Edit tour

Windows Analysis Report
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

Overview

General Information

Sample URL:	http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Analysis ID:	1566292
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,6762363285886669449,4656860550256876991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET MALWARE Known Sinkhole Response Kryptos Logic

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:21.589603+0100	2031515	3	Misc activity	104.16.167.228	443	192.168.2.4	49740	TCP
2024-12-01T23:22:33.876936+0100	2031515	3	Misc activity	104.16.167.228	443	192.168.2.4	49752	TCP
2024-12-01T23:22:36.025397+0100	2031515	3	Misc activity	104.16.167.228	443	192.168.2.4	49754	TCP

ET MALWARE Possible WannaCry DNS Lookup 1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:19.207544+0100	2024291	1	A Network Trojan was detected	192.168.2.4	62224	1.1.1.1	53	UDP
2024-12-01T23:22:19.207687+0100	2024291	1	A Network Trojan was detected	192.168.2.4	60891	1.1.1.1	53	UDP
2024-12-01T23:22:19.447416+0100	2024291	1	A Network Trojan was detected	192.168.2.4	51960	1.1.1.1	53	UDP
2024-12-01T23:22:19.447540+0100	2024291	1	A Network Trojan was detected	192.168.2.4	57626	1.1.1.1	53	UDP
2024-12-01T23:22:33.881438+0100	2024291	1	A Network Trojan was detected	192.168.2.4	52991	1.1.1.1	53	UDP
2024-12-01T23:22:33.881615+0100	2024291	1	A Network Trojan was detected	192.168.2.4	59235	1.1.1.1	53	UDP

ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:21.589383+0100	2024298	1	A Network Trojan was detected	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024298	1	A Network Trojan was detected	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024298	1	A Network Trojan was detected	192.168.2.4	49754	104.16.167.228	443	TCP

ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:21.589383+0100	2024299	1	A Network Trojan was detected	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024299	1	A Network Trojan was detected	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024299	1	A Network Trojan was detected	192.168.2.4	49754	104.16.167.228	443	TCP

ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:21.589383+0100	2024301	1	A Network Trojan was detected	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024301	1	A Network Trojan was detected	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024301	1	A Network Trojan was detected	192.168.2.4	49754	104.16.167.228	443	TCP

ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T23:22:21.589383+0100	2024302	1	A Network Trojan was detected	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024302	1	A Network Trojan was detected	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024302	1	A Network Trojan was detected	192.168.2.4	49754	104.16.167.228	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49757 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2024298 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 : 192.168.2.4:49754 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024299 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2 : 192.168.2.4:49754 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024298 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 : 192.168.2.4:49740 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024298 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 : 192.168.2.4:49752 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024301 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4 : 192.168.2.4:49754 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024299 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2 : 192.168.2.4:49740 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024302 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5 : 192.168.2.4:49754 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024299 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2 : 192.168.2.4:49752 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024301 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4 : 192.168.2.4:49740 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024301 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4 : 192.168.2.4:49752 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024302 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5 : 192.168.2.4:49752 -> 104.16.167.228:443
Source: Network traffic	Suricata IDS: 2024302 - Severity 1 - ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5 : 192.168.2.4:49740 -> 104.16.167.228:443

Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:51960 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:60891 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:52991 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:59235 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:62224 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2024291 - Severity 1 - ET MALWARE Possible WannaCry DNS Lookup 1 : 192.168.2.4:57626 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2031515 - Severity 3 - ET MALWARE Known Sinkhole Response Kryptos Logic : 104.16.167.228:443 -> 192.168.2.4:49754
Source: Network traffic	Suricata IDS: 2031515 - Severity 3 - ET MALWARE Known Sinkhole Response Kryptos Logic : 104.16.167.228:443 -> 192.168.2.4:49752
Source: Network traffic	Suricata IDS: 2031515 - Severity 3 - ET MALWARE Known Sinkhole Response Kryptos Logic : 104.16.167.228:443 -> 192.168.2.4:49740

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: static.kryptoslogicsinkhole.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/20230110081707cs_/https://fonts.googleapis.com/css?family=Montserrat\|Open+Sans HTTP/1.1Host: web.archive.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://static.kryptoslogicsinkhole.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8+DVPesTKOsNKfz&MD=cz5CL4Na HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans HTTP/1.1Host: web.archive.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://static.kryptoslogicsinkhole.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1Host: web.archive.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+SansAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/20230110074513im_/https://fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1Host: web.archive.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+SansAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8+DVPesTKOsNKfz&MD=cz5CL4Na HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Source: global traffic	DNS traffic detected: DNS query: static.kryptoslogicsinkhole.com
Source: global traffic	DNS traffic detected: DNS query: web.archive.org

Source: chromecache_43.1.dr	String found in binary or memory: https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6
Source: chromecache_43.1.dr	String found in binary or memory: https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/opensans/v34/memSYaGs126Mi
Source: chromecache_45.1.dr, chromecache_42.1.dr, chromecache_46.1.dr	String found in binary or memory: https://www.kryptoslogic.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@17/9@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,6762363285886669449,4656860550256876991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,6762363285886669449,4656860550256876991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://www.kryptoslogic.com	0%	Avira URL Cloud	safe
https://static.kryptoslogicsinkhole.com/style.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.166.228	true	false	high
www.google.com	172.217.21.36	true	false	high
static.kryptoslogicsinkhole.com	172.67.205.251	true	false	unknown
web.archive.org	207.241.237.3	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/	false		high
https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/favicon.ico	false		high
https://static.kryptoslogicsinkhole.com/style.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.kryptoslogic.com	chromecache_45.1.dr, chromecache_42.1.dr, chromecache_46.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.205.251	static.kryptoslogicsinkhole.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.16.167.228	unknown	United States	13335	CLOUDFLARENETUS	true
207.241.237.3	web.archive.org	United States	7941	INTERNET-ARCHIVEUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1566292
Start date and time:	2024-12-01 23:21:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@17/9@12/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 199.232.210.172, 192.229.221.95, 172.217.17.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false, "random_domain": true }
URL: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
URL: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "SINKHOLED!", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/ Model: Joe Sandbox AI	{ "brands": [ "Kryptos Logic" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (607), with no line terminators
Category:	downloaded
Size (bytes):	607
Entropy (8bit):	4.889496806372663
Encrypted:	false
SSDEEP:	12:heYKIy7ZCL149rP/PKbIAK4zQoL6pDKSa:heYdCZCL2HCbzQo2hDa
MD5:	D9FDB2D2F2440AC3C3A0786A83E6B69A
SHA1:	7D7735147B217ACAA670F7FF6262B70AB7F4ECEA
SHA-256:	5B17494A74770D5ABE918C36E8DFC10A4FF0F46451CDBE19D779D19BAF8E6385
SHA-512:	6A82E4FEF26C69CFB44205200C42A0994D612C21AD133E0A36DA4D10E9D949B648060E178F812EA5DABBBC800EEC1404C6C70A8BCAB86A82CB4EE6E4D9069ED6
Malicious:	false
Reputation:	low
URL:	https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
Preview:	<!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5647
Entropy (8bit):	5.663009694487291
Encrypted:	false
SSDEEP:	96:AOOL1wOOLU8FZOhOOLaOOL3odOOLDNpOEMbJJOEMbXDFZ8OEMbGkOEMbUOEMb8UR:q1aAho3KGNAhyBFARmZQGj0vG
MD5:	E4F3689A5392C058BFF6E623FFA2157C
SHA1:	D0BD8E2E1392F0D0397BCA6557938EE1469C65E2
SHA-256:	E9CA11CBDEAC34681568ABD6797E7F017FBAA193E04065E927C46F26B1423B14
SHA-512:	F0BF326E91F47399BB8687A6942BD6A1C0099797D15DFDFF456BE5140E9580F3EBFA1E36133DA843FC2724F7B4476770D864686DC2ED65B8CDFC00D443448EBF
Malicious:	false
Reputation:	low
URL:	https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2) format('woff2');. unicode-range: U

