Edit tour

Windows Analysis Report
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/

Overview

General Information

Sample URL:	http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/
Analysis ID:	1574105
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2008,i,5895298519873626612,11618742166815324038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-12T23:03:13.160471+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49745	104.21.32.130	443	TCP
2024-12-12T23:03:16.784267+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49749	104.21.68.16	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://t4.prizepathonyourway.com/aff_c?offer_id=437&aff_id=1866&aff_sub=fedwall&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=

Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.20.i.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://cove.richquickcart.com/coxixo/yoye/yasili/... This script demonstrates several high-risk behaviors, including redirecting the user to a suspicious domain ('https://cove.richquickcart.com/back-w14.php') and manipulating the browser history to potentially trap the user on the malicious page. The use of obfuscated URLs and the lack of transparency around the script's purpose suggest a high likelihood of malicious intent.

Source: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ...

HTTP Parser: Base64 decoded: eyJyb290IjoiXC9mZHgtcGtnbXNuXC8iLCJmaWxlIjoiLlwvZmlsZXNcL2NvdXJpZXIuY3NzIiwidHlwZSI6ImNzcyIsInYiOiIyIn0=

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: t4.prizepathonyourway.com to https://cove.richquickcart.com/fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7c437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=level+3+parent+llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=new+york&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7bvid%7d&view=%7bskipped2%7d&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49745 -> 104.21.32.130:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49749 -> 104.21.68.16:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.98
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.98
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.98
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.98
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /aff_c?offer_id=437&aff_id=1866&aff_sub=fedwall&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5= HTTP/1.1Host: t4.prizepathonyourway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://www.pej935.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7C437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=Level+3+Parent+Llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=New+York&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7Bvid%7D&view=%7Bskipped2%7D&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284 HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.pej935.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coxixo/yoye/yasili/xo/index.php HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.pej935.pro/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr
Source: global traffic	HTTP traffic detected: GET /coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994 HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/55e8cf6703bf45bce4822d01a5874562.css?v=25&reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMk52ZFhKcFpYSXVZM056SWl3aWRIbHdaU0k2SW1OemN5SXNJbllpT2lJeUluMD0=aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cove.richquickcart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/bootstrap.min.css HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTNOeklpd2lkaUk2SWpJaWZRPT0=aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/svg4everybody.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbs/search-icon-png/search-icon-png-5.png HTTP/1.1Host: www.freeiconspng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/svg4everybody.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /thumbs/search-icon-png/search-icon-png-5.png HTTP/1.1Host: www.freeiconspng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cove.richquickcart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/icon-box.svg HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /js/fingerprintjs2/1.5.0/fingerprint2.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /assets/js/mobile-detect.js-master/mobile-detect.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/foot-icon03.svg HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/icon-box.svg HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/foot-icon03.svg HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7 HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24 HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/fingerprintjs2/1.5.0/fingerprint2.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /assets/js/mobile-detect.js-master/mobile-detect.min.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_undefined_1661551019.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613 HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7 HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_undefined_1661551019.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24 HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613 HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523 HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_undefined_1696444090.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg HTTP/1.1Host: clipresource.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882 HTTP/1.1Host: insightsandmarkets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523 HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nas-prod/c_undefined_1696444090.jpg HTTP/1.1Host: clipresource.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javascripts/trackpush-v2-cm.js HTTP/1.1Host: pushrev.pushbroker.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882 HTTP/1.1Host: insightsandmarkets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/glyphicons-halflings-regular.woff2 HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cove.richquickcart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cove.richquickcart.com/fdx-pkgmsn/files/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/fx-favicon.ico HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i; _TRKPushSubscriberID=4663cdaa-3187-78f7-7e26-829221737b22
Source: global traffic	HTTP traffic detected: GET /javascripts/trackpush-v2-cm.js HTTP/1.1Host: pushrev.pushbroker.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service_worker.js HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: cove.richquickcart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fdx-pkgmsn/files/fx-favicon.ico HTTP/1.1Host: cove.richquickcart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i; _TRKPushSubscriberID=4663cdaa-3187-78f7-7e26-829221737b22
Source: global traffic	HTTP traffic detected: GET /javascripts/service_worker.js?v1 HTTP/1.1Host: pushlite.pushbroker.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ume-ZD~Hl_1c0e5b67/C/ HTTP/1.1Host: www.pej935.proConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ume-ZD~Hl_1c0e5b67/C//R3D1R3C7/ HTTP/1.1Host: www.pej935.proConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.pej935.pro
Source: global traffic	DNS traffic detected: DNS query: t4.prizepathonyourway.com
Source: global traffic	DNS traffic detected: DNS query: cove.richquickcart.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.freeiconspng.com
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: clipresource.com
Source: global traffic	DNS traffic detected: DNS query: insightsandmarkets.com
Source: global traffic	DNS traffic detected: DNS query: pushrev.pushbroker.com
Source: global traffic	DNS traffic detected: DNS query: pushlite.pushbroker.com

Source: unknown

HTTP traffic detected: POST /subscriber/4663cdaa-3187-78f7-7e26-829221737b22 HTTP/1.1Host: pushlite.pushbroker.comConnection: keep-aliveContent-Length: 3711sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://cove.richquickcart.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cove.richquickcart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_157.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_109.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Source
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_147.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdg18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdh18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdi18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdj18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdo18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCds18Q.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdv18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdg18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdh18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdi18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdj18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdo18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSds18Q.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdv18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidg18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidh18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidi18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidj18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkido18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidv18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdg18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdh18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdi18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdj18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdo18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdv18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydg18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydh18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydi18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydj18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydo18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklyds18Q.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklydv18Smxg.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wkxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wlBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wlxdu.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wmBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wmRduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wmhduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_wmxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmBduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmRduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmhduz8A.woff2)
Source: chromecache_170.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmxduz8A.woff2)
Source: chromecache_133.2.dr, chromecache_105.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_94.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/3c3c5e64604209a4d63e1e4c48dd245d45fadfd9/css/main.css
Source: chromecache_157.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_86.2.dr, chromecache_113.2.dr	String found in binary or memory: https://github.com/hgoebl/mobile-detect.js
Source: chromecache_133.2.dr, chromecache_105.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_157.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_133.2.dr, chromecache_105.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_100.2.dr, chromecache_175.2.dr	String found in binary or memory: https://pushlite.pushbroker.com
Source: chromecache_125.2.dr	String found in binary or memory: https://pushlite.pushbroker.com/javascripts/service_worker.js?v1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal60.win@19/154@36/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2008,i,5895298519873626612,11618742166815324038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2008,i,5895298519873626612,11618742166815324038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/	0%	Avira URL Cloud	safe
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://pushlite.pushbroker.com/subscriber/4663cdaa-3187-78f7-7e26-829221737b22	0%	Avira URL Cloud	safe
https://t4.prizepathonyourway.com/aff_c?offer_id=437&aff_id=1866&aff_sub=fedwall&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=	100%	Avira URL Cloud	malware
https://cove.richquickcart.com/fdx-pkgmsn/files/foot-icon03.svg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/files/icon-box.svg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTNOeklpd2lkaUk2SWpJaWZRPT0=aaIiaKjaseS	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/assets/js/mobile-detect.js-master/mobile-detect.min.js	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/files/glyphicons-halflings-regular.woff2	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_undefined_1696444090.jpg	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_undefined_1661551019.jpg	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/manifest.json	0%	Avira URL Cloud	safe
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C//R3D1R3C7/	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/files/bootstrap.min.css	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/files/fx-favicon.ico	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/js/fingerprintjs2/1.5.0/fingerprint2.min.js	0%	Avira URL Cloud	safe
https://pushlite.pushbroker.com	0%	Avira URL Cloud	safe
https://pushrev.pushbroker.com/javascripts/trackpush-v2-cm.js	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882	0%	Avira URL Cloud	safe
http://www.day.com/dam/1.0	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/service_worker.js	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7C437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=Level+3+Parent+Llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=New+York&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7Bvid%7D&view=%7Bskipped2%7D&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/55e8cf6703bf45bce4822d01a5874562.css?v=25&reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMk52ZFhKcFpYSXVZM056SWl3aWRIbHdaU0k2SW1OemN5SXNJbllpT2lJeUluMD0=aaIiaKjaseS	0%	Avira URL Cloud	safe
https://insightsandmarkets.com/i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a	0%	Avira URL Cloud	safe
https://clipresource.com/nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg	0%	Avira URL Cloud	safe
https://pushlite.pushbroker.com/javascripts/service_worker.js?v1	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/files/svg4everybody.min.js	0%	Avira URL Cloud	safe
https://cove.richquickcart.com/fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
t4.prizepathonyourway.com	104.21.32.130	true	false	unknown
android.l.google.com	172.217.17.78	true	false	high
freeiconspng.com	78.46.22.9	true	false	high
pushrev.pushbroker.com	172.67.152.66	true	false	high
www.pej935.pro	154.59.24.60	true	false	unknown
mobile-gtalk.l.google.com	108.177.15.188	true	false	high
insightsandmarkets.com	104.21.3.108	true	false	high
cove.richquickcart.com	104.21.68.16	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
pushlite.pushbroker.com	172.67.152.66	true	false	high
clipresource.com	104.21.31.175	true	false	high
www.google.com	142.250.181.132	true	false	high
upload.wikimedia.org	185.15.58.240	true	false	high
www.freeiconspng.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/	true		unknown
https://t4.prizepathonyourway.com/aff_c?offer_id=437&aff_id=1866&aff_sub=fedwall&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=	false	Avira URL Cloud: malware	unknown
https://pushlite.pushbroker.com/subscriber/4663cdaa-3187-78f7-7e26-829221737b22	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/assets/js/mobile-detect.js-master/mobile-detect.min.js	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/icon-box.svg	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/foot-icon03.svg	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTNOeklpd2lkaUk2SWpJaWZRPT0=aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/glyphicons-halflings-regular.woff2	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_undefined_1696444090.jpg	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/manifest.json	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_undefined_1661551019.jpg	false	Avira URL Cloud: safe	unknown
https://www.freeiconspng.com/thumbs/search-icon-png/search-icon-png-5.png	false		high
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C//R3D1R3C7/	true	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js	false		high
https://insightsandmarkets.com/i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/fx-favicon.ico	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/js/fingerprintjs2/1.5.0/fingerprint2.min.js	false	Avira URL Cloud: safe	unknown
https://clipresource.com/nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://pushrev.pushbroker.com/javascripts/trackpush-v2-cm.js	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24	false	Avira URL Cloud: safe	unknown
https://upload.wikimedia.org/wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png	false		high
https://clipresource.com/nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A%3A0c7037d5061e8dda247f1391e613f3df&p=CwyuF0SIQDKyodvyi%2F4tXsPiJZQ%3D%3A%3A761aae006a19fcc5dc438430a2e2f994	false		unknown
https://clipresource.com/nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js	false		high
https://cove.richquickcart.com/fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/service_worker.js	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7C437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=Level+3+Parent+Llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=New+York&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7Bvid%7D&view=%7Bskipped2%7D&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js	false		high
https://clipresource.com/nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg	false	Avira URL Cloud: safe	unknown
https://insightsandmarkets.com/i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/55e8cf6703bf45bce4822d01a5874562.css?v=25&reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMk52ZFhKcFpYSXVZM056SWl3aWRIbHdaU0k2SW1OemN5SXNJbllpT2lJeUluMD0=aaIiaKjaseS	false	Avira URL Cloud: safe	unknown
https://pushlite.pushbroker.com/javascripts/service_worker.js?v1	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/files/svg4everybody.min.js	false	Avira URL Cloud: safe	unknown
https://cove.richquickcart.com/fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_133.2.dr, chromecache_105.2.dr	false		high
http://getbootstrap.com)	chromecache_157.2.dr	false		high
https://github.com/hgoebl/mobile-detect.js	chromecache_86.2.dr, chromecache_113.2.dr	false		high
https://pushlite.pushbroker.com	chromecache_100.2.dr, chromecache_175.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_133.2.dr, chromecache_105.2.dr	false		high
https://getbootstrap.com/)	chromecache_133.2.dr, chromecache_105.2.dr	false		high
https://github.com/h5bp/html5-boilerplate/blob/3c3c5e64604209a4d63e1e4c48dd245d45fadfd9/css/main.css	chromecache_94.2.dr	false		high
http://www.day.com/dam/1.0	chromecache_109.2.dr, chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_157.2.dr	false		high
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	chromecache_157.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.15.58.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
104.21.68.16	cove.richquickcart.com	United States	13335	CLOUDFLARENETUS	true
172.67.178.237	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.130.148	unknown	United States	13335	CLOUDFLARENETUS	false
78.46.22.9	freeiconspng.com	Germany	24940	HETZNER-ASDE	false
104.21.3.108	insightsandmarkets.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.152.66	pushrev.pushbroker.com	United States	13335	CLOUDFLARENETUS	false
108.177.15.188	mobile-gtalk.l.google.com	United States	15169	GOOGLEUS	false
104.21.32.130	t4.prizepathonyourway.com	United States	13335	CLOUDFLARENETUS	false
104.21.1.144	unknown	United States	13335	CLOUDFLARENETUS	false
154.59.24.60	www.pej935.pro	United States	174	COGENT-174US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.31.175	clipresource.com	United States	13335	CLOUDFLARENETUS	false
172.67.184.220	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574105
Start date and time:	2024-12-12 23:02:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@19/154@36/17

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.164.84, 172.217.17.46, 2.20.68.201, 192.229.221.95, 172.217.19.10, 142.250.181.67, 172.217.17.74, 142.250.181.138, 142.250.181.106, 172.217.19.202, 172.217.19.234, 142.250.181.42, 172.217.17.42, 142.250.181.10, 172.217.19.170, 142.250.181.74, 172.217.17.35, 23.218.208.109, 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): android.clients.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, mtalk.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/

