", "classification": "wellknown", "reasons": [ "The brand 'Red Bull' is well-known and typically associated with the domain 'redbull.com'.", "The URL 'application-workspace.com' does not match the legitimate domain for Red Bull.", "The domain 'application-workspace.com' is generic and does not have any direct association with Red Bull.", "The presence of a generic domain name with no clear link to the brand is a common phishing tactic.", "The URL does not contain any direct reference to 'Red Bull', which is suspicious given the brand association." ], "riskscore": 8} Google indexed: False
URL: application-workspace.com Brands: Red Bull Input Fields: Email address *
URL: https://application-workspace.com/red-bull/id-38772/login Model: Joe Sandbox AI	{ "brands": [ "Facebook" ] }
	{ "brands": [ "Facebook" ] }
URL: https://application-workspace.com/red-bull/id-38772/login Model: Joe Sandbox AI	```json{ "legit_domain": "facebook.com", "classification": "wellknown", "reasons": [ "The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'.", "The URL 'application-workspace.com' does not match the legitimate domain 'facebook.com'.", "The URL contains no direct reference to 'Facebook', which is suspicious given the brand association.", "The presence of input fields for 'Email address or phone number' and 'Password' is typical for phishing sites attempting to capture login credentials.", "The domain 'application-workspace.com' is generic and not directly related to Facebook, increasing the likelihood of phishing." ], "riskscore": 9} Google indexed: False
URL: application-workspace.com Brands: Facebook Input Fields: Email address or phone number, Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 28 14:56:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.983151897845785
Encrypted:	false
SSDEEP:	48:8oJdmT5OhQHjSidAKZdA1rehwiZUklqehay+3:8oKVOhTdy
MD5:	F978F115331AFD52F7FEEBED449FE48C
SHA1:	99B8E444C6395192531017D2B56AFFF00A5AC02A
SHA-256:	9A7532AD793D7056E08EA320F648732DB2681F1111C8C7995C8A54C32A23C3A5
SHA-512:	D4C3095A722A693EBA0DEA78CCC8B7C129E5076FF760D292D14F373F6630A624ECFD47A4990EA6E0549FCDA0B5606A1CFC07820E41DF2D435655063F1F1CA7FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........A......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|Y.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 28 14:56:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.001984957894404
Encrypted:	false
SSDEEP:	48:8HgJdmT5OhQHjSidAKZdA1ceh/iZUkAQkqehNy+2:8HgKVOhn9QYy
MD5:	C2819CD303FD1FE73B371A2DF19622C9
SHA1:	36E79B8C898E10B4CBC8ED21214BB9CE3B599C32
SHA-256:	C29A186D0BABD5813D90CF5A15B789646C45C91DCCEB44C6F14263CA2E6BCBDF
SHA-512:	8E072A8FDF90B6009FDC04C75ACC2F9988111F2F9F5C23E61CC69C1D8D6D2F841447C1DA78945A674BE5D466674BA546C26AEFD71FB543C49CCE76EDC8B31238
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....V....A......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|Y.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.008589961134185
Encrypted:	false
SSDEEP:	48:8XRJdmT5OhSHjSidAKZdA14Aeh7sFiZUkmgqeh7sDy+BX:8hKVOhLnZy
MD5:	9613F0D22B18598DFE70430A81861EDC
SHA1:	B05F183E7FCF1B6580DA9FA310833321FAE7FB22
SHA-256:	730D844BC9DFE663C571154816ADABB0B23D4DDBBE6D42AA5C032CFA1E611F03
SHA-512:	553BFC9E04C3A9AF051B7632ECD7E0D28FDA76D5C2219C9A90009898FC8B4AF1A844C2994B954BA83F67DA27C60D18B04D34CC1DFC4862D383276EB1F845F9C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.4 ?.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.R.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 28 14:56:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9987796405652247
Encrypted:	false
SSDEEP:	48:8aQJdmT5OhQHjSidAKZdA1JehDiZUkwqehRy+R:8DKVOhS7y
MD5:	BE4614E209935301B9C4E48A795C74A4
SHA1:	739041E5994A6958152451D21867FD02E8BAE34D
SHA-256:	618C052133EB6F991CD09643A1E53B18B798306F221CFCAAEA796A4FA60347C5
SHA-512:	CAF7CBFFA01EB01CC3E9CBC4E583548D0B4C5F268D87831E404B6CCDD87C6E2F9FE63F4D69FFF6BF44FD55E773151519979CCA8B4EC0EDDD76DAD4DB42198B6B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........A......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|Y.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 28 14:56:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9883505728671893
Encrypted:	false
SSDEEP:	48:8GvJdmT5OhQHjSidAKZdA1XehBiZUk1W1qehvy+C:8QKVOhy9Py
MD5:	36F2D3A3A5D9BB6867C1F57D596B7667
SHA1:	CED7901BFC0E9E536B686B725FFE201556D8217A
SHA-256:	1C6E2DA43D80A95090B83145B34529D5F2F627138750C1F248433B710919B0AA
SHA-512:	B8AF7801426822537D4E5769033A6522669FACF24DE4D3A86829B08770D874DDD044B51A15F45C7A01C0BBD756E907BD9551DB6CED7E8F467B58D5ABC58E6DC4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....]...A......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|Y.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 28 14:56:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9988137508923325
Encrypted:	false
SSDEEP:	48:8tJdmT5OhQHjSidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbZy+yT+:8tKVOhGT/TbxWOvTbZy7T
MD5:	8265A5BE4F3B30871CD586F2A36FED31
SHA1:	172E9EA37BB567B939C4C13F85FA36BE4C35B105
SHA-256:	46159EA5F89B92E7AD226B4BD73B893D004C359E934EBD71014B293B72772E6A
SHA-512:	3B9F800B82CE1B5EE79F417B01E3A10A335A03AC5C35406A648521DA0857A1613EDF71AA5A0178770144A5FA4FFD014FD83F2BF4E6D8CF473862D685B09CA934
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........A......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I\|Y......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V\|Y......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V\|Y.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|Y.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59136)
Category:	downloaded
Size (bytes):	137265
Entropy (8bit):	5.0215853428108845
Encrypted:	false
SSDEEP:	1536:lMULpM4pM6pMCpMZpMtQ3E709/bQZMfjSFOlyPG9bXgRw0Ev7QnY3QmYmDW8ZU:l7709/UGGFwyPG9bwRw0EzQdaU
MD5:	3C3487BAE02696718E392DF82F0D31D7
SHA1:	8D593A78A4796F9FFE6F69C8F7A340C4ACDE4C0C
SHA-256:	0E367CFD26D2A2B56C88A862267B5D03D0F8C8826F6D20F6409E74A74D7779FA
SHA-512:	89D3DF502CEC0570713E240F57B4D4EE3F84944BF36A4D96D1574E128E6396ABCF3792ED19FDA25AB4B333AE2FE2D48016A597E5785C97E328560946BE8CF8D7
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/red-bull/id-38772/static/css/main.7ca1cee7.css
Preview:	@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:100;src:local("Roboto Thin "),local("Roboto-Thin"),url(/red-bull/id-38772/static/media/roboto-latin-100.c2aa4ab115bf9c6057cb.woff2) format("woff2"),url(/red-bull/id-38772/static/media/roboto-latin-100.a45108d3b34af91f9113.woff) format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:italic;font-weight:100;src:local("Roboto Thin italic"),local("Roboto-Thinitalic"),url(/red-bull/id-38772/static/media/roboto-latin-100italic.7f839a8652da29745ce4.woff2) format("woff2"),url(/red-bull/id-38772/static/media/roboto-latin-100italic.451d4e559d6f57cdf6a1.woff) format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light "),local("Roboto-Light"),url(/red-bull/id-38772/static/media/roboto-latin-300.37a7069dc30fc663c878.woff2) format("woff2"),url(/red-bull/id-38772/static/media/roboto-latin-300.865f928cbabcc9f8f2b5.woff) format("woff")}@font-face{

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAm4qIR40vtYTRIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.82306798227366
Encrypted:	false
SSDEEP:	3:YBAvMFjJ4:YwMZJ4
MD5:	689525EE6C812E73A44B6AA1036AB53A
SHA1:	7350CB4703A96EA7C140BD30DA9A6D1BCFF36EB2
SHA-256:	37EC4665A8102D115FFD1AC20DAE94C98B4DAC64B0C1A68228AA2A531CAEB35D
SHA-512:	DA6DEFF19F0B2BF5E0EF17B3CAE34A0D44C5D48FBF9F3FFEDD00CEA74F923E1A3E9C4C926A6564C889CCA21041550F557E1EC00DB9E35502FFC794A5F9E9722E
Malicious:	false
Reputation:	low
URL:	https://glass.anotherlevel.app/api/set_status//work
Preview:	{"detail":"Not Found"}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	58452
Entropy (8bit):	7.840243698334027
Encrypted:	false
SSDEEP:	1536:NKVPJTkzU4L/17UbFQ8Y5xpjW1NMI+TfOJYSwFm:ydkHD17oQ/3jW1NMRDeYSwFm
MD5:	B0D1AFAED2DDD4B7FB94EF394D2C2359
SHA1:	DEA2EA5437057B1498B3E41F39A863DE20806759
SHA-256:	EC2D92A7BA4EC651DDFDCA51781CC91236C540810EB11FE2D8D1D6A806C23C2D
SHA-512:	192E6BA3CBE83EC3652A61ACDB24140146C3C076E43444404B73D6B8016A1F6FF510131125E4A1033C0113F71778314DF9E64715B4F8DC7351BE1F3D68DE7041
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......p.....b..A....PLTEGpL..D.]1.....I.....I....^#{wl.....tRNS.j,..w.......IDATx....N.I......."..:.Y\..5.........CX. B.....;.V..Lg.WwU...................n.Z.mz.>..z..o7..K..........z..Yu.I,.....}.G...?o<;.xS...v.u..!..A..W...0....8....n<S..G.{....!......o:.......3..<f.xny......g..O.o.0....a..3..S.`...M.....0......u.v........;.w....].M.......0..}.........M.U..0......:.......qE..`.j...}\|....jYl.....Z....Q0...S....P..w..C.P.i..C....7K?."...f,....}......_'..P}........p...`...m...+.`..i..b.08....mh..f.MUX{....2..64......`...T./^)..0kSe\|....-S}...P..U....`.m[g.k...`.Z..D0...U.....@...n...(.".n7...(M.F..{.@.j..`.j.}R.. ..........x.M..J..J0.Y.....@.f...k.@.J`......+..........@.J`......BMF.....@.J`..`...[..D..V..6...7.....(...;.........@.N.J`..}../.$0.'...._..X....L.J`......... ...\J.@..5.d...x..0...>IY..@8.H...n.......Vh..M4@K`..i..o..pd.W#...\|.A...O...V.....h...@<.X....@.:.. ....o.[3..........'..wo...^................c`..9.v..@........

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	3.8043344609220293
Encrypted:	false
SSDEEP:	3:YIzQrERDxUHYn:YIXD8Yn
MD5:	765920E039936E6A4EFCEF8BF71B17EE
SHA1:	752C679EE557891CAE4EEFD593C77913F7372DC2
SHA-256:	3A81F99AAEF5363691CB6067C2FE3C2B5EEA5DA386A7F80FCF7EAFDD42E90DE1
SHA-512:	FE02B3920DE417C0FFF7DD1D3154EC04CB6FDD8677881D875BD0E008E84A916578DEE1959BB92B09F79443DF26589F07BD7AD472CAA889BF75B250935731EC21
Malicious:	false
Reputation:	low
URL:	https://glass.anotherlevel.app/api/set_status/null/login
Preview:	{"message":"Updated session status"}

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	352
Entropy (8bit):	4.88450264861328
Encrypted:	false
SSDEEP:	6:YWkhoB8oYn7CRofJm+Dce5ohF0JcAADJWc78G8sFJVoFaEGRwTwLHn:YWkvo0b7DcUGiGltWcgSFJqGwo
MD5:	400E9D5EF4DE8EBAF95D14E008819AE4
SHA1:	60440D6414A3364A9E47A3D4F5A40AAAEB6E6D97
SHA-256:	4176CEA0C3B7DADC6EF9A39E90A8BE41FF52390F4BA585FE3C4239E075831BA6
SHA-512:	B1333D3B7045EBE024F9DD660F409C67211A6B7FEC62C3D6ED7E07FE0C352A40311BB7238C0C1061033F3D84044D793A66EE821523CE97AF9036B41D9F0BF1AD
Malicious:	false
Reputation:	low
Preview:	{"s9_logo":"https://loop.anotherlevel.app/storage/redbull.png","s9_first":"CC1E4A","s9_fourth":"Red Bull \| Careers","s9_second":"Are you ready to work as a Social Media Manager for Red Bull?","s9_third":"We.re looking for curious minds from a wide range of disciplines and backgrounds.","s9_fifth":"https://loop.anotherlevel.app/storage/favicon.png"}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.0654452748753767
Encrypted:	false
SSDEEP:	96:jhtOC2EN3tEoE3dYv2MqWz9JfgHHiXYeS:jhttMNApJfRYeS
MD5:	9FDE7E55E4304BEA119DBA2331D79230
SHA1:	7AE8D0806C255F2B8EB74541473CB01A764C32B0
SHA-256:	31CF2BA11724E6D35B5A7AFB32FA491684CAC6A12C82E1FF0BA5C4BF15EE4F80
SHA-512:	D5615D3F48414CE034448962B74F62B1090640A1E005E42AD4407434B49C4A007D3BF6476E6BB822979D8FE32743E233C818B01E46546A9C7381C6FAA409BF6D
Malicious:	false
Reputation:	low
URL:	https://loop.anotherlevel.app/storage/favicon.png
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (626), with no line terminators
Category:	downloaded
Size (bytes):	626
Entropy (8bit):	4.879729003224041
Encrypted:	false
SSDEEP:	12:qTE0r26V1qNVjxcgmIltxcg4EycgddNVetxcgnbCjTG7faKj2a:0E0rRfsVFcPOcGyc4dNVwc0bCjC75j2a
MD5:	A467E276B164DB1E069EBD251E9A59AE
SHA1:	ECED143E95522DC2EAC313EA5AA155A6CF85F261
SHA-256:	D1F42A134EDB399A5FDEE05322BA312D4BB522ADB3D8799F14EF9A7B1E7488A6
SHA-512:	EF1EE8CDD721DA8D63BBDC408AACAEA685F53FD06050DA10723ABD16B6EF911F7BDF4080F0EA7557668D8583A62DFF4AC0975877DD975C9336A1717FFDEFBCD7
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/red-bull/id-38772/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000001"/><meta name="description" content=""/><link rel="manifest" href="/red-bull/id-38772/site.webmanifest"><link rel="manifest" href="/red-bull/id-38772/manifest.json"/><title></title><script defer="defer" src="/red-bull/id-38772/static/js/main.22cb0042.js"></script><link href="/red-bull/id-38772/static/css/main.7ca1cee7.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	4.74727172577332
Encrypted:	false
SSDEEP:	12:f8JHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:k5x14wxHoaNO38mV5r2Zmrp2sAv9OBHA
MD5:	2445811F5C7524A61987B25C2771BD61
SHA1:	E6298768E858E81A230D3B619569579B714F3206
SHA-256:	D42F25B406B8EF39A0957B06512662974F9CDCC489661C2F387028AC93A1C9E1
SHA-512:	6F104C613BF193B169D9E5F1B706D17E4BCC33ACD7D742863BD4DD0B9A0627A34F6DBB3DA41A1ADF82523144F748B96AC2464387AEA70AC4B39C96556F2B6726
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/json//
Preview:	{. "ip": "8.46.123.228",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	58452
Entropy (8bit):	7.840243698334027
Encrypted:	false
SSDEEP:	1536:NKVPJTkzU4L/17UbFQ8Y5xpjW1NMI+TfOJYSwFm:ydkHD17oQ/3jW1NMRDeYSwFm
MD5:	B0D1AFAED2DDD4B7FB94EF394D2C2359
SHA1:	DEA2EA5437057B1498B3E41F39A863DE20806759
SHA-256:	EC2D92A7BA4EC651DDFDCA51781CC91236C540810EB11FE2D8D1D6A806C23C2D
SHA-512:	192E6BA3CBE83EC3652A61ACDB24140146C3C076E43444404B73D6B8016A1F6FF510131125E4A1033C0113F71778314DF9E64715B4F8DC7351BE1F3D68DE7041
Malicious:	false
Reputation:	low
URL:	https://loop.anotherlevel.app/storage/redbull.png
Preview:	.PNG........IHDR.......p.....b..A....PLTEGpL..D.]1.....I.....I....^#{wl.....tRNS.j,..w.......IDATx....N.I......."..:.Y\..5.........CX. B.....;.V..Lg.WwU...................n.Z.mz.>..z..o7..K..........z..Yu.I,.....}.G...?o<;.xS...v.u..!..A..W...0....8....n<S..G.{....!......o:.......3..<f.xny......g..O.o.0....a..3..S.`...M.....0......u.v........;.w....].M.......0..}.........M.U..0......:.......qE..`.j...}\|....jYl.....Z....Q0...S....P..w..C.P.i..C....7K?."...f,....}......_'..P}........p...`...m...+.`..i..b.08....mh..f.MUX{....2..64......`...T./^)..0kSe\|....-S}...P..U....`.m[g.k...`.Z..D0...U.....@...n...(.".n7...(M.F..{.@.j..`.j.}R.. ..........x.M..J..J0.Y.....@.f...k.@.J`......+..........@.J`......BMF.....@.J`..`...[..D..V..6...7.....(...;.........@.N.J`..}../.$0.'...._..X....L.J`......... ...\J.@..5.d...x..0...>IY..@8.H...n.......Vh..M4@K`..i..o..pd.W#...\|.A...O...V.....h...@<.X....@.:.. ....o.[3..........'..wo...^................c`..9.v..@........