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11916), with no line terminators
Category:	downloaded
Size (bytes):	11916
Entropy (8bit):	5.059507964246869
Encrypted:	false
SSDEEP:	192:AYFfnlEkQznWBkQvzxcnsaOlVg8lsegwtN9n+u:hxlEkQokQvzzZ+u
MD5:	022514DC4E2464B24CCEFFB7C58007BA
SHA1:	F0ADA4F1681137B0C032E0A5F019C1D96E9D18BD
SHA-256:	D9EC1DDE3901F824532FEF2E2CAFBC4DD04BBC6074CDFEB77BD25F925637341C
SHA-512:	3F14585151DA56243B979D7DB2FD8C2F8E1C83DAE1FD1CF6BE3EDCCC4CB4EF47BE24CB863FE6DB8498EE9476AEF9164FCC1861DDE1AFFFD9892052057A40F3A7
Malicious:	false
Reputation:	low
URL:	https://static.kryptoslogicsinkhole.com/style.css
Preview:	@charset "UTF-8";@import url("https://web.archive.org/web/20230110081707cs_/https://fonts.googleapis.com/css?family=Montserrat\|Open+Sans");html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline;}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section,main{display:block;}body{line-height:1;}ol,ul{list-style:none;}blockquote,q{quotes:none;}blockquote:before,blockquote:after,q:before,q:after{content:'';content:none;}table{border-collapse:collapse;border-spacing:0;}html{font-size:62.5%;}body{background:#1F222E;font-family:"Open Sans","Helve