Input	Output
URL: http://www.pej935.pro Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://www.pej935.pro
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a simple date formatting utility, which is a common and benign practice. It does not exhibit any high-risk behaviors or suspicious activities." }
var mydate = new Date(); mydate.setDate(mydate.getDate()); var year = mydate.getYear(); if (year < 1000) year += 1900; var day = mydate.getDay(); var month = mydate.getMonth(); var daym = mydate.getDate(); if (daym < 10) daym = "0" + daym; var dayarray = new Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"); var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December"); document.write("" + montharray[month] + " " + daym + ", " + year + "");
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including redirecting the user to a suspicious domain ('https://cove.richquickcart.com/back-w14.php') and manipulating the browser history to potentially trap the user on the malicious page. The use of obfuscated URLs and the lack of transparency around the script's purpose suggest a high likelihood of malicious intent." }
var pageInfo = {title: document.title, url: location.href}, backPageInfo = {title: null, url: "https://cove.richquickcart.com/back-w14.php?c=\|437&k=fedwall&id=w9m2bptvgkqebu86jhi9555i&source="}; window.history.pushState(backPageInfo, null, backPageInfo.url), window.history.pushState(pageInfo, pageInfo.title, pageInfo.url), window.addEventListener("popstate", function () { ExitPopup=false; document.URL.indexOf("https://cove.richqui") >= 0 && (document.location.href = document.location); });
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided code snippet appears to be a simple event listener that redirects the user to a URL specified in the query parameters when a button is clicked. This behavior is relatively benign and does not exhibit any high-risk indicators. However, the use of dynamic URL construction and lack of validation could potentially lead to unintended redirects, which warrants a moderate risk score." }
// document.getElementById('button1').addEventListener("click", function () { // var urlParams = new URLSearchParams(window.location.search); // window.location.href = jumpurl; // }, false);
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign script that handles common web page behaviors, such as loading animations, mobile viewport height adjustments, and page navigation. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The script is primarily focused on enhancing the user experience and does not exhibit any malicious or suspicious behavior." }
$(window).on("load", function () { $('body').addClass('loaded'); }); //Mobile height window.addEventListener('load', () => { let vh = window.innerHeight * 0.01; document.documentElement.style.setProperty('--vh', `${vh}px`); }); window.addEventListener('resize', () => { let vh = window.innerHeight * 0.01; document.documentElement.style.setProperty('--vh', `${vh}px`); }); $(document).ready(function () { //SVG svg4everybody(); //Screen trigger $('.screen-trigger--1').click(function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--1').fadeOut(100); $('.page').addClass('page--inner'); setTimeout( function () { $('.main--2').fadeIn(1000); }, 100 ); setTimeout( function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--2 .spinner').fadeOut(180); $('.main--2').addClass('checked'); }, 3000 ); setTimeout( function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--2').fadeOut(100); $('.main--3').fadeIn(1000); }, 4000 ); }); $('.screen-trigger--2').click(function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--3').fadeOut(200); setTimeout( function () { $('.main--4').fadeIn(1000); }, 200 ); }); //Questions $('.question--1 label:not([data-error]), .question--2 label').click(function () { var currentQ = $(this).parents('.question'), nextQ = $(this).parents('.question').next(); setTimeout(function () { currentQ.fadeOut(300); }, 500); setTimeout(function () { nextQ.fadeIn(500); }, 800); }); $('[data-error]').click(function () { var message = $(this).data('error'); $(this).append('<span class="question__error">' + message + ''); }); $('.question--3 label').click(function () { $('html, body').animate({ scrollTop: 0 }, 100); setTimeout(function () { $('.main--4').fadeOut(200); }, 300); setTimeout(function () { $('.main--5').fadeIn(1000); }, 500); setTimeout( function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--5 .spinner').fadeOut(180); $('.main--5').addClass('checked'); }, 3300 ); setTimeout( function () { $('html, body').animate({ scrollTop: 0 }, 100); $('.main--5').fadeOut(100); $('.main--6').fadeIn(1000).css('display', 'flex'); }, 4300 ); }); });
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate implementation of setting and retrieving the main color of a website's button elements. It uses standard DOM manipulation and cookie-setting functions, which are common practices. The code does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The use of cookies to store the main color is a common way to persist user preferences. Overall, this script seems to be a benign implementation with no clear malicious intent." }
function setMainColorSC(name, value, days) { try { const date = new Date(); date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000)); const expires = "expires=" + date.toUTCString(); let cookie = `${name}=${value}; ${expires}; path=/`; document.cookie = cookie; } catch (error) { console.error("Error setting cookie:", error); } } function getMainColor() { try { const elements = document.getElementsByClassName('button'); if (elements && elements.length > 0) { let element = elements[0]; const backgroundColor = window.getComputedStyle(element).backgroundColor; const color = window.getComputedStyle(element).color; setMainColorSC("oos_bg", backgroundColor, 1); setMainColorSC("oos_fg", color, 1); } } catch (e) { } } setTimeout(function() { getMainColor(); }, 5000);
URL: https://cove.richquickcart.com/fdx-pkgmsn/files/sv... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the SVG 'use' element, which is a common practice to improve cross-browser compatibility. The script does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily focuses on handling SVG elements and making them work consistently across different browsers. While the script uses some legacy APIs like `XDomainRequest`, which pose minor risks, the overall behavior is benign and likely intended for legitimate purposes. Therefore, the risk score is assessed as low (3)." }
!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"==typeof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.cloneNode(!0);f.childNodes.length;)d.appendChild(f.firstChild);a.appendChild(d)}}function b(b){b.onreadystatechange=function(){if(4===b.readyState){var c=b._cachedDocument;c\|\|(c=b._cachedDocument=document.implementation.createHTMLDocument(""),c.body.innerHTML=b.responseText,b._cachedTarget={}),b._embeds.splice(0).map(function(d){var e=b._cachedTarget[d.id];e\|\|(e=b._cachedTarget[d.id]=c.getElementById(d.id)),a(d.parent,d.svg,e)})}},b.onreadystatechange()}function c(c){function e(){for(var c=0;c<o.length;){var h=o[c],i=h.parentNode,j=d(i),k=h.getAttribute("xlink:href")\|\|h.getAttribute("href");if(!k&&g.attributeName&&(k=h.getAttribute(g.attributeName)),j&&k){if(f)if(!g.validate\|\|g.validate(k,j,h)){i.removeChild(h);var l=k.split("#"),q=l.shift(),r=l.join("#");if(q.length){var s=m[q];s\|\|(s=m[q]=new XMLHttpRequest,s.open("GET",q),s.send(),s._embeds=[]),s._embeds.push({parent:i,svg:j,id:r}),b(s)}else a(i,j,document.getElementById(r))}else++c,++p}else++c}(!o.length\|\|o.length-p>0)&&n(e,67)}var f,g=Object(c),h=/\bTrident\/[567]\b\|\bMSIE (?:9\|10)\.0\b/,i=/\bAppleWebKit\/(\d+)\b/,j=/\bEdge\/12\.(\d+)\b/,k=/\bEdge\/.(\d+)\b/,l=window.top!==window.self;f="polyfill"in g?g.polyfill:h.test(navigator.userAgent)\|\|(navigator.userAgent.match(j)\|\|[])[1]<10547\|\|(navigator.userAgent.match(i)\|\|[])[1]<537\|\|k.test(navigator.userAgent)&&l;var m={},n=window.requestAnimationFrame\|\|setTimeout,o=document.getElementsByTagName("use"),p=0;f&&e()}function d(a){for(var b=a;"svg"!==b.nodeName.toLowerCase()&&(b=b.parentNode););return b}return c});
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates several moderate-risk behaviors, including external data transmission to the `pushrev.pushbroker.com` domain, aggressive DOM manipulation by creating and appending hidden iframes, and the use of a third-party fingerprinting library. While the script appears to be related to push notifications, the lack of transparency around the data being collected and the use of hidden iframes raise concerns. Further review is recommended to determine the full extent of the script's functionality and potential risks." }
var postData = []; function _pushNotificationsReady () { } function _pushNotificationsPermissionDenied () { } function _TRKPushPermissionDenied () { } function _pushNotificationsPermissionGranted () { var iframe0 = document.createElement('iframe'); iframe0.src = "https:///click/20"; iframe0.height = 0; iframe0.width = 0; iframe0.style.visibility = 'hidden'; iframe0.style.display = 'none'; document.body.appendChild(iframe0); } function _TRKPushPermissionGranted () { var iframe0 = document.createElement('iframe'); iframe0.src = "https:///click/20"; iframe0.height = 0; iframe0.width = 0; iframe0.style.visibility = 'hidden'; iframe0.style.display = 'none'; document.body.appendChild(iframe0); } var _at = {}; _at.domain = "//" + window.location.hostname; _at.manifest = "//" + window.location.hostname + "/manifest.json"; _at.worker = "//" + window.location.hostname + "/service_worker.js"; _at.owner = "111"; _at.idSite = "redz"; _at.attributes = {}; _at.webpushid = ""; _at.attributes.push_type = 1; _at.attributes.aff_id = "1866"; _at.attributes.aff_s3 = "w9m2bptvgkqebu86jhi9555i"; _at.attributes.aff_s5 = "w9m2bptvgkqebu86jhi9555i"; _at.attributes.aff_s4 = "PSTCNV_2"; try { var comp = {}; var fpinfo = {}; new Fingerprint2().get(function(result, components){ for (var i = 0; i < components.length; i++) { if (components[i]['key'] != 'canvas' && components[i]['key'] != 'webgl') comp[components[i]['key']] = components[i]['value']; } try { var md = new MobileDetect(window.navigator.userAgent); if (md.mobile()) { var type = "mobile"; if (md.tablet()) type = "tablet"; var os = null; if (md.os().toLowerCase().indexOf('android') >= 0) os = "android"; if (md.os().toLowerCase().indexOf('ios') >= 0) os = "ios"; comp["type"] = type; comp["os"] = os; } else { comp["type"] = "desktop"; } } catch (e2) { } fpinfo['fingerprint'] = result; fpinfo['components'] = comp; _at.attributes.url = window.location.href; _at.attributes.fp = fpinfo; (function() { var u='//pushrev.pushbroker.com';var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'/javascripts/trackpush-v2-cm.js'; s.parentNode.insertBefore(g,s); })(); }); } catch (e) { _at.attributes.url = window.location.href; (function() { var u='//pushrev.pushbroker.com';var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'/javascripts/trackpush-v2-cm.js'; s.parentNode.insertBefore(g,s); })(); }
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript code appears to be a simple countdown timer functionality, which is a common and legitimate use case. The code does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The code is straightforward and does not contain any obfuscation or suspicious behavior. The countdown timer is used to display a time-based offer, which is a common practice in web applications. Overall, this code is considered low-risk and does not raise any significant security concerns." }
function startCountdown(element, totalSeconds) { let remainingTime = totalSeconds; const updateDisplay = () => { const minutes = Math.floor(remainingTime / 60); const seconds = remainingTime % 60; element.textContent = `${String(minutes).padStart(2, '0')}:${String(seconds).padStart(2, '0')}`; }; updateDisplay(); // Display initial time const interval = setInterval(() => { remainingTime -= 1; updateDisplay(); // Update countdown display if (remainingTime <= 0) { clearInterval(interval); element.textContent = "Time's up!"; // Final message } }, 1000); // Update every second } function initializeCountdowns() { const countdownElements = document.querySelectorAll('span[id^="countdown-"]'); countdownElements.forEach((element) => { const randomMinutes = Math.floor(Math.random() * 4) + 6; const randomSeconds = Math.floor(Math.random() * 60); const totalSeconds = (randomMinutes * 60) + randomSeconds; startCountdown(element, totalSeconds); }); } const randomMinutes = Math.floor(Math.random() * 3) + 7; const totalSeconds = randomMinutes * 60; $(document).ready(function(){ $("#button1").click(function(){ $("#firstSection").fadeOut(); $("#offer-modal").fadeIn(3000); const firstCounter = document.getElementById("countdown_1"); startCountdown(firstCounter, 600); initializeCountdowns(); }); });
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're Sorry About Your Missing Package - Choose Your Compensation", "prominent_button_name": "Claim Reward", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're Sorry, But Your Package Appears to Be Missing", "prominent_button_name": "Get Your Compensation Now >", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're Sorry About Your Missing Package - Choose Your Compensation", "prominent_button_name": "Claim Reward", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "brands": [ "FedEx" ] }
	{ "brands": [ "FedEx" ] }
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're Sorry About Your Missing Package - Choose Your Compensation", "prominent_button_name": "Claim Reward", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cove.richquickcart.com/js/fingerprintjs2/1... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script appears to be a fingerprinting library, collecting various browser and device attributes. It does not exhibit high-risk behaviors like dynamic code execution or data exfiltration. However, it does engage in tracking behavior by collecting detailed user information, which is a moderate-risk indicator." }
!function(e,t,i){"use strict";"function"==typeof define&&define.amd?define(i):"undefined"!=typeof module&&module.exports?module.exports=i():t.exports?t.exports=i():t[e]=i()}("Fingerprint2",this,function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(e,t){var i;if(null==this)throw new TypeError("'this' is null or undefined");var a=Object(this),r=a.length>>>0;if(0===r)return-1;var n=+t\|\|0;if(Math.abs(n)===1/0&&(n=0),n>=r)return-1;for(i=Math.max(n>=0?n:r-Math.abs(n),0);i<r;){if(i in a&&a[i]===e)return i;i++}return-1});var e=function(t){if(!(this instanceof e))return new e(t);var i={swfContainerId:"fingerprintjs2",swfPath:"flash/compiled/FontList.swf",detectScreenOrientation:!0,sortPluginsFor:[/palemoon/i],userDefinedFonts:[]};this.options=this.extend(t,i),this.nativeForEach=Array.prototype.forEach,this.nativeMap=Array.prototype.map};return e.prototype={extend:function(e,t){if(null==e)return t;for(var i in e)null!=e[i]&&t[i]!==e[i]&&(t[i]=e[i]);return t},log:function(e){window.console&&console.log(e)},get:function(e){var t=[];t=this.userAgentKey(t),t=this.languageKey(t),t=this.colorDepthKey(t),t=this.pixelRatioKey(t),t=this.hardwareConcurrencyKey(t),t=this.screenResolutionKey(t),t=this.availableScreenResolutionKey(t),t=this.timezoneOffsetKey(t),t=this.sessionStorageKey(t),t=this.localStorageKey(t),t=this.indexedDbKey(t),t=this.addBehaviorKey(t),t=this.openDatabaseKey(t),t=this.cpuClassKey(t),t=this.platformKey(t),t=this.doNotTrackKey(t),t=this.pluginsKey(t),t=this.canvasKey(t),t=this.webglKey(t),t=this.adBlockKey(t),t=this.hasLiedLanguagesKey(t),t=this.hasLiedResolutionKey(t),t=this.hasLiedOsKey(t),t=this.hasLiedBrowserKey(t),t=this.touchSupportKey(t);var i=this;this.fontsKey(t,function(t){var a=[];i.each(t,function(e){var t=e.value;"undefined"!=typeof e.value.join&&(t=e.value.join(";")),a.push(t)});var r=i.x64hash128(a.join("~~~"),31);return e(r,t)})},userAgentKey:function(e){return this.options.excludeUserAgent\|\|e.push({key:"user_agent",value:this.getUserAgent()}),e},getUserAgent:function(){return navigator.userAgent},languageKey:function(e){return this.options.excludeLanguage\|\|e.push({key:"language",value:navigator.language\|\|navigator.userLanguage\|\|navigator.browserLanguage\|\|navigator.systemLanguage\|\|""}),e},colorDepthKey:function(e){return this.options.excludeColorDepth\|\|e.push({key:"color_depth",value:screen.colorDepth\|\|-1}),e},pixelRatioKey:function(e){return this.options.excludePixelRatio\|\|e.push({key:"pixel_ratio",value:this.getPixelRatio()}),e},getPixelRatio:function(){return window.devicePixelRatio\|\|""},screenResolutionKey:function(e){return this.options.excludeScreenResolution?e:this.getScreenResolution(e)},getScreenResolution:function(e){var t;return t=this.options.detectScreenOrientation&&screen.height>screen.width?[screen.height,screen.width]:[screen.width,screen.height],"undefined"!=typeof t&&e.push({key:"resolution",value:t}),e},availableScreenResolutionKey:function(e){return this.options.excludeAvailableScreenResolution?e:this.getAvailableScreenResolution(e)},getAvailableScreenResolution:function(e){var t;return screen.availWidth&&screen.availHeight&&(t=this.options.detectScreenOrientation?screen.availHeight>screen.availWidth?[screen.availHeight,screen.availWidth]:[screen.availWidth,screen.availHeight]:[screen.availHeight,screen.availWidth]),"undefined"!=typeof t&&e.push({key:"available_resolution",value:t}),e},timezoneOffsetKey:function(e){return this.options.excludeTimezoneOffset\|\|e.push({key:"timezone_offset",value:(new Date).getTimezoneOffset()}),e},sessionStorageKey:function(e){return!this.options.excludeSessionStorage&&this.hasSessionStorage()&&e.push({key:"session_storage",value:1}),e},localStorageKey:function(e){return!this.options.excludeSessionStorage&&this.hasLocalStorage()&&e.push({key:"local_storage",value:1}),e},indexedDbKey:function(e){return!this.options.excludeIndexedDB&&this.hasIndexedDB()&&e.push({key:"indexed_db",value:1}),e},addBehaviorKey:function(e){return document.bod
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "brands": [ "FedEx" ] }
	{ "brands": [ "FedEx" ] }
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're Sorry About Your Missing Package - Choose Your Compensation", "prominent_button_name": "Claim Reward", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "brands": [ "FedEx" ] }
	{ "brands": [ "FedEx" ] }
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "brands": [ "FedEx" ] }
	{ "brands": [ "FedEx" ] }
URL: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgP Model: Joe Sandbox AI	{ "brands": [ "FedEx" ] }
	{ "brands": [ "FedEx" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1977), with CRLF line terminators
Category:	dropped
Size (bytes):	29241
Entropy (8bit):	5.329339161343714
Encrypted:	false
SSDEEP:	768:XmXDTstcu8g3hmxCgk6FrORgGxwEyF6A/BV:XmXqgk6FK3wEyF6A5V
MD5:	2A5FC364EB609EB776FC6E380D49DEE0
SHA1:	3719D3CE393A39C67B2095C074531445026ACBFC
SHA-256:	79BFB0E9785FD689591F30D35F9AFAFCC81F8C2A77E6D831BE8C7C6EE6DE872C
SHA-512:	7A3520933501C83D312A1D39D7B80F8523CE51552934D51F4BBC8671B41244CF8A8570CFB37931A21998651B6DDEACB39998960BE35730A48B2810136579FC34
Malicious:	false
Reputation:	low
Preview:	function _TRKPushDeferred() {.. this._done = [], this._fail = []..}....function getUrlVars() {.. var a = {};.. window.location.href.replace(/[?&]+([^=&]+)=([^&]*)/gi, function(b, c, d) {.. a[c] = d.. });.. return a..}....function urlBase64ToUint8Array(base64String) {.. const padding = '='.repeat((4 - base64String.length % 4) % 4);.. const base64 = (base64String + padding).. .replace(/\-/g, '+').. .replace(/_/g, '/').. ;.. const rawData = window.atob(base64);.. return Uint8Array.from([...rawData].map((char) => char.charCodeAt(0)));..}....function _TRKPushGetDeviceType() {.. var a = 1,.. b = "desktop";.. return function(b) {.. (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino/