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	764
Entropy (8bit):	4.74727172577332
Encrypted:	false
SSDEEP:	12:f8JHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:k5x14wxHoaNO38mV5r2Zmrp2sAv9OBHA
MD5:	2445811F5C7524A61987B25C2771BD61
SHA1:	E6298768E858E81A230D3B619569579B714F3206
SHA-256:	D42F25B406B8EF39A0957B06512662974F9CDCC489661C2F387028AC93A1C9E1
SHA-512:	6F104C613BF193B169D9E5F1B706D17E4BCC33ACD7D742863BD4DD0B9A0627A34F6DBB3DA41A1ADF82523144F748B96AC2464387AEA70AC4B39C96556F2B6726
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.228",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	4.197561253048587
Encrypted:	false
SSDEEP:	6:viNvXq8X0XB79i8eJWezXXhSvNyK2GLCgGLwSw6:+XjgBU8ehhsNyYLCDLpB
MD5:	3BBCCEDFACE908936CA94DF52E793B85
SHA1:	C2AFB1841793E869ACA2A8214F29B3934C910313
SHA-256:	C02FCEA2C1233D32987798F755C0E89EBB9EE23817657CA039EBD4274D7D2A81
SHA-512:	266B315105B626A4B7DE010716CD9672AC69A4CD9FF742760DE5D3FFCE418B760854E6A9FDD3F80B7D3269664E6070B48C02047D0BFA2D78EF6E91EEC6A55CFE
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/red-bull/id-38772/site.webmanifest
Preview:	{. "name": "",. "short_name": "",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". }. ],. "theme_color": "#FFFFFF",. "background_color": "#FFFFFF",. "display": "standalone". }

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	283658
Entropy (8bit):	5.342655358725882
Encrypted:	false
SSDEEP:	6144:XW2S6ok3YZ3HQVIZaarajaP/duIQ+nsHL/Cf:SL3kIZabONQ+9
MD5:	AB86BF6124875D7D2456DBA0C8356FAB
SHA1:	676B192417ACA34C4E783BF74BB12D1497C0699F
SHA-256:	F66EB0A8E32E7BE8038DE8A545160CE817587AF18DB45ADA35AEC65A1597D1BA
SHA-512:	4B4602D883BCE0A458A1860CFB89C3EFB7729D160EBABE302E949709533BB2144717D1D627FEE357A5E37AB1506A0E86AD4A0F0AE4024A903CDFF3EB09CEB20B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.22cb0042.js.LICENSE.txt /.(()=>{var e={497:(e,t,n)=>{"use strict";var r=n(218);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,l){if(l!==r){var i=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw i.name="Invariant Violation",i}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},173:(e,t,n)=>{e.exports=n(497)()},218:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},730:(e,t,n)=>{"use strict";var r=n(43),a=n(853);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<argumen

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	36
Entropy (8bit):	3.8043344609220293
Encrypted:	false
SSDEEP:	3:YIzQrERDxUHYn:YIXD8Yn
MD5:	765920E039936E6A4EFCEF8BF71B17EE
SHA1:	752C679EE557891CAE4EEFD593C77913F7372DC2
SHA-256:	3A81F99AAEF5363691CB6067C2FE3C2B5EEA5DA386A7F80FCF7EAFDD42E90DE1
SHA-512:	FE02B3920DE417C0FFF7DD1D3154EC04CB6FDD8677881D875BD0E008E84A916578DEE1959BB92B09F79443DF26589F07BD7AD472CAA889BF75B250935731EC21
Malicious:	false
Reputation:	low
Preview:	{"message":"Updated session status"}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	352
Entropy (8bit):	4.88450264861328
Encrypted:	false
SSDEEP:	6:YWkhoB8oYn7CRofJm+Dce5ohF0JcAADJWc78G8sFJVoFaEGRwTwLHn:YWkvo0b7DcUGiGltWcgSFJqGwo
MD5:	400E9D5EF4DE8EBAF95D14E008819AE4
SHA1:	60440D6414A3364A9E47A3D4F5A40AAAEB6E6D97
SHA-256:	4176CEA0C3B7DADC6EF9A39E90A8BE41FF52390F4BA585FE3C4239E075831BA6
SHA-512:	B1333D3B7045EBE024F9DD660F409C67211A6B7FEC62C3D6ED7E07FE0C352A40311BB7238C0C1061033F3D84044D793A66EE821523CE97AF9036B41D9F0BF1AD
Malicious:	false
Reputation:	low
URL:	https://glass.anotherlevel.app/api/settings_by_stage/s9
Preview:	{"s9_logo":"https://loop.anotherlevel.app/storage/redbull.png","s9_first":"CC1E4A","s9_fourth":"Red Bull \| Careers","s9_second":"Are you ready to work as a Social Media Manager for Red Bull?","s9_third":"We.re looking for curious minds from a wide range of disciplines and backgrounds.","s9_fifth":"https://loop.anotherlevel.app/storage/favicon.png"}

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2544
Entropy (8bit):	4.067801638041261
Encrypted:	false
SSDEEP:	48:1bqKuiwrIAJSd7tgKua5EzJa4Ama0dWFNlsZg+slnC3jT/qmlHe:12KuisICSdCKuRIJ0UFNOypn6Tyie
MD5:	665DD80E557128CA83C069E756E8A687
SHA1:	25684AC0C8C748A9C6FDC9CF2B74B1F197FF061B
SHA-256:	BE1A79177F078DAADB07A28BED64CE33C1A143FB1E2DC21865482F9B504528E2
SHA-512:	F6C85A3F3458EF0C9A318A373DEB1BAB5F53D9B5D230A4182BE5D3BC6BFDF3F19B5BA9B4B950FE9B867F8913C4CC625138182648D6EC5B4DD7AD17A31C9FE433
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1001" height="194.545"><g fill="#1877f2"><path d="M63.85 191.062H26.169V97.128H.5V66.545h25.668V44.783C26.168 18.995 37.521.5 75.1.5c7.948 0 20.426 1.602 20.426 1.602V30.5H82.42c-13.354 0-18.568 4.062-18.568 15.292v20.753h31.174l-2.776 30.583H63.851zM150.31 64.101c-.549 0-1.114.02-1.673.034-34.94 0-50.926 26.282-50.926 63.59 0 46.998 20.736 65.808 51.199 65.808 17.429 0 28.88-7.336 35.84-21.026v18.568h35.84V66.558h-35.84v19.149c-5.683-12.32-17.454-21.46-34.44-21.606zm9.113 29.423c14.675 0 23.483 10.236 23.483 27.647l.034 17.783c0 11.735-7.275 25.464-23.517 25.464-24.97 0-24.303-26.962-24.303-35.942 0-30.207 13.304-34.952 24.303-34.952zM235.064 128.823c0-15.131-.724-64.641 63.78-64.641 25.893 0 36.705 8.233 36.705 8.233l-8.69 26.953s-10.798-5.946-24.868-5.946c-18.021 0-29.52 10.447-29.52 28.828l.02 13.18c0 17.662 11.095 29.452 29.537 29.452 12.818 0 24.632-6.002 24.632-6.002l8.668 26.39s-9.886 8.285-36.303 8.285c-61.418 0-63.96-44.42-63.96-

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.0654452748753767
Encrypted:	false
SSDEEP:	96:jhtOC2EN3tEoE3dYv2MqWz9JfgHHiXYeS:jhttMNApJfRYeS
MD5:	9FDE7E55E4304BEA119DBA2331D79230
SHA1:	7AE8D0806C255F2B8EB74541473CB01A764C32B0
SHA-256:	31CF2BA11724E6D35B5A7AFB32FA491684CAC6A12C82E1FF0BA5C4BF15EE4F80
SHA-512:	D5615D3F48414CE034448962B74F62B1090640A1E005E42AD4407434B49C4A007D3BF6476E6BB822979D8FE32743E233C818B01E46546A9C7381C6FAA409BF6D
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	283658
Entropy (8bit):	5.342655358725882
Encrypted:	false
SSDEEP:	6144:XW2S6ok3YZ3HQVIZaarajaP/duIQ+nsHL/Cf:SL3kIZabONQ+9
MD5:	AB86BF6124875D7D2456DBA0C8356FAB
SHA1:	676B192417ACA34C4E783BF74BB12D1497C0699F
SHA-256:	F66EB0A8E32E7BE8038DE8A545160CE817587AF18DB45ADA35AEC65A1597D1BA
SHA-512:	4B4602D883BCE0A458A1860CFB89C3EFB7729D160EBABE302E949709533BB2144717D1D627FEE357A5E37AB1506A0E86AD4A0F0AE4024A903CDFF3EB09CEB20B
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/red-bull/id-38772/static/js/main.22cb0042.js
Preview:	/! For license information please see main.22cb0042.js.LICENSE.txt /.(()=>{var e={497:(e,t,n)=>{"use strict";var r=n(218);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,l){if(l!==r){var i=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw i.name="Invariant Violation",i}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},173:(e,t,n)=>{e.exports=n(497)()},218:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},730:(e,t,n)=>{"use strict";var r=n(43),a=n(853);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<argumen

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2544
Entropy (8bit):	4.067801638041261
Encrypted:	false
SSDEEP:	48:1bqKuiwrIAJSd7tgKua5EzJa4Ama0dWFNlsZg+slnC3jT/qmlHe:12KuisICSdCKuRIJ0UFNOypn6Tyie
MD5:	665DD80E557128CA83C069E756E8A687
SHA1:	25684AC0C8C748A9C6FDC9CF2B74B1F197FF061B
SHA-256:	BE1A79177F078DAADB07A28BED64CE33C1A143FB1E2DC21865482F9B504528E2
SHA-512:	F6C85A3F3458EF0C9A318A373DEB1BAB5F53D9B5D230A4182BE5D3BC6BFDF3F19B5BA9B4B950FE9B867F8913C4CC625138182648D6EC5B4DD7AD17A31C9FE433
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/red-bull/id-38772/static/media/fb-gwrjjymgbpwlkscq.b1cfbf0dc49d882cc320.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1001" height="194.545"><g fill="#1877f2"><path d="M63.85 191.062H26.169V97.128H.5V66.545h25.668V44.783C26.168 18.995 37.521.5 75.1.5c7.948 0 20.426 1.602 20.426 1.602V30.5H82.42c-13.354 0-18.568 4.062-18.568 15.292v20.753h31.174l-2.776 30.583H63.851zM150.31 64.101c-.549 0-1.114.02-1.673.034-34.94 0-50.926 26.282-50.926 63.59 0 46.998 20.736 65.808 51.199 65.808 17.429 0 28.88-7.336 35.84-21.026v18.568h35.84V66.558h-35.84v19.149c-5.683-12.32-17.454-21.46-34.44-21.606zm9.113 29.423c14.675 0 23.483 10.236 23.483 27.647l.034 17.783c0 11.735-7.275 25.464-23.517 25.464-24.97 0-24.303-26.962-24.303-35.942 0-30.207 13.304-34.952 24.303-34.952zM235.064 128.823c0-15.131-.724-64.641 63.78-64.641 25.893 0 36.705 8.233 36.705 8.233l-8.69 26.953s-10.798-5.946-24.868-5.946c-18.021 0-29.52 10.447-29.52 28.828l.02 13.18c0 17.662 11.095 29.452 29.537 29.452 12.818 0 24.632-6.002 24.632-6.002l8.668 26.39s-9.886 8.285-36.303 8.285c-61.418 0-63.96-44.42-63.96-