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (607), with no line terminators
Category:	downloaded
Size (bytes):	607
Entropy (8bit):	4.889496806372663
Encrypted:	false
SSDEEP:	12:heYKIy7ZCL149rP/PKbIAK4zQoL6pDKSa:heYdCZCL2HCbzQo2hDa
MD5:	D9FDB2D2F2440AC3C3A0786A83E6B69A
SHA1:	7D7735147B217ACAA670F7FF6262B70AB7F4ECEA
SHA-256:	5B17494A74770D5ABE918C36E8DFC10A4FF0F46451CDBE19D779D19BAF8E6385
SHA-512:	6A82E4FEF26C69CFB44205200C42A0994D612C21AD133E0A36DA4D10E9D949B648060E178F812EA5DABBBC800EEC1404C6C70A8BCAB86A82CB4EE6E4D9069ED6
Malicious:	false
Reputation:	low
URL:	https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/favicon.ico
Preview:	<!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (607), with no line terminators
Category:	dropped
Size (bytes):	607
Entropy (8bit):	4.889496806372663
Encrypted:	false
SSDEEP:	12:heYKIy7ZCL149rP/PKbIAK4zQoL6pDKSa:heYdCZCL2HCbzQo2hDa
MD5:	D9FDB2D2F2440AC3C3A0786A83E6B69A
SHA1:	7D7735147B217ACAA670F7FF6262B70AB7F4ECEA
SHA-256:	5B17494A74770D5ABE918C36E8DFC10A4FF0F46451CDBE19D779D19BAF8E6385
SHA-512:	6A82E4FEF26C69CFB44205200C42A0994D612C21AD133E0A36DA4D10E9D949B648060E178F812EA5DABBBC800EEC1404C6C70A8BCAB86A82CB4EE6E4D9069ED6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-01T23:22:19.207544+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	62224	1.1.1.1	53	UDP
2024-12-01T23:22:19.207687+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	60891	1.1.1.1	53	UDP
2024-12-01T23:22:19.447416+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	51960	1.1.1.1	53	UDP
2024-12-01T23:22:19.447540+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	57626	1.1.1.1	53	UDP
2024-12-01T23:22:21.589383+0100	2024298	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	1	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:21.589383+0100	2024299	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2	1	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:21.589383+0100	2024301	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4	1	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:21.589383+0100	2024302	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5	1	192.168.2.4	49740	104.16.167.228	443	TCP
2024-12-01T23:22:21.589603+0100	2031515	ET MALWARE Known Sinkhole Response Kryptos Logic	3	104.16.167.228	443	192.168.2.4	49740	TCP
2024-12-01T23:22:33.876660+0100	2024298	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	1	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024299	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2	1	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024301	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4	1	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:33.876660+0100	2024302	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5	1	192.168.2.4	49752	104.16.167.228	443	TCP
2024-12-01T23:22:33.876936+0100	2031515	ET MALWARE Known Sinkhole Response Kryptos Logic	3	104.16.167.228	443	192.168.2.4	49752	TCP
2024-12-01T23:22:33.881438+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	52991	1.1.1.1	53	UDP
2024-12-01T23:22:33.881615+0100	2024291	ET MALWARE Possible WannaCry DNS Lookup 1	1	192.168.2.4	59235	1.1.1.1	53	UDP
2024-12-01T23:22:36.025168+0100	2024298	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	1	192.168.2.4	49754	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024299	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 2	1	192.168.2.4	49754	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024301	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 4	1	192.168.2.4	49754	104.16.167.228	443	TCP
2024-12-01T23:22:36.025168+0100	2024302	ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 5	1	192.168.2.4	49754	104.16.167.228	443	TCP
2024-12-01T23:22:36.025397+0100	2031515	ET MALWARE Known Sinkhole Response Kryptos Logic	3	104.16.167.228	443	192.168.2.4	49754	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 23:22:13.844840050 CET	49675	443	192.168.2.4	173.222.162.32
Dec 1, 2024 23:22:18.142932892 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:18.142968893 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:18.143044949 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:18.143239021 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:18.143251896 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:18.628808022 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:18.628845930 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:18.628922939 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:18.630459070 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:18.630472898 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:19.592591047 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:19.592638969 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:19.592694998 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:19.592962980 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:19.592976093 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:19.941378117 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:19.944468975 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:19.944494963 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:19.946058989 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:19.946119070 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:19.951894045 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:19.951982021 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:20.002434015 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:20.002444983 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:20.049494028 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:20.060633898 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.060700893 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.066296101 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.066308022 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.066576004 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.112061024 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.157094002 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.203337908 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.573028088 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.573092937 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.573138952 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.573252916 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.573272943 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.573282003 CET	49739	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.573287010 CET	443	49739	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.617477894 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.617517948 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:20.617588997 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.617909908 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:20.617923975 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:21.238522053 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.238799095 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.238826990 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.239777088 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.239835978 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.244121075 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.244177103 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.244301081 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.244307041 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.295154095 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.589395046 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.589478016 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.589682102 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.590452909 CET	49740	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:21.590471983 CET	443	49740	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:21.909029007 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:21.909076929 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:21.909173012 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:21.909468889 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:21.909482002 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:22.040678024 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.040779114 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.042018890 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.042026043 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.042251110 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.043229103 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.083340883 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.566935062 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.567014933 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.567075014 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.567992926 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.568011999 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:22.568042994 CET	49741	443	192.168.2.4	23.218.208.109
Dec 1, 2024 23:22:22.568048954 CET	443	49741	23.218.208.109	192.168.2.4
Dec 1, 2024 23:22:23.124445915 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:23.124738932 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.124763966 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:23.125777960 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:23.125850916 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.126810074 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.126847982 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.126900911 CET	443	49742	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:23.126929998 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.126959085 CET	49742	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.127296925 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.127336025 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:23.127399921 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.127608061 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:23.127619982 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.345284939 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.345505953 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.345534086 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.346563101 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.346630096 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.347611904 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.347672939 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.347903967 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.347909927 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.401492119 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.808057070 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808120012 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808181047 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.808198929 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808522940 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808559895 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808579922 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.808585882 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.808626890 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.809268951 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.816410065 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.816482067 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.816487074 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.824661016 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.824718952 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.824738026 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.824774981 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.825125933 CET	49743	443	192.168.2.4	172.67.205.251
Dec 1, 2024 23:22:24.825139999 CET	443	49743	172.67.205.251	192.168.2.4
Dec 1, 2024 23:22:24.993693113 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:24.993741035 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:24.993817091 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:24.994096994 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:24.994107008 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:26.980882883 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:26.980921030 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:26.981115103 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:26.982180119 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:26.982193947 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:28.597323895 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:28.597410917 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:28.601011992 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:28.601025105 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:28.601319075 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:28.642112017 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:29.397841930 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.398130894 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.398147106 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.399132013 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.399231911 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.400288105 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.400336981 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.400544882 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.400552034 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.451875925 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.611277103 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:29.611470938 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:29.611552000 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:29.902647972 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.902717113 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.903116941 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.903131008 CET	443	49744	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.903141022 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.903175116 CET	49744	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.904587030 CET	49738	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:22:29.904613972 CET	443	49738	172.217.21.36	192.168.2.4
Dec 1, 2024 23:22:29.904911995 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.904951096 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:29.905036926 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.905252934 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:29.905267954 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:30.138050079 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:30.183340073 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674045086 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674076080 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674082994 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674093962 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674122095 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674206972 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:30.674233913 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.674243927 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:30.674278021 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:30.695005894 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.695087910 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:30.695095062 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.695106030 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:30.695149899 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:31.274466038 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.274754047 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.274771929 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.275264025 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.275573015 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.275667906 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.275700092 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.322005987 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.322014093 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799159050 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799215078 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799263954 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799269915 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.799297094 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799319029 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.799345970 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.799351931 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799478054 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.799531937 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.800858974 CET	49747	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.800868034 CET	443	49747	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.871037960 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.871077061 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.871155024 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.871412039 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.871439934 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.871516943 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.871834993 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:31.871855021 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:31.871916056 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:31.872065067 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.872078896 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.872178078 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:31.872193098 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:31.872366905 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:31.872380018 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:31.988842964 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:31.988881111 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:31.988902092 CET	49745	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:22:31.988908052 CET	443	49745	20.12.23.50	192.168.2.4
Dec 1, 2024 23:22:33.266258001 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.266693115 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.266705990 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.267771959 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.267854929 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.268193007 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.268249035 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.268378019 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.268385887 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.313461065 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.513843060 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.514235020 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:33.514251947 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.514565945 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.514854908 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:33.514914989 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.514975071 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:33.559330940 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.774732113 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.774799109 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.774846077 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.775182962 CET	49751	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:33.775193930 CET	443	49751	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:33.876709938 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.876791000 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:33.876840115 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:33.877648115 CET	49752	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:33.877659082 CET	443	49752	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:34.023017883 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:34.023036003 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:34.023112059 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:34.023273945 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:34.023287058 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.679152966 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.679490089 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:35.679507017 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.680557013 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.680618048 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:35.681005001 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:35.681102991 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.681196928 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:35.681204081 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:35.722172976 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:36.025185108 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:36.025274038 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:36.025327921 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:36.026174068 CET	49754	443	192.168.2.4	104.16.167.228
Dec 1, 2024 23:22:36.026187897 CET	443	49754	104.16.167.228	192.168.2.4
Dec 1, 2024 23:22:36.265239954 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.265546083 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.265583992 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.266556025 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.266616106 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.266968966 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.267025948 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.267088890 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.267095089 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.315824032 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.775222063 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.775414944 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.775470972 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.775891066 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.775907993 CET	443	49750	207.241.237.3	192.168.2.4
Dec 1, 2024 23:22:36.775917053 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:22:36.775954962 CET	49750	443	192.168.2.4	207.241.237.3