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	945
Entropy (8bit):	7.254539253699463
Encrypted:	false
SSDEEP:	24:shtyDkHqfxlftjvapBTVzR3KMSDfiAvKhK1:shz6vapBTSDfjvn1
MD5:	2A71AE4C13F0E8FFD49EB78D13704BD2
SHA1:	2F022AD7106078108F2D8F6A9EBD46A0AD01547F
SHA-256:	74280BADD58E8ED08180D3C37647603FCFB58137249D39AA3419FD0EB6C56F30
SHA-512:	2B4EB5DA30358EEF402F6BF0542C0D568007894AA4ED0AE409C4EB24AF1C4EA85DFA85B16A501A4216007C57D8BE987047513BBDA59F50C2FB2EE9C61650253F
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2.."................................................................................!.1.A.Qq.2.3a..."B..Rbr.#CS4.......................1A.!q"3.a............?.e.8...h...s.[7.I.>.,k[...U.Y,ty.b8.\|\..dJ.....".<J..........V~:..=..uk.....J..6.-.T.0M+.....M....0i..nOG..\..,....vs$.....E.".}."d...;... .....kS$)B.=.%....s\|Yf..w....)^.O$]tb..L.I}.?`.Yi\Y..$.9F...I..-.......y.9..._CE.9.+........{R..........)..j...X.5........K.D.h.#......D.X..B..Ds.........]8o.e.....P..+.-y2d\|Mm.....L.!......c.KA.u.:......\..Z..#<...@Z.;.(...1.u.!..L.L2........8..W..u...ihc.F..C[W..../R.%...c.k....X.[&I......O3........G..?.J...7.,.x."..%~........=G/..<zw......t.g]u(B...v'....&.}...>.!Ql#.......<...t.W..pB...P..[..!g...u0ZrtBKHq

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613
Preview:	OK

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	5.574116521159823
Encrypted:	false
SSDEEP:	3:qVZqchckAqRAdu6/GY7ZElIjONFHVdi4BycYTSMimjdd0ry2I8cHorHFM9Fi:qz/AqJmdErHHNBYTSxUdd0zZEorlMS
MD5:	6999FFA12B88F4B57CC44D3F3B11B116
SHA1:	35A1AC72D5343BB549DE291E73581BEE73CD9488
SHA-256:	3FEDF81CDE0D86A9E95E77000818092F2A7E9B9FED25586024B60FF9D08FB151
SHA-512:	DFA9CC0959873DFD1B943E090A056175D050E897CFBE397F29F5D7CE46094D302258D9544769002E879E3B1730F134EB719C1C0527DE883D6448E5BC9F4FD6EB
Malicious:	false
Reputation:	low
URL:	http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/
Preview:	<html><body><script type="text/javascript"> .window.location = atob("aHR0cDovL3d3dy5wZWo5MzUucHJvL1VtZS1aRH5IbF8xYzBlNWI2Ny9DLy9SM0QxUjNDNy8=").//--></script></body></html>.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	downloaded
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	68441
Entropy (8bit):	7.972143495309758
Encrypted:	false
SSDEEP:	1536:pVwLHPaXva6HDiBHQB6A/n2clMQWs1m8LLx7leSJHN5Hp:pVwbPkHDiiflMQV1jZJHfp
MD5:	66F3C5FFD2D0BE9320E067F4197C5A04
SHA1:	866D85ACE57DCA71A2A6553CFBDCEE59DCFCC0E4
SHA-256:	A0EEFB5AB09C628DD91B36145019209AE056E0A451C9C293F4F9684E328EFB4C
SHA-512:	84F5D7D82F7787210A584E79A5B1FA2315F33C7258D1E2D40A0DF1728B260F37C267E04AE76CA5FD746298594DB0BD313D8AE53B1505765DD96EF6DDC8A37B3A
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_undefined_1696444090.jpg
Preview:	.PNG........IHDR.............z}$.....PLTELiqjiiFFF.........ZZZyxx........................[\\HHI...bcc?@@OOOUUV777/00!!!kkk)*%%%uuu..........................._...........4......;,.0).......tRNS....c...6z..b....pHYs............... .IDATx..v.G....A.d...gJ.\...[~...@D..r.p."..gZ...-Ui'..`....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!......k............B......s7.M.7}?).......9..>uC.....y......N...D....=o.......d.....o?..H.....S...%,.........]....47/.?..I...y{..m...}!.z....K.'.u9.O...:!...e. .A..w....N(..L...IP..f.)uB.....#p......(......A.Y...f....[&....=.X.$.#....}%.O.\|FB...U....'...9..%I...%....E.....?.g.<..Y..~........^Rud.E.B....[.^."r.<b..P...}h...wBN..Th...JD...'..G.".W.u9...>...N.IP......t.z+.P...m..Rxg.{.c.N.9x.$c/....=2.....\|.-K..x.TE.\|.w(}......9...%tW.z@..#..\|^."t..5.w.*....pPo.a.&f...s_..,...\|..=,8...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1260
Entropy (8bit):	7.504423166605612
Encrypted:	false
SSDEEP:	24:shtyzont8Q+18Im/9uz0hu1x8Pxm0yhja2:shq718Im/9uh8YZ
MD5:	534C716E3640FE221BADE41925A69BA8
SHA1:	9DEB0EA0030DEA5632498407A2341FAB2B976850
SHA-256:	7862AB2CFCE2662A25B311DC73483FD3B5247E823684AEC9DC16BC3DB103459C
SHA-512:	D82665A4F468DECF68C00C32F6892693E9D6F897F9C715814EA1EAFFE634F8165C8C8DC17855F37CEFBB74888733673AC7141313B76A1EA6615774E9DDB0BA90
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2..".................................................................................1.!.2AQ.q."BR3...a...b#...rT5.CS.4.....................!A1a.Qq.r.3C............?.e..BA..<.d..[.+....;4..9p....Q+.R9..O....l./..ep.X...^<.YZ&>......h.q.M..(.E.6.l.(.%..M..v..k>.2PA(.D.cYWP....T.l..7...[....T.....4....?..._.iN...7.a..cH....1.y}bxwR.M..iP......@.e......s.....g..U]~..}.s...G3....H:FW..\..%o..{C.....J)w....m...=>.S.%C..b.\..`.M9G..S.li.g.#.1>.P.7ao..H.m..\|o.9.@H.E.W.....b\\.q..pI...?0.0.....2.0....X..$......?u;..o..s..".vcpX..m.R[..6...9#......L.pi6..U..$....4..U.................6&.+.;.2.....-.6.[..].2...Y..)n[..qS..]U.H....m0D"..1..n.....)...oR....(.Gv.$...%...X...M.3...9M.y~..`..QB...........H$.....Y....k.b.F..f8..N..Oe......11."$2L/.7.....\.-...i..

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17972
Entropy (8bit):	3.1378751986668756
Encrypted:	false
SSDEEP:	96:9dakbWQROXtnYaNFlTup2TXi2tXRPHGgHzHMtb6iMpeZX04sR8KY6mK010t752HB:9dakNRk/TkWiCEiRJ01U752F3
MD5:	B8D355B65AE7754ED8DCC87E9A798737
SHA1:	083E2B287CDD8CC970AAF7E6A9D23C4E459FB387
SHA-256:	C93F352E6FE929DBD3F107FDE5C26A5298ABEC8BFAB02FFAD96720C77BA7451A
SHA-512:	F1EE9D5775BCB8FDBB4CFD4454033421A3F322391251F1AF33E6EF455798878865CACB2EE5A583DBE5D3670086DFF879537968D9C83DF1AE24D1427FD80D4B25
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....pHYs.........g..R..:,iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c137 1.000000, 0000/00/00-00:00:00 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". ns1:Physicalheightininches="0.3333057761192322". ns1:Physicalwidthininches="1.17323637008667". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:extracted="2017-09-14T19:09:04.766Z". ns1:Bitsperpixel="32". ns1:MIMEtype="image/png". ns1

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3866
Entropy (8bit):	4.788472038172489
Encrypted:	false
SSDEEP:	96:+g+QeUhJi/+MKJUy3pcOFZr7I/lrcBulh4iA12:p+JIJY+MKJXNV7UOsh4F12
MD5:	82EE42C1E4A5255901F9A5A5E58C48C3
SHA1:	011AC9EA192F5BCFCABD58616850D02C3FDFA0CC
SHA-256:	3263BB41C37E93568AA88421E753F4247C809C3DC7B8E21C701C966D16EEE5B0
SHA-512:	1C64A7C00CE3D5C80259624DF220E7624205DA15E026E2E92DD73053D900ED0DFF7EC9FE697AB0A190F603B2BF5E56A87CEDBCA42AFD773678A62B97880EDD26
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/foot-icon03.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="40" height="40" viewBox="0 0 40 40"><defs><path id="vvd0b" d="M266.676 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126-9.256 0-16.673-7.706-16.673-17.126V588.96a1.19 1.19 0 0 1 1.024-1.179c.1-.014 9.842-1.41 13.925-3.926l1.1-.677a1.186 1.186 0 0 1 1.249 0l1.098.677c4.088 2.518 13.827 3.912 13.925 3.926a1.19 1.19 0 0 1 1.025 1.179"/><path id="vvd0c" d="M266.673 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126V583c.217 0 .433.059.625.177l1.098.677c4.088 2.518 13.827 3.912 13.926 3.926a1.19 1.19 0 0 1 1.024 1.179"/><path id="vvd0d" d="M261.913 591.53c-.074-.01-7.41-1.063-10.456-2.939l-.834-.514a1.194 1.194 0 0 0-1.25 0l-.834.514c-3.046 1.876-10.381 2.929-10.455 2.94a1.19 1.19 0 0 0-1.024 1.178v11.704c0 5.245 2.98 9.893 7.476 12.043a12.677 12.677 0 0 0 7.923.998c2.544-.502 4.86-1.768 6.7-3.661a13.465 13.465 0 0 0 3.777-9.38v-11.704a1.19 1.19 0 0 0-1.023-1.179zm-1.348 12.877a11.05 11.05 0 0 1-3.106