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	5.02115483997928
Encrypted:	false
SSDEEP:	48:HTr+ulzMhjTgBLkJ7VKhnAzjtM48vwKgLzSNPhzSku:zr+ulgjsBwJ7VKhKMYxLiPh+ku
MD5:	E53FDF76753EDCD8773AB17AE968BFD6
SHA1:	4BEA38CD83442080BDF51CD1DB206715F9198955
SHA-256:	3D70CE95EB1EB78620CC57FE1A6A479E6F2D70508BF813238E573863DF000D6E
SHA-512:	F168878F0D1047CE3775A511EE5CFFED3AFC7A47081304B4C884B6099DACE99A17E473B727F5AFCC87B0E0C1DF461439F821B2DBCF341F94B9C206E8487C7888
Malicious:	false
Reputation:	low
URL:	https://application-workspace.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#">..<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <style type="text/css">. @charset "UTF-8";. [ng\:cloak],. [ng-cloak],. [data-ng-cloak],. [x-ng-cloak],. .ng-cloak,. .x-ng-cloak,. .ng-hide:not(.ng-hide-animate) {. display: none !important;. }.. ng\:form {. display: block;. }.. .ng-animate-shim {. visibility: hidden;. }.. .ng-anchor {. position: absolute;. }. </style>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:QQinPt:+Pt
MD5:	1505E9BB79B4C3F51AEC072BFF0E4F1D
SHA1:	C2229235760065DD7708E3D63A718B05FF209F37
SHA-256:	C3E80C02DBB99150A42F8867CFC2BD1565E9B7DE84EB4F3D75C9AF0A674566D1
SHA-512:	C0B996819ED4D93E5D5158867080BC16B479FD2EE651FD4F56453ABCEF6F5B5C67BB6E313D29971A61BE963BE67F4483939B89DDBB711B647453F7A0B966D47C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwkFSEcI_NcvKBIFDXhvEhkSBQ3OQUx6?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3OQUx6GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 28, 2024 16:56:41.025393963 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:41.025427103 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:41.025509119 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:41.026721001 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:41.026732922 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:42.435298920 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:42.435389996 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:42.442737103 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:42.442749023 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:42.443070889 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:42.487251043 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:42.782229900 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:42.823335886 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.199956894 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.200032949 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.200144053 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.200213909 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.200238943 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.200295925 CET	49688	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.200304985 CET	443	49688	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.494446993 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.494482994 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:43.494559050 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.494904995 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:43.494918108 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:44.525619984 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.525655985 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:44.525726080 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.526200056 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.526251078 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:44.526324987 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.526411057 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.526422024 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:44.526576996 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:44.526592016 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:44.946135044 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:44.946250916 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:44.947875023 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:44.947886944 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:44.948132992 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:44.949254036 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:44.991339922 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:45.499522924 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:45.499602079 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:45.500247002 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:45.500324965 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:45.500338078 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:45.500351906 CET	49689	443	192.168.2.18	2.18.84.141
Nov 28, 2024 16:56:45.500359058 CET	443	49689	2.18.84.141	192.168.2.18
Nov 28, 2024 16:56:46.021775007 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.022155046 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.022167921 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.023242950 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.023334980 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.024396896 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.024451017 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.024729967 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.024736881 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.074187040 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.614917040 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.614993095 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:46.615048885 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.615504026 CET	49695	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:46.615520954 CET	443	49695	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.295886040 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.296232939 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:47.296257019 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.297292948 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.297363997 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:47.297677040 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:47.297736883 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.297846079 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:47.297852039 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:47.345233917 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.077492952 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.078175068 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.078246117 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.078445911 CET	49696	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.078463078 CET	443	49696	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.092139006 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.092178106 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.092264891 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.092504025 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.092519045 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.093656063 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.093677998 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.093771935 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.093966007 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:48.093980074 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:48.306107998 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:48.306143999 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:48.306221008 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:48.306441069 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:48.306454897 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:48.383831978 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:48.687207937 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:49.294217110 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:49.537780046 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.538108110 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.538131952 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.538475037 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.538794994 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.538858891 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.538952112 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.579329014 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.582539082 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.582840919 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.582870007 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.583230019 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.583602905 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.583667040 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:49.583851099 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:49.631340981 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.013394117 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:50.013972044 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:50.014002085 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:50.015042067 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:50.015121937 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:50.016210079 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:50.016271114 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:50.062264919 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:50.062283993 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:50.110241890 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:50.126729012 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.174262047 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.174288034 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.178597927 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.222270012 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.222290039 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.222323895 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.244038105 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244051933 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244071007 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244079113 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244112015 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244179964 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.244200945 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.244283915 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.270222902 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.301176071 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301202059 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301258087 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301290035 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301311016 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301399946 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.301439047 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.301472902 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.350235939 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.359770060 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.359783888 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.359822035 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.359846115 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.359916925 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.359941006 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.359975100 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.360131979 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.425718069 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.425755024 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.425798893 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.425817966 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.425880909 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.425928116 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.425952911 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.425992012 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.435755014 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.435822964 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.435995102 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.436022043 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.436110973 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.501077890 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.501091957 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.501132011 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.501259089 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.501290083 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.501338005 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.508244991 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:50.522537947 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.522563934 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.522716999 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.522742033 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.522803068 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.553951025 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.553968906 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.554142952 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.554162979 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.554214954 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.580427885 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.580446959 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.580596924 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.580610037 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.580674887 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.593693018 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.593720913 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.593828917 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.593852997 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.593899012 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.625569105 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.625617981 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.625756979 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.625785112 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.625838041 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.630791903 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.630820990 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.630903959 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.630929947 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.630985975 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.650063038 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.650096893 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.650227070 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.650260925 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.650341988 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.711720943 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.711750031 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.711935997 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.711966991 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.712043047 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.716542959 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.716577053 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.716634989 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.716666937 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.716691017 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.716728926 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.719299078 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.719379902 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.719432116 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.719522953 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.720691919 CET	49698	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.720716953 CET	443	49698	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.792385101 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.792412043 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.792501926 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.792524099 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.792562962 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.813432932 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.813461065 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.813602924 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.813616037 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.813659906 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.827348948 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.827373981 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.827466011 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.827485085 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.827527046 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.844907045 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.844933987 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.845061064 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.845077038 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.845124960 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.909373045 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.909400940 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.909462929 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.909472942 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.909507990 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.909532070 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.923553944 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.923583984 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.923706055 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.923722029 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.923765898 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.937793016 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.937822104 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.937968969 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.937978029 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.938014984 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.993418932 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.993449926 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.993626118 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:50.993654966 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:50.993699074 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.004497051 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.004522085 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.004580021 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.004630089 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.004657984 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.004677057 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.014200926 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.014228106 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.014339924 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.014360905 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.014431953 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.018867970 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.018944979 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.018953085 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.019001961 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.019169092 CET	49697	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.019186020 CET	443	49697	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.066777945 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.066828012 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.066910982 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.067274094 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.067305088 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.067395926 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.067600012 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.067615032 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.067774057 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.067784071 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.166415930 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.166462898 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.166553974 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.166774035 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:51.166790009 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:51.197276115 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:51.197318077 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:51.197395086 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:51.197638035 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:51.197652102 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.514693975 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.516544104 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.516566038 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.517024040 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.520620108 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.520745039 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.520793915 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.567331076 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.571216106 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.604286909 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.604613066 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.604631901 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.605736971 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.605848074 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.606157064 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.606220007 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.606378078 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.606384993 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.651217937 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.658179045 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.658483982 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.658492088 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.660150051 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.660239935 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.660631895 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.660722971 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.660785913 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.703336954 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.714257002 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.714271069 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:52.751012087 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.751354933 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:52.751368999 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.752593040 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.752676964 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:52.753937960 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:52.754026890 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.754148006 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:52.754156113 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:52.762217999 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:52.794296980 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:52.921221972 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:53.200064898 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:53.200181961 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:53.200247049 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:53.201602936 CET	49703	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:53.201618910 CET	443	49703	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:53.277801991 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:53.277843952 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:53.277997971 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:53.279998064 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:53.280009985 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:53.313170910 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.313319921 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.313383102 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.313400984 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.313453913 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.314047098 CET	49701	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.314064026 CET	443	49701	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.322468996 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.331975937 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.332192898 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.332237959 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.332592010 CET	49700	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.332614899 CET	443	49700	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.349634886 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:53.349670887 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:53.349778891 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:53.349986076 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:53.349999905 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:53.367204905 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.367218971 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.415205956 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.445643902 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445660114 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445677042 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445683956 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445698977 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445736885 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.445750952 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.445782900 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.495204926 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.565033913 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565051079 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565077066 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565150976 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.565154076 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565161943 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565223932 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.565232038 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.565272093 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.643830061 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.643840075 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.643887043 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.643903971 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.643929005 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.643949986 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.643966913 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.643987894 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.655211926 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.655252934 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:53.655334949 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.655657053 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.655710936 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:53.655766010 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.655982971 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.655999899 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:53.656150103 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:53.656168938 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:53.736015081 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.736027002 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.736083984 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.736242056 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.736258984 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.736335039 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.768904924 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.768927097 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.769037962 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.769052982 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.769089937 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.798748970 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.798768044 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.798917055 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.798935890 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.798979998 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.856416941 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.856443882 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.856544971 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.856555939 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.856596947 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.938604116 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.938626051 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.938777924 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.938791990 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.938834906 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.954010010 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.954026937 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.954163074 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.954178095 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.954235077 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.972093105 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.972110987 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.972248077 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.972259045 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.972300053 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.986381054 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.986397982 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.986479998 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:53.986490011 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:53.986535072 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.003628969 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.003670931 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.003752947 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.003762007 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.003803015 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.054152966 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.054191113 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.054277897 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.054290056 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.054362059 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.068171978 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.068200111 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.068356037 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.068380117 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.068422079 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.135281086 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.135303020 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.135443926 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.135471106 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.135515928 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.146609068 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.146627903 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.146692038 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.146759033 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.146773100 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.146817923 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.158068895 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.158123970 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.158179045 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.158199072 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.158227921 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.158245087 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.161377907 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.161452055 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.161458015 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.161501884 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.161710024 CET	49702	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:56:54.161731958 CET	443	49702	45.84.207.234	192.168.2.18
Nov 28, 2024 16:56:54.883090019 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:54.883390903 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:54.883428097 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:54.884529114 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:54.884609938 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:54.884959936 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:54.885032892 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:54.885128021 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:54.885140896 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:54.931231976 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:54.993462086 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:54.993568897 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:54.997145891 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:54.997152090 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:54.997435093 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:55.043205023 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:55.066921949 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.067228079 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.067245960 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.068337917 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.068424940 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.069711924 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.069798946 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.069890022 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.069899082 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.122209072 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.124440908 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.124742985 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.124763012 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.125835896 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.125922918 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.126247883 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.126329899 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.126416922 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.126426935 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.169233084 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.338984966 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:55.339106083 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:55.339282036 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:55.340394020 CET	49705	443	192.168.2.18	104.26.9.44
Nov 28, 2024 16:56:55.340415001 CET	443	49705	104.26.9.44	192.168.2.18
Nov 28, 2024 16:56:55.505856037 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:56:55.809227943 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:56:55.944283009 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.944374084 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.944452047 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.945730925 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.945785046 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.945871115 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.946218967 CET	49707	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.946238995 CET	443	49707	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:55.946634054 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:55.946650028 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.056827068 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.056917906 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.056991100 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:56.057745934 CET	49706	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:56.057774067 CET	443	49706	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.206336021 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:56.206363916 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.206432104 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:56.206676006 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:56.206687927 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:56.410235882 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:56:56.657754898 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:56.703332901 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.368813038 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.369128942 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.369138956 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.369476080 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.369915962 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.369966030 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.370083094 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.411339998 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.611233950 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:56:57.708148003 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.708415031 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.708435059 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.709453106 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.709515095 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.709832907 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.709892988 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.710001945 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.723237991 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:56:57.727771997 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727826118 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727834940 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727847099 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727878094 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727880001 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:57.727895021 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.727941990 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:57.727972984 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:57.746270895 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.746339083 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:57.746345997 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.751328945 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.753237009 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:57.753397942 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:57.755244017 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:57.755249977 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:57.802656889 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.297123909 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.297224045 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.297355890 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.297779083 CET	49709	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.297801018 CET	443	49709	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.300400972 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.300453901 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.300618887 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.300867081 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.300888062 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.304313898 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.304337025 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.304442883 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.304680109 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.304692984 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.334970951 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.335021973 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.335275888 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.335896015 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.335921049 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.562671900 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.562686920 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.562778950 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.562809944 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.562841892 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.562895060 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.563009977 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.563020945 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.563153982 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.563175917 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.629981041 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.631597042 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:58.631674051 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.632160902 CET	49710	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:58.632169008 CET	443	49710	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.139336109 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:59.139364004 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:59.139379978 CET	49704	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:56:59.139385939 CET	443	49704	172.202.163.200	192.168.2.18
Nov 28, 2024 16:56:59.703747988 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:59.703809977 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:56:59.703893900 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:56:59.758290052 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.758415937 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.758775949 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.758800983 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.758879900 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.758914948 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.759196997 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.759249926 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.759571075 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.759632111 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.759836912 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.759932995 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.759993076 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.760049105 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.803327084 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.803342104 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.806071997 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.807584047 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.807601929 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.808722019 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.808796883 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.809174061 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.809237003 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.809453011 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.851335049 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.853230953 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:56:59.853259087 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:56:59.901252031 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.012237072 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:57:00.028480053 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.028815985 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.028821945 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.028836966 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.029035091 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.029056072 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.029977083 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.030067921 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.030206919 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.030278921 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.031083107 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.031152964 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.031234026 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.031322002 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.031343937 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.031351089 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.031436920 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.031443119 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.076272011 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.076466084 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.645343065 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.645438910 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.645526886 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.646204948 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.649518967 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.649585009 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.657406092 CET	49714	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.657444000 CET	443	49714	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.659595013 CET	49713	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.659621954 CET	443	49713	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.692632914 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.692720890 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:00.692828894 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.692924976 CET	49715	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:00.692944050 CET	443	49715	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.093945026 CET	49699	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:01.093974113 CET	443	49699	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:01.735165119 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735188007 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735198021 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735235929 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735266924 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735321045 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.735347033 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.735368967 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.735397100 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.736418962 CET	49720	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.736443996 CET	443	49720	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.738935947 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.738957882 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.738965988 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.738976002 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.739000082 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.739021063 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.739048004 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.739069939 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.739099026 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.786111116 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.786134005 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.786309958 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.786319971 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.786372900 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.881630898 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.881669044 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.881757975 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.881972075 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.881984949 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.940212965 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.940237045 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.940365076 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.940397024 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.940443993 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.955667973 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.955761909 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.955794096 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.955852032 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.958380938 CET	49719	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.958396912 CET	443	49719	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.964812994 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.964859009 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:01.964947939 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.965210915 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:01.965228081 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.334295988 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.334616899 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.334634066 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.335649967 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.335724115 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.336116076 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.336179018 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.336297989 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.336307049 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.381241083 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.434035063 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.434401989 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.434428930 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.435496092 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.435585976 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.435933113 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.436011076 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.436152935 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.436161995 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.477258921 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.702383995 CET	49723	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.702425003 CET	443	49723	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:03.702517033 CET	49723	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.702761889 CET	49723	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:03.702775955 CET	443	49723	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.384973049 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385003090 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385010004 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385050058 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385072947 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385097027 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.385113001 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.385138988 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.385178089 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.386204958 CET	49721	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.386220932 CET	443	49721	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815140009 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815165997 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815174103 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815184116 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815207005 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815340996 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.815376997 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.815447092 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.819257021 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:57:04.936956882 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.936980963 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.937073946 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:04.937094927 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:04.937165976 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.127486944 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:05.127511978 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:05.127636909 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.127660036 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:05.127716064 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.176522017 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:05.176608086 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:05.176652908 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.176692009 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.177012920 CET	49722	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:05.177035093 CET	443	49722	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:07.327276945 CET	49673	443	192.168.2.18	204.79.197.203
Nov 28, 2024 16:57:14.423305988 CET	49679	443	192.168.2.18	52.182.141.63
Nov 28, 2024 16:57:17.448982954 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:17.449040890 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:17.449141026 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:17.449321032 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:17.449352980 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:17.449417114 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:17.449568987 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:17.449583054 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:17.449733019 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:17.449747086 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.025037050 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.025332928 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.025352001 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.025757074 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.026060104 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.026138067 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.026252031 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.032726049 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.032912970 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.032933950 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.033271074 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.033541918 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.033591986 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.033627033 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.071341991 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.079340935 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.085385084 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.648180008 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.648221970 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.648297071 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.648309946 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.648382902 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.648447037 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.649014950 CET	49725	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.649032116 CET	443	49725	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.651542902 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.651568890 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.651659012 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.651866913 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:19.651880980 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:19.989806890 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.989900112 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.989976883 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.990647078 CET	49724	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.990664959 CET	443	49724	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.991353989 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.991379023 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.991455078 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.991736889 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.991750002 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.993666887 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.993752003 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:19.993859053 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.994074106 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:19.994101048 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.143678904 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.146111012 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.146125078 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.146523952 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.146857023 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.146935940 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.147275925 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.187326908 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.401434898 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.401585102 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:21.401628017 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:21.401768923 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:21.401777983 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.401810884 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.402165890 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.402903080 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.403002024 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.403065920 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.403074980 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:21.403093100 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:21.403712988 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.403986931 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.403997898 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.404329062 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.404618025 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.404680967 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.404711008 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.443342924 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.444319010 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.444319963 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:21.444329977 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:21.740132093 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.740339041 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.740389109 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.740401983 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.740415096 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:21.740473032 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.741255045 CET	49728	443	192.168.2.18	45.84.207.234
Nov 28, 2024 16:57:21.741281033 CET	443	49728	45.84.207.234	192.168.2.18
Nov 28, 2024 16:57:22.472582102 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.475572109 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.475684881 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.476068020 CET	49730	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.476083994 CET	443	49730	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.850493908 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.854069948 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.854151011 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.854345083 CET	49729	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.854366064 CET	443	49729	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.856910944 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.856954098 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:22.857181072 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.857395887 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:22.857408047 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:23.424710989 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:23.424845934 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:23.462893963 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:23.462914944 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:23.463195086 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:23.464478970 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:23.464520931 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:23.464553118 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.236923933 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.236948967 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.236983061 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.237037897 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.237073898 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.237155914 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.237780094 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.237802982 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.237816095 CET	49731	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.237822056 CET	443	49731	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.331029892 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.331082106 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.331170082 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.331341982 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:24.331357956 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:24.358155966 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:24.358452082 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:24.358469963 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:24.358814955 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:24.359126091 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:24.359194040 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:24.359273911 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:24.403323889 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:25.626764059 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:25.626868010 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:25.626941919 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:25.627970934 CET	49732	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:25.627990007 CET	443	49732	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:26.122741938 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.123419046 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.123442888 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.124135017 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.124141932 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.124166965 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.124176025 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.802422047 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.802448034 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.802520037 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.802544117 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.802583933 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.802601099 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.803033113 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.803033113 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.803057909 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.803205967 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.803240061 CET	443	49733	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.803303003 CET	49733	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.872391939 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.872432947 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:26.872526884 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.872685909 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:26.872699976 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:28.699646950 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:28.700273037 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:28.700314999 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:28.701018095 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:28.701028109 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:28.701060057 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:28.701066971 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410077095 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410104036 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410140991 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410203934 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410217047 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:29.410264969 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:29.410713911 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:29.410732985 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.410743952 CET	49734	443	192.168.2.18	20.190.147.2
Nov 28, 2024 16:57:29.410748959 CET	443	49734	20.190.147.2	192.168.2.18
Nov 28, 2024 16:57:29.781169891 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:29.781219959 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:29.781327009 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:29.784595013 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:29.784607887 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:31.486562014 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:31.486743927 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:31.495244026 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:31.495264053 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:31.495517015 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:31.495615959 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:31.497622967 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:31.497653961 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.352637053 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.352682114 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.352730036 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.352765083 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.352781057 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.352813005 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.353338003 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.353384018 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.353399038 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.353445053 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.355376005 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.355397940 CET	443	49735	2.16.158.186	192.168.2.18
Nov 28, 2024 16:57:32.355408907 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:32.355453968 CET	49735	443	192.168.2.18	2.16.158.186
Nov 28, 2024 16:57:33.706510067 CET	49723	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:33.751324892 CET	443	49723	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:35.534364939 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:35.534410954 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:35.534498930 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:35.534874916 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:35.534889936 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:36.718868971 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:36.718921900 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:36.719000101 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:36.719290972 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:36.719306946 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:37.266549110 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.266685009 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.268425941 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.268436909 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.268690109 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.274959087 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.315326929 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.959435940 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.959462881 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.959480047 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.959593058 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.959633112 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.959692955 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.998763084 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.998826027 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.998879910 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.998893023 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.998904943 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.998904943 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.998960972 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.999007940 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.999022007 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:37.999043941 CET	49736	443	192.168.2.18	172.202.163.200
Nov 28, 2024 16:57:37.999052048 CET	443	49736	172.202.163.200	192.168.2.18
Nov 28, 2024 16:57:38.169711113 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:38.169992924 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:38.170018911 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:38.170362949 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:38.170670986 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:38.170736074 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:38.170877934 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:38.215333939 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:40.074587107 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:40.074681044 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:40.074742079 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:40.074832916 CET	49737	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:40.074850082 CET	443	49737	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:43.091017008 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:43.091063023 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:43.091171026 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:43.091480970 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:43.091494083 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:44.542152882 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:44.542584896 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:44.542608023 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:44.542949915 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:44.543277025 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:44.543353081 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:44.543488979 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:44.591331005 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:45.428025961 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:45.428122044 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:45.428214073 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:45.428322077 CET	49738	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:45.428337097 CET	443	49738	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:48.225682974 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:48.225738049 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:48.225837946 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:48.226088047 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:48.226109028 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:48.448013067 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:48.448060036 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:48.448177099 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:48.448451996 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:48.448467016 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:49.918102026 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:49.918515921 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:49.918548107 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:49.919413090 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:49.919707060 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:49.919783115 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:49.919915915 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:49.967329025 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:50.824476004 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:50.824714899 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:50.824757099 CET	443	49741	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:50.824815035 CET	49741	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:52.430062056 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:52.430495977 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:52.430526018 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:52.430922985 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:52.431241989 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:52.431308985 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:52.473582029 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:57:53.848148108 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:53.848205090 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:53.848287106 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:53.848562002 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:53.848577023 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.369139910 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.369555950 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:55.369584084 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.371037006 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.371160030 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:55.371423006 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:55.371505976 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.371638060 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:55.371646881 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:55.414459944 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:56.274715900 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:56.274821043 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:56.274888039 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:56.275047064 CET	49743	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:56.275063992 CET	443	49743	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:59.297121048 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:59.297149897 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:59.297245026 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:59.297530890 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:57:59.297547102 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:57:59.651462078 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:59.651539087 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:57:59.651601076 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:58:00.710802078 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:00.711199999 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:00.711234093 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:00.711620092 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:00.711965084 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:00.712034941 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:00.712214947 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:00.759341955 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:01.641154051 CET	49740	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:58:01.641192913 CET	443	49740	172.217.21.36	192.168.2.18
Nov 28, 2024 16:58:01.699539900 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:01.699803114 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:01.699840069 CET	443	49744	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:01.699903011 CET	49744	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:04.721216917 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:04.721266031 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:04.721373081 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:04.721740961 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:04.721754074 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.254483938 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.254940033 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:06.254970074 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.256005049 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.256081104 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:06.256519079 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:06.256588936 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.256793976 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:06.256802082 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:06.300725937 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:07.188786030 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:07.188899994 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:07.188958883 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:07.189052105 CET	49745	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:07.189071894 CET	443	49745	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:10.215241909 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:10.215354919 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:10.215544939 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:10.215847015 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:10.215887070 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:11.716315985 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:11.716712952 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:11.716793060 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:11.717152119 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:11.717482090 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:11.717560053 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:11.717681885 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:11.763344049 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:12.646387100 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:12.646491051 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:12.646554947 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:12.646713972 CET	49746	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:12.646735907 CET	443	49746	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:15.678050041 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:15.678105116 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:15.678212881 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:15.678483009 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:15.678500891 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:17.084172964 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:17.084583998 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:17.084613085 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:17.085228920 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:17.085763931 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:17.085843086 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:17.086111069 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:17.131336927 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:18.759521961 CET	49723	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:18.759545088 CET	443	49723	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:19.008388996 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:19.008759975 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:19.008800983 CET	443	49748	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:19.008877039 CET	49748	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:22.070080996 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:22.070110083 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:22.070198059 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:22.070473909 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:22.070493937 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.476131916 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.476521969 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:23.476545095 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.477642059 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.477731943 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:23.478157997 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:23.478228092 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.478432894 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:23.478446960 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:23.521676064 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:25.358948946 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:25.359045029 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:25.359113932 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:25.359261036 CET	49749	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:25.359277964 CET	443	49749	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:28.460386992 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:28.460431099 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:28.460566044 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:28.460808992 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:28.460824013 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:29.875718117 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:29.876056910 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:29.876085043 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:29.876427889 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:29.876714945 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:29.876785040 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:29.876920938 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:29.923340082 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:30.797744036 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:30.797985077 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:30.798018932 CET	443	49750	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:30.798072100 CET	49750	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:33.954340935 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:33.954385996 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:33.954499006 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:33.954895020 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:33.954910040 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.375163078 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.375591993 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:35.375622988 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.376681089 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.376759052 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:35.377170086 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:35.377233982 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.377433062 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:35.377440929 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:35.423619032 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:36.242789984 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:36.242902040 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:36.242993116 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:36.244121075 CET	49751	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:36.244144917 CET	443	49751	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:39.527636051 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:39.527693987 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:39.527782917 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:39.528129101 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:39.528146982 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:40.938254118 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:40.938844919 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:40.938889980 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:40.939273119 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:40.941293955 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:40.941418886 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:40.941679955 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:40.983352900 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:41.821019888 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:41.821171045 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:41.821234941 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:41.821378946 CET	49752	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:41.821403027 CET	443	49752	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:45.883373022 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:45.883416891 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:45.883692026 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:45.883968115 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:45.883980036 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:47.335005999 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:47.335340023 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:47.335362911 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:47.335714102 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:47.336102962 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:47.336174965 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:47.336323977 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:47.379342079 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:48.278770924 CET	49754	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:58:48.278829098 CET	443	49754	172.217.21.36	192.168.2.18
Nov 28, 2024 16:58:48.278954029 CET	49754	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:58:48.279243946 CET	49754	443	192.168.2.18	172.217.21.36
Nov 28, 2024 16:58:48.279261112 CET	443	49754	172.217.21.36	192.168.2.18
Nov 28, 2024 16:58:48.584403038 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:48.584669113 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:48.584692001 CET	443	49753	146.70.81.214	192.168.2.18
Nov 28, 2024 16:58:48.584758043 CET	49753	443	192.168.2.18	146.70.81.214
Nov 28, 2024 16:58:50.010217905 CET	443	49754	172.217.21.36	192.168.2.18
Nov 28, 2024 16:58:50.064688921 CET	49754	443	192.168.2.18	172.217.21.36

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 28, 2024 16:56:43.497833014 CET	53	59195	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:43.535604954 CET	53	51865	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:44.112360954 CET	61360	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:44.112576008 CET	52233	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:44.524660110 CET	53	52233	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:44.524939060 CET	53	61360	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:46.289860010 CET	53	51838	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:48.160125017 CET	58328	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:48.160386086 CET	59323	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:48.304878950 CET	53	59323	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:48.305198908 CET	53	58328	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:51.026011944 CET	59099	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:51.026180983 CET	60545	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:51.057555914 CET	60231	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:51.057723999 CET	61911	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:51.165189981 CET	53	59099	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:51.165883064 CET	53	60545	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:51.196052074 CET	53	60231	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:51.196695089 CET	53	61911	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:53.205498934 CET	49840	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:53.205703974 CET	49272	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:53.206008911 CET	59341	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:53.206161022 CET	51452	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:53.346410036 CET	53	51452	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:53.349126101 CET	53	59341	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:53.654248953 CET	53	49840	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:53.654748917 CET	53	49272	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:56.060893059 CET	49560	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:56.061033010 CET	50754	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:56.200753927 CET	53	50754	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:56.205760956 CET	53	49560	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:58.336435080 CET	61728	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:58.336694956 CET	62212	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:56:58.554722071 CET	53	58115	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:58.562125921 CET	53	61728	1.1.1.1	192.168.2.18
Nov 28, 2024 16:56:58.562346935 CET	53	62212	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:01.739775896 CET	58737	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:57:01.739928007 CET	53309	53	192.168.2.18	1.1.1.1
Nov 28, 2024 16:57:01.880085945 CET	53	58737	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:01.881139994 CET	53	53309	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:03.226878881 CET	53	53364	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:22.143277884 CET	53	51898	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:43.460702896 CET	53	55811	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:45.146928072 CET	53	65179	1.1.1.1	192.168.2.18
Nov 28, 2024 16:57:55.712975025 CET	138	138	192.168.2.18	192.168.2.255
Nov 28, 2024 16:58:14.089462996 CET	53	59006	1.1.1.1	192.168.2.18

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 28, 2024 16:56:44.112360954 CET	192.168.2.18	1.1.1.1	0xacdc	Standard query (0)	application-workspace.com	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:44.112576008 CET	192.168.2.18	1.1.1.1	0x50e7	Standard query (0)	application-workspace.com	65	IN (0x0001)	false
Nov 28, 2024 16:56:48.160125017 CET	192.168.2.18	1.1.1.1	0xa065	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:48.160386086 CET	192.168.2.18	1.1.1.1	0xf9b6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 28, 2024 16:56:51.026011944 CET	192.168.2.18	1.1.1.1	0xb26b	Standard query (0)	application-workspace.com	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.026180983 CET	192.168.2.18	1.1.1.1	0x7ecf	Standard query (0)	application-workspace.com	65	IN (0x0001)	false
Nov 28, 2024 16:56:51.057555914 CET	192.168.2.18	1.1.1.1	0x334d	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.057723999 CET	192.168.2.18	1.1.1.1	0x8aab	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Nov 28, 2024 16:56:53.205498934 CET	192.168.2.18	1.1.1.1	0x8818	Standard query (0)	glass.anotherlevel.app	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:53.205703974 CET	192.168.2.18	1.1.1.1	0xed95	Standard query (0)	glass.anotherlevel.app	65	IN (0x0001)	false
Nov 28, 2024 16:56:53.206008911 CET	192.168.2.18	1.1.1.1	0xcad4	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:53.206161022 CET	192.168.2.18	1.1.1.1	0xc6c	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Nov 28, 2024 16:56:56.060893059 CET	192.168.2.18	1.1.1.1	0x1288	Standard query (0)	glass.anotherlevel.app	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:56.061033010 CET	192.168.2.18	1.1.1.1	0x34f9	Standard query (0)	glass.anotherlevel.app	65	IN (0x0001)	false
Nov 28, 2024 16:56:58.336435080 CET	192.168.2.18	1.1.1.1	0x4381	Standard query (0)	loop.anotherlevel.app	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:58.336694956 CET	192.168.2.18	1.1.1.1	0x5251	Standard query (0)	loop.anotherlevel.app	65	IN (0x0001)	false
Nov 28, 2024 16:57:01.739775896 CET	192.168.2.18	1.1.1.1	0xeb53	Standard query (0)	loop.anotherlevel.app	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:57:01.739928007 CET	192.168.2.18	1.1.1.1	0x5018	Standard query (0)	loop.anotherlevel.app	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 28, 2024 16:56:44.524939060 CET	1.1.1.1	192.168.2.18	0xacdc	No error (0)	application-workspace.com	45.84.207.234	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:48.304878950 CET	1.1.1.1	192.168.2.18	0xf9b6	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 28, 2024 16:56:48.305198908 CET	1.1.1.1	192.168.2.18	0xa065	No error (0)	www.google.com	172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.165189981 CET	1.1.1.1	192.168.2.18	0xb26b	No error (0)	application-workspace.com	45.84.207.234	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.196052074 CET	1.1.1.1	192.168.2.18	0x334d	No error (0)	ipapi.co	104.26.9.44	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.196052074 CET	1.1.1.1	192.168.2.18	0x334d	No error (0)	ipapi.co	104.26.8.44	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.196052074 CET	1.1.1.1	192.168.2.18	0x334d	No error (0)	ipapi.co	172.67.69.226	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:51.196695089 CET	1.1.1.1	192.168.2.18	0x8aab	No error (0)	ipapi.co		65	IN (0x0001)	false
Nov 28, 2024 16:56:53.346410036 CET	1.1.1.1	192.168.2.18	0xc6c	No error (0)	ipapi.co		65	IN (0x0001)	false
Nov 28, 2024 16:56:53.349126101 CET	1.1.1.1	192.168.2.18	0xcad4	No error (0)	ipapi.co	104.26.9.44	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:53.349126101 CET	1.1.1.1	192.168.2.18	0xcad4	No error (0)	ipapi.co	104.26.8.44	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:53.349126101 CET	1.1.1.1	192.168.2.18	0xcad4	No error (0)	ipapi.co	172.67.69.226	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:53.654248953 CET	1.1.1.1	192.168.2.18	0x8818	No error (0)	glass.anotherlevel.app	146.70.81.214	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:56.205760956 CET	1.1.1.1	192.168.2.18	0x1288	No error (0)	glass.anotherlevel.app	146.70.81.214	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:56:58.562125921 CET	1.1.1.1	192.168.2.18	0x4381	No error (0)	loop.anotherlevel.app	146.70.81.214	A (IP address)	IN (0x0001)	false
Nov 28, 2024 16:57:01.880085945 CET	1.1.1.1	192.168.2.18	0xeb53	No error (0)	loop.anotherlevel.app	146.70.81.214	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

application-workspace.com

https:

ipapi.co

glass.anotherlevel.app

loop.anotherlevel.app

slscr.update.microsoft.com

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.18	49688	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-28 15:56:43 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=37447 Date: Thu, 28 Nov 2024 15:56:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.18	49689	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-28 15:56:45 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37417 Date: Thu, 28 Nov 2024 15:56:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-28 15:56:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.18	49695	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:46 UTC	685	OUT	GET /red-bull/id-38772 HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:46 UTC	485	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 795 date: Thu, 28 Nov 2024 15:56:46 GMT server: LiteSpeed location: https://application-workspace.com/red-bull/id-38772/ platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:46 UTC	795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!importan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.18	49696	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:47 UTC	686	OUT	GET /red-bull/id-38772/ HTTP/1.1 Host: application-workspace.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:48 UTC	516	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "272-6748645e-4eea1e0d5f6582f1;;;" accept-ranges: bytes content-length: 626 date: Thu, 28 Nov 2024 15:56:47 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:48 UTC	626	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 72 65 64 2d 62 75 6c 6c 2f 69 64 2d 33 38 37 37 32 2f Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000001"/><meta name="description" content=""/><link rel="manifest" href="/red-bull/id-38772/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.18	49698	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:49 UTC	613	OUT	GET /red-bull/id-38772/static/css/main.7ca1cee7.css HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://application-workspace.com/red-bull/id-38772/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:50 UTC	599	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 05 Dec 2024 15:56:49 GMT content-type: text/css last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "21831-6748645e-9f9a84c2696ad826;;;" accept-ranges: bytes content-length: 137265 date: Thu, 28 Nov 2024 15:56:49 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:50 UTC	769	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 54 68 69 6e 20 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 54 68 69 6e 22 29 2c 75 72 6c 28 2f 72 65 64 2d 62 75 6c 6c 2f 69 64 2d 33 38 37 37 32 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 72 6f 62 6f 74 6f 2d 6c 61 74 69 6e 2d 31 30 30 2e 63 32 61 61 34 61 62 31 31 35 62 66 39 63 36 30 35 37 63 62 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 72 65 64 2d 62 75 6c 6c 2f 69 64 2d 33 38 37 37 32 2f 73 74 61 74 69 63 Data Ascii: @font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:100;src:local("Roboto Thin "),local("Roboto-Thin"),url(/red-bull/id-38772/static/media/roboto-latin-100.c2aa4ab115bf9c6057cb.woff2) format("woff2"),url(/red-bull/id-38772/static
2024-11-28 15:56:50 UTC	14994	IN	Data Raw: 68 74 20 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 22 29 2c 75 72 6c 28 2f 72 65 64 2d 62 75 6c 6c 2f 69 64 2d 33 38 37 37 32 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 72 6f 62 6f 74 6f 2d 6c 61 74 69 6e 2d 33 30 30 2e 33 37 61 37 30 36 39 64 63 33 30 66 63 36 36 33 63 38 37 38 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 72 65 64 2d 62 75 6c 6c 2f 69 64 2d 33 38 37 37 32 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 72 6f 62 6f 74 6f 2d 6c 61 74 69 6e 2d 33 30 30 2e 38 36 35 66 39 32 38 63 62 61 62 63 63 39 66 38 66 32 62 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 Data Ascii: ht "),local("Roboto-Light"),url(/red-bull/id-38772/static/media/roboto-latin-300.37a7069dc30fc663c878.woff2) format("woff2"),url(/red-bull/id-38772/static/media/roboto-latin-300.865f928cbabcc9f8f2b5.woff) format("woff")}@font-face{font-display:swap;font-f
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 36 22 7d 2e 66 61 2d 64 6f 6f 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 62 22 7d 2e 66 61 2d 72 69 67 68 74 2d 66 72 6f 6d 2d 62 72 61 63 6b 65 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 69 67 6e 2d 6f 75 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 66 35 22 7d 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 32 22 7d 2e 66 61 2d 73 6f 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 65 22 7d 2e 66 61 2d 68 65 61 72 74 2d 6d 75 73 69 63 2d 63 61 6d 65 72 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 63 6f 6e 73 3a 62 Data Ascii: a-minus-circle:before{content:"\f056"}.fa-door-open:before{content:"\f52b"}.fa-right-from-bracket:before,.fa-sign-out-alt:before{content:"\f2f5"}.fa-atom:before{content:"\f5d2"}.fa-soap:before{content:"\e06e"}.fa-heart-music-camera-bolt:before,.fa-icons:b
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 22 5c 65 30 37 31 22 7d 2e 66 61 2d 72 6f 61 64 2d 63 69 72 63 6c 65 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 36 36 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 33 22 7d 2e 66 61 2d 6d 61 72 73 2d 73 74 72 6f 6b 65 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 61 72 73 2d 73 74 72 6f 6b 65 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 61 22 7d 2e 66 61 2d 63 68 61 6d 70 61 67 6e 65 2d 67 6c 61 73 73 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 6c 61 73 73 2d 63 68 65 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 66 22 7d 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: tent:"\e071"}.fa-road-circle-xmark:before{content:"\e566"}.fa-user-minus:before{content:"\f503"}.fa-mars-stroke-up:before,.fa-mars-stroke-v:before{content:"\f22a"}.fa-champagne-glasses:before,.fa-glass-cheers:before{content:"\f79f"}.fa-clipboard:before{co
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 39 22 7d 2e 66 61 2d 73 69 67 6e 61 6c 2d 35 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 69 67 6e 61 6c 2d 70 65 72 66 65 63 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 32 22 7d 2e 66 61 2d 62 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 37 22 7d 2e 66 61 2d 68 65 61 72 74 2d 63 69 72 63 6c 65 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 30 31 22 7d 2e 66 61 2d 68 6f 6d 65 2d 6c 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 75 73 65 2d 63 68 69 6d 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 33 61 66 22 7d 2e 66 61 2d 77 69 6e 64 6f 77 2d 6d 61 Data Ascii: e:before{content:"\f1c9"}.fa-signal-5:before,.fa-signal-perfect:before,.fa-signal:before{content:"\f012"}.fa-bus:before{content:"\f207"}.fa-heart-circle-xmark:before{content:"\e501"}.fa-home-lg:before,.fa-house-chimney:before{content:"\e3af"}.fa-window-ma
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 73 70 69 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 38 22 7d 2e 66 61 2d 77 69 6e 65 2d 62 6f 74 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 66 22 7d 2e 66 61 2d 63 68 65 73 73 2d 72 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 37 22 7d 2e 66 61 2d 62 61 72 73 2d 73 74 61 67 67 65 72 65 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 72 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 30 22 7d 2e 66 61 2d 64 68 61 72 6d 61 63 68 61 6b 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 35 35 22 7d 2e 66 61 2d 68 6f 74 64 6f 67 3a 62 65 66 6f 72 Data Ascii: before,.fa-hospital:before{content:"\f0f8"}.fa-wine-bottle:before{content:"\f72f"}.fa-chess-rook:before{content:"\f447"}.fa-bars-staggered:before,.fa-reorder:before,.fa-stream:before{content:"\f550"}.fa-dharmachakra:before{content:"\f655"}.fa-hotdog:befor
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 64 73 68 61 6b 65 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 61 6e 64 73 68 61 6b 65 2d 73 69 6d 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 63 36 22 7d 2e 66 61 2d 66 69 67 68 74 65 72 2d 6a 65 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6a 65 74 2d 66 69 67 68 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 62 22 7d 2e 66 61 2d 73 68 61 72 65 2d 61 6c 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 73 68 61 72 65 2d 6e 6f 64 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 31 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 70 6c 75 73 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b Data Ascii: dshake-alt:before,.fa-handshake-simple:before{content:"\f4c6"}.fa-fighter-jet:before,.fa-jet-fighter:before{content:"\f0fb"}.fa-share-alt-square:before,.fa-square-share-nodes:before{content:"\f1e1"}.fa-barcode:before{content:"\f02a"}.fa-plus-minus:before{
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 66 32 61 62 22 7d 2e 66 61 2d 66 61 6e 74 61 73 79 2d 66 6c 69 67 68 74 2d 67 61 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 64 63 22 7d 2e 66 61 2d 72 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 61 22 7d 2e 66 61 2d 77 69 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 66 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 73 75 70 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 39 22 7d 2e 66 61 2d 77 65 62 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 Data Ascii: nt:"\f2ab"}.fa-fantasy-flight-games:before{content:"\f6dc"}.fa-rust:before{content:"\e07a"}.fa-wix:before{content:"\f5cf"}.fa-behance-square:before,.fa-square-behance:before{content:"\f1b5"}.fa-supple:before{content:"\f3f9"}.fa-webflow:before{content:"\e6
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 3a 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 31 20 36 30 20 31 36 2f 76 61 72 28 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 29 29 7d 2e 62 6f 72 64 65 72 2d 5c 5b 5c 23 65 30 65 30 65 30 5c 5d 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 3a 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 34 20 32 32 34 20 32 32 34 2f 76 61 72 28 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 29 29 7d 2e 62 6f 72 64 65 72 2d 5c 5b 5c 23 65 32 63 38 32 32 5c 5d 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 3a 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 36 20 32 30 30 20 33 34 2f 76 61 72 28 2d 2d 74 77 2d 62 6f 72 64 Data Ascii: tw-border-opacity:1;border-color:rgb(221 60 16/var(--tw-border-opacity))}.border-\[\#e0e0e0\]{--tw-border-opacity:1;border-color:rgb(224 224 224/var(--tw-border-opacity))}.border-\[\#e2c822\]{--tw-border-opacity:1;border-color:rgb(226 200 34/var(--tw-bord
2024-11-28 15:56:50 UTC	6814	IN	Data Raw: 62 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 33 30 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 61 66 2c 75 2b 30 33 30 34 2c 75 2b 30 33 30 38 2c 75 2b 30 33 32 39 2c 75 2b 31 65 30 30 2d 31 65 39 66 2c 75 2b 31 65 66 32 2d 31 65 66 66 2c 75 2b 32 30 32 30 Data Ascii: b}@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format("woff2");unicode-range:u+0100-02af,u+0304,u+0308,u+0329,u+1e00-1e9f,u+1ef2-1eff,u+2020

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.18	49697	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:49 UTC	597	OUT	GET /red-bull/id-38772/static/js/main.22cb0042.js HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://application-workspace.com/red-bull/id-38772/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:50 UTC	615	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 05 Dec 2024 15:56:49 GMT content-type: application/x-javascript last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "4540a-6748645e-f667ec4815a9b55e;;;" accept-ranges: bytes content-length: 283658 date: Thu, 28 Nov 2024 15:56:49 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:50 UTC	1368	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 32 32 63 62 30 30 34 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 31 38 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 6f 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 61 2c 6f 2c 6c 29 7b 69 66 28 6c 21 3d 3d 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 50 Data Ascii: /! For license information please see main.22cb0042.js.LICENSE.txt /(()=>{var e={497:(e,t,n)=>{"use strict";var r=n(218);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,l){if(l!==r){var i=new Error("Calling P
2024-11-28 15:56:50 UTC	14994	IN	Data Raw: 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 64 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 66 3d 2f 5e 5b 3a 41 2d 5a 5f 61 2d 7a 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c Data Ascii: ndow\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=Object.prototype.hasOwnProperty,f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 6e 6f 64 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 7d 76 61 72 20 53 65 3d 6e 75 6c 6c 2c 6b 65 3d 6e 75 6c 6c 2c 45 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 29 7b 69 66 28 65 3d 62 61 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 38 30 29 29 3b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 74 26 26 28 74 3d 78 61 28 74 29 2c 53 65 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 29 7b 6b 65 3f 45 65 3f 45 65 2e 70 75 73 68 28 65 29 3a 45 65 3d 5b 65 5d 3a 6b 65 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 29 7b 69 66 28 6b 65 29 7b 76 61 72 20 65 3d 6b 65 Data Ascii: nodeType?e.parentNode:e}var Se=null,ke=null,Ee=null;function Ce(e){if(e=ba(e)){if("function"!==typeof Se)throw Error(o(280));var t=e.stateNode;t&&(t=xa(t),Se(e.stateNode,e.type,t))}}function Ne(e){ke?Ee?Ee.push(e):Ee=[e]:ke=e}function je(){if(ke){var e=ke
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 4b 28 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 6e 3d 21 31 7d 69 66 28 21 6e 29 62 72 65 61 6b 3b 74 3d 4b 28 28 65 3d 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: }function fr(){for(var e=window,t=K();t instanceof e.HTMLIFrameElement;){try{var n="string"===typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=K((e=t.contentWindow).document)}return t}function pr(e){var t=e&&e.nodeName&&e.nodeName.toLowerC
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 26 26 30 3d 3d 3d 28 31 32 38 26 65 2e 66 6c 61 67 73 29 7d 66 75 6e 63 74 69 6f 6e 20 75 6f 28 65 29 7b 69 66 28 61 6f 29 7b 76 61 72 20 74 3d 72 6f 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 3b 69 66 28 21 69 6f 28 65 2c 74 29 29 7b 69 66 28 73 6f 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 34 31 38 29 29 3b 74 3d 75 61 28 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 3b 76 61 72 20 72 3d 6e 6f 3b 74 26 26 69 6f 28 65 2c 74 29 3f 6c 6f 28 72 2c 6e 29 3a 28 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 61 6f 3d 21 31 2c 6e 6f 3d 65 29 7d 7d 65 6c 73 65 7b 69 66 28 73 6f 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 61 6f 3d 21 Data Ascii: &&0===(128&e.flags)}function uo(e){if(ao){var t=ro;if(t){var n=t;if(!io(e,t)){if(so(e))throw Error(o(418));t=ua(n.nextSibling);var r=no;t&&io(e,t)?lo(r,n):(e.flags=-4097&e.flags\|2,ao=!1,no=e)}}else{if(so(e))throw Error(o(418));e.flags=-4097&e.flags\|2,ao=!
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 6c 6c 2c 74 2c 65 29 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 42 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 24 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 62 6c 28 29 3b 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 76 61 72 20 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 6d 6c 28 74 2c 72 5b 31 5d 29 3f 72 5b 30 5d 3a 28 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 74 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 48 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 62 6c 28 29 3b 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 76 61 72 20 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c Data Ascii: ll,t,e),n)}function Bl(){}function $l(e,t){var n=bl();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ml(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Hl(e,t){var n=bl();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&nul
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 74 2e 64 65 6c 65 74 69 6f 6e 73 29 3f 28 74 2e 64 65 6c 65 74 69 6f 6e 73 3d 5b 65 5d 2c 74 2e 66 6c 61 67 73 7c 3d 31 36 29 3a 6e 2e 70 75 73 68 28 65 29 29 2c 74 2e 63 68 69 6c 64 3d 61 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 3d 49 75 28 7b 6d 6f 64 65 3a 22 76 69 73 69 62 6c 65 22 2c 63 68 69 6c 64 72 65 6e 3a 74 7d 2c 65 2e 6d 6f 64 65 2c 30 2c 6e 75 6c 6c 29 29 2e 72 65 74 75 72 6e 3d 65 2c 65 2e 63 68 69 6c 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 55 69 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6d 6f 28 72 29 2c 78 6f 28 74 2c 65 2e 63 68 69 6c 64 2c 6e 75 6c 6c 2c 6e 29 2c 28 65 3d 4d 69 28 74 2c 74 2e 70 Data Ascii: t.deletions)?(t.deletions=[e],t.flags\|=16):n.push(e)),t.child=a,t.memoizedState=null,a}function Mi(e,t){return(t=Iu({mode:"visible",children:t},e.mode,0,null)).return=e,e.child=t}function Ui(e,t,n,r){return null!==r&&mo(r),xo(t,e.child,null,n),(e=Mi(t,t.p
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 74 72 79 7b 22 69 6e 70 75 74 22 3d 3d 3d 73 26 26 22 72 61 64 69 6f 22 3d 3d 3d 6c 2e 74 79 70 65 26 26 6e 75 6c 6c 21 3d 6c 2e 6e 61 6d 65 26 26 4a 28 61 2c 6c 29 2c 62 65 28 73 2c 69 29 3b 76 61 72 20 63 3d 62 65 28 73 2c 6c 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 75 2e 6c 65 6e 67 74 68 3b 69 2b 3d 32 29 7b 76 61 72 20 64 3d 75 5b 69 5d 2c 66 3d 75 5b 69 2b 31 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 64 3f 67 65 28 61 2c 66 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 64 3f 64 65 28 61 2c 66 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 64 3f 66 65 28 61 2c 66 29 3a 62 28 61 2c 64 2c 66 2c 63 29 7d 73 77 69 74 63 68 28 73 29 7b 63 61 73 65 22 69 6e 70 75 74 22 3a 58 28 61 2c 6c 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 Data Ascii: try{"input"===s&&"radio"===l.type&&null!=l.name&&J(a,l),be(s,i);var c=be(s,l);for(i=0;i<u.length;i+=2){var d=u[i],f=u[i+1];"style"===d?ge(a,f):"dangerouslySetInnerHTML"===d?de(a,f):"children"===d?fe(a,f):b(a,d,f,c)}switch(s){case"input":X(a,l);break;case"
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 21 3d 3d 28 32 30 34 38 26 28 73 3d 58 69 29 2e 66 6c 61 67 73 29 29 74 72 79 7b 73 77 69 74 63 68 28 73 2e 74 61 67 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 31 35 3a 72 73 28 39 2c 73 29 7d 7d 63 61 74 63 68 28 53 29 7b 45 75 28 73 2c 73 2e 72 65 74 75 72 6e 2c 53 29 7d 69 66 28 73 3d 3d 3d 69 29 7b 58 69 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 65 7d 76 61 72 20 78 3d 73 2e 73 69 62 6c 69 6e 67 3b 69 66 28 6e 75 6c 6c 21 3d 3d 78 29 7b 78 2e 72 65 74 75 72 6e 3d 73 2e 72 65 74 75 72 6e 2c 58 69 3d 78 3b 62 72 65 61 6b 20 65 7d 58 69 3d 73 2e 72 65 74 75 72 6e 7d 7d 69 66 28 54 73 3d 61 2c 24 61 28 29 2c 6f 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 74 2e 6f 6e 50 6f 73 74 43 6f 6d 6d 69 74 46 69 62 65 72 Data Ascii: !==(2048&(s=Xi).flags))try{switch(s.tag){case 0:case 11:case 15:rs(9,s)}}catch(S){Eu(s,s.return,S)}if(s===i){Xi=null;break e}var x=s.sibling;if(null!==x){x.return=s.return,Xi=x;break e}Xi=s.return}}if(Ts=a,$a(),ot&&"function"===typeof ot.onPostCommitFiber
2024-11-28 15:56:50 UTC	16384	IN	Data Raw: 65 2c 61 2c 7b 67 65 74 3a 28 29 3d 3e 74 5b 61 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 72 3d 6c 28 74 2c 61 29 29 7c 7c 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 3d 7b 7d 3b 28 28 65 2c 74 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 6f 28 65 2c 6e 2c 7b 67 65 74 3a 74 5b 6e 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 7d 29 28 64 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 77 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 28 72 3d 64 2c 63 28 6f 28 7b 7d 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 72 29 29 3b 76 61 72 20 66 3d 6e 28 34 33 29 2c 70 3d 28 28 65 2c 74 2c 6e 29 3d 3e 28 6e 3d 6e 75 6c 6c 21 3d 65 3f 61 28 73 28 65 29 29 3a 7b 7d 2c 63 28 21 74 26 26 65 26 26 Data Ascii: e,a,{get:()=>t[a],enumerable:!(r=l(t,a))\|\|r.enumerable});return e},d={};((e,t)=>{for(var n in t)o(e,n,{get:t[n],enumerable:!0})})(d,{default:()=>w}),e.exports=(r=d,c(o({},"__esModule",{value:!0}),r));var f=n(43),p=((e,t,n)=>(n=null!=e?a(s(e)):{},c(!t&&e&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.18	49701	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:52 UTC	624	OUT	GET /favicon.ico HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://application-workspace.com/red-bull/id-38772/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:53 UTC	472	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html last-modified: Wed, 18 Jan 2023 19:41:46 GMT etag: "999-63c84b7a-33ed2261a6d1b2d8;;;" accept-ranges: bytes content-length: 2457 date: Thu, 28 Nov 2024 15:56:53 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:53 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# si
2024-11-28 15:56:53 UTC	1561	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 6c 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6f 70 73 2c 20 6c 6f 6f 6b 73 20 6c 69 Data Ascii: bsolute; } </style> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.18	49700	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:52 UTC	586	OUT	GET /red-bull/id-38772/site.webmanifest HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://application-workspace.com/red-bull/id-38772/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:53 UTC	517	IN	HTTP/1.1 200 OK Connection: close content-type: text/plain last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "11b-6748645e-3cca1c8ed5ad8bf4;;;" accept-ranges: bytes content-length: 283 date: Thu, 28 Nov 2024 15:56:53 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:53 UTC	283	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 7d 0a 20 20 20 20 5d 2c 0a 20 20 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 46 46 46 46 46 46 22 2c 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 46 46 46 46 46 46 22 2c 0a 20 20 Data Ascii: { "name": "", "short_name": "", "icons": [ { "src": "/android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" } ], "theme_color": "#FFFFFF", "background_color": "#FFFFFF",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.18	49702	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:52 UTC	393	OUT	GET /red-bull/id-38772/static/js/main.22cb0042.js HTTP/1.1 Host: application-workspace.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:53 UTC	615	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 05 Dec 2024 15:56:53 GMT content-type: application/x-javascript last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "4540a-6748645e-f667ec4815a9b55e;;;" accept-ranges: bytes content-length: 283658 date: Thu, 28 Nov 2024 15:56:53 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:56:53 UTC	1368	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 32 32 63 62 30 30 34 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 31 38 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 6f 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 61 2c 6f 2c 6c 29 7b 69 66 28 6c 21 3d 3d 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 50 Data Ascii: /! For license information please see main.22cb0042.js.LICENSE.txt /(()=>{var e={497:(e,t,n)=>{"use strict";var r=n(218);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,l){if(l!==r){var i=new Error("Calling P
2024-11-28 15:56:53 UTC	14994	IN	Data Raw: 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 64 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 66 3d 2f 5e 5b 3a 41 2d 5a 5f 61 2d 7a 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c Data Ascii: ndow\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=Object.prototype.hasOwnProperty,f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 6e 6f 64 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 7d 76 61 72 20 53 65 3d 6e 75 6c 6c 2c 6b 65 3d 6e 75 6c 6c 2c 45 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 29 7b 69 66 28 65 3d 62 61 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 38 30 29 29 3b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 74 26 26 28 74 3d 78 61 28 74 29 2c 53 65 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 29 7b 6b 65 3f 45 65 3f 45 65 2e 70 75 73 68 28 65 29 3a 45 65 3d 5b 65 5d 3a 6b 65 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 29 7b 69 66 28 6b 65 29 7b 76 61 72 20 65 3d 6b 65 Data Ascii: nodeType?e.parentNode:e}var Se=null,ke=null,Ee=null;function Ce(e){if(e=ba(e)){if("function"!==typeof Se)throw Error(o(280));var t=e.stateNode;t&&(t=xa(t),Se(e.stateNode,e.type,t))}}function Ne(e){ke?Ee?Ee.push(e):Ee=[e]:ke=e}function je(){if(ke){var e=ke
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 4b 28 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 6e 3d 21 31 7d 69 66 28 21 6e 29 62 72 65 61 6b 3b 74 3d 4b 28 28 65 3d 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: }function fr(){for(var e=window,t=K();t instanceof e.HTMLIFrameElement;){try{var n="string"===typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=K((e=t.contentWindow).document)}return t}function pr(e){var t=e&&e.nodeName&&e.nodeName.toLowerC
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 26 26 30 3d 3d 3d 28 31 32 38 26 65 2e 66 6c 61 67 73 29 7d 66 75 6e 63 74 69 6f 6e 20 75 6f 28 65 29 7b 69 66 28 61 6f 29 7b 76 61 72 20 74 3d 72 6f 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 3b 69 66 28 21 69 6f 28 65 2c 74 29 29 7b 69 66 28 73 6f 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 34 31 38 29 29 3b 74 3d 75 61 28 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 3b 76 61 72 20 72 3d 6e 6f 3b 74 26 26 69 6f 28 65 2c 74 29 3f 6c 6f 28 72 2c 6e 29 3a 28 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 61 6f 3d 21 31 2c 6e 6f 3d 65 29 7d 7d 65 6c 73 65 7b 69 66 28 73 6f 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 61 6f 3d 21 Data Ascii: &&0===(128&e.flags)}function uo(e){if(ao){var t=ro;if(t){var n=t;if(!io(e,t)){if(so(e))throw Error(o(418));t=ua(n.nextSibling);var r=no;t&&io(e,t)?lo(r,n):(e.flags=-4097&e.flags\|2,ao=!1,no=e)}}else{if(so(e))throw Error(o(418));e.flags=-4097&e.flags\|2,ao=!
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 6c 6c 2c 74 2c 65 29 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 42 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 24 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 62 6c 28 29 3b 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 76 61 72 20 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 6d 6c 28 74 2c 72 5b 31 5d 29 3f 72 5b 30 5d 3a 28 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 74 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 48 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 62 6c 28 29 3b 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 76 61 72 20 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c Data Ascii: ll,t,e),n)}function Bl(){}function $l(e,t){var n=bl();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ml(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Hl(e,t){var n=bl();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&nul
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 74 2e 64 65 6c 65 74 69 6f 6e 73 29 3f 28 74 2e 64 65 6c 65 74 69 6f 6e 73 3d 5b 65 5d 2c 74 2e 66 6c 61 67 73 7c 3d 31 36 29 3a 6e 2e 70 75 73 68 28 65 29 29 2c 74 2e 63 68 69 6c 64 3d 61 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 3d 49 75 28 7b 6d 6f 64 65 3a 22 76 69 73 69 62 6c 65 22 2c 63 68 69 6c 64 72 65 6e 3a 74 7d 2c 65 2e 6d 6f 64 65 2c 30 2c 6e 75 6c 6c 29 29 2e 72 65 74 75 72 6e 3d 65 2c 65 2e 63 68 69 6c 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 55 69 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6d 6f 28 72 29 2c 78 6f 28 74 2c 65 2e 63 68 69 6c 64 2c 6e 75 6c 6c 2c 6e 29 2c 28 65 3d 4d 69 28 74 2c 74 2e 70 Data Ascii: t.deletions)?(t.deletions=[e],t.flags\|=16):n.push(e)),t.child=a,t.memoizedState=null,a}function Mi(e,t){return(t=Iu({mode:"visible",children:t},e.mode,0,null)).return=e,e.child=t}function Ui(e,t,n,r){return null!==r&&mo(r),xo(t,e.child,null,n),(e=Mi(t,t.p
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 74 72 79 7b 22 69 6e 70 75 74 22 3d 3d 3d 73 26 26 22 72 61 64 69 6f 22 3d 3d 3d 6c 2e 74 79 70 65 26 26 6e 75 6c 6c 21 3d 6c 2e 6e 61 6d 65 26 26 4a 28 61 2c 6c 29 2c 62 65 28 73 2c 69 29 3b 76 61 72 20 63 3d 62 65 28 73 2c 6c 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 75 2e 6c 65 6e 67 74 68 3b 69 2b 3d 32 29 7b 76 61 72 20 64 3d 75 5b 69 5d 2c 66 3d 75 5b 69 2b 31 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 64 3f 67 65 28 61 2c 66 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 64 3f 64 65 28 61 2c 66 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 64 3f 66 65 28 61 2c 66 29 3a 62 28 61 2c 64 2c 66 2c 63 29 7d 73 77 69 74 63 68 28 73 29 7b 63 61 73 65 22 69 6e 70 75 74 22 3a 58 28 61 2c 6c 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 Data Ascii: try{"input"===s&&"radio"===l.type&&null!=l.name&&J(a,l),be(s,i);var c=be(s,l);for(i=0;i<u.length;i+=2){var d=u[i],f=u[i+1];"style"===d?ge(a,f):"dangerouslySetInnerHTML"===d?de(a,f):"children"===d?fe(a,f):b(a,d,f,c)}switch(s){case"input":X(a,l);break;case"
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 21 3d 3d 28 32 30 34 38 26 28 73 3d 58 69 29 2e 66 6c 61 67 73 29 29 74 72 79 7b 73 77 69 74 63 68 28 73 2e 74 61 67 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 31 35 3a 72 73 28 39 2c 73 29 7d 7d 63 61 74 63 68 28 53 29 7b 45 75 28 73 2c 73 2e 72 65 74 75 72 6e 2c 53 29 7d 69 66 28 73 3d 3d 3d 69 29 7b 58 69 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 65 7d 76 61 72 20 78 3d 73 2e 73 69 62 6c 69 6e 67 3b 69 66 28 6e 75 6c 6c 21 3d 3d 78 29 7b 78 2e 72 65 74 75 72 6e 3d 73 2e 72 65 74 75 72 6e 2c 58 69 3d 78 3b 62 72 65 61 6b 20 65 7d 58 69 3d 73 2e 72 65 74 75 72 6e 7d 7d 69 66 28 54 73 3d 61 2c 24 61 28 29 2c 6f 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 74 2e 6f 6e 50 6f 73 74 43 6f 6d 6d 69 74 46 69 62 65 72 Data Ascii: !==(2048&(s=Xi).flags))try{switch(s.tag){case 0:case 11:case 15:rs(9,s)}}catch(S){Eu(s,s.return,S)}if(s===i){Xi=null;break e}var x=s.sibling;if(null!==x){x.return=s.return,Xi=x;break e}Xi=s.return}}if(Ts=a,$a(),ot&&"function"===typeof ot.onPostCommitFiber
2024-11-28 15:56:53 UTC	16384	IN	Data Raw: 65 2c 61 2c 7b 67 65 74 3a 28 29 3d 3e 74 5b 61 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 72 3d 6c 28 74 2c 61 29 29 7c 7c 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 3d 7b 7d 3b 28 28 65 2c 74 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 6f 28 65 2c 6e 2c 7b 67 65 74 3a 74 5b 6e 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 7d 29 28 64 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 77 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 28 72 3d 64 2c 63 28 6f 28 7b 7d 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 72 29 29 3b 76 61 72 20 66 3d 6e 28 34 33 29 2c 70 3d 28 28 65 2c 74 2c 6e 29 3d 3e 28 6e 3d 6e 75 6c 6c 21 3d 65 3f 61 28 73 28 65 29 29 3a 7b 7d 2c 63 28 21 74 26 26 65 26 26 Data Ascii: e,a,{get:()=>t[a],enumerable:!(r=l(t,a))\|\|r.enumerable});return e},d={};((e,t)=>{for(var n in t)o(e,n,{get:t[n],enumerable:!0})})(d,{default:()=>w}),e.exports=(r=d,c(o({},"__esModule",{value:!0}),r));var f=n(43),p=((e,t,n)=>(n=null!=e?a(s(e)):{},c(!t&&e&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.18	49703	104.26.9.44	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:52 UTC	592	OUT	GET /json// HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:53 UTC	985	IN	HTTP/1.1 200 OK Date: Thu, 28 Nov 2024 15:56:53 GMT Content-Type: application/json Content-Length: 764 Connection: close Allow: GET, HEAD, OPTIONS, OPTIONS, POST X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://application-workspace.com X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rwihA40%2B9UoPzZrsAt%2BCeI8snnmnvhtqNBa2cxNRmPFRw2jcE9AGvJu4xxJfjBKwCfOdc8uDlAYl9%2FJ2UnHN8SBqIY%2FS1DM7c21N6hAojZ8vMd9oqIyWH4vM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e9b8ceea860184d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=5448&min_rtt=1478&rtt_var=8355&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2790&recv_bytes=1174&delivery_rate=1922317&cwnd=237&unsent_bytes=0&cid=26ef351ad25aa6ea&ts=797&x=0"
2024-11-28 15:56:53 UTC	384	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 Data Ascii: { "ip": "8.46.123.228", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "cou
2024-11-28 15:56:53 UTC	380	IN	Data Raw: 61 6c 73 65 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 36 39 22 2c 0a 20 20 20 20 22 6c 61 74 69 74 75 64 65 22 3a 20 34 30 2e 37 37 38 2c 0a 20 20 20 20 22 6c 6f 6e 67 69 74 75 64 65 22 3a 20 2d 37 33 2e 39 38 38 34 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c Data Ascii: alse, "postal": "10069", "latitude": 40.778, "longitude": -73.9884, "timezone": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.18	49705	104.26.9.44	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:54 UTC	338	OUT	GET /json// HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:55 UTC	926	IN	HTTP/1.1 200 OK Date: Thu, 28 Nov 2024 15:56:55 GMT Content-Type: application/json Content-Length: 764 Connection: close Allow: POST, HEAD, OPTIONS, GET, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lbllOPmpvfh%2BY7WAxHcp%2F7B9t4%2FFsgSjw%2BaNWvIoCDMy4t9ldNnDS9ayMks2paP4%2BFKB6Cl%2B3H0cGbX%2BQKYn81NohrVX1S0AUIVeRfsTEspxb7r5bZo6ybvG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e9b8cfbf87c0f9f-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2865&min_rtt=1530&rtt_var=3100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2791&recv_bytes=920&delivery_rate=1877813&cwnd=214&unsent_bytes=0&cid=9330a9a9f661a108&ts=775&x=0"
2024-11-28 15:56:55 UTC	443	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 Data Ascii: { "ip": "8.46.123.228", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "cou
2024-11-28 15:56:55 UTC	321	IN	Data Raw: 6f 6e 67 69 74 75 64 65 22 3a 20 2d 37 33 2e 39 38 38 34 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 2e 30 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f Data Ascii: ongitude": -73.9884, "timezone": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,es-US,haw,fr", "country_area": 9629091.0, "country_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.18	49707	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:55 UTC	546	OUT	OPTIONS /api/activity/shadow HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://application-workspace.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:55 UTC	424	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:56:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close vary: Origin access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT access-control-max-age: 600 access-control-allow-credentials: true access-control-allow-origin: https://application-workspace.com access-control-allow-headers: content-type
2024-11-28 15:56:55 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.18	49706	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:55 UTC	624	OUT	GET /api/settings_by_stage/s9 HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:56 UTC	222	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:56:55 GMT Content-Type: application/json Content-Length: 352 Connection: close access-control-allow-origin: * access-control-allow-credentials: true
2024-11-28 15:56:56 UTC	352	IN	Data Raw: 7b 22 73 39 5f 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 6f 70 2e 61 6e 6f 74 68 65 72 6c 65 76 65 6c 2e 61 70 70 2f 73 74 6f 72 61 67 65 2f 72 65 64 62 75 6c 6c 2e 70 6e 67 22 2c 22 73 39 5f 66 69 72 73 74 22 3a 22 43 43 31 45 34 41 22 2c 22 73 39 5f 66 6f 75 72 74 68 22 3a 22 52 65 64 20 42 75 6c 6c 20 7c 20 43 61 72 65 65 72 73 22 2c 22 73 39 5f 73 65 63 6f 6e 64 22 3a 22 41 72 65 20 79 6f 75 20 72 65 61 64 79 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 20 53 6f 63 69 61 6c 20 4d 65 64 69 61 20 4d 61 6e 61 67 65 72 20 66 6f 72 20 52 65 64 20 42 75 6c 6c 3f 22 2c 22 73 39 5f 74 68 69 72 64 22 3a 22 57 65 e2 80 99 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 63 75 72 69 6f 75 73 20 6d 69 6e 64 73 20 66 72 6f 6d 20 61 20 77 69 64 65 20 72 61 6e 67 65 Data Ascii: {"s9_logo":"https://loop.anotherlevel.app/storage/redbull.png","s9_first":"CC1E4A","s9_fourth":"Red Bull \| Careers","s9_second":"Are you ready to work as a Social Media Manager for Red Bull?","s9_third":"Were looking for curious minds from a wide range

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.18	49704	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:56 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sB96RGH55E49Bhc&MD=5RDat88A HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-28 15:56:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5288f6e2-7525-482b-9e4b-bc50ae51b448 MS-RequestId: 665db1ae-4169-4df4-9527-51712d69445e MS-CV: bb0kMiOGA0CwoMu8.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Nov 2024 15:56:56 GMT Connection: close Content-Length: 24490
2024-11-28 15:56:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-28 15:56:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.18	49709	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:57 UTC	673	OUT	POST /api/activity/shadow HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive Content-Length: 148 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:57 UTC	148	OUT	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 7d Data Ascii: {"ip":"8.46.123.228","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"}
2024-11-28 15:56:58 UTC	221	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:56:58 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-origin: * access-control-allow-credentials: true
2024-11-28 15:56:58 UTC	85	IN	Data Raw: 7b 22 73 68 61 64 6f 77 22 3a 22 78 22 2c 22 61 75 74 68 5f 74 79 70 65 22 3a 22 45 6d 61 69 6c 20 6f 72 20 53 4d 53 22 2c 22 61 75 74 68 5f 6c 65 6e 67 74 68 22 3a 22 36 20 6f 72 20 38 22 2c 22 61 75 74 68 5f 74 61 72 67 65 74 22 3a 22 4e 6f 6e 65 22 7d Data Ascii: {"shadow":"x","auth_type":"Email or SMS","auth_length":"6 or 8","auth_target":"None"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.18	49710	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:57 UTC	370	OUT	GET /api/settings_by_stage/s9 HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:56:58 UTC	150	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:56:58 GMT Content-Type: application/json Content-Length: 352 Connection: close
2024-11-28 15:56:58 UTC	352	IN	Data Raw: 7b 22 73 39 5f 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 6f 70 2e 61 6e 6f 74 68 65 72 6c 65 76 65 6c 2e 61 70 70 2f 73 74 6f 72 61 67 65 2f 72 65 64 62 75 6c 6c 2e 70 6e 67 22 2c 22 73 39 5f 66 69 72 73 74 22 3a 22 43 43 31 45 34 41 22 2c 22 73 39 5f 66 6f 75 72 74 68 22 3a 22 52 65 64 20 42 75 6c 6c 20 7c 20 43 61 72 65 65 72 73 22 2c 22 73 39 5f 73 65 63 6f 6e 64 22 3a 22 41 72 65 20 79 6f 75 20 72 65 61 64 79 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 20 53 6f 63 69 61 6c 20 4d 65 64 69 61 20 4d 61 6e 61 67 65 72 20 66 6f 72 20 52 65 64 20 42 75 6c 6c 3f 22 2c 22 73 39 5f 74 68 69 72 64 22 3a 22 57 65 e2 80 99 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 63 75 72 69 6f 75 73 20 6d 69 6e 64 73 20 66 72 6f 6d 20 61 20 77 69 64 65 20 72 61 6e 67 65 Data Ascii: {"s9_logo":"https://loop.anotherlevel.app/storage/redbull.png","s9_first":"CC1E4A","s9_fourth":"Red Bull \| Careers","s9_second":"Are you ready to work as a Social Media Manager for Red Bull?","s9_third":"Were looking for curious minds from a wide range

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.18	49714	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:59 UTC	620	OUT	GET /api/set_status//work HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:00 UTC	228	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:00 GMT Content-Type: application/json Content-Length: 22 Connection: close access-control-allow-origin: * access-control-allow-credentials: true
2024-11-28 15:57:00 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.18	49713	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:59 UTC	365	OUT	GET /api/activity/shadow HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:00 UTC	178	IN	HTTP/1.1 405 Method Not Allowed Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:00 GMT Content-Type: application/json Content-Length: 31 Connection: close allow: POST
2024-11-28 15:57:00 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.18	49715	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:56:59 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: sZX6tYve185r52Is0uC5jg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:57:00 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:00 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:57:00 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.18	49719	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:00 UTC	609	OUT	GET /storage/redbull.png HTTP/1.1 Host: loop.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:01 UTC	223	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:01 GMT Content-Type: image/png Content-Length: 58452 Connection: close Last-Modified: Thu, 26 Sep 2024 20:09:17 GMT Access-Control-Allow-Origin: *
2024-11-28 15:57:01 UTC	16161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 70 04 03 00 00 00 62 90 d6 41 00 00 00 1b 50 4c 54 45 47 70 4c ff 1f 44 ff 5d 31 ff b2 00 ff 0c 49 ff c8 00 ff 0c 49 ff c8 00 ff 5e 23 7b 77 6c ae 00 00 00 06 74 52 4e 53 00 6a 2c ee cc 8c 77 fd d2 18 00 00 e3 e2 49 44 41 54 78 da ec dd c1 4e 1b 49 10 06 e0 d8 c8 ca d5 22 b2 f6 3a 10 59 5c 09 96 35 af 81 19 8d fc 1c c4 8a fa f5 43 58 a2 20 42 12 1b ec ea 9e 9e ef 3b ad 56 d9 cb 4c 67 7f 57 77 55 cf 87 0f 00 00 00 00 00 00 00 00 00 00 00 00 91 a6 97 e7 9b be ef bb 6e b5 5a b5 6d 7a d4 3e fc f3 7a fd f0 6f 37 9b cb 4b 8f 08 00 8e 99 bc 17 0f 09 bb 7a 8a dc bf 59 75 0f 49 2c 87 01 e0 bd 2e 17 7d b7 47 f2 be c8 e1 be 3f 6f 3c 3b 00 78 53 dd bb ec bb f4 76 bb 75 7f ee 21 02 c0 41 e1 bb e8 57 Data Ascii: PNGIHDRpbAPLTEGpLD]1II^#{wltRNSj,wIDATxNI":Y\5CX B;VLgWwUnZmz>zo7KzYuI,.}G?o<;xSvu!AW
2024-11-28 15:57:01 UTC	16384	IN	Data Raw: 02 a6 03 1a 82 d0 e5 cd 2f c0 a3 4c bc cb 14 98 66 ef f2 b5 5c 01 0f 41 0f b5 b4 11 30 8b 5c 82 80 9f a3 0e 08 c1 33 04 2c 09 9d 53 c0 93 21 33 af 71 0c b8 0b fb 59 07 8b 3f 88 87 28 32 6c 00 43 41 3c 45 c0 d2 04 3c 66 12 f0 c6 d7 a2 85 cc 21 4d 21 2f ca 1c fe ce f2 10 c9 10 f0 57 bc 01 a1 f8 35 ef 49 f7 50 88 80 87 4b ee 6f ad 02 d6 e9 05 3c b2 ca 13 3c 43 6c 00 43 21 5c dd 92 01 cb 7a 7b 1f 73 c5 a5 49 ba 80 5d af 9c 0a 3c 53 8c 80 6b 10 30 13 c0 10 d4 c0 5d ae f8 06 5e 42 c8 26 e0 8d 37 ac 3a 05 ac 03 1f 6b 89 80 2b 10 f0 9e 0d 60 08 ca 93 0e 01 4b ca 80 e3 9c 56 d8 9d 4c 9e 75 4e 37 58 c6 1c 92 63 89 46 25 2c f8 0c ed 9d 45 b9 e4 a9 98 5d da b1 8f 7f a1 d0 56 68 04 2c 38 03 3e 3e 7d e5 fc 87 c8 a7 b6 04 ac 13 b6 3c b4 27 60 9d 69 cf ea c2 ed 92 ff e0 Data Ascii: /Lf\A0\3,S!3qY?(2lCA<E<f!M!/W5IPKo<<ClC!\z{sI]<Sk0]^B&7:k+`KVLuN7XcF%,E]Vh,8>>}<'`i
2024-11-28 15:57:01 UTC	16384	IN	Data Raw: e3 21 bb ab 78 cb 7a 11 ab 22 f6 83 ab ae 93 98 81 98 7a 89 64 e3 e3 41 07 67 71 1c 44 7a 00 be 4b c0 df e2 1f 81 39 19 05 6e 8d 25 b2 00 70 0e b1 36 fd ea aa 1e ad a1 20 c0 f7 7d 0c 3d ff f2 08 a5 c2 f7 31 25 1a 13 b2 35 24 d8 ab 39 cf ba 53 ab 97 25 a6 64 c1 02 52 3d 4e 0c c0 31 cf 20 7d c4 63 fa 08 5c 81 15 e8 fe 6a df 15 f4 ca 0e 80 17 70 00 e6 04 5a cc f8 1d 92 37 2b 00 06 37 0f 29 ad 2b a1 06 fd 72 e7 a5 94 9d 80 0d 10 8b 0d 6b aa d1 a8 65 ac b1 08 74 3f 96 f2 fd be a7 51 de bc 23 b0 f7 6b 4e 36 88 02 71 9c d4 3f 0b 7a 65 10 15 f2 57 0f 35 0d 11 28 1f e5 8d 89 07 df 5f 45 5e d7 8b 38 05 51 31 f0 55 0f 10 ab 02 65 13 b7 60 01 db a8 20 1d 1f 4b 9b 00 bf 54 0a df 1b bc 25 12 11 cc 60 fd bf 82 5e d9 01 30 38 c9 24 41 1f a8 3d c3 7b fe e5 31 5d fa 0b d0 Data Ascii: !xz"zdAgqDzK9n%p6 }=1%5$9S%dR=N1 }c\jpZ7+7)+rket?Q#kN6q?zeW5(_E^8Q1Ue` KT%`^08$A={1]
2024-11-28 15:57:01 UTC	9523	IN	Data Raw: e2 0c e0 9a 94 60 00 38 88 02 17 00 8c 01 63 c0 7a 7b ce a6 06 3d f7 0a 60 b7 ad 6a b8 5b 06 00 ec 0a 60 55 05 5e 00 30 06 8c 01 eb 25 8d 9a 30 45 24 02 f0 e6 9c 46 4b 56 00 00 60 ef e6 c5 8d 0b 98 1e 30 06 8c 01 47 af 41 af a9 00 2c 08 94 ea 0c 60 13 12 cc 00 d8 15 c0 6a df 84 bc 65 01 63 c0 18 30 06 1c dd 91 ae 00 d8 25 8b da d4 37 9e 01 b0 2f 80 15 15 78 07 c0 18 30 06 ac 98 34 2c 72 f4 90 0b c0 ab cb ec ba 14 10 c3 36 81 01 b0 77 17 fe c6 7f 05 00 63 c0 18 70 f0 64 21 9c e3 ea 0f dd 18 3d ce 0a 2a f7 b2 16 9b 65 bf 02 60 57 00 6b de 86 55 da 00 30 3d 60 00 1c d3 80 2d 3e 89 a4 fd d9 d2 c0 e1 3b 47 53 da fc 0f 80 83 6c b0 a5 0d 00 63 c0 00 38 a8 01 1b d4 a0 9f af dd 86 eb 1c 59 bd 69 f4 d9 71 de 00 b0 d6 0d 04 b7 e5 5b 00 8c 01 63 c0 c1 b3 c5 cb b5 db Data Ascii: `8cz{=`j[`U^0%0E$FKV`0GA,`jec0%7/x04,r6wcpd!=*e`WkU0=`->;GSlc8Yiq[c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.18	49720	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:00 UTC	609	OUT	GET /storage/favicon.png HTTP/1.1 Host: loop.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:01 UTC	223	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:01 GMT Content-Type: image/png Content-Length: 15086 Connection: close Last-Modified: Thu, 26 Sep 2024 20:13:51 GMT Access-Control-Allow-Origin: *
2024-11-28 15:57:01 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.18	49721	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:03 UTC	364	OUT	GET /storage/favicon.png HTTP/1.1 Host: loop.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:04 UTC	223	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:04 GMT Content-Type: image/png Content-Length: 15086 Connection: close Last-Modified: Thu, 26 Sep 2024 20:13:51 GMT Access-Control-Allow-Origin: *
2024-11-28 15:57:04 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.18	49722	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:03 UTC	364	OUT	GET /storage/redbull.png HTTP/1.1 Host: loop.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:04 UTC	223	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:04 GMT Content-Type: image/png Content-Length: 58452 Connection: close Last-Modified: Thu, 26 Sep 2024 20:09:17 GMT Access-Control-Allow-Origin: *
2024-11-28 15:57:04 UTC	16161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 70 04 03 00 00 00 62 90 d6 41 00 00 00 1b 50 4c 54 45 47 70 4c ff 1f 44 ff 5d 31 ff b2 00 ff 0c 49 ff c8 00 ff 0c 49 ff c8 00 ff 5e 23 7b 77 6c ae 00 00 00 06 74 52 4e 53 00 6a 2c ee cc 8c 77 fd d2 18 00 00 e3 e2 49 44 41 54 78 da ec dd c1 4e 1b 49 10 06 e0 d8 c8 ca d5 22 b2 f6 3a 10 59 5c 09 96 35 af 81 19 8d fc 1c c4 8a fa f5 43 58 a2 20 42 12 1b ec ea 9e 9e ef 3b ad 56 d9 cb 4c 67 7f 57 77 55 cf 87 0f 00 00 00 00 00 00 00 00 00 00 00 00 91 a6 97 e7 9b be ef bb 6e b5 5a b5 6d 7a d4 3e fc f3 7a fd f0 6f 37 9b cb 4b 8f 08 00 8e 99 bc 17 0f 09 bb 7a 8a dc bf 59 75 0f 49 2c 87 01 e0 bd 2e 17 7d b7 47 f2 be c8 e1 be 3f 6f 3c 3b 00 78 53 dd bb ec bb f4 76 bb 75 7f ee 21 02 c0 41 e1 bb e8 57 Data Ascii: PNGIHDRpbAPLTEGpLD]1II^#{wltRNSj,wIDATxNI":Y\5CX B;VLgWwUnZmz>zo7KzYuI,.}G?o<;xSvu!AW
2024-11-28 15:57:04 UTC	16384	IN	Data Raw: 02 a6 03 1a 82 d0 e5 cd 2f c0 a3 4c bc cb 14 98 66 ef f2 b5 5c 01 0f 41 0f b5 b4 11 30 8b 5c 82 80 9f a3 0e 08 c1 33 04 2c 09 9d 53 c0 93 21 33 af 71 0c b8 0b fb 59 07 8b 3f 88 87 28 32 6c 00 43 41 3c 45 c0 d2 04 3c 66 12 f0 c6 d7 a2 85 cc 21 4d 21 2f ca 1c fe ce f2 10 c9 10 f0 57 bc 01 a1 f8 35 ef 49 f7 50 88 80 87 4b ee 6f ad 02 d6 e9 05 3c b2 ca 13 3c 43 6c 00 43 21 5c dd 92 01 cb 7a 7b 1f 73 c5 a5 49 ba 80 5d af 9c 0a 3c 53 8c 80 6b 10 30 13 c0 10 d4 c0 5d ae f8 06 5e 42 c8 26 e0 8d 37 ac 3a 05 ac 03 1f 6b 89 80 2b 10 f0 9e 0d 60 08 ca 93 0e 01 4b ca 80 e3 9c 56 d8 9d 4c 9e 75 4e 37 58 c6 1c 92 63 89 46 25 2c f8 0c ed 9d 45 b9 e4 a9 98 5d da b1 8f 7f a1 d0 56 68 04 2c 38 03 3e 3e 7d e5 fc 87 c8 a7 b6 04 ac 13 b6 3c b4 27 60 9d 69 cf ea c2 ed 92 ff e0 Data Ascii: /Lf\A0\3,S!3qY?(2lCA<E<f!M!/W5IPKo<<ClC!\z{sI]<Sk0]^B&7:k+`KVLuN7XcF%,E]Vh,8>>}<'`i
2024-11-28 15:57:05 UTC	16384	IN	Data Raw: e3 21 bb ab 78 cb 7a 11 ab 22 f6 83 ab ae 93 98 81 98 7a 89 64 e3 e3 41 07 67 71 1c 44 7a 00 be 4b c0 df e2 1f 81 39 19 05 6e 8d 25 b2 00 70 0e b1 36 fd ea aa 1e ad a1 20 c0 f7 7d 0c 3d ff f2 08 a5 c2 f7 31 25 1a 13 b2 35 24 d8 ab 39 cf ba 53 ab 97 25 a6 64 c1 02 52 3d 4e 0c c0 31 cf 20 7d c4 63 fa 08 5c 81 15 e8 fe 6a df 15 f4 ca 0e 80 17 70 00 e6 04 5a cc f8 1d 92 37 2b 00 06 37 0f 29 ad 2b a1 06 fd 72 e7 a5 94 9d 80 0d 10 8b 0d 6b aa d1 a8 65 ac b1 08 74 3f 96 f2 fd be a7 51 de bc 23 b0 f7 6b 4e 36 88 02 71 9c d4 3f 0b 7a 65 10 15 f2 57 0f 35 0d 11 28 1f e5 8d 89 07 df 5f 45 5e d7 8b 38 05 51 31 f0 55 0f 10 ab 02 65 13 b7 60 01 db a8 20 1d 1f 4b 9b 00 bf 54 0a df 1b bc 25 12 11 cc 60 fd bf 82 5e d9 01 30 38 c9 24 41 1f a8 3d c3 7b fe e5 31 5d fa 0b d0 Data Ascii: !xz"zdAgqDzK9n%p6 }=1%5$9S%dR=N1 }c\jpZ7+7)+rket?Q#kN6q?zeW5(_E^8Q1Ue` KT%`^08$A={1]
2024-11-28 15:57:05 UTC	9523	IN	Data Raw: e2 0c e0 9a 94 60 00 38 88 02 17 00 8c 01 63 c0 7a 7b ce a6 06 3d f7 0a 60 b7 ad 6a b8 5b 06 00 ec 0a 60 55 05 5e 00 30 06 8c 01 eb 25 8d 9a 30 45 24 02 f0 e6 9c 46 4b 56 00 00 60 ef e6 c5 8d 0b 98 1e 30 06 8c 01 47 af 41 af a9 00 2c 08 94 ea 0c 60 13 12 cc 00 d8 15 c0 6a df 84 bc 65 01 63 c0 18 30 06 1c dd 91 ae 00 d8 25 8b da d4 37 9e 01 b0 2f 80 15 15 78 07 c0 18 30 06 ac 98 34 2c 72 f4 90 0b c0 ab cb ec ba 14 10 c3 36 81 01 b0 77 17 fe c6 7f 05 00 63 c0 18 70 f0 64 21 9c e3 ea 0f dd 18 3d ce 0a 2a f7 b2 16 9b 65 bf 02 60 57 00 6b de 86 55 da 00 30 3d 60 00 1c d3 80 2d 3e 89 a4 fd d9 d2 c0 e1 3b 47 53 da fc 0f 80 83 6c b0 a5 0d 00 63 c0 00 38 a8 01 1b d4 a0 9f af dd 86 eb 1c 59 bd 69 f4 d9 71 de 00 b0 d6 0d 04 b7 e5 5b 00 8c 01 63 c0 c1 b3 c5 cb b5 db Data Ascii: `8cz{=`j[`U^0%0E$FKV`0GA,`jec0%7/x04,r6wcpd!=*e`WkU0=`->;GSlc8Yiq[c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.18	49725	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:19 UTC	693	OUT	GET /red-bull/id-38772/static/media/fb-gwrjjymgbpwlkscq.b1cfbf0dc49d882cc320.svg HTTP/1.1 Host: application-workspace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://application-workspace.com/red-bull/id-38772/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:19 UTC	600	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 05 Dec 2024 15:57:19 GMT content-type: image/svg+xml last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "9f0-6748645e-8399e3dbf3724f70;;;" accept-ranges: bytes content-length: 2544 date: Thu, 28 Nov 2024 15:57:19 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:57:19 UTC	768	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 30 31 22 20 68 65 69 67 68 74 3d 22 31 39 34 2e 35 34 35 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 31 38 37 37 66 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 33 2e 38 35 20 31 39 31 2e 30 36 32 48 32 36 2e 31 36 39 56 39 37 2e 31 32 38 48 2e 35 56 36 36 2e 35 34 35 68 32 35 2e 36 36 38 56 34 34 2e 37 38 33 43 32 36 2e 31 36 38 20 31 38 2e 39 39 35 20 33 37 2e 35 32 31 2e 35 20 37 35 2e 31 2e 35 63 37 2e 39 34 38 20 30 20 32 30 2e 34 32 36 20 31 2e 36 30 32 20 32 30 2e 34 32 36 20 31 2e 36 30 32 56 33 30 2e 35 48 38 32 2e 34 32 63 2d 31 33 2e 33 35 34 20 30 2d 31 38 2e 35 36 38 20 34 2e 30 36 32 2d 31 38 2e 35 36 38 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1001" height="194.545"><g fill="#1877f2"><path d="M63.85 191.062H26.169V97.128H.5V66.545h25.668V44.783C26.168 18.995 37.521.5 75.1.5c7.948 0 20.426 1.602 20.426 1.602V30.5H82.42c-13.354 0-18.568 4.062-18.568
2024-11-28 15:57:19 UTC	1776	IN	Data Raw: 35 20 38 2e 32 33 33 6c 2d 38 2e 36 39 20 32 36 2e 39 35 33 73 2d 31 30 2e 37 39 38 2d 35 2e 39 34 36 2d 32 34 2e 38 36 38 2d 35 2e 39 34 36 63 2d 31 38 2e 30 32 31 20 30 2d 32 39 2e 35 32 20 31 30 2e 34 34 37 2d 32 39 2e 35 32 20 32 38 2e 38 32 38 6c 2e 30 32 20 31 33 2e 31 38 63 30 20 31 37 2e 36 36 32 20 31 31 2e 30 39 35 20 32 39 2e 34 35 32 20 32 39 2e 35 33 37 20 32 39 2e 34 35 32 20 31 32 2e 38 31 38 20 30 20 32 34 2e 36 33 32 2d 36 2e 30 30 32 20 32 34 2e 36 33 32 2d 36 2e 30 30 32 6c 38 2e 36 36 38 20 32 36 2e 33 39 73 2d 39 2e 38 38 36 20 38 2e 32 38 35 2d 33 36 2e 33 30 33 20 38 2e 32 38 35 63 2d 36 31 2e 34 31 38 20 30 2d 36 33 2e 39 36 2d 34 34 2e 34 32 2d 36 33 2e 39 36 2d 36 34 2e 37 33 32 7a 4d 35 34 35 2e 36 39 32 20 36 34 2e 31 33 35 63 Data Ascii: 5 8.233l-8.69 26.953s-10.798-5.946-24.868-5.946c-18.021 0-29.52 10.447-29.52 28.828l.02 13.18c0 17.662 11.095 29.452 29.537 29.452 12.818 0 24.632-6.002 24.632-6.002l8.668 26.39s-9.886 8.285-36.303 8.285c-61.418 0-63.96-44.42-63.96-64.732zM545.692 64.135c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.18	49724	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:19 UTC	625	OUT	GET /api/set_status/null/login HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:19 UTC	221	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:19 GMT Content-Type: application/json Content-Length: 36 Connection: close access-control-allow-origin: * access-control-allow-credentials: true
2024-11-28 15:57:19 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 70 64 61 74 65 64 20 73 65 73 73 69 6f 6e 20 73 74 61 74 75 73 22 7d Data Ascii: {"message":"Updated session status"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.18	49728	45.84.207.234	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:21 UTC	424	OUT	GET /red-bull/id-38772/static/media/fb-gwrjjymgbpwlkscq.b1cfbf0dc49d882cc320.svg HTTP/1.1 Host: application-workspace.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:21 UTC	600	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 05 Dec 2024 15:57:21 GMT content-type: image/svg+xml last-modified: Thu, 28 Nov 2024 12:38:54 GMT etag: "9f0-6748645e-8399e3dbf3724f70;;;" accept-ranges: bytes content-length: 2544 date: Thu, 28 Nov 2024 15:57:21 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-28 15:57:21 UTC	768	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 30 31 22 20 68 65 69 67 68 74 3d 22 31 39 34 2e 35 34 35 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 31 38 37 37 66 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 33 2e 38 35 20 31 39 31 2e 30 36 32 48 32 36 2e 31 36 39 56 39 37 2e 31 32 38 48 2e 35 56 36 36 2e 35 34 35 68 32 35 2e 36 36 38 56 34 34 2e 37 38 33 43 32 36 2e 31 36 38 20 31 38 2e 39 39 35 20 33 37 2e 35 32 31 2e 35 20 37 35 2e 31 2e 35 63 37 2e 39 34 38 20 30 20 32 30 2e 34 32 36 20 31 2e 36 30 32 20 32 30 2e 34 32 36 20 31 2e 36 30 32 56 33 30 2e 35 48 38 32 2e 34 32 63 2d 31 33 2e 33 35 34 20 30 2d 31 38 2e 35 36 38 20 34 2e 30 36 32 2d 31 38 2e 35 36 38 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1001" height="194.545"><g fill="#1877f2"><path d="M63.85 191.062H26.169V97.128H.5V66.545h25.668V44.783C26.168 18.995 37.521.5 75.1.5c7.948 0 20.426 1.602 20.426 1.602V30.5H82.42c-13.354 0-18.568 4.062-18.568
2024-11-28 15:57:21 UTC	1776	IN	Data Raw: 35 20 38 2e 32 33 33 6c 2d 38 2e 36 39 20 32 36 2e 39 35 33 73 2d 31 30 2e 37 39 38 2d 35 2e 39 34 36 2d 32 34 2e 38 36 38 2d 35 2e 39 34 36 63 2d 31 38 2e 30 32 31 20 30 2d 32 39 2e 35 32 20 31 30 2e 34 34 37 2d 32 39 2e 35 32 20 32 38 2e 38 32 38 6c 2e 30 32 20 31 33 2e 31 38 63 30 20 31 37 2e 36 36 32 20 31 31 2e 30 39 35 20 32 39 2e 34 35 32 20 32 39 2e 35 33 37 20 32 39 2e 34 35 32 20 31 32 2e 38 31 38 20 30 20 32 34 2e 36 33 32 2d 36 2e 30 30 32 20 32 34 2e 36 33 32 2d 36 2e 30 30 32 6c 38 2e 36 36 38 20 32 36 2e 33 39 73 2d 39 2e 38 38 36 20 38 2e 32 38 35 2d 33 36 2e 33 30 33 20 38 2e 32 38 35 63 2d 36 31 2e 34 31 38 20 30 2d 36 33 2e 39 36 2d 34 34 2e 34 32 2d 36 33 2e 39 36 2d 36 34 2e 37 33 32 7a 4d 35 34 35 2e 36 39 32 20 36 34 2e 31 33 35 63 Data Ascii: 5 8.233l-8.69 26.953s-10.798-5.946-24.868-5.946c-18.021 0-29.52 10.447-29.52 28.828l.02 13.18c0 17.662 11.095 29.452 29.537 29.452 12.818 0 24.632-6.002 24.632-6.002l8.668 26.39s-9.886 8.285-36.303 8.285c-61.418 0-63.96-44.42-63.96-64.732zM545.692 64.135c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.18	49729	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:21 UTC	625	OUT	GET /api/set_status/null/login HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://application-workspace.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://application-workspace.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:22 UTC	221	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:22 GMT Content-Type: application/json Content-Length: 36 Connection: close access-control-allow-origin: * access-control-allow-credentials: true
2024-11-28 15:57:22 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 70 64 61 74 65 64 20 73 65 73 73 69 6f 6e 20 73 74 61 74 75 73 22 7d Data Ascii: {"message":"Updated session status"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.18	49730	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:21 UTC	371	OUT	GET /api/set_status/null/login HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:22 UTC	149	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:22 GMT Content-Type: application/json Content-Length: 36 Connection: close
2024-11-28 15:57:22 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 70 64 61 74 65 64 20 73 65 73 73 69 6f 6e 20 73 74 61 74 75 73 22 7d Data Ascii: {"message":"Updated session status"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.18	49731	20.190.147.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-28 15:57:23 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-28 15:57:24 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 28 Nov 2024 15:56:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_BAY x-ms-request-id: a41a483d-6d63-4d2e-9147-bcc00cc27b97 PPServer: PPV: 30 H: PH1PEPF0001B81D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 28 Nov 2024 15:57:23 GMT Connection: close Content-Length: 11390
2024-11-28 15:57:24 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.18	49732	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:24 UTC	371	OUT	GET /api/set_status/null/login HTTP/1.1 Host: glass.anotherlevel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-28 15:57:25 UTC	149	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:25 GMT Content-Type: application/json Content-Length: 36 Connection: close
2024-11-28 15:57:25 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 70 64 61 74 65 64 20 73 65 73 73 69 6f 6e 20 73 74 61 74 75 73 22 7d Data Ascii: {"message":"Updated session status"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.18	49733	20.190.147.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:26 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-28 15:57:26 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-28 15:57:26 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 28 Nov 2024 15:56:26 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_BL2 x-ms-request-id: 471661e0-a05d-4bfb-b22b-70255c03c4b6 PPServer: PPV: 30 H: BL02EPF0001DA11 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 28 Nov 2024 15:57:26 GMT Connection: close Content-Length: 11410
2024-11-28 15:57:26 UTC	11410	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.18	49734	20.190.147.2	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:28 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4828 Host: login.live.com
2024-11-28 15:57:28 UTC	4828	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-28 15:57:29 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 28 Nov 2024 15:56:29 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_BAY x-ms-request-id: 131cd8d3-64fa-4826-92d6-04669dffde42 PPServer: PPV: 30 H: PH1PEPF00011EEE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 28 Nov 2024 15:57:28 GMT Connection: close Content-Length: 11197
2024-11-28 15:57:29 UTC	11197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.18	49735	2.16.158.186	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:31 UTC	2740	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -300 X-DeviceID: 01000A410900B03D X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Search-TimeZone: Bias=300; StandardBias=0; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAZwOVtqboW3UV%2B%2B3EWZ5H%2BBsWTfOl9ptuazhKquSDJR/u0EfbW7l5uF21219U9BLbhBasc9fcz4eciyXv0jFKxj/Pg0Q/6XlpBPZoS0b41mEe9CjPl2zlQ2sGKIYjYUh6guva6BTjsLG3GtKw1PWlM26V7G0KE3kOfPmW95Fzlk3QZPyByI4pVjoDudiMDCcyLxzRFgw1sgPX5hUegnNOAydPqaQCP0RQUDUYXkbOnb/5eM3QT2AHgDe0PNK1VlNDP1sUploChygggYvzCrxeiduorJUuNuesQR/X36Q/VmqlVkbhc5c3MIpkjUTvXufeOxkjs4BrsRZodj7uKd8jLIQZgAAEKTg3DYjn%2BNLejjVetsHPLywATWAvda227v6qfzRUIpChibMIE10d7%2B6X36M8cxrzHEzZyWqAR89/CoTa1V17LoVsroh6CEw8gCUhsiDC5LqorJsYOUTzTishODexuYo9Ye0p4X0mMOO0QWkhmL4E1TZ69wo7tVsD/3C/yEJG3w6Oel4VQ8VLhiAagsySs9583q4lDp4FLktHf%2BN/gHwHwUcMgtnO1/QLRHdvy3rqxqf6cjIQG5XI4VMg7mFgt58mpMGJCRv3YzRgfRS216s5GpZJbcwUEeuKibKOkje9ES%2BHvyNkbMqkRyJzs2hY4tTyskCPQAtXXts5cnZxrIDN9oOlTIHAqkCp%2BGnCnMsmk4VlF8ziZnYCaB3YBi6S3rlMpk3URP0WKRzLDAR5RVXIXSnMmK45ncmp/BGXfSI3bYsodpJY3rcXsIb1od63eL1/lv/yEsk/r6U8jezfSiE1kxppjIsR/Duhg1gxO/LpzhyM43SHTOvcwjP27iAgopL6pJfCLxmUgs/FJjUWpKGJEu9ElUEbrP0IFtcn8KLJAmvhP5hRUNVSNcZSoEodnpucs6WHg%2BIL5Z9liZm3IW [TRUNCATED] X-Agent-DeviceId: 01000A410900B03D X-BM-CBT: 1732809440 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 2A41FEDBA7BD4ECD9C7A9FF72E667640 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=B4BB39E5F80E411D94C438C0FA7ACF94&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; ANON=A=680C1B1A649CBD64DD40EBFCFFFFFFFF; MUID=BC76BB0020D345C1A049A4820CB4C03C; MUIDB=BC76BB0020D345C1A049A4820CB4C03C
2024-11-28 15:57:32 UTC	1196	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 674892ec52114458a0ac6d869515522f X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Thu, 28 Nov 2024 15:57:32 GMT Connection: close Set-Cookie: _EDGE_S=SID=0FE74446BD53616602915103BC2260C1&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=en&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; domain=.bing.com; expires=Tue, 23-Dec-2025 15:57:32 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=0FE74446BD53616602915103BC2260C1; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.469e1002.1732809451.4d7011b
2024-11-28 15:57:32 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.18	49736	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:37 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sB96RGH55E49Bhc&MD=5RDat88A HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-28 15:57:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4ee525b5-30c2-44df-ace5-8d1e264f5230 MS-RequestId: 5c3f3a54-974c-4e79-8b40-22919660434a MS-CV: NmoIQVqNPUmX2gTc.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Nov 2024 15:57:37 GMT Connection: close Content-Length: 30005
2024-11-28 15:57:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-28 15:57:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.18	49737	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:38 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: ENOIrqUcT4ImasnNHsNTTw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:57:40 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:39 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:57:40 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.18	49738	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:44 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: okUJgZyktkVD2tQbjX/SIA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:57:45 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:45 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:57:45 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.18	49741	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:49 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: do+TEbV/crvPonXb5cp3Gg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:57:50 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:50 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:57:50 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.18	49743	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:57:55 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 0pa7k1X44G12eTDAmD0Pfw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:57:56 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:57:56 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:57:56 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.18	49744	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:00 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: bpu51g1+/VqHpVh8IzmnxQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:01 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:01 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:01 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.18	49745	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:06 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: B7jIaifnuaqVKd8/J/EYKA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:07 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:06 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:07 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.18	49746	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:11 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: zcSDeVHImHw9ZzA7PBxNSQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:12 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:12 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:12 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.18	49748	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:17 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: D5GZAmpq/A61rByH7PmPlw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:19 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:18 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:19 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.18	49749	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:23 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: yZETYMsQsBCZdj2sPJgRDg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:25 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:25 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:25 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.18	49750	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:29 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 2vNExZctw4HXPAjFPEk5rQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:30 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:30 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:30 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.18	49751	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:35 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: SzIo79HVR31KhB55UVfhzw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:36 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:36 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:36 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.18	49752	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:40 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: G1GWNRJN8FhymG0nCg8vuQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:41 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:41 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:41 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.18	49753	146.70.81.214	443	6880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-28 15:58:47 UTC	518	OUT	GET /stealth HTTP/1.1 Host: glass.anotherlevel.app Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://application-workspace.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: blrEkZ4lPpIIQjUuFRpJmw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-28 15:58:48 UTC	178	IN	HTTP/1.1 426 Upgrade Required Server: nginx/1.22.1 Date: Thu, 28 Nov 2024 15:58:48 GMT Content-Type: text/plain Content-Length: 153 Connection: close Upgrade: websocket
2024-11-28 15:58:48 UTC	153	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 65 6d 70 74 79 20 55 70 67 72 61 64 65 20 68 65 61 64 65 72 2e 0a 0a 59 6f 75 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 61 20 57 65 62 53 6f 63 6b 65 74 20 73 65 72 76 65 72 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 61 20 62 72 6f 77 73 65 72 2e 20 59 6f 75 20 6e 65 65 64 20 61 20 57 65 62 53 6f 63 6b 65 74 20 63 6c 69 65 6e 74 2e 0a Data Ascii: Failed to open a WebSocket connection: empty Upgrade header.You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Target ID:	0
Start time:	10:56:40
Start date:	28/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:56:42
Start date:	28/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2008,i,57205653329076894,6228817083967904067,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:56:43
Start date:	28/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://application-workspace.com/red-bull/id-38772"
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://application-workspace.com/red-bull/id-38772/	Joe Sandbox AI: Score: 8 Reasons: The brand 'Red Bull' is well-known and typically associated with the domain 'redbull.com'., The URL 'application-workspace.com' does not match the legitimate domain for Red Bull., The domain 'application-workspace.com' is generic and does not have any direct association with Red Bull., The presence of a generic domain name with no clear link to the brand is a common phishing tactic., The URL does not contain any direct reference to 'Red Bull', which is suspicious given the brand association. DOM: 0.2.pages.csv
Source: https://application-workspace.com/red-bull/id-38772/login	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The URL 'application-workspace.com' does not match the legitimate domain 'facebook.com'., The URL contains no direct reference to 'Facebook', which is suspicious given the brand association., The presence of input fields for 'Email address or phone number' and 'Password' is typical for phishing sites attempting to capture login credentials., The domain 'application-workspace.com' is generic and not directly related to Facebook, increasing the likelihood of phishing. DOM: 1.3.pages.csv

Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: Number of links: 0
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: Number of links: 0

Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: Title: Red Bull \| Careers does not match URL
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: Title: Red Bull \| Careers does not match URL

Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: Invalid link: Privacy Policy
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: Invalid link: Terms
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: Invalid link: Help

Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: No favicon
Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: No favicon

Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: No <meta name="author".. found
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: No <meta name="author".. found

Source: https://application-workspace.com/red-bull/id-38772/	HTTP Parser: No <meta name="copyright".. found
Source: https://application-workspace.com/red-bull/id-38772/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.2

Source: global traffic	DNS traffic detected: DNS query: application-workspace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: glass.anotherlevel.app
Source: global traffic	DNS traffic detected: DNS query: loop.anotherlevel.app

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://application-workspace.com/red-bull/id-38772

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
https://application-workspace.com/red-bull/id-38772