Dec 1, 2024 23:23:08.582710981 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:08.582751989 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:08.582814932 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:08.583201885 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:08.583221912 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:09.517205000 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:09.517236948 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:09.517326117 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:09.517698050 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:09.517709017 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:10.148438931 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.148633003 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.152570963 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.152579069 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.153003931 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.161509037 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.207338095 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.784532070 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.784591913 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.784632921 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.784652948 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.784668922 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.784722090 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822297096 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822355032 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822384119 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822392941 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822422981 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822525978 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822571039 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822591066 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822599888 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822606087 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:10.822614908 CET	49756	443	192.168.2.4	20.12.23.50
Dec 1, 2024 23:23:10.822618961 CET	443	49756	20.12.23.50	192.168.2.4
Dec 1, 2024 23:23:11.399020910 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.399091959 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:11.400971889 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:11.400979996 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.401175022 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.410041094 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:11.451330900 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.901360035 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.901382923 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.901396990 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.901485920 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:11.901503086 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:11.901554108 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.094331026 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.094351053 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.094418049 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.094439030 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.094753981 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.137520075 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.137537956 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.137619972 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.137626886 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.137747049 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.282433987 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.282449007 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.282520056 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.282525063 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.283565998 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.314619064 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.314635992 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.317703009 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.317709923 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.317749977 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.335557938 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.335572958 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.335665941 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.335671902 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.339569092 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.353674889 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.353689909 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.353745937 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.353750944 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.353842020 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.488049030 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.488065958 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.488125086 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.488131046 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.488287926 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.504287004 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.504307985 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.504363060 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.504368067 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.504441023 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.518270969 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.518287897 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.518352985 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.518358946 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.518451929 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.534409046 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.534429073 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.534476995 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.534480095 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.534564972 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.550591946 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.550606012 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.550766945 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.550780058 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.550913095 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.565731049 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.565747976 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.565799952 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.565807104 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.565880060 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.570445061 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.570499897 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.570503950 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.570568085 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.570580006 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.570590973 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.570595980 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.570616961 CET	49757	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.570620060 CET	443	49757	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.620132923 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.620197058 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.620268106 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.620332956 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.620348930 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.620405912 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.620971918 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621032000 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621121883 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621145964 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621155977 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621197939 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621311903 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621329069 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621414900 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621424913 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621501923 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621511936 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621566057 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621573925 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621596098 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621609926 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:12.621618032 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621723890 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:12.621737003 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.336273909 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.336431980 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.336982965 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.336996078 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.337009907 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.337013006 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.337517023 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.337522030 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.337713957 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.337718964 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.409215927 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.409615993 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.409642935 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.410177946 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.410182953 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.466749907 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.467144966 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.467159033 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.467583895 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.467588902 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.468355894 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.468646049 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.468667030 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.469067097 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.469072104 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.771872044 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.771934032 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.772185087 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.772212029 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.772223949 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.772241116 CET	49761	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.772245884 CET	443	49761	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.774928093 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.774956942 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.775018930 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.775151014 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.775165081 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776200056 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776225090 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776376963 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.776396990 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776464939 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.776464939 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.776479006 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776588917 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.776612997 CET	443	49762	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.777580023 CET	49762	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.778352976 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.778374910 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.778462887 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.778595924 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.778605938 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.853260994 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.853431940 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.853492022 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.853521109 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.853534937 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.853544950 CET	49758	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.853549004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.855581045 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.855600119 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.855674982 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.855806112 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.855820894 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.940738916 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.940757990 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.940793037 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.940821886 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.940850973 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.941030025 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.941030025 CET	49759	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.941041946 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.941050053 CET	443	49759	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.942923069 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.942936897 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.943001032 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.943146944 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.943157911 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.944540977 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.944560051 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.944602966 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.944612026 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.944648027 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.944757938 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.944757938 CET	49760	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.944771051 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.944780111 CET	443	49760	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.946460009 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.946491003 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:14.946563959 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.946679115 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:14.946690083 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.497951031 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.498600960 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.498614073 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.499068975 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.499072075 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.563355923 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.563692093 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.563704014 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.564033985 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.564038038 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.579273939 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.579605103 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.579627037 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.579962969 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.579967022 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.865164995 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.865639925 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.865658998 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.866125107 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.866128922 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.932862043 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.932909012 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.933079958 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.933243036 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.933255911 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.933267117 CET	49765	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.933270931 CET	443	49765	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.935709953 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.935724974 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:16.935801029 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.935954094 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:16.935961008 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.007198095 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.007237911 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.007277012 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.007411003 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.007427931 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.007437944 CET	49764	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.007442951 CET	443	49764	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.009999037 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.010019064 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.010092974 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.010196924 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.010206938 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.014434099 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.014578104 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.014643908 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.014669895 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.014678955 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.014702082 CET	49766	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.014704943 CET	443	49766	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.021461964 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.021471024 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.021547079 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.021671057 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.021680117 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.310025930 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.310075045 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.310123920 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.310409069 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.310417891 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.310437918 CET	49768	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.310442924 CET	443	49768	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.317069054 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.317106009 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:17.317171097 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.317352057 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:17.317368031 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.064177990 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:18.064207077 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:18.064292908 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:18.064579964 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:18.064591885 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:18.743801117 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.744343996 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.744354963 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.744808912 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.744813919 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.792211056 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.792618990 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.792633057 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.793062925 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.793068886 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.793204069 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.793457031 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.793462992 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:18.793808937 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:18.793812037 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.095562935 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.095899105 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.095921040 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.096278906 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.096288919 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.177791119 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.177944899 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.178004980 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.178097010 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.178103924 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.178113937 CET	49771	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.178117990 CET	443	49771	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.181025982 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.181056023 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.181134939 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.181282043 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.181296110 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.237508059 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.237564087 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.237610102 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.237757921 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.237767935 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.237778902 CET	49770	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.237782955 CET	443	49770	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.239833117 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.239856005 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.239923954 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.240051985 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.240063906 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.246325016 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.246372938 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.246416092 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.246527910 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.246527910 CET	49769	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.246532917 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.246539116 CET	443	49769	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.248325109 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.248336077 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.248415947 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.248532057 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.248541117 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.407744884 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.408220053 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.408240080 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.408667088 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.408672094 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.563936949 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.563981056 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.564028978 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.564207077 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.564222097 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.564229965 CET	49772	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.564234972 CET	443	49772	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.566836119 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.566853046 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.566931963 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.567087889 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.567097902 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.801641941 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:19.801949978 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:19.801969051 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:19.802277088 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:19.802714109 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:19.802769899 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:19.844070911 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:19.846364975 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.846410990 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.846455097 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.846637964 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.846648932 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.846657991 CET	49767	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.846662998 CET	443	49767	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.849411011 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.849425077 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:19.849504948 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.849667072 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:19.849679947 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:20.965908051 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:20.966579914 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:20.966607094 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:20.967063904 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:20.967068911 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.023756981 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.024095058 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.024112940 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.024430037 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.024435043 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.027028084 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.027256012 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.027266026 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.027532101 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.027537107 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.351176977 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.351773024 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.351793051 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.352242947 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.352247000 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.409543991 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.409677982 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.409789085 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.409815073 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.409832001 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.409840107 CET	49774	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.409843922 CET	443	49774	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.412661076 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.412678003 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.412756920 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.412897110 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.412908077 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.468301058 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.468368053 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.468489885 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.468513012 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.468528986 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.468542099 CET	49775	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.468545914 CET	443	49775	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.470412016 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.470423937 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.470494986 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.470618010 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.470628023 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.474185944 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.474232912 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.474356890 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.474402905 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.474410057 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.474441051 CET	49776	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.474446058 CET	443	49776	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.476164103 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.476182938 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.476254940 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.476365089 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.476377964 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.565114021 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.565561056 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.565568924 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.565984964 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.565989017 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.796937943 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.796982050 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.797038078 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.797261000 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.797261000 CET	49777	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.797269106 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.797276974 CET	443	49777	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.800162077 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.800173998 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:21.800237894 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.800357103 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:21.800367117 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.000050068 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.000113964 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.000163078 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.000368118 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.000377893 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.000387907 CET	49778	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.000391960 CET	443	49778	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.003262043 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.003302097 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:22.003390074 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.003561020 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:22.003580093 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.133959055 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.134612083 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.134625912 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.135046005 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.135050058 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.186321020 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.186808109 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.186826944 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.187189102 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.187192917 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.191474915 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.191770077 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.191795111 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.192102909 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.192107916 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.568797112 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.568929911 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.568983078 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.569139004 CET	49779	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.569147110 CET	443	49779	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.572077990 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.572103977 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.572168112 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.572346926 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.572360039 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.620995998 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.621045113 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.621092081 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.621360064 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.621370077 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.621382952 CET	49780	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.621391058 CET	443	49780	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.624459028 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.624505997 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.624571085 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.624713898 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.624731064 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.629368067 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.629411936 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.629458904 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.629579067 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.629595995 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.629606009 CET	49781	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.629611969 CET	443	49781	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.631539106 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.631553888 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.631613970 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.631745100 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.631752968 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.643318892 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.643712044 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.643718958 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.644150972 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.644154072 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.782313108 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.782663107 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.782680988 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:23.783032894 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:23.783037901 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.097106934 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.097143888 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.097203016 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.097393036 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.097398043 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.097412109 CET	49782	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.097414970 CET	443	49782	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.100076914 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.100111008 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.100182056 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.100327969 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.100342035 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.226484060 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.226531982 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.226584911 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.226723909 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.226732969 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.226739883 CET	49783	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.226743937 CET	443	49783	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.228735924 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.228758097 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:24.228836060 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.228952885 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:24.228965044 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.417608976 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.418185949 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.418210030 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.418685913 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.418689966 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.468475103 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.469163895 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.469189882 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.469557047 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.469562054 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.862840891 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.862893105 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.862968922 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.863224030 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.863236904 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.863250017 CET	49786	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.863255024 CET	443	49786	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.866427898 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.866458893 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.866540909 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.866710901 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.866728067 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.878933907 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.879295111 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.879323959 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.879741907 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.879746914 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.921547890 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.921597004 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.921658993 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.921823025 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.921835899 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.921847105 CET	49785	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.921850920 CET	443	49785	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.923998117 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.924021959 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:25.924227953 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.924227953 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:25.924252033 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.325311899 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.325361967 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.325418949 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.325627089 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.325644970 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.325654984 CET	49787	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.325659990 CET	443	49787	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.328841925 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.328874111 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:26.328955889 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.329112053 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:26.329127073 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.284435034 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.285065889 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.285080910 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.285543919 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.285548925 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.646517992 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.647018909 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.647042990 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.647500992 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.647506952 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.736891985 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.737072945 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.737138033 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.737219095 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.737235069 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.737247944 CET	49784	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.737251997 CET	443	49784	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.744374990 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.744390011 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.744456053 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.744606972 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.744616985 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.768309116 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.768764973 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.768776894 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:27.769220114 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:27.769222975 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.090418100 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.090467930 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.090528011 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.090899944 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.090899944 CET	49789	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.090925932 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.090935946 CET	443	49789	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.093991995 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.094036102 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.094105005 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.094274044 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.094290972 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.155884027 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.156528950 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.156546116 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.156915903 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.156920910 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.221977949 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.222032070 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.222192049 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.222242117 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.222249985 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.222259998 CET	49790	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.222264051 CET	443	49790	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.224988937 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.225018024 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.225086927 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.225289106 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.225301027 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.600219965 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.600271940 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.600395918 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.600603104 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.600625992 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.600651979 CET	49791	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.600657940 CET	443	49791	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.603596926 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.603636980 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:28.603713989 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.603880882 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:28.603895903 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.402107954 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.402714014 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.402746916 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.403336048 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.403341055 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.507335901 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:29.507410049 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:29.507476091 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:29.532222986 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.534816980 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.534832001 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.535487890 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.535492897 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.839082003 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.839169025 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.839240074 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.839478970 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.839498997 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.839509964 CET	49788	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.839515924 CET	443	49788	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.842717886 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.842741013 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.842834949 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.843009949 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.843031883 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.957357883 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.957906008 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.957928896 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.958410025 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.958415985 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.960525990 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.960797071 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.960817099 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:29.961150885 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:29.961155891 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.031358004 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.031534910 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.031610012 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.031683922 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.031696081 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.031711102 CET	49792	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.031717062 CET	443	49792	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.034754992 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.034790993 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.034871101 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.035027981 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.035047054 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.284087896 CET	49773	443	192.168.2.4	172.217.21.36
Dec 1, 2024 23:23:30.284105062 CET	443	49773	172.217.21.36	192.168.2.4
Dec 1, 2024 23:23:30.395988941 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.396042109 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.396090031 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.396322012 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.396330118 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.396339893 CET	49794	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.396352053 CET	443	49794	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.399744987 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.399768114 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.399840117 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.400038004 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.400048971 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.412381887 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.412442923 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.412487984 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.412595034 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.412615061 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.412623882 CET	49793	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.412628889 CET	443	49793	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.414910078 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.414940119 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.415009975 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.415227890 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.415246010 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.456729889 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.457171917 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.457185030 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.457684040 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.457689047 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.911071062 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.911138058 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.911184072 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.911405087 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.911417007 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.911428928 CET	49795	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.911433935 CET	443	49795	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.914827108 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.914876938 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:30.914940119 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.915147066 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:30.915160894 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.626472950 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.627072096 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:31.627108097 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.627602100 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:31.627607107 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.825783014 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.826257944 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:31.826275110 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:31.826711893 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:31.826718092 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.066015005 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.066086054 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.066162109 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.066343069 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.066358089 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.066373110 CET	49796	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.066378117 CET	443	49796	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.069338083 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.069376945 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.069479942 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.069622993 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.069634914 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.124283075 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.124672890 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.124686003 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.125221014 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.125226021 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.200397968 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.200783968 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.200805902 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.201169014 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.201174974 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.270620108 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.270803928 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.270875931 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.270956993 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.270972013 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.270982027 CET	49797	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.270987034 CET	443	49797	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.273891926 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.273940086 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.274023056 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.274189949 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.274202108 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.559717894 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.559781075 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.559835911 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.560004950 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.560019016 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.560029984 CET	49798	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.560034990 CET	443	49798	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.565246105 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.565289021 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.565359116 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.566106081 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.566117048 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.644471884 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.644545078 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.644599915 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.644798040 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.644818068 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.644828081 CET	49799	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.644833088 CET	443	49799	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.647737026 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.647799969 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.647882938 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.648060083 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.648072004 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.760644913 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.761177063 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.761204004 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:32.761655092 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:32.761660099 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.214432955 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.214509010 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.214579105 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.214793921 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.214813948 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.214826107 CET	49800	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.214832067 CET	443	49800	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.217869997 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.217909098 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.217988014 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.218199968 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.218218088 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.849543095 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.850069046 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.850106001 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:33.850564957 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:33.850572109 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.081866026 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.082386017 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.082416058 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.082834005 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.082839966 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.282068014 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.284080982 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.284118891 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.284650087 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.284655094 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.293587923 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.293677092 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.293862104 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.293895006 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.293895006 CET	49801	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.293911934 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.293920040 CET	443	49801	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.296442032 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.296488047 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.296567917 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.296703100 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.296716928 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.499389887 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.499855995 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.499905109 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.500253916 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.500258923 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.526202917 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.526359081 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.526416063 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.526468039 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.526468039 CET	49802	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.526492119 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.526504993 CET	443	49802	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.529174089 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.529210091 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.529275894 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.529436111 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.529441118 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.717252016 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.717323065 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.717375994 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.717506886 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.717506886 CET	49803	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.717528105 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.717539072 CET	443	49803	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.720102072 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.720124006 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.720422029 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.720571041 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.720583916 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.952896118 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.952974081 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.953183889 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.953222036 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.953248978 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.953263998 CET	49804	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.953270912 CET	443	49804	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.955955982 CET	49809	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.956013918 CET	443	49809	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:34.956100941 CET	49809	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.956262112 CET	49809	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:34.956275940 CET	443	49809	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.062282085 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.062799931 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.062829018 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.063355923 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.063361883 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.515428066 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.515501022 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.515711069 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.515744925 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.515744925 CET	49805	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.515763044 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.515770912 CET	443	49805	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.518182993 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.518244028 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:35.518321991 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.518507004 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:35.518522024 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.075637102 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.076240063 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.076278925 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.076663971 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.076668978 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.249007940 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.249703884 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.249727011 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.250921965 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.250926971 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.437093019 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.440304041 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.440335035 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.440802097 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.440807104 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.519788980 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.519851923 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.519896030 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.520474911 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.520497084 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.520508051 CET	49806	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.520514011 CET	443	49806	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.523222923 CET	49811	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.523272991 CET	443	49811	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.523332119 CET	49811	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.523461103 CET	49811	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.523474932 CET	443	49811	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.683767080 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.683844090 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.683891058 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.684010029 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.684026003 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.684041023 CET	49807	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.684045076 CET	443	49807	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.686381102 CET	49812	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.686402082 CET	443	49812	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.686460018 CET	49812	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.686573029 CET	49812	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.686582088 CET	443	49812	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.872044086 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.872095108 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.872164965 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.872363091 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.872380018 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.872391939 CET	49808	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.872396946 CET	443	49808	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.874876976 CET	49813	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.874900103 CET	443	49813	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:36.874983072 CET	49813	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.875142097 CET	49813	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:36.875152111 CET	443	49813	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.361622095 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.362545967 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.362582922 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.363012075 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.363017082 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.825280905 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.825354099 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.825558901 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.825618029 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.825639963 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.825653076 CET	49810	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.825659037 CET	443	49810	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.828697920 CET	49814	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.828739882 CET	443	49814	13.107.246.63	192.168.2.4
Dec 1, 2024 23:23:37.828802109 CET	49814	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.828955889 CET	49814	443	192.168.2.4	13.107.246.63
Dec 1, 2024 23:23:37.828968048 CET	443	49814	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 23:22:14.005470991 CET	53	63701	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:14.145642996 CET	53	52307	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:17.010142088 CET	53	55804	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:18.004352093 CET	63001	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:18.004481077 CET	57482	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:18.142025948 CET	53	57482	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:18.142062902 CET	53	63001	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:19.207544088 CET	62224	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:19.207686901 CET	60891	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:19.431570053 CET	53	62224	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:19.432024956 CET	53	60891	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:19.447416067 CET	51960	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:19.447540045 CET	57626	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:19.585617065 CET	53	57626	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:19.585776091 CET	53	51960	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:21.631180048 CET	61849	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:21.631412983 CET	50498	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:21.908127069 CET	53	50498	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:21.908545971 CET	53	61849	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:24.827326059 CET	50886	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:24.827480078 CET	59629	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:24.965148926 CET	53	50886	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:25.183549881 CET	53	59629	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:33.134363890 CET	138	138	192.168.2.4	192.168.2.255
Dec 1, 2024 23:22:33.881438017 CET	52991	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:33.881614923 CET	59235	53	192.168.2.4	1.1.1.1
Dec 1, 2024 23:22:33.937165976 CET	53	51343	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:34.019305944 CET	53	52991	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:34.022617102 CET	53	59235	1.1.1.1	192.168.2.4
Dec 1, 2024 23:22:52.858473063 CET	53	52111	1.1.1.1	192.168.2.4
Dec 1, 2024 23:23:13.907248020 CET	53	56900	1.1.1.1	192.168.2.4
Dec 1, 2024 23:23:15.624176025 CET	53	57020	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 1, 2024 23:22:14.237622976 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Dec 1, 2024 23:22:25.183650017 CET	192.168.2.4	1.1.1.1	c218	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 1, 2024 23:22:18.004352093 CET	192.168.2.4	1.1.1.1	0x15e4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:18.004481077 CET	192.168.2.4	1.1.1.1	0x38fd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 1, 2024 23:22:19.207544088 CET	192.168.2.4	1.1.1.1	0x38b9	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.207686901 CET	192.168.2.4	1.1.1.1	0x32c3	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	65	IN (0x0001)	false
Dec 1, 2024 23:22:19.447416067 CET	192.168.2.4	1.1.1.1	0x324e	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.447540045 CET	192.168.2.4	1.1.1.1	0x4d0c	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	65	IN (0x0001)	false
Dec 1, 2024 23:22:21.631180048 CET	192.168.2.4	1.1.1.1	0xffc2	Standard query (0)	static.kryptoslogicsinkhole.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:21.631412983 CET	192.168.2.4	1.1.1.1	0x5e19	Standard query (0)	static.kryptoslogicsinkhole.com	65	IN (0x0001)	false
Dec 1, 2024 23:22:24.827326059 CET	192.168.2.4	1.1.1.1	0x55c7	Standard query (0)	web.archive.org	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:24.827480078 CET	192.168.2.4	1.1.1.1	0x4f5e	Standard query (0)	web.archive.org	65	IN (0x0001)	false
Dec 1, 2024 23:22:33.881438017 CET	192.168.2.4	1.1.1.1	0x1b12	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:33.881614923 CET	192.168.2.4	1.1.1.1	0x7a7	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 1, 2024 23:22:18.142025948 CET	1.1.1.1	192.168.2.4	0x38fd	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 1, 2024 23:22:18.142062902 CET	1.1.1.1	192.168.2.4	0x15e4	No error (0)	www.google.com	172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.431570053 CET	1.1.1.1	192.168.2.4	0x38b9	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.166.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.431570053 CET	1.1.1.1	192.168.2.4	0x38b9	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.167.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.432024956 CET	1.1.1.1	192.168.2.4	0x32c3	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com		65	IN (0x0001)	false
Dec 1, 2024 23:22:19.585617065 CET	1.1.1.1	192.168.2.4	0x4d0c	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com		65	IN (0x0001)	false
Dec 1, 2024 23:22:19.585776091 CET	1.1.1.1	192.168.2.4	0x324e	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.167.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:19.585776091 CET	1.1.1.1	192.168.2.4	0x324e	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.166.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:21.908127069 CET	1.1.1.1	192.168.2.4	0x5e19	No error (0)	static.kryptoslogicsinkhole.com		65	IN (0x0001)	false
Dec 1, 2024 23:22:21.908545971 CET	1.1.1.1	192.168.2.4	0xffc2	No error (0)	static.kryptoslogicsinkhole.com	172.67.205.251	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:21.908545971 CET	1.1.1.1	192.168.2.4	0xffc2	No error (0)	static.kryptoslogicsinkhole.com	104.21.77.90	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:24.965148926 CET	1.1.1.1	192.168.2.4	0x55c7	No error (0)	web.archive.org	207.241.237.3	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:34.019305944 CET	1.1.1.1	192.168.2.4	0x1b12	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.167.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:34.019305944 CET	1.1.1.1	192.168.2.4	0x1b12	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.166.228	A (IP address)	IN (0x0001)	false
Dec 1, 2024 23:22:34.022617102 CET	1.1.1.1	192.168.2.4	0x7a7	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

fs.microsoft.com

https:

static.kryptoslogicsinkhole.com

web.archive.org

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-01 22:22:20 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=162260 Date: Sun, 01 Dec 2024 22:22:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	104.16.167.228	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:21 UTC	692	OUT	GET / HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:21 UTC	171	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:22:21 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 8eb679b7def672bc-EWR
2024-12-01 22:22:21 UTC	607	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-01 22:22:22 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=222182 Date: Sun, 01 Dec 2024 22:22:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-01 22:22:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	172.67.205.251	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:24 UTC	587	OUT	GET /style.css HTTP/1.1 Host: static.kryptoslogicsinkhole.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:24 UTC	761	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:22:24 GMT Content-Type: text/css Content-Length: 11916 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dg9fJV2cTA18ORwD4rj2j2RPYLxrYuwGRvMCr2xQp0oxrBJ9UmdWt21V4g2IuAcGRe5S%2FF45iyfCTkumRjD4qyF%2B65TKWTcf8iBvpBpZgrL%2BOZEFWci45FC6%2B2JaM4oDorvTrJwlvNDaFGgpQPFmPHss"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eb679cbee058c1e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2009&min_rtt=2003&rtt_var=755&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1165&delivery_rate=1457813&cwnd=212&unsent_bytes=0&cid=1f8a0f4f7775331a&ts=474&x=0"
2024-12-01 22:22:24 UTC	608	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 61 72 63 68 69 76 65 2e 6f 72 67 2f 77 65 62 2f 32 30 32 33 30 31 31 30 30 38 31 37 30 37 63 73 5f 2f 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 7c 4f 70 65 6e 2b 53 61 6e 73 22 29 3b 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c Data Ascii: @charset "UTF-8";@import url("https://web.archive.org/web/20230110081707cs_/https://fonts.googleapis.com/css?family=Montserrat\|Open+Sans");html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 3b 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 63 6f Data Ascii: rtical-align:baseline;}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section,main{display:block;}body{line-height:1;}ol,ul{list-style:none;}blockquote,q{quotes:none;}blockquote:before,blockquote:after,q:before,q:after{content:'';co
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 7d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 2c 30 2e 32 73 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 2c 30 2e 32 73 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 2c 30 2e 32 73 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e Data Ascii: a:focus{outline:none!important;text-decoration:none!important;color:#FFFFFF;}button{-webkit-transition:all,0.2s,ease-in-out;-moz-transition:all,0.2s,ease-in-out;transition:all,0.2s,ease-in-out;cursor:pointer;}button:hover,button:active,button:focus{outlin
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 67 6f 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 6f 70 3a 33 72 65 6d 3b 6c 65 66 74 3a 33 72 65 6d 3b 77 69 64 74 68 3a 35 72 65 6d 3b 7d 2e 6c 6f 67 6f 2d 6c 69 6e 6b 20 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 7d 2e 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 Data Ascii: go-link{position:absolute;z-index:20;display:block;top:3rem;left:3rem;width:5rem;}.logo-link .logo{height:auto;}.content{height:100vh;overflow:hidden;z-index:10;position:relative;-webkit-box-align:center;-moz-box-align:center;box-align:center;-webkit-alig
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 35 72 65 6d 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 35 72 65 6d 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 2e 33 72 65 6d 3b 7d 2e 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 65 6e 74 2d 62 6f 78 20 2e 62 69 67 2d 63 6f 6e 74 65 6e 74 20 73 70 61 6e 2e 6c 69 6e 65 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 77 69 64 74 68 3a 31 30 72 65 6d 3b 7d 2e 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 65 6e 74 2d 62 6f 78 20 2e 62 69 67 2d 63 6f 6e 74 65 6e 74 20 73 70 61 6e 2e 6c 69 6e 65 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 77 69 64 74 68 3a Data Ascii: bkit-border-radius:0.5rem;-moz-border-radius:0.5rem;-ms-border-radius:0.5rem;border-radius:0.5rem;margin-bottom:2.3rem;}.content .content-box .big-content span.line:nth-child(2){width:10rem;}.content .content-box .big-content span.line:nth-child(4){width:
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 6f 72 6e 65 72 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 72 65 6d 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 30 2c 30 2e 30 32 2c 30 2c 31 2e 30 31 3b Data Ascii: translate(-2rem,0);}}@keyframes corner{0%{-webkit-transform:translate(-2rem,0);-moz-transform:translate(-2rem,0);-ms-transform:translate(-2rem,0);-o-transform:translate(-2rem,0);transform:translate(-2rem,0);-webkit-animation-timing-function:0,0.02,0,1.01;
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 30 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 20 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 66 6f 6f 74 65 72 20 75 6c 20 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 66 6f 6f 74 65 72 20 75 6c 20 6c 69 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 30 2e 32 72 65 6d 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 Data Ascii: center;position:absolute;z-index:20;padding:1rem 0;bottom:0;left:0;width:100%;}footer ul li{position:relative;display:inline-block;padding:0;}footer ul li::after{content:'';position:absolute;top:0;right:0;width:0.2rem;height:100%;-webkit-border-radius:1re
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 6f 74 65 72 2e 6c 69 67 68 74 20 75 6c 20 6c 69 3a 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 30 2e 31 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 31 37 2c 31 32 32 2c 31 33 34 2c 30 2e 32 29 3b 7d 66 6f 6f 74 65 72 2e 6c 69 67 68 74 20 75 6c 20 6c 69 20 61 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 37 29 3b 7d 66 6f 6f 74 65 72 2e 6c 69 67 68 74 20 75 6c 20 6c 69 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 7d 66 6f 6f 74 65 72 2e 6c 69 67 68 74 20 75 6c 20 6c 69 20 61 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 33 29 3b 7d 2e 6d 62 59 54 50 5f 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 31 30 30 76 77 21 69 6d 70 Data Ascii: oter.light ul li::after{width:0.1rem;background:rgba(117,122,134,0.2);}footer.light ul li a{color:rgba(255,255,255,0.7);}footer.light ul li a:hover{color:#FFFFFF;}footer.light ul li a::after{background:rgba(255,255,255,0.3);}.mbYTP_wrapper{width:100vw!imp
2024-12-01 22:22:24 UTC	1369	IN	Data Raw: 63 61 6c 65 28 31 2e 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 7d 7d 2e 76 65 67 61 73 2d 6f 76 65 72 6c 61 79 7b 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 34 35 2c 34 39 2c 35 36 2c 30 2e Data Ascii: cale(1.2);-ms-transform:scale(1.2);-o-transform:scale(1.2);transform:scale(1.2);}100%{-webkit-transform:scale(1);-moz-transform:scale(1);-ms-transform:scale(1);-o-transform:scale(1);transform:scale(1);}}.vegas-overlay{opacity:1;background:rgba(45,49,56,0.
2024-12-01 22:22:24 UTC	356	IN	Data Raw: 30 2e 38 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 7d 66 6f 6f 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 72 65 6d 3b 7d 66 6f 6f 74 65 72 20 75 6c 20 6c 69 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 7d 66 6f 6f 74 65 72 20 75 6c 20 6c 69 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 66 6f 6f 74 65 72 20 75 6c 20 6c 69 20 61 7b Data Ascii: 0.8);-moz-transform:scale(0.8);-ms-transform:scale(0.8);-o-transform:scale(0.8);transform:scale(0.8);margin:0 auto;}footer{position:relative;padding-bottom:5rem;}footer ul li{width:100%;margin-bottom:1rem;}footer ul li::after{display:none;}footer ul li a{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	207.241.237.3	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:29 UTC	626	OUT	GET /web/20230110081707cs_/https://fonts.googleapis.com/css?family=Montserrat\|Open+Sans HTTP/1.1 Host: web.archive.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://static.kryptoslogicsinkhole.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:29 UTC	825	IN	HTTP/1.1 302 FOUND Server: nginx Date: Sun, 01 Dec 2024 22:22:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close x-archive-redirect-reason: found capture at 20230110074513 location: https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans server-timing: captures_list;dur=0.644244, exclusion.robots;dur=0.025330, exclusion.robots.policy;dur=0.015162, esindex;dur=0.011992, cdx.remote;dur=28.132284, LoadShardBlock;dur=330.006184, PetaboxLoader3.datanode;dur=236.549491 x-app-server: wwwb-app222 x-ts: 302 x-tr: 417 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=1 X-location: All X-RL: 0 X-NA: 0 X-Page-Cache: HIT Server-Timing: HIT X-NID: - Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: interest-cohort=()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8+DVPesTKOsNKfz&MD=cz5CL4Na HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-01 22:22:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 92de2f56-e447-4707-8427-6bebeea8c48a MS-RequestId: 1cea444b-f6ca-4f31-9aa0-3457ceea14bf MS-CV: AWBsAOoonEqHPg8q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 01 Dec 2024 22:22:29 GMT Connection: close Content-Length: 24490
2024-12-01 22:22:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-01 22:22:30 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	207.241.237.3	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:31 UTC	628	OUT	GET /web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans HTTP/1.1 Host: web.archive.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://static.kryptoslogicsinkhole.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:31 UTC	3406	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 01 Dec 2024 22:22:31 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close x-archive-orig-access-control-allow-origin: * x-archive-orig-timing-allow-origin: * x-archive-orig-link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin x-archive-orig-strict-transport-security: max-age=31536000 x-archive-orig-expires: Tue, 10 Jan 2023 07:45:13 GMT x-archive-orig-date: Tue, 10 Jan 2023 07:45:13 GMT x-archive-orig-cache-control: private, max-age=86400, stale-while-revalidate=604800 x-archive-orig-last-modified: Tue, 10 Jan 2023 07:04:47 GMT x-archive-orig-cross-origin-opener-policy: same-origin-allow-popups x-archive-orig-cross-origin-resource-policy: cross-origin x-archive-orig-server: ESF x-archive-orig-x-xss-protection: 0 x-archive-orig-x-frame-options: SAMEORIGIN x-archive-orig-x-content-type-options: nosniff x-archive-orig-alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" x-archive-orig-transfer-encoding: chunked x-archive-guessed-content-type: text/css x-archive-guessed-charset: utf-8 x-archive-orig-content-encoding: gzip memento-datetime: Tue, 10 Jan 2023 07:45:13 GMT link: <https://fonts.googleapis.com/css?family=Montserrat%257COpen+Sans>; rel="original", <https://web.archive.org/web/timemap/link/https://fonts.googleapis.com/css?family=Montserrat%257COpen+Sans>; rel="timemap"; type="application/link-format", <https://web.archive.org/web/https://fonts.googleapis.com/css?family=Montserrat%257COpen+Sans>; rel="timegate", <https://web.archive.org/web/20130704224143/http://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans>; rel="first memento"; datetime="Thu, 04 Jul 2013 22:41:43 GMT", <https://web.archive.org/web/20230110073356/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans>; rel="prev memento"; datetime="Tue, 10 Jan 2023 07:33:56 GMT", <https://web.archive.org/web/20230110074513/https://fonts.googleapis.com/css?family=Montserrat%257COpen+Sans>; rel="memento"; datetime="Tue, 10 Jan 2023 07:45:13 GMT", <https://web.archive.org/web/20230110121405/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans>; rel="next memento"; datetime="Tue, 10 Jan 2023 [TRUNCATED] content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org x-archive-src: spn2-20230110085606/spn2-20230110071910-wwwb-spn19.us.archive.org-8005.warc.gz server-timing: captures_list;dur=4.415968, exclusion.robots;dur=0.194030, exclusion.robots.policy;dur=0.112750, esindex;dur=0.086406, cdx.remote;dur=130.236415, LoadShardBlock;dur=1717.591356, PetaboxLoader3.datanode;dur=587.456446, load_resource;dur=95.520934, PetaboxLoader3.resolve;dur=67.447755 x-app-server: wwwb-app203 x-ts: 200 x-tr: 2201 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 X-location: All X-RL: 0 X-NA: 0 X-Page-Cache: HIT Server-Timing: HIT X-NID: - Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: interest-cohort=()
2024-12-01 22:22:31 UTC	5660	IN	Data Raw: 31 36 30 66 0d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 65 62 2e 61 72 63 68 69 76 65 2e 6f 72 67 2f 77 65 62 2f 32 30 32 33 30 31 31 30 30 37 34 35 31 33 69 6d 5f 2f 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 35 2f 4a 54 55 48 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 33 32 56 4a 4f 74 35 2d 51 4e 46 67 70 43 74 72 36 48 77 30 61 58 70 73 6f 67 Data Ascii: 160f/* cyrillic-ext */@font-face { font-family: 'Montserrat'; font-style: normal; font-weight: 400; src: url(https://web.archive.org/web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	207.241.237.3	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:33 UTC	774	OUT	GET /web/20230110074513im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1 Host: web.archive.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:33 UTC	855	IN	HTTP/1.1 302 FOUND Server: nginx Date: Sun, 01 Dec 2024 22:22:33 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close x-archive-redirect-reason: found capture at 20230110065622 location: https://web.archive.org/web/20230110065622im_/https://fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 server-timing: captures_list;dur=0.685995, exclusion.robots;dur=0.019280, exclusion.robots.policy;dur=0.008898, esindex;dur=0.012081, cdx.remote;dur=51.827207, LoadShardBlock;dur=520.575071, PetaboxLoader3.datanode;dur=272.646317 x-app-server: wwwb-app226 x-ts: 302 x-tr: 652 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=2 X-location: All X-RL: 0 X-NA: 0 X-Page-Cache: HIT Server-Timing: HIT X-NID: - Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: interest-cohort=()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	104.16.167.228	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:33 UTC	654	OUT	GET /favicon.ico HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:33 UTC	171	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:22:33 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 8eb67a048e5e42a7-EWR
2024-12-01 22:22:33 UTC	607	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49754	104.16.167.228	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:35 UTC	384	OUT	GET /favicon.ico HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:36 UTC	171	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:22:35 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 8eb67a121e18438c-EWR
2024-12-01 22:22:36 UTC	607	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	207.241.237.3	443	2140	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:22:36 UTC	788	OUT	GET /web/20230110074513im_/https://fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 Host: web.archive.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://web.archive.org/web/20230110074513cs_/https://fonts.googleapis.com/css?family=Montserrat%7COpen+Sans Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 22:22:36 UTC	869	IN	HTTP/1.1 302 FOUND Server: nginx Date: Sun, 01 Dec 2024 22:22:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close x-archive-redirect-reason: found capture at 20230110074548 location: https://web.archive.org/web/20230110074548im_/https://fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 server-timing: captures_list;dur=0.493627, exclusion.robots;dur=0.014009, exclusion.robots.policy;dur=0.007415, esindex;dur=0.008974, cdx.remote;dur=20.566333, LoadShardBlock;dur=537.105938, PetaboxLoader3.datanode;dur=107.398566 x-app-server: wwwb-app221 x-ts: 302 x-tr: 660 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=1 X-location: All X-RL: 0 X-NA: 0 X-Page-Cache: HIT Server-Timing: HIT X-NID: - Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: interest-cohort=()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8+DVPesTKOsNKfz&MD=cz5CL4Na HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-01 22:23:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 56f4c0ad-1758-447e-b953-171e9713dc6e MS-RequestId: 7317bd0b-a070-48b5-a533-79ae51e076f2 MS-CV: u18ehZxZTkqXQZF4.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 01 Dec 2024 22:23:09 GMT Connection: close Content-Length: 30005
2024-12-01 22:23:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-01 22:23:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:11 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:11 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:11 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 29 Nov 2024 23:15:49 GMT ETag: "0x8DD10CBC2E3B852" x-ms-request-id: 82d9e4b2-501e-007b-3a87-435ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222311Z-174f78459688l8rvhC1EWRtzr00000000g3000000000ekza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:11 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-01 22:23:12 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:14 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 44a2812f-d01e-0028-1207-427896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222314Z-174f7845968swgbqhC1EWRmnb400000013t0000000003bz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:14 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:14 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222314Z-174f7845968frfdmhC1EWRxxbw00000013gg00000000gve5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:14 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:14 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222314Z-174f78459685m244hC1EWRgp2c00000013d000000000893u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:14 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:14 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:14 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222314Z-174f78459688l8rvhC1EWRtzr00000000g5g000000007w6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:14 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:14 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:14 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222314Z-174f7845968zgtf6hC1EWRqd8s0000000wkg000000003k6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:14 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:16 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222316Z-174f7845968jrjrxhC1EWRmmrs00000013qg0000000085bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:16 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 8639caee-c01e-0066-28c7-43a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222316Z-174f7845968vqt9xhC1EWRgten00000013hg00000000fagg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:16 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:17 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e8c785f0-901e-0048-4ed4-43b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222316Z-174f7845968zgtf6hC1EWRqd8s0000000wm0000000001x6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-01 22:23:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:16 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 3360fb1d-601e-0097-3291-3ff33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222317Z-174f7845968kdththC1EWRzvxn0000000fu000000000kbkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:17 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222319Z-174f7845968pf68xhC1EWRr4h800000013s000000000e713 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 836dd7a0-401e-00ac-1e7d-400a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222319Z-174f7845968nxc96hC1EWRspw800000013a0000000008cr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 12c713eb-c01e-0034-6a92-432af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222319Z-174f7845968zgtf6hC1EWRqd8s0000000wg0000000009sr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 957c193a-901e-008f-36b3-4267a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222319Z-174f7845968cpnpfhC1EWR3afc000000135g00000000a9cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222319Z-174f7845968xr5c2hC1EWRd0hn0000000n9g00000000kq9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 72388ca2-901e-0029-4711-41274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222321Z-174f7845968pght8hC1EWRyvxg00000006s0000000004rt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:21 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 417b6c53-401e-0029-0d91-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222321Z-174f7845968frfdmhC1EWRxxbw00000013fg00000000pc5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:21 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6ab56c84-d01e-008e-48c7-43387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222321Z-174f7845968cdxdrhC1EWRg0en00000013gg000000009b0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-01 22:23:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:21 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9babc56-001e-0049-5291-3f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222321Z-174f78459685m244hC1EWRgp2c00000013e0000000005fuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:21 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:21 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e1f54f45-601e-0097-18a1-42f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222321Z-174f7845968qj8jrhC1EWRh41s00000013k0000000003g2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:21 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:23 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:23 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: ef6c78e4-401e-0067-2ec7-4309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222323Z-174f7845968frfdmhC1EWRxxbw00000013kg00000000bzsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-01 22:23:23 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:23 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 02716611-001e-00ad-7089-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222323Z-174f7845968kdththC1EWRzvxn0000000fy0000000006try x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:23 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 80135fc2-701e-001e-3d45-40f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222323Z-174f7845968px8v7hC1EWR08ng00000013vg000000004w6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:23 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 3f7caad5-701e-006f-6962-43afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222323Z-174f7845968cpnpfhC1EWR3afc000000135000000000ch76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:23 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222324Z-174f7845968kvnqxhC1EWRmf3g0000000q9000000000geb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:25 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 5aec2b48-201e-0085-7d6b-4334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222325Z-174f7845968frfdmhC1EWRxxbw00000013m000000000ache x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:25 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:25 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ff709020-001e-005a-1caf-42c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222325Z-174f78459684db9fhC1EWRc7g400000003mg000000005mg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:25 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:25 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: e7678828-401e-0078-7a85-434d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222326Z-174f7845968xlwnmhC1EWR0sv800000013c000000000a5us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:27 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:27 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 14e4a643-101e-007a-3c66-40047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222327Z-174f7845968cdxdrhC1EWRg0en00000013gg000000009b5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:27 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:27 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:27 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a230c581-101e-0034-3128-4096ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222327Z-174f7845968glpgnhC1EWR7uec00000013mg00000000nt27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:27 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:27 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222327Z-174f7845968qj8jrhC1EWRh41s00000013e000000000fe3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:28 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:28 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: feaf0f62-e01e-0071-4f14-4208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222328Z-174f7845968zgtf6hC1EWRqd8s0000000weg00000000gc26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:29 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c3d74fa2-201e-0003-1d91-3ff85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222329Z-174f78459684bddphC1EWRbht4000000139g0000000090hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:29 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b5d3fb3c-c01e-000b-6fb4-42e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222329Z-174f78459684db9fhC1EWRc7g400000003n0000000003uk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:29 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222330Z-174f7845968zgtf6hC1EWRqd8s0000000wmg000000000t18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:29 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:30 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222330Z-174f78459688l8rvhC1EWRtzr00000000g60000000006cup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:30 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:30 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:30 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8bf79252-001e-0028-5c50-41c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222330Z-174f7845968glpgnhC1EWR7uec00000013r0000000009gxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:30 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:31 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 13e6cbbb-001e-005a-04a3-43c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222331Z-174f7845968cpnpfhC1EWR3afc000000136g000000007h0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:31 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 490736a9-701e-0097-7e01-42b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222332Z-174f7845968vqt9xhC1EWRgten00000013mg000000008hbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 203bed18-201e-006e-51a9-42bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222332Z-174f7845968xlwnmhC1EWR0sv800000013bg00000000bvdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:32 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4edae9bd-001e-0017-14b4-420c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222332Z-174f78459684db9fhC1EWRc7g400000003pg000000000700 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:33 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d2a0c1bd-101e-0017-761b-4147c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222333Z-174f7845968xlwnmhC1EWR0sv800000013b000000000dwum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:33 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:33 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c0a226f0-401e-0048-5ab5-420409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222334Z-174f7845968xlwnmhC1EWR0sv800000013fg00000000195a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:34 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8322dc88-e01e-00aa-270b-42ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222334Z-174f7845968qj8jrhC1EWRh41s00000013dg00000000k383 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:34 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:34 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 21da0aac-a01e-0021-7d18-43814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222334Z-174f784596886s2bhC1EWR743w00000013qg0000000008yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:34 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:34 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6da3e3c6-601e-0084-52b4-426b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222334Z-174f7845968nxc96hC1EWRspw8000000138000000000dwd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a70bbc6a-401e-0029-780b-419b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222335Z-174f7845968xr5c2hC1EWRd0hn0000000ndg000000008pku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:36 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222336Z-174f7845968xlwnmhC1EWR0sv800000013cg000000009b9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:36 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 4c860516-801e-00a3-3252-437cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222336Z-174f7845968jrjrxhC1EWRmmrs00000013t000000000241q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:36 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222336Z-174f7845968kvnqxhC1EWRmf3g0000000qb000000000akh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:37 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd02da03-701e-001e-0d91-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222337Z-174f7845968kdththC1EWRzvxn0000000ftg00000000nc71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:38 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: c5359d4f-401e-0035-67ab-4282d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222338Z-174f78459684db9fhC1EWRc7g400000003kg00000000815y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:38 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 27481374-801e-0078-46b4-42bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222338Z-174f7845968swgbqhC1EWRmnb400000013pg00000000czmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:38 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222338Z-174f7845968kvnqxhC1EWRmf3g0000000qag00000000defx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:39 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 22:23:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 22:23:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T222339Z-174f7845968cdxdrhC1EWRg0en00000013hg000000006asg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 22:23:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 22:23:39 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4268, Parent PID: 480

General

Target ID:	0
Start time:	17:22:09
Start date:	01/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2140, Parent PID: 4268

General

Target ID:	1
Start time:	17:22:11
Start date:	01/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,6762363285886669449,4656860550256876991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6572, Parent PID: 480

General

Target ID:	3
Start time:	17:22:17
Start date:	01/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4268, Parent PID: 480

General

Chronological Activities

Analysis Process: chrome.exePID: 2140, Parent PID: 4268

General

Chronological Activities

Analysis Process: chrome.exePID: 6572, Parent PID: 480

Windows Analysis Report
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com