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	169729
Entropy (8bit):	7.983802311925401
Encrypted:	false
SSDEEP:	3072:BQ6cxKz3x9SfzVSbFe10YoV3x81tl3VNzSKmgX8d:oxK7x9ozVSRem33u1tdzSi8d
MD5:	FEA8112D783A871DDE80EEF392DEC9C3
SHA1:	A147AE62E702DB4A11CAB652F137AF66C9D4EFFE
SHA-256:	C95C460CE8FB282D9CACEA7EFC5320864D84CAA42B6D9CB215DF565DB1D91883
SHA-512:	1BE1938037B2CF19AC97A64372DD60EED73EF1AF169C5A10CB8BE9BA8038D0E58CBB312399418E042C05AC0578A50A5F30147E2B2EF66838F9EBC4F2279F2565
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ......p.h....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.3 (Windows)" xmpMM:InstanceID="xmp.iid:F41C9BF93A5A11ED87CD8519C566D119" xmpMM:DocumentID="xmp.did:F41C9BFA3A5A11ED87CD8519C566D119"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F41C9BF73A5A11ED87CD8519C566D119" stRef:documentID="xmp.did:F41C9BF83A5A11ED87CD8519C566D119"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..@....qIDATx.....,iy.........o.......,......B.ZA...z.....]%.x..{d.....\|..\|..lO<\|...0..0..0..?......0..0..0.2.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	downloaded
Size (bytes):	37544
Entropy (8bit):	5.7831965742373095
Encrypted:	false
SSDEEP:	768:ozHO0UVJw156fPBzg4LWZtF3229m9GxVvw7I15b62NEai4JXH8Xzuhvi4yAoTdbs:ozHO0UVW76fpM4LWZtF3229ma4k22NEA
MD5:	D56A1947AE3583E101D46A86CD20560F
SHA1:	8E7EA02D82BBD0F03D91C6194666B557CC019F16
SHA-256:	CDFA9A147AE8D8357855515BAB5291B8C9342EEED9D638B47103C19D9D9AAF36
SHA-512:	CACF202E369ACBD5B063BEFC74CFE7E37AC3A1F9FC285867E77C543FCF53A19C05586A8CED8A33C4192F872E7DD26C7E6D9B2C21CF24DB1D1E9C9AD1EFF0CB82
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/assets/js/mobile-detect.js-master/mobile-detect.min.js
Preview:	/!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/.!function(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;d<e;++d)if(c===a[d].toLowerCase())return!0;return!1}function d(a){for(var b in a)h.call(a,b)&&(a[b]=new RegExp(a[b],"i"))}function e(a,b){this.ua=a\|\|"",this._cache={},this.maxPhoneWidth=b\|\|600}var f={};f.mobileDetectRules={phones:{iPhone:"\\biPhone\\b\|\\biPod\\b",BlackBerry:"BlackBerry\|\\bBB10\\b\|rim[0-9]+",HTC:"HTC\|HTC.(Sensation\|Evo\|Vision\|Explorer\|6800\|8100\|8900\|A7272\|S510e\|C110e\|Legend\|Desire\|T8282)\|APX515CKT\|Qtek9090\|APA9292KT\|HD_mini\|Sensation.Z710e\|PG86100\|Z715e\|Desire.(A8181\|HD)\|ADR6200\|ADR6400L\|ADR6425\|001HT\|Inspire 4G\|Android.\\bEVO\\b\|T-Mobile G1\|Z520m",Nexus:"Nexus One\|Nexus S\|Galaxy.Nexus\|Android.Nexus.Mobile\|Nexus 4\|Nexus 5\|Nexus 6",Dell:"Dell.Streak\|Dell.*Aero\|Dell.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 352x480, components 3
Category:	dropped
Size (bytes):	24581
Entropy (8bit):	7.955847172221789
Encrypted:	false
SSDEEP:	384:5exEKnWR0Y+DatWDzQno3z1vUtjoOM0ZzjRcbUOCDk8aYw8rI2TrR5Uxow3EzE:56EkutWSCz1vUtj/jObUjRab2HLUOw3
MD5:	488888F0CA92E17B6DB7B0BD0F80539B
SHA1:	D8F94EDF9B4DD516DBE549FE46D804FDA9C69B0B
SHA-256:	9AF2CEC1FFF0119BF30337B3F51CB0E512428BC7CB3A651A638CCE543A66FFAE
SHA-512:	533B13850933495F8D8DCD58B6C34A3F84EF2006644616C6009D5E15E5391162CD14BC5BB209EFF3CB28B9DCEAB3DE4891458574319DB326B000F7FD029B788A
Malicious:	false
Reputation:	low
Preview:	.............................................................................................................................................,....Adobe.d.............`........................................................................................!1..AQ..aq..."2.....#3B..$4Rr...%b...5.6Cd...STt..........................!1..AQ2aq......"..B.............?....@ ........).x&d ..R....d.4..o.....F8..\|W{$(k....5...0j9..R..7.+...R.T4....3.?...\....\|.#n..3..}..\|~..`(...@ .......@ .......@ .........@ ......Np..sw.h..K:.".w.6c........n.F...{..o.R.qG.u.M..}......Ob..k..g....j..^..tb5Y.z........N..S..........-....\|]..i...e.hm6.>G.[.A..:v`.2..UX,....b.\|j.{0l...r.......;x[.....O....C.l.....7'..g....K8!.e...V..94.Sh~q.>...[.u...`x..:...?.c,....(7".0........cZ.....nj.i.t72F...g....8.xj..8F\..u..A.......*`k..J......7T......@ ............@ ....\..C......l.B..h4.4Z......j.Z....YZ..6u...9.h..Ob..=...y7..J...J...s..=..LR.1..k...w.QN......@....V.3...!i....[.oJ..J7..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	16435
Entropy (8bit):	7.43283474099684
Encrypted:	false
SSDEEP:	384:bQddT8ndekNTfe+kbu2iWmQd5eWNSFQVJqcJl7:bQddTsECTferhiaeWgZcv7
MD5:	5D249AE31CB0930AB9B644A023E5CEDE
SHA1:	1A274E42FD5FC42F5849C67D6085EE3EFF278DEC
SHA-256:	B9406885AE92A68EEA73C9C9A1A2B4C695A6F25FD3BB01398829412CACA9BBA3
SHA-512:	8A3BE5702207B4C03860A133089997576564AAE486A53A7FA0ABE9850811435E11D9A29E94F85DFF2FE722C1463BE73B1D0CF82E6C85457409A05967B57BE6F1
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_undefined_1661551019.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................X.X.."..........................................\...........................#3...."2BCS.$4Rbcr.!%1ADQTs......5ad....Eqt....U......6e............................................................"1Q#BS............?..@......................................................................................................................................................................................................................................................................................................8I...)bdB......+.X..`..Tn.s~k. .Y..7._.R..Ey......e....).@..s.i.{r..E...v.X....J$.../. K.20B.<.['..M..................................................................{..XE/..0....o.[n..#..p.e.#..R..U.........bn4..>.K..6...^{.=...R.m..A.....&g..yk.[o..b......:._.&.Tv....".<.....>Q.5,...]Iv.....v....w...1.#.p. ....

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1182
Entropy (8bit):	4.629771669203164
Encrypted:	false
SSDEEP:	24:t47YAp2RNTVgZLWSyQnF/2upwgbwMghhItP4A46CqlJY:U2RBtSvFmgbwMghhItPwZ
MD5:	6201AB0217306B232E0119FC48D36C98
SHA1:	3F6B572D725765E6EC8D95E2F9268638B418A5E0
SHA-256:	62F7EF6281D5E0DB3F14298CA3707EE3A9F61D1EE85AC5FA5DADE011EAFB32E9
SHA-512:	944568E8A13D0D17B46BFB73E881C44852732BA9D5219E0DD71F0DBA846E01319E0018F6570A708C53807ABE4D57BD4FDC7275D0F2A44DDE4AC1BF1C579541E7
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/icon-box.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="60" height="60"><g fill="none"><path fill="#A98258" d="M49.655 0h-39.31L0 16.552V60h60V16.552z"/><path fill="#DAAE86" d="M10.345 0L0 16.552h60L49.655 0z"/><path fill="#D8B18B" d="M34.138 55.862L30 51.724l-4.138 4.138-2.069-2.069V60h12.414v-6.207z"/><path fill="#E8D5B2" d="M20.69 31.034h18.621v16.552H20.69z"/><path fill="#D4C3A5" d="M31.034 42.414h-6.207a1.034 1.034 0 1 0 0 2.069h6.207a1.034 1.034 0 1 0 0-2.07zm4.138 0h-1.034a1.034 1.034 0 1 0 0 2.069h1.034a1.034 1.034 0 1 0 0-2.07zm-6.207-6.207h6.207a1.034 1.034 0 1 0 0-2.069h-6.207a1.034 1.034 0 1 0 0 2.069zm6.207 2.069h-2.069a1.034 1.034 0 1 0 0 2.069h2.07a1.034 1.034 0 1 0 0-2.07zm-10.345 2.069h2.07a1.034 1.034 0 1 0 0-2.07h-2.07a1.034 1.034 0 1 0 0 2.07zm0-4.138h1.035a1.034 1.034 0 1 0 0-2.069h-1.035a1.034 1.034 0 1 0 0 2.069zm4.438 2.369c-.186.195-.3.454-.3.734 0 .28.114.538.3.735.197.186.466.3.735.3.269 0 .538-.114.734-.3.187-.197.3-.466.3-.735a1.08 1.08 0 0 0-.3-.734c-.393-.383-1.08

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32024)
Category:	dropped
Size (bytes):	34573
Entropy (8bit):	5.5451808678577414
Encrypted:	false
SSDEEP:	384:Pr3jlN4bsIORv1QpjXuBsbqxkau1xvCt+CUgqottAWX+z1jW4/AtGJWq9qjr4YU:/TSnOTQpzgxyPI/ttALRH/Agd99
MD5:	91FF20592A1B1AEBFC39C073360EF584
SHA1:	70208111CC5E63E92A1EE1CC2D640A07DDF758E4
SHA-256:	13774735C1ED030C52D47A268B2A2D1BC16BE14CC433C61FCFC6EE1F81A4E96E
SHA-512:	08013DBB3BB97EE37D0167AEBB4BDE4CE7C4700156FBD479A1E03252FBE2B601F92C0A18B7728D9EFE498D0E9E59F64A481B31E3B815233A42A81B02FB2CD520
Malicious:	false
Reputation:	low
Preview:	!function(e,t,i){"use strict";"function"==typeof define&&define.amd?define(i):"undefined"!=typeof module&&module.exports?module.exports=i():t.exports?t.exports=i():t[e]=i()}("Fingerprint2",this,function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(e,t){var i;if(null==this)throw new TypeError("'this' is null or undefined");var a=Object(this),r=a.length>>>0;if(0===r)return-1;var n=+t\|\|0;if(Math.abs(n)===1/0&&(n=0),n>=r)return-1;for(i=Math.max(n>=0?n:r-Math.abs(n),0);i<r;){if(i in a&&a[i]===e)return i;i++}return-1});var e=function(t){if(!(this instanceof e))return new e(t);var i={swfContainerId:"fingerprintjs2",swfPath:"flash/compiled/FontList.swf",detectScreenOrientation:!0,sortPluginsFor:[/palemoon/i],userDefinedFonts:[]};this.options=this.extend(t,i),this.nativeForEach=Array.prototype.forEach,this.nativeMap=Array.prototype.map};return e.prototype={extend:function(e,t){if(null==e)return t;for(var i in e)null!=e[i]&&t[i]!==e[i]&&(t[i]=e[i]);return t},log:func

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1180), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.554754890514694
Encrypted:	false
SSDEEP:	24:u329/UghngWvEQRjhzHtinjuNENK0v1FRNm3d2NqD10V57BpRsHauEcr7MOoW:u3oUghnrEQRjRNijMENK4bjm3d2u10V4
MD5:	B992FD95F789622FF7303C8F5C72A966
SHA1:	F2346813E5937EF81F2142AA853FF5523683BCBA
SHA-256:	EB31503891973182467742BD11BE208B02B07B19D0CE9B1216A35CC6E7BE78DB
SHA-512:	FE0BF700760F27B60DEA8927D9D9E7CA2374A767621C612BE5D9DEC058DB40F9E0F647B6187F4E0EFF4E0EA85179078D2AC25DC5508480612C490AF4BDE2B384
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php
Preview:	.<script>...var _0x45a3=['href','310326TemamY','$1//$2','3789jqLAjI','201260CufYBR','includes','location','624856ogdMrz','28pRWhXX','10734yvtFqz','352RuMMpQ','1339PvpRAh','392868PctkdY','indexOf','596BmZxvY'];var _0x5ce7=function(_0x34bb17,_0x37718d){_0x34bb17=_0x34bb17-0x1b8;var _0x45a37a=_0x45a3[_0x34bb17];return _0x45a37a;};var _0x3c82e1=_0x5ce7;(function(_0x4279be,_0x4a014c){var _0x2ec4e6=_0x5ce7;while(!![]){try{var _0xe2f92d=-parseInt(_0x2ec4e6(0x1c4))+parseInt(_0x2ec4e6(0x1c2))-parseInt(_0x2ec4e6(0x1bf))+-parseInt(_0x2ec4e6(0x1c0))+parseInt(_0x2ec4e6(0x1bc))parseInt(_0x2ec4e6(0x1bd))+parseInt(_0x2ec4e6(0x1bb))+-parseInt(_0x2ec4e6(0x1b8))+parseInt(_0x2ec4e6(0x1c6))*parseInt(_0x2ec4e6(0x1be));if(_0xe2f92d===_0x4a014c)break;else _0x4279be['push'](_0x4279be['shift']());}catch(_0x1227cb){_0x4279be['push'](_0x4279be['shift']());}}}(_0x45a3,0x87e5e));var params='';params!=''&&(window[_0x3c82e1(0x1ba)][_0x3c82e1(0x1c3)][_0x3c82e1(0x1c1)]('?')<0x0?params='?'+params:params='&'+params);

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 333 x 334, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	90687
Entropy (8bit):	7.984969165931535
Encrypted:	false
SSDEEP:	1536:mVuZnWTRBVLpFudz28S1dpCSPTV16SwhPVpSTcHTaUO00tWc/46bOi7nrx0N9:m7LpM2P7jAXC+h6Wcg6bnrxE9
MD5:	C5758F0FE6A81714DA3A774C14B7D48A
SHA1:	6E70F62A7DDA6777DEE205DD04A2C2768C36B618
SHA-256:	DA5D262D93DF33763F8532159BE2A5B343F43FA34F530505EE3720469D1B634E
SHA-512:	DAA94A7EEE638472AAD40B03A96BFADC9BECF25A45E9DB1B0B8899E722F45714C85C7839A93477707710B57A5057DDF436B3FE4F45436DD749833EB7BF2800D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M...N......dOj....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....eGu..W...{r.....r@.$....&.c........6&9.l.\|..5`.........H2A.#$$..H.5y.s<...j...{N..h..<=5{..kW.Z..Z.v....T.....`^...TPA.........8.TH......P!.....#@.4+...........8.TH......P!.....#.snr..T\|.....bdd$.....:.=66....CuM.391i...;:.wv..x..kkkg..q..TUU......8...nrj..k.k,.i.\.....-.....TUW.%.<...$.5Hrbb"466fW......KZ...q....._J..wb.w....s.?..k.TP...s.4g....B..U..R........a\|l...mt`p..M.O.......3.4..........{.YCC.....;.)...fg.MMM3.G........5c'Q....;..D.l...3..<iRy.u....A.......+....].$u.cSs..T.P..5."..e.R..A..4s.g.... ./^..H..l$..b.d!...............?.d...8.\|..f....iA......&.,RUj...],.....0<<.zzz..{z.L[........<!...9.1B....$}...h....s.N{.L.H.......PW_gZ_..,.V...1: 9..NNG..AZ.KMI.k.."hK..z......$.....675.k.P.}.. .[........S.4S-...F....B@...b...i.C.C"J.....PoZ...........D..s.O..1.3.6.F.T\...pD...!.........}.3....A..&..i..Mv.j.*......w..0\..7i7-4..{..3.[. t..

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1013
Entropy (8bit):	7.279608245334676
Encrypted:	false
SSDEEP:	24:shtyS71YXcz8ZNXqIa0S6vp1o1jmL6OlZ/:shw/ZNaIa0SZ0mOz
MD5:	C96201565A2D0FF9555BB47F16578713
SHA1:	7EB877729E2B5DD978A5EA5388BC25396C74B68B
SHA-256:	D7B07DDB74C029FB867193ED8DFA3D11B34549EC5642B9200439C23135C15BCE
SHA-512:	B385168D7D01924A766AECB867994E6CA9C1C55BD4BC689C0EBD14E9CF2B8AEF6D6D72021C87D8A86C3026197115A6333D825149D8CF8381ED948F1B57F6B2C9
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2..".................................................................................!1..AQa"2.q.R.3..Bb..4.....rS.DT.....................!1Qa..Aq2r."R#3.............?.a.e.X..[V....c..+.e...2..Y..o>_.CZK\..m.B.6.B...\........L.'M..........58..'..3>.n....5..lY894.A-.UFJ..;-0.w..X....EIx......Rl.k....0..gB....G..@N......3...{]@~.?......U....5.^.a%+K..>aA...@.r..l.......Z.j..)./k{..=...E.v.lL..o....;.2.E4&.-d.....aq#.u.Q`s...\..Y]V.k@...bU.b2.E#^.......y.R.._.\|...i}:..5...cs.f.6....f#.w...1....tW.3...,j.;.q.i...S.......vO.c..xG.j...k.d......3.H....,u...A....$..E.....K..3B....?......P..XJ.V...r...h.V.%,...\..>I............I.A.!...a(.....Q..'.'.E1.1$p.......X.5...6...j.._C=.-./.._T........B.._..........3/9W.7...c..~...B...w2...bK../..I.\|......}k..\e.......K..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	5764
Entropy (8bit):	7.22661488237351
Encrypted:	false
SSDEEP:	96:a0w5fSnsvPxRdQOC5OlLgGaYGnBC6lp1L5fSnsvPxRdQOC5OlB:aH5ansRQtHGaYqBpj5ansRQti
MD5:	F8AD51C6EC91C615AF984CB7E4F6AD0E
SHA1:	969CB926C2F0B29AE69DF0F96132F1AA92B8DAF6
SHA-256:	3FB5CA4F3E427640971E62803661579C7148D16D785AC198986EDFA243EC125E
SHA-512:	3A6E22BFDA2B867298B47CE75222FC7AEFADF915EB4A202115E86CE928A25199EEC03B79514ECFF80E395C0B3BBFA1AC860EA9AC95F964DCF112FC00C7FD7537
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....qy......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME......+g.......IDATx....oWg...wK........f.N..Lgd...9.&.N..4!.8g.].x.1.`L4...(.....t#......Q.....?6.Aa.e.^-Y.....9....?.<..\|r.}N..>.........................................................................................................................................................................................................................................4M..uO..,}.Oo..9.....&........p.3.... ....:k.X...s$;.=.y^.......1..-[2(@Za^>...NW.S..%?..c.z..U.;.3S/.S.l.9(@.oq../.2=.La.5.fX.\.....w..j~.{r.~..V.uk~.[.k..t.}.\|^._.@...s_>._....l..K......?su........>..#..\|+..q.._].Ogn..?.@^o~..{u....t>....k.g o....eon..Q.w......E[...n....,.....?de.....;.......v:..s...<.^].0!/fevW7\|.........]Q.]......8....,./3.......Y........#..]..@>..&.y...2.O.WS'@.egzT..%N.=._~.j.....h.9.q..V. ...v..Z.....#.......h..Y.Se.,....F..ZlV..~.....<.s.6x5..[r........h..\|

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.497753303837379
Encrypted:	false
SSDEEP:	3:JSbMtSDhaoGY5TH4YuaTDn:TqaEZ4QTD
MD5:	0228ED5CD654633E668CDFB60F9C6AC7
SHA1:	12A532472F9D61AAA02679961155BB533434C073
SHA-256:	A0B32B3DA027CBD4CAC05797D9C7CFF4174CDDDD9F0CD314B7875420578E4748
SHA-512:	A9768944C5765319955B6327A22AF0A63EBC656CCB078C29E7021210852E1BFB3AAF9B148BABEBA80ACE33BD62F2E9FCFEBCE7329390803B91BFFF4BAF792382
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/service_worker.js
Preview:	importScripts('https://pushlite.pushbroker.com/javascripts/service_worker.js?v1');

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20947
Entropy (8bit):	7.93621799572514
Encrypted:	false
SSDEEP:	384:ML4QGouA2iDLVZDp3CPZfy58+/Ij0VQfwSTdlvE+OeUXQw24HVVpvnpT/QUPX0eb:MLpGouA2iDL7t3CP8O0Q5/zOeSr2EVp5
MD5:	9368160397598E24EB5E324C0365E523
SHA1:	AEBB62FD31141B7B67DF031A400F964217B74D4F
SHA-256:	BF86A101B204F380EF9C934CC87F83A7AD132E6A2EE4DBA3F30A33FAB142E2F0
SHA-512:	2B00697F9A861CF356839640693AD3ADF1CE6D1E2141A788B5AF90DC3F8EE2CCE5D84D9261BECB02FA42B380C0AE86AA132180D6083A1F2D86AF3EB20D565473
Malicious:	false
Reputation:	low
URL:	https://www.freeiconspng.com/thumbs/search-icon-png/search-icon-png-5.png
Preview:	.PNG........IHDR...@...@.......... .IDATx......a..9gfG..,B.!...,d.d........%N...$1v.....#\_.o..\....u.9.&...!...ql?..u.-$!$!....!.X.I.e.,....s...=.3.3.=;.s..O..`..?}.{..~.9_..244P..-[...'..Z[.....g...k...S.F.....w.....@..A..km.c....'+.......p.......c..3...R..yu"......G..s.0..W....8.......}.i.~u+.H.I;...as\|1.s.Z........a..{.......-{..F.0......9.../A...x0.~.Z..X......`.Z.;......M....0..H...pv.v.....-[..{..>A..E.....E...@.{.\|......\|-=2.._...3..F....h...n.......@7..(!..:..!DI/.&..1t..9....{.P..>.....r..?.0..=.0.<Wn.}...08X.i..~..}....e_..,..F..u....-F.......SZ.ghMF..a_.0..2.....>.U'2.....C..d.....n..(.#.)....w....#"..?..:..8.{....+...\|\+!.U...q....(...F.(/.5X.......R........AU.....E.b.A..._{Ca8..2..l'1p.s..........1.i.pi..X..p..\...z..v...61.....s..Z'..p.l.d8.ra1.F.....S.0(...1..F..dhM.k.i....:J@..v...G.....r..}z(.]..EH..#a$.y2....I.KFX.m...2..........f9.2...;...O .].b...`0'~.b...0.2.W.6.1<T..d.`..........2.(q....[.pt. ...q\.T......0.0*

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1223
Entropy (8bit):	7.492209989399422
Encrypted:	false
SSDEEP:	24:shtyXb8vXDm5UJkSqFSk2A0uESG9ENQXMdoakgqQkQQRV59BHHUGeh:shfvTm50kSv9WH1kgsRV5HHHUGeh
MD5:	6785CC32B0A3AE8FE2AE26DA38E0FC9B
SHA1:	DC03D1130AE001D485F1A9F110D0C77770B418BF
SHA-256:	62EE9A1FBC9BEB47BCAAB359E900D8B86E83F9C754C035EFF6649D08DE51CA03
SHA-512:	865886578F2803FADAB7854E4677902F0496DF996449C6AD594312FB65CB6079F5040CB6593E7BCF42CD5E28FAD26875FA24DCDCC7DDDA45F26CBF3C2E9E2998
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2.."................................................................................!1..AQa"2.q.3....Br....RCS4D5.....................!1Q..A.q."2BRr.3.............?.W.....4.....20.g....CDN.1.Q[.N.o.Tp.G.# =..s..+......G\OJ.y[.}.~4.1.......6..#.....s..l/.4....,.hK..p..?..6W/..OTL.v.!..1..^Lw\..s..V.3,.. 9.k....3......R...m..dc.n8.G_..c.Xr.K\|..B.H.5..v...Y..S..?.G~.........s.^E{..-....3..5ee.YJ.kV...Z..g\(.....o...EO.........pe....#.e.c..y.w%..V'..t.i\|......+.&.U!.A........R.r..0.Jq..A.9R..............`........Z..^J..%V,.s.....5s..%...F...\|.!. @....1..[.Z?.n.6.S..+.....G..=z"......U...2.)#..$....ku..)(..k..Q..U&.Q /.x.<....ta.y.#.c.....b..b2-U.)......~'...U..l..........jc.8.C..B...J..;3.SN*..<1..S]\}.M0W.B.t..1.\{..D..p..og.a.........W....2..N=...I#x=$P.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1896)
Category:	dropped
Size (bytes):	1897
Entropy (8bit):	5.379320061869595
Encrypted:	false
SSDEEP:	48:0SHAyWrfKyGSB8jVDtn6082bh3kX0TSK+FsBiGlwlabu:0zrf38nNbhlTS3sB9ilku
MD5:	D3D84DFB2CA4903BA23AD38774E81BA9
SHA1:	0954C217976305BD3C0C6EC8CC1A7322D8E675C5
SHA-256:	2267FF03B9CE83C6329EDAA3CC07DA1CFD35D2C339F6474D109CC6966C1FD33B
SHA-512:	3E4B93E410265BF918A4887BE6FC42CF798906B8A88C433206B8D88F123F05AE233F6EF7C76D6DA2133E8A5FA7A53D393714E1D84704A4AD29FB3924563F8AA0
Malicious:	false
Reputation:	low
Preview:	!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"==typeof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.cloneNode(!0);f.childNodes.length;)d.appendChild(f.firstChild);a.appendChild(d)}}function b(b){b.onreadystatechange=function(){if(4===b.readyState){var c=b._cachedDocument;c\|\|(c=b._cachedDocument=document.implementation.createHTMLDocument(""),c.body.innerHTML=b.responseText,b._cachedTarget={}),b._embeds.splice(0).map(function(d){var e=b._cachedTarget[d.id];e\|\|(e=b._cachedTarget[d.id]=c.getElementById(d.id)),a(d.parent,d.svg,e)})}},b.onreadystatechange()}function c(c){function e(){for(var c=0;c<o.length;){var h=o[c],i=h.parentNode,j=d(i),k=h.getAttribute("xlink:href")\|\|h.getAttribute("href");if(!k&&g.attributeName&&(k=h.getAttribut

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27217
Entropy (8bit):	7.981960591301598
Encrypted:	false
SSDEEP:	768:Tij+ghiGZ+wz5kzR2NJL9oXaqktxLZzzcz4PD5:a+KrzK2Nya7F0z475
MD5:	A7A8652074177770A82765E81E273D69
SHA1:	DA57A27462E9A23C597EA7AD97A399DF81F3380A
SHA-256:	9336DB8390B17DD4D91F8580DBB905DC84391183CC06426AA47C4DD6530C5A0A
SHA-512:	5B936DC127AB41ED861C5C7009F892B02D109213CCAB4BFB82EC8AB81B4AEEA709BD77E27CB46919B2A62CDD00559BE85BC5838D751A9AF87AC6B9F61D54B86E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......sRGB....... .IDATx^.].T.W..../H....c.%...[lX"FA%.....-.b.XQc/.....c.X.`4vEP:.wgg....qV#,...s8......8V....DGG....D..?V>y.JOO'322..h4..f3I.4a...GG8........Y.R.(..Z.T..j5...y{{..J.2H$..V.Z)u.... .......d.7n.P..y...?...u..G.>JJJ..`0..H$&...iZ.a...8G.$.0...8J$..X...,+.8...p.......l69..bq....38..,V..P(...../..].j...T.^......J.,..T...@...>..@^b.9../^...._4....}...w.h..i.Z}1..`.&.(.FQ.NQ..!.....A.D6.`Y6.....LOp<{i(......u..p,...R..n..m4MS,..E6...B.0Y(.>(S...J....'.d.S'.E.....^b.......b...<.\|.......qqq........8.k....)$I......)..v..c..'..$1 ....\.....L.......:x..@..w BB...C...~+.0&...B..R.J..S..M.4yR.r.......\...@^0A'O.T...x\.x...W..4].eY..R.$y..0.D.....#...D.a.Xx.x.........L .<..H$9......O$......h...e7;.q...(.zH.....+.k.....Kn.}F1.<;........8u....u....@....A...A.p....p...".... .P.fw>..5..g..-...6;\.D0.E...'.D..^..D....(.z.a.,.Z9..0..#I.F.5w.l....>.,.C.....a.5....Iw............).a..Hd#IR.q...2...S.>.M+.....

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2181
Entropy (8bit):	7.503862586048059
Encrypted:	false
SSDEEP:	48:euNn2vSJ3IIvf4pPC6ehT00DpeTvC0SJ+Hc:B2HIvfY6300le++Hc
MD5:	198CD9DA4DA5271ED08CFFB00E821506
SHA1:	6DA9AD6496BBED95ADD821D4AC26C22533FC1187
SHA-256:	294722EE2D3C0EC80264AD26EADC057FAD4248BD3C1733457CDD265C0C577EB7
SHA-512:	EF19EF9A6DD5208D533195CC4570134D48394129FC11C397C14A7B510E778D67A62FBBAA6D9AFB3761842B49F702937E81A41AD113EFB8AA50E410B8191850B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G..........g......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:027B46B000F211E69D829D1040967E65" xmpMM:DocumentID="xmp.did:027B46B100F211E69D829D1040967E65"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:027B46AE00F211E69D829D1040967E65" stRef:documentID="xmp.did:027B46AF00F211E69D829D1040967E65"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>&..,....IDATx..[h.U...;..d..ns...Z.....>..Cm.-.H..ZTR..F,ZD... J.CKZ.-.y.R....BKQ!).TH....^r.d7.e...3..$.k7...\|sv

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 333 x 334, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	90687
Entropy (8bit):	7.984969165931535
Encrypted:	false
SSDEEP:	1536:mVuZnWTRBVLpFudz28S1dpCSPTV16SwhPVpSTcHTaUO00tWc/46bOi7nrx0N9:m7LpM2P7jAXC+h6Wcg6bnrxE9
MD5:	C5758F0FE6A81714DA3A774C14B7D48A
SHA1:	6E70F62A7DDA6777DEE205DD04A2C2768C36B618
SHA-256:	DA5D262D93DF33763F8532159BE2A5B343F43FA34F530505EE3720469D1B634E
SHA-512:	DAA94A7EEE638472AAD40B03A96BFADC9BECF25A45E9DB1B0B8899E722F45714C85C7839A93477707710B57A5057DDF436B3FE4F45436DD749833EB7BF2800D3
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg
Preview:	.PNG........IHDR...M...N......dOj....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....eGu..W...{r.....r@.$....&.c........6&9.l.\|..5`.........H2A.#$$..H.5y.s<...j...{N..h..<=5{..kW.Z..Z.v....T.....`^...TPA.........8.TH......P!.....#@.4+...........8.TH......P!.....#.snr..T\|.....bdd$.....:.=66....CuM.391i...;:.wv..x..kkkg..q..TUU......8...nrj..k.k,.i.\.....-.....TUW.%.<...$.5Hrbb"466fW......KZ...q....._J..wb.w....s.?..k.TP...s.4g....B..U..R........a\|l...mt`p..M.O.......3.4..........{.YCC.....;.)...fg.MMM3.G........5c'Q....;..D.l...3..<iRy.u....A.......+....].$u.cSs..T.P..5."..e.R..A..4s.g.... ./^..H..l$..b.d!...............?.d...8.\|..f....iA......&.,RUj...],.....0<<.zzz..{z.L[........<!...9.1B....$}...h....s.N{.L.H.......PW_gZ_..,.V...1: 9..NNG..AZ.KMI.k.."hK..z......$.....675.k.P.}.. .[........S.4S-...F....B@...b...i.C.C"J.....PoZ...........D..s.O..1.3.6.F.T\...pD...!.........}.3....A..&..i..Mv.j.*......w..0\..7i7-4..{..3.[. t..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 439, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50012
Entropy (8bit):	7.964426013334859
Encrypted:	false
SSDEEP:	768:TOlxVqVzMCloKQrriUA4k1ahkCHycMsADiQY/PUrVltTUz1Dou6ZEa+UXpwMGit:TqVqlM+dcWTk2CH0vbY/PQVQypZVpw4
MD5:	134555B7A6737F64AC8C2ACC66F6C1F7
SHA1:	4CE4519B3E53077AA66DEC63F3893017EB90A5B0
SHA-256:	F80FE6F1A1A6E26CFA451EC907BCA5DE43DC433B713129F14079E53A2AA80B9F
SHA-512:	98C180C0D345C8853BAA2F51AF9B8671326C085B185CC7E3AEFBF742AE9EFF213EEA187912246E8AF907BA54E7CC78C52B925F84FF58C9B82C9891AEE00838D9
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg
Preview:	.PNG........IHDR.............7.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:DocumentID="xmp.did:05DBAA4A1E3211EDA021992EFCCF128C" xmpMM:InstanceID="xmp.iid:05DBAA491E3211EDA021992EFCCF128C" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2022-08-10T12:05:20+05:30" xmp:ModifyDate="2022-08-17T19:09:31+05:30" xmp:MetadataDate="2022-08-17T19:09:31+05:30" dc:format="image/png"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22A15C25187711ED93C28D3C6FA64152" stRef:documentID="xmp.did:22A15C26187711ED93

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	dropped
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	5539
Entropy (8bit):	4.928544495765394
Encrypted:	false
SSDEEP:	96:JYIo3Nm+uFGhgKm8cmBUp22tyPRHl2DFt4c4tA8Etj:Do3P2v8cbtkRH4DFtI3Etj
MD5:	A953DF1FFEE783BEE31882F423F57AE4
SHA1:	411F948A32FCE7F3C71E61DB1CBBB7AFB5B141AE
SHA-256:	6DAE68FD54938FB306442CF3C5BB3F5BF728426F28AA9F3097F84F41556141D1
SHA-512:	4763EEB13AB60A69D2DB811B68F1601C66AA6DBDADDA4FF9F4F097C23EA17BC5D310343F9B63207115955506E70DA638E1833DF0032C48947D3D7B4A8E3A3709
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTNOeklpd2lkaUk2SWpJaWZRPT0=aaIiaKjaseS
Preview:	@import url('https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap');....body{.. /* font-family: 'Source Sans Pro', sans-serif;.. padding: 0;.. margin: 0;.. width: 100%;.. background-color: #eeeeee;.. color: #494949; /..}.....container{.. / max-width: 768px; */.. margin: auto;..}.....container-head{.. padding: 1rem 0;.. text-align: center;..}.....container-head img{.. max-width: 200px;.. margin: auto;..}....p{.. font-size: 19px;..}....button{.. padding: 15px 30px;.. background-color: #306fdb;.. box-shadow: 0 4px 10px rgb(0 0 0 / 20%);.. border: none;.. border-radius: 999px;.. color: #fff;.. font-weight: 400;.. font-size: 25px;.. cursor: pointer;..}....button:hover{.. background-color: #215fca;..}.....pack-con{.. max-width: 786px;.. padding: 0px 20px;..}.....pack{.. text-align: center;..}.....pack-head p{.. f

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	310725
Entropy (8bit):	7.994910714327784
Encrypted:	true
SSDEEP:	6144:2wv00CFUOitF04BocphEcdHI9R7cXngHpq2W1O7WJYP1Md1bP+zjLU8eQSUx:t8F0tF927QgHUsCUEQjLsUx
MD5:	2F06FBF68C77543C693492CC3C3B1BB6
SHA1:	819075B64BCACDBABF8F197700079173087C66F3
SHA-256:	3EAF07933BEB43384C05A1EA49DF322B3914148A3D131AFE49DF2C4DB58D29DF
SHA-512:	795407EF65F3FB5FBA4E959EE4B018145E34268526FF86ED4BC3A2EBBB9ADFF2128CEE3BF81752916AE9084A2E246C6D46D5F446D747AFDA980BD1578C29E133
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ......p.h....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:00D66928B1D011ECA8289FE764ABDED4" xmpMM:InstanceID="xmp.iid:00D66927B1D011ECA8289FE764ABDED4" xmp:CreatorTool="Adobe Photoshop 2022 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:760CF3CE51B111EC8B42EB2481EFBACE" stRef:documentID="xmp.did:760CF3CF51B111EC8B42EB2481EFBACE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......:IDATx..........*.........m...B ..w..P..K.@..B...N....!4SL...j...6......K.....+...............O....Q....0..0

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 600x720, components 3
Category:	dropped
Size (bytes):	16402
Entropy (8bit):	7.698749567925864
Encrypted:	false
SSDEEP:	384:pkWXYZTlzOeBLOBEdI/eijmSwBPw28/qPP3LrN/HPf:pk6YnzlBLOWdWeWw628kX
MD5:	9096E83ADEAA48A93E76737080F804E3
SHA1:	8AC41A427B0C46D7D0B179019D6F19F38578B9B0
SHA-256:	AED18BF72F746DD18306CB7607C138896927E13B78AE805DBB0CBF3210A27EE3
SHA-512:	E45DC8C532EB6618213D68865D47403F7FCCC15F59595DD0B759D06685DCF54B6DB1AF12795154FEDF4A48589653735FA7AD3A439324ECAB0DB5C18BA08EE390
Malicious:	false
Reputation:	low
Preview:	..........'.'>%%>B///BG=;;=GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..''3&3=&&=G=2=GGGDDGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG.....&....Adobe.d.............X.."...................................................................................1..!AQ"a.2BRq..#3.....b.$.r..c........................!1"AQ..2aq.B...............?...................R4.d.......=).........N.>i#Z\|N.{..N.w+.....5.[0....8.......A.\|n..SI.q...._....z..''.......!......f.../p....?w.F....\|R.._........4.0...........r5.0.Ww].r..w5_./...-.......F..............\|..7c.n#.g.q...g'..z.\|j....J..]..S.`$A.S..>..Z?+;6.V.....=...MeuD.............................................e5..<#V....7..n/'].`u.x..J_.8.n'U.O,..2......bu...'..w.~!....f........e.#r..N3.........%S.d.,0FK...$.*N..F...F..$..`..F...+.pH .H.j......g....p.=%............i.3......ga4..$........................................2..QZ!..o..q..o.1...<.......:.,..\.`.@2..i.1.9...>....+.cDbW.F,.&@.=$.2..-$...Rr..+J;.F.j.sS(g.Q.iA.&Z.e

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	310725
Entropy (8bit):	7.994910714327784
Encrypted:	true
SSDEEP:	6144:2wv00CFUOitF04BocphEcdHI9R7cXngHpq2W1O7WJYP1Md1bP+zjLU8eQSUx:t8F0tF927QgHUsCUEQjLsUx
MD5:	2F06FBF68C77543C693492CC3C3B1BB6
SHA1:	819075B64BCACDBABF8F197700079173087C66F3
SHA-256:	3EAF07933BEB43384C05A1EA49DF322B3914148A3D131AFE49DF2C4DB58D29DF
SHA-512:	795407EF65F3FB5FBA4E959EE4B018145E34268526FF86ED4BC3A2EBBB9ADFF2128CEE3BF81752916AE9084A2E246C6D46D5F446D747AFDA980BD1578C29E133
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg
Preview:	.PNG........IHDR... ... ......p.h....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:00D66928B1D011ECA8289FE764ABDED4" xmpMM:InstanceID="xmp.iid:00D66927B1D011ECA8289FE764ABDED4" xmp:CreatorTool="Adobe Photoshop 2022 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:760CF3CE51B111EC8B42EB2481EFBACE" stRef:documentID="xmp.did:760CF3CF51B111EC8B42EB2481EFBACE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......:IDATx..........*.........m...B ..w..P..K.@..B...N....!4SL...j...6......K.....+...............O....Q....0..0

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	16435
Entropy (8bit):	7.43283474099684
Encrypted:	false
SSDEEP:	384:bQddT8ndekNTfe+kbu2iWmQd5eWNSFQVJqcJl7:bQddTsECTferhiaeWgZcv7
MD5:	5D249AE31CB0930AB9B644A023E5CEDE
SHA1:	1A274E42FD5FC42F5849C67D6085EE3EFF278DEC
SHA-256:	B9406885AE92A68EEA73C9C9A1A2B4C695A6F25FD3BB01398829412CACA9BBA3
SHA-512:	8A3BE5702207B4C03860A133089997576564AAE486A53A7FA0ABE9850811435E11D9A29E94F85DFF2FE722C1463BE73B1D0CF82E6C85457409A05967B57BE6F1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................X.X.."..........................................\...........................#3...."2BCS.$4Rbcr.!%1ADQTs......5ad....Eqt....U......6e............................................................"1Q#BS............?..@......................................................................................................................................................................................................................................................................................................8I...)bdB......+.X..`..Tn.s~k. .Y..7._.R..Ey......e....).@..s.i.{r..E...v.X....J$.../. K.20B.<.['..M..................................................................{..XE/..0....o.[n..#..p.e.#..R..U.........bn4..>.K..6...^{.=...R.m..A.....&g..yk.[o..b......:._.&.Tv....".<.....>Q.5,...]Iv.....v....w...1.#.p. ....

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1013
Entropy (8bit):	7.279608245334676
Encrypted:	false
SSDEEP:	24:shtyS71YXcz8ZNXqIa0S6vp1o1jmL6OlZ/:shw/ZNaIa0SZ0mOz
MD5:	C96201565A2D0FF9555BB47F16578713
SHA1:	7EB877729E2B5DD978A5EA5388BC25396C74B68B
SHA-256:	D7B07DDB74C029FB867193ED8DFA3D11B34549EC5642B9200439C23135C15BCE
SHA-512:	B385168D7D01924A766AECB867994E6CA9C1C55BD4BC689C0EBD14E9CF2B8AEF6D6D72021C87D8A86C3026197115A6333D825149D8CF8381ED948F1B57F6B2C9
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2..".................................................................................!1..AQa"2.q.R.3..Bb..4.....rS.DT.....................!1Qa..Aq2r."R#3.............?.a.e.X..[V....c..+.e...2..Y..o>_.CZK\..m.B.6.B...\........L.'M..........58..'..3>.n....5..lY894.A-.UFJ..;-0.w..X....EIx......Rl.k....0..gB....G..@N......3...{]@~.?......U....5.^.a%+K..>aA...@.r..l.......Z.j..)./k{..=...E.v.lL..o....;.2.E4&.-d.....aq#.u.Q`s...\..Y]V.k@...bU.b2.E#^.......y.R.._.\|...i}:..5...cs.f.6....f#.w...1....tW.3...,j.;.q.i...S.......vO.c..xG.j...k.d......3.H....,u...A....$..E.....K..3B....?......P..XJ.V...r...h.V.%,...\..>I............I.A.!...a(.....Q..'.'.E1.1$p.......X.5...6...j.._C=.-./.._T........B.._..........3/9W.7...c..~...B...w2...bK../..I.\|......}k..\e.......K..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	7.680495525765774
Encrypted:	false
SSDEEP:	48:ZXUCFOvxXSsxw+Ct9hyXLkYWMtonip7YY:ZXUFJS+p29hEsM+3Y
MD5:	4A6F4A1D7A2D7EFCFC0E08C181C535F4
SHA1:	AAE496D4878C8E0693A0FF705BDA73EDAED83966
SHA-256:	439E3ECE05384466977DBB1867AD87F4625F7FF7CEDFCA83DFA819250593D7F2
SHA-512:	E1C372F2047867E2DFC188F82A7984EAEAA8B62A5D178256C8E039CCB857E7C5409CCC70C0E9DE37B7CECE742A22BAE6F8B6423A0C29A99E9BE169BC59394930
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................2.2....................................................................................!..12.A"34Qaq..Rb.Sc.5..TU.6...Br.#$D.7......................!1Q..A.aq."2...R..............?.\|.:.}....4.v...(.&.BK.svR..&.C.....E..S...~..{9.Sj..:.T...P..r...`.qy....,.[?R5.eS\..0...9.1J...$g..oC...M.W.D..he'%n."....m.C}w..._^O/...".y&C".....\mU.Rh.w[..{+..KuVf...Dc...p6.j..J......V.+.o/..y>...j5..z.y.]..V=..T#0......c.6..!(.....[....C#6....S.kv....u.g.o..H....>......%.G.y.;..7..q.g.d..@..G<..=..#O..\|....x.%x#u.u.[..F%.5.&..A.d...\c...8..U...]F..I-^JS......U....7.[..K...9~N..@......[.w........4....a.T....).$}..;.;.....k.[I..v....P\|...N...A.]7/..{mE1.v...KY..*.....@.N4.On)>`.Qu28.q...N..l..;...;.j<.=R...q .o...fv..~.w..m.....v-..x[M.I5...\.5QZ..gf5..<x_..x.l...Cv......

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2317
Entropy (8bit):	7.548636434917496
Encrypted:	false
SSDEEP:	48:euNn2vDUlgUnJ3DUegUTQnZ7PL4ds90HL04WI0u5opXWwKHzTV2:B2AlfmefT4Gs6Waimw+w
MD5:	B296D08461DEEE25E44F147383D669A1
SHA1:	00A8C3074D422C2F21CA3CAC757FBF9AF376F6C4
SHA-256:	90E1AB069A054BC77C830EF692878BBC006DBCD9D70B1F209D1E8EE03DF65D2F
SHA-512:	7D054589D84CD6C7505B0D46E2FC9CB1AF27388C323B88EFC606BA622FDC1991B4C421B4E87C98681DFE12701A3C4486A38C49553A88645FCE315A95A82A2261
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G..........g......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:39AE36C700F211E6A391A97BE02DA045" xmpMM:DocumentID="xmp.did:39AE36C800F211E6A391A97BE02DA045"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:39AE36C500F211E6A391A97BE02DA045" stRef:documentID="xmp.did:39AE36C600F211E6A391A97BE02DA045"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\|......rIDATx..XklTU........ZZ(....1.JP.......D.5$.yJ....DBP.`"..b1.1.?.R...C....(..BJ[Z.n...v.....X.l...=..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/fx-favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11084), with no line terminators
Category:	dropped
Size (bytes):	11084
Entropy (8bit):	5.26714858103651
Encrypted:	false
SSDEEP:	192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip
MD5:	65F1D21D5FCC9D21DA758ADABABD0C3C
SHA1:	E0661D07D64C00008BC9D013D16EEC0A0F156DC7
SHA-256:	D2B82E612D2A812E8BE2A57300DAB8923C4F2EDBE7A799E7DA70791B595646FE
SHA-512:	DE7D7DC739CED2E6CFA52C1809144180787ADC3AD5F9B7597C72B9D9BD5EB2F21DE06B1FC12B5034F2458DE428B368772700A6665D3F2E02F148A300239E6183
Malicious:	false
Reputation:	low
Preview:	window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)return"pfx"==t?o:!0}return!1}function s(e,t,r){for(var o in e){var i=t[e[o]];if(i!==n)return r===!1?e[o]:a(i,"function")?i.bind(r\|\|t):i}return!1}function u(e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r;r++)j[n[r]]=!!(n[r]in E);return j.list&&(j.list=!(!t.createElement("datalist")\|\|!e.HTMLDataListElement)),j}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),p.inputtypes=function(e){for(var r,o,a,i=0,c=e.length;c>i;i++)E.setAttribute("type",o=e[i]),r="text"!==E.type,r&&(E.value=x,E.style.cssText="position:

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7
Preview:	OK

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3200
Entropy (8bit):	5.323910578749177
Encrypted:	false
SSDEEP:	96:QOLEJc+ukOLgN/OgBJc+ukOgsN/OxTqJc+ukOxTdN/OCxJc+ukOC8NE:NASmxVrCwbBbP
MD5:	CEF19DC54F42AB168B77A513261767D8
SHA1:	2D1FC2AD85640F7F4E92A7E96B7C9E4027BB1D00
SHA-256:	2A21242A6F1802459B4C1515FD4AE9ABB4CD9F5F887F91D3549FAA1EF1C9537C
SHA-512:	88C1AFAA3B4B2590FD9F3E481E6C70FF90F2850A57A6DA0CC46B8D11AA19F54C5C520CC6FB45C71663BEF3C7EADDADB0B19327D62CA442C4F533414386C17522
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Poppins:400,500,600,700"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 500;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2) format('woff2');. uni

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2181
Entropy (8bit):	7.503862586048059
Encrypted:	false
SSDEEP:	48:euNn2vSJ3IIvf4pPC6ehT00DpeTvC0SJ+Hc:B2HIvfY6300le++Hc
MD5:	198CD9DA4DA5271ED08CFFB00E821506
SHA1:	6DA9AD6496BBED95ADD821D4AC26C22533FC1187
SHA-256:	294722EE2D3C0EC80264AD26EADC057FAD4248BD3C1733457CDD265C0C577EB7
SHA-512:	EF19EF9A6DD5208D533195CC4570134D48394129FC11C397C14A7B510E778D67A62FBBAA6D9AFB3761842B49F702937E81A41AD113EFB8AA50E410B8191850B9
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	.PNG........IHDR...G..........g......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:027B46B000F211E69D829D1040967E65" xmpMM:DocumentID="xmp.did:027B46B100F211E69D829D1040967E65"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:027B46AE00F211E69D829D1040967E65" stRef:documentID="xmp.did:027B46AF00F211E69D829D1040967E65"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>&..,....IDATx..[h.U...;..d..ns...Z.....>..Cm.-.H..ZTR..F,ZD... J.CKZ.-.y.R....BKQ!).TH....^r.d7.e...3..$.k7...\|sv

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	5.642560689554166
Encrypted:	false
SSDEEP:	6:qz/AqJmdErHHkShgBms/8QEQZiVcrjC3HUzKECsU3TfBhaS:kIqJmo7w0kb3C3HGFCsCTbaS
MD5:	A474465A1D4EF7E75D871C0ED40E9153
SHA1:	E54A68BDE32DC188F5F2B8EC617156455B54844D
SHA-256:	1EBFC7BE373AF39D3ED1DBBCA08AB0EC016B5B20DF6BF0D53C6D5727E2BF6802
SHA-512:	C4F7BAE82865B10AFEFE83301FB2636EC20B64055D4CA1E505BC806AF3296092CE70C218398EEC64F9F16804D0547BC8E83C1A85A2CD7EF9BA427AFDD2D7919C
Malicious:	false
Reputation:	low
URL:	http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C//R3D1R3C7/
Preview:	<html><body><script type="text/javascript"> .window.location = atob("aHR0cHM6Ly90NC5wcml6ZXBhdGhvbnlvdXJ3YXkuY29tL2FmZl9jP29mZmVyX2lkPTQzNyZhZmZfaWQ9MTg2NiZhZmZfc3ViPWZlZHdhbGwmYWZmX3N1YjI9Y29wbGlnaHQmYWZmX3N1YjM9JmFmZl9zdWI0PSZhZmZfc3ViNT0=").//--></script></body></html>.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 377x379, components 3
Category:	dropped
Size (bytes):	20636
Entropy (8bit):	7.970835636718526
Encrypted:	false
SSDEEP:	384:SHwjnxJN9foYsyOeTUrzm4d0uDs7hu/+oQtysji7fJ/Ua+DsmPx3NQGFkTBM:SAXSyHQ3zRDeu/+oiywi9/MbxCyGM
MD5:	1B8B6C3FD346D4492A6596C60408A20D
SHA1:	789E01B518DC5A47A1ED09C5159BE3BCBF83CA5B
SHA-256:	7CE351E6D7461D7BD7D7AF99D8AE0E514F6C5E4A2B806A91713A68123E6ACE21
SHA-512:	507D9E2B3FE9D73409B514D318DE773F6429E005863C269B252CF7D804A3C9B27B8CE4583946D867ADCB848EA524CC14E31F5B1239FED08D89DD5046992E8AC8
Malicious:	false
Reputation:	low
Preview:	............................................ !#! .++..++>===>@@@@@@@@@@......................".....",......,&)###)&//,,//;;9;;@@@@@@@@@@..........Adobe.d...........{.y..".................................................................................!.1..AQaq."2....#BR....3b..$Sr..45CT.....%Dc..s......................A!............?..iR.@.R.A...u..F....1#..$....B.......K.._.h5.U.[..X\.....?...(...=...D.k<.?_...]...}...A......PS.7....P..m.#..?.Y....@9..."...8..IO....T..?...2.....{y!...g....yY..N5..z._1Uw.7.%.zQ.w"...Z$.....j66.3\F....c.....n.~....+];.I'..]........./.I..D.!.F..#..i]..MKsu......gj....N._.?...H...#....)...V....R.c.......=........P.y2.>U....#0..[t.S....L.p.w.....d.w..>....~5..w.B\|k..cQ...cP.......B\|E{........+......}-~~.......B.P.>.....c..X...w...7..a....q...._Y.S..B...w^.u.u......B..6.}..ys.^.]..4...Y.p..X..MJ...gD.,....Y.0U.....P....d.xw...5.(.....1S...20e<.9......=.G..R...F..A!...o...U.{@.R.@.R.@.R.A...iR.@.R.@..C..._.?...te.Aa...

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d
Preview:	OK

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3866
Entropy (8bit):	4.788472038172489
Encrypted:	false
SSDEEP:	96:+g+QeUhJi/+MKJUy3pcOFZr7I/lrcBulh4iA12:p+JIJY+MKJXNV7UOsh4F12
MD5:	82EE42C1E4A5255901F9A5A5E58C48C3
SHA1:	011AC9EA192F5BCFCABD58616850D02C3FDFA0CC
SHA-256:	3263BB41C37E93568AA88421E753F4247C809C3DC7B8E21C701C966D16EEE5B0
SHA-512:	1C64A7C00CE3D5C80259624DF220E7624205DA15E026E2E92DD73053D900ED0DFF7EC9FE697AB0A190F603B2BF5E56A87CEDBCA42AFD773678A62B97880EDD26
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="40" height="40" viewBox="0 0 40 40"><defs><path id="vvd0b" d="M266.676 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126-9.256 0-16.673-7.706-16.673-17.126V588.96a1.19 1.19 0 0 1 1.024-1.179c.1-.014 9.842-1.41 13.925-3.926l1.1-.677a1.186 1.186 0 0 1 1.249 0l1.098.677c4.088 2.518 13.827 3.912 13.925 3.926a1.19 1.19 0 0 1 1.025 1.179"/><path id="vvd0c" d="M266.673 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126V583c.217 0 .433.059.625.177l1.098.677c4.088 2.518 13.827 3.912 13.926 3.926a1.19 1.19 0 0 1 1.024 1.179"/><path id="vvd0d" d="M261.913 591.53c-.074-.01-7.41-1.063-10.456-2.939l-.834-.514a1.194 1.194 0 0 0-1.25 0l-.834.514c-3.046 1.876-10.381 2.929-10.455 2.94a1.19 1.19 0 0 0-1.024 1.178v11.704c0 5.245 2.98 9.893 7.476 12.043a12.677 12.677 0 0 0 7.923.998c2.544-.502 4.86-1.768 6.7-3.661a13.465 13.465 0 0 0 3.777-9.38v-11.704a1.19 1.19 0 0 0-1.023-1.179zm-1.348 12.877a11.05 11.05 0 0 1-3.106

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 168, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2888
Entropy (8bit):	7.895657732996726
Encrypted:	false
SSDEEP:	48:KPLkcWmDg+/0ZRZfSSOQ6sAnMP6iuRRW/GlPOgEXFIsQh1YvId9Tjm3winG5wi3u:KzpzT/0ZRZfSZl9MP6jRW+lPXEXC9994
MD5:	BEA6E52B658A84D05DEF46612619ED2E
SHA1:	1CC4754084AE2F90519F4CC0B019E04D5C39CCDF
SHA-256:	9C0BF92E3BFD7465D7F17C9A97C4A2EFF5C7D129A83CCEE75FA809801B7B86F3
SHA-512:	04AF59BB313B9D78780A726311334D6F25A5FC7BDED293EC0633A14D629C479261D30846EE63CF2A08B01A1BA512A96161B10A3DC88303F757B15BC24E23DA2F
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS
Preview:	.PNG........IHDR...,.........m.#=...#PLTE...@+..z!?,.5......{.7&..oI.......r.=#.....y.;$..s....ob....0........0...s................_.........U)..rc.cU..........fT....(......V....v.3...F.....}....\H....q.M7.......ZJ....S?..\|...m...X...}.:....z".....2.....i\.C...{....ui..F...K9..l.u....`Q...........@.\|+wl.bT..2......IDATx..._.F....R4.R....`.P.....\.Z'.Iku....W,D.{/...v......\8.../..EM#.. .. .. .. .. .. .. .. .. .. ......y.U...%I.Wc.uY..iwB..t.=..c!.^...,."...7..i.......,.....@.H....dI@.$ Y..,.H..$K..%...dI@.$ Y..0...+Y..5..=.,n.\|W.....{...'..........p^..+D.t..#I\Y...+.%...dI@.$ Y..,.H..)....klnn6.6.n]..;W...&..~TY[.U....\g.9kv.....mm{g.....V....c..dl..Ms.\&.l}.:......\|&w.....4n...S.s.n.q}o..@s.....uym5l.h.7.....N.._Z.;U@O.!+..-..yu.........{w.u...k....s2)........[..z.i.s.,.^...........]."Z9.Z.y\Y8........je......V............Y.fg..N.t.&..a...u..2.C-...2.i....:...k.v..i....T.[..ue..P..._]i..u.1..6..r.7....zg..i.8s...@I.V

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1260
Entropy (8bit):	7.504423166605612
Encrypted:	false
SSDEEP:	24:shtyzont8Q+18Im/9uz0hu1x8Pxm0yhja2:shq718Im/9uh8YZ
MD5:	534C716E3640FE221BADE41925A69BA8
SHA1:	9DEB0EA0030DEA5632498407A2341FAB2B976850
SHA-256:	7862AB2CFCE2662A25B311DC73483FD3B5247E823684AEC9DC16BC3DB103459C
SHA-512:	D82665A4F468DECF68C00C32F6892693E9D6F897F9C715814EA1EAFFE634F8165C8C8DC17855F37CEFBB74888733673AC7141313B76A1EA6615774E9DDB0BA90
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2..".................................................................................1.!.2AQ.q."BR3...a...b#...rT5.CS.4.....................!A1a.Qq.r.3C............?.e..BA..<.d..[.+....;4..9p....Q+.R9..O....l./..ep.X...^<.YZ&>......h.q.M..(.E.6.l.(.%..M..v..k>.2PA(.D.cYWP....T.l..7...[....T.....4....?..._.iN...7.a..cH....1.y}bxwR.M..iP......@.e......s.....g..U]~..}.s...G3....H:FW..\..%o..{C.....J)w....m...=>.S.%C..b.\..`.M9G..S.li.g.#.1>.P.7ao..H.m..\|o.9.@H.E.W.....b\\.q..pI...?0.0.....2.0....X..$......?u;..o..s..".vcpX..m.R[..6...9#......L.pi6..U..$....4..U.................6&.+.;.2.....-.6.[..].2...Y..)n[..qS..]U.H....m0D"..1..n.....)...oR....(.Gv.$...%...X...M.3...9M.y~..`..QB...........H$.....Y....k.b.F..f8..N..Oe......11."$2L/.7.....\.-...i..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	145856
Entropy (8bit):	5.025563749113584
Encrypted:	false
SSDEEP:	1536:JYxv6UtqMx3/1xvJs2Htcg1SkJffKfwxA5JP9IZp97J23SVs:J/UEILhsBgwaSfwq5JP9IZp97J235
MD5:	C2ADC2057577A754358D81333014D827
SHA1:	0DC48F5217D42A8877DADAA25B7E027EDC46B75B
SHA-256:	E621D05C6EEAB18489C85D1275B82B1A6E15892C1BE043AE35262C3D0B350910
SHA-512:	FF877C70F983FF96B7E2A7078344C5724AF3CD76CFAEABE3678D85CD9D27829F3CA599B1E48FE63AD405EB09D9ED5E01FA5CE1F3D363A6812999A2AAE1F24E36
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). / /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.html {. font-family: sans-serif;. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;.}.body {. margin: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: 700;.}.dfn {. font-style: italic;.}.h1 {. margin: 0.67em 0;. font-size: 2em;.}.mark {. color: #000;. background: #ff0;.}.small {. font-size: 80%;.}.sub,.sup {. position:

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a
Preview:	OK

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1223
Entropy (8bit):	7.492209989399422
Encrypted:	false
SSDEEP:	24:shtyXb8vXDm5UJkSqFSk2A0uESG9ENQXMdoakgqQkQQRV59BHHUGeh:shfvTm50kSv9WH1kgsRV5HHHUGeh
MD5:	6785CC32B0A3AE8FE2AE26DA38E0FC9B
SHA1:	DC03D1130AE001D485F1A9F110D0C77770B418BF
SHA-256:	62EE9A1FBC9BEB47BCAAB359E900D8B86E83F9C754C035EFF6649D08DE51CA03
SHA-512:	865886578F2803FADAB7854E4677902F0496DF996449C6AD594312FB65CB6079F5040CB6593E7BCF42CD5E28FAD26875FA24DCDCC7DDDA45F26CBF3C2E9E2998
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2.."................................................................................!1..AQa"2.q.3....Br....RCS4D5.....................!1Q..A.q."2BRr.3.............?.W.....4.....20.g....CDN.1.Q[.N.o.Tp.G.# =..s..+......G\OJ.y[.}.~4.1.......6..#.....s..l/.4....,.hK..p..?..6W/..OTL.v.!..1..^Lw\..s..V.3,.. 9.k....3......R...m..dc.n8.G_..c.Xr.K\|..B.H.5..v...Y..S..?.G~.........s.^E{..-....3..5ee.YJ.kV...Z..g\(.....o...EO.........pe....#.e.c..y.w%..V'..t.i\|......+.&.U!.A........R.r..0.Jq..A.9R..............`........Z..^J..%V,.s.....5s..%...F...\|.!. @....1..[.Z?.n.6.S..+.....G..=z"......U...2.)#..$....ku..)(..k..Q..U&.Q /.x.<....ta.y.#.c.....b..b2-U.)......~'...U..l..........jc.8.C..B...J..;3.SN*..<1..S]\}.M0W.B.t..1.\{..D..p..og.a.........W....2..N=...I#x=$P.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24
Preview:	OK

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32024)
Category:	downloaded
Size (bytes):	34573
Entropy (8bit):	5.5451808678577414
Encrypted:	false
SSDEEP:	384:Pr3jlN4bsIORv1QpjXuBsbqxkau1xvCt+CUgqottAWX+z1jW4/AtGJWq9qjr4YU:/TSnOTQpzgxyPI/ttALRH/Agd99
MD5:	91FF20592A1B1AEBFC39C073360EF584
SHA1:	70208111CC5E63E92A1EE1CC2D640A07DDF758E4
SHA-256:	13774735C1ED030C52D47A268B2A2D1BC16BE14CC433C61FCFC6EE1F81A4E96E
SHA-512:	08013DBB3BB97EE37D0167AEBB4BDE4CE7C4700156FBD479A1E03252FBE2B601F92C0A18B7728D9EFE498D0E9E59F64A481B31E3B815233A42A81B02FB2CD520
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/js/fingerprintjs2/1.5.0/fingerprint2.min.js
Preview:	!function(e,t,i){"use strict";"function"==typeof define&&define.amd?define(i):"undefined"!=typeof module&&module.exports?module.exports=i():t.exports?t.exports=i():t[e]=i()}("Fingerprint2",this,function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(e,t){var i;if(null==this)throw new TypeError("'this' is null or undefined");var a=Object(this),r=a.length>>>0;if(0===r)return-1;var n=+t\|\|0;if(Math.abs(n)===1/0&&(n=0),n>=r)return-1;for(i=Math.max(n>=0?n:r-Math.abs(n),0);i<r;){if(i in a&&a[i]===e)return i;i++}return-1});var e=function(t){if(!(this instanceof e))return new e(t);var i={swfContainerId:"fingerprintjs2",swfPath:"flash/compiled/FontList.swf",detectScreenOrientation:!0,sortPluginsFor:[/palemoon/i],userDefinedFonts:[]};this.options=this.extend(t,i),this.nativeForEach=Array.prototype.forEach,this.nativeMap=Array.prototype.map};return e.prototype={extend:function(e,t){if(null==e)return t;for(var i in e)null!=e[i]&&t[i]!==e[i]&&(t[i]=e[i]);return t},log:func

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523
Preview:	OK

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 168, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2888
Entropy (8bit):	7.895657732996726
Encrypted:	false
SSDEEP:	48:KPLkcWmDg+/0ZRZfSSOQ6sAnMP6iuRRW/GlPOgEXFIsQh1YvId9Tjm3winG5wi3u:KzpzT/0ZRZfSZl9MP6jRW+lPXEXC9994
MD5:	BEA6E52B658A84D05DEF46612619ED2E
SHA1:	1CC4754084AE2F90519F4CC0B019E04D5C39CCDF
SHA-256:	9C0BF92E3BFD7465D7F17C9A97C4A2EFF5C7D129A83CCEE75FA809801B7B86F3
SHA-512:	04AF59BB313B9D78780A726311334D6F25A5FC7BDED293EC0633A14D629C479261D30846EE63CF2A08B01A1BA512A96161B10A3DC88303F757B15BC24E23DA2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.........m.#=...#PLTE...@+..z!?,.5......{.7&..oI.......r.=#.....y.;$..s....ob....0........0...s................_.........U)..rc.cU..........fT....(......V....v.3...F.....}....\H....q.M7.......ZJ....S?..\|...m...X...}.:....z".....2.....i\.C...{....ui..F...K9..l.u....`Q...........@.\|+wl.bT..2......IDATx..._.F....R4.R....`.P.....\.Z'.Iku....W,D.{/...v......\8.../..EM#.. .. .. .. .. .. .. .. .. .. ......y.U...%I.Wc.uY..iwB..t.=..c!.^...,."...7..i.......,.....@.H....dI@.$ Y..,.H..$K..%...dI@.$ Y..0...+Y..5..=.,n.\|W.....{...'..........p^..+D.t..#I\Y...+.%...dI@.$ Y..,.H..)....klnn6.6.n]..;W...&..~TY[.U....\g.9kv.....mm{g.....V....c..dl..Ms.\&.l}.:......\|&w.....4n...S.s.n.q}o..@s.....uym5l.h.7.....N.._Z.;U@O.!+..-..yu.........{w.u...k....s2)........[..z.i.s.,.^...........]."Z9.Z.y\Y8........je......V............Y.fg..N.t.&..a...u..2.C-...2.i....:...k.v..i....T.[..ue..P..._]i..u.1..6..r.7....zg..i.8s...@I.V

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	169729
Entropy (8bit):	7.983802311925401
Encrypted:	false
SSDEEP:	3072:BQ6cxKz3x9SfzVSbFe10YoV3x81tl3VNzSKmgX8d:oxK7x9ozVSRem33u1tdzSi8d
MD5:	FEA8112D783A871DDE80EEF392DEC9C3
SHA1:	A147AE62E702DB4A11CAB652F137AF66C9D4EFFE
SHA-256:	C95C460CE8FB282D9CACEA7EFC5320864D84CAA42B6D9CB215DF565DB1D91883
SHA-512:	1BE1938037B2CF19AC97A64372DD60EED73EF1AF169C5A10CB8BE9BA8038D0E58CBB312399418E042C05AC0578A50A5F30147E2B2EF66838F9EBC4F2279F2565
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg
Preview:	.PNG........IHDR... ... ......p.h....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.3 (Windows)" xmpMM:InstanceID="xmp.iid:F41C9BF93A5A11ED87CD8519C566D119" xmpMM:DocumentID="xmp.did:F41C9BFA3A5A11ED87CD8519C566D119"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F41C9BF73A5A11ED87CD8519C566D119" stRef:documentID="xmp.did:F41C9BF83A5A11ED87CD8519C566D119"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..@....qIDATx.....,iy.........o.......,......B.ZA...z.....]%.x..{d.....\|..\|..lO<\|...0..0..0..?......0..0..0.2.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882
Preview:	OK

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 600x720, components 3
Category:	downloaded
Size (bytes):	16402
Entropy (8bit):	7.698749567925864
Encrypted:	false
SSDEEP:	384:pkWXYZTlzOeBLOBEdI/eijmSwBPw28/qPP3LrN/HPf:pk6YnzlBLOWdWeWw628kX
MD5:	9096E83ADEAA48A93E76737080F804E3
SHA1:	8AC41A427B0C46D7D0B179019D6F19F38578B9B0
SHA-256:	AED18BF72F746DD18306CB7607C138896927E13B78AE805DBB0CBF3210A27EE3
SHA-512:	E45DC8C532EB6618213D68865D47403F7FCCC15F59595DD0B759D06685DCF54B6DB1AF12795154FEDF4A48589653735FA7AD3A439324ECAB0DB5C18BA08EE390
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg
Preview:	..........'.'>%%>B///BG=;;=GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG..''3&3=&&=G=2=GGGDDGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG.....&....Adobe.d.............X.."...................................................................................1..!AQ"a.2BRq..#3.....b.$.r..c........................!1"AQ..2aq.B...............?...................R4.d.......=).........N.>i#Z\|N.{..N.w+.....5.[0....8.......A.\|n..SI.q...._....z..''.......!......f.../p....?w.F....\|R.._........4.0...........r5.0.Ww].r..w5_./...-.......F..............\|..7c.n#.g.q...g'..z.\|j....J..]..S.`$A.S..>..Z?+;6.V.....=...MeuD.............................................e5..<#V....7..n/'].`u.x..J_.8.n'U.O,..2......bu...'..w.~!....f........e.#r..N3.........%S.d.,0FK...$.*N..F...F..$..`..F...+.pH .H.j......g....p.=%............i.3......ga4..$........................................2..QZ!..o..q..o.1...<.......:.,..\.`.@2..i.1.9...>....+.cDbW.F,.&@.=$.2..-$...Rr..+J;.F.j.sS(g.Q.iA.&Z.e

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	68441
Entropy (8bit):	7.972143495309758
Encrypted:	false
SSDEEP:	1536:pVwLHPaXva6HDiBHQB6A/n2clMQWs1m8LLx7leSJHN5Hp:pVwbPkHDiiflMQV1jZJHfp
MD5:	66F3C5FFD2D0BE9320E067F4197C5A04
SHA1:	866D85ACE57DCA71A2A6553CFBDCEE59DCFCC0E4
SHA-256:	A0EEFB5AB09C628DD91B36145019209AE056E0A451C9C293F4F9684E328EFB4C
SHA-512:	84F5D7D82F7787210A584E79A5B1FA2315F33C7258D1E2D40A0DF1728B260F37C267E04AE76CA5FD746298594DB0BD313D8AE53B1505765DD96EF6DDC8A37B3A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............z}$.....PLTELiqjiiFFF.........ZZZyxx........................[\\HHI...bcc?@@OOOUUV777/00!!!kkk)*%%%uuu..........................._...........4......;,.0).......tRNS....c...6z..b....pHYs............... .IDATx..v.G....A.d...gJ.\...[~...@D..r.p."..gZ...-Ui'..`....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!......k............B......s7.M.7}?).......9..>uC.....y......N...D....=o.......d.....o?..H.....S...%,.........]....47/.?..I...y{..m...}!.z....K.'.u9.O...:!...e. .A..w....N(..L...IP..f.)uB.....#p......(......A.Y...f....[&....=.X.$.#....}%.O.\|FB...U....'...9..%I...%....E.....?.g.<..Y..~........^Rud.E.B....[.^."r.<b..P...}h...wBN..Th...JD...'..G.".W.u9...>...N.IP......t.z+.P...m..Rxg.{.c.N.9x.$c/....=2.....\|.-K..x.TE.\|.w(}......9...%tW.z@..#..\|^."t..5.w.*....pPo.a.&f...s_..,...\|..=,8...

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab
Preview:	OK

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31234
Entropy (8bit):	5.513099056655236
Encrypted:	false
SSDEEP:	384:m62byQtaH/o2tkCtkNlj26vztlA3M2hoWtQppp2s5ZtTqGF2YVltHO8wz+Th0XG0:7
MD5:	BC211C5088D05BCADDA683CC516EACB1
SHA1:	C0ADF09A229BE7CE5176BCAA725BC4C17D7C0C9C
SHA-256:	D798BBA4FA1D7F7A39564D24EEACBAC4FACA52E49B979FC64720A58BF9EA59D3
SHA-512:	CED9872E4C15C164CC96BFCFC8388FDF35BAA0EDD2B39890A82C8394125D5AD2B43BC3914A2A2E51BF6A2F05A3129E1B1AC0BDBC2DA11804DC1AF43DCEFF39DB
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdh18Smxg.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdo18Smxg.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokSdg18Smxg.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1896)
Category:	downloaded
Size (bytes):	1897
Entropy (8bit):	5.379320061869595
Encrypted:	false
SSDEEP:	48:0SHAyWrfKyGSB8jVDtn6082bh3kX0TSK+FsBiGlwlabu:0zrf38nNbhlTS3sB9ilku
MD5:	D3D84DFB2CA4903BA23AD38774E81BA9
SHA1:	0954C217976305BD3C0C6EC8CC1A7322D8E675C5
SHA-256:	2267FF03B9CE83C6329EDAA3CC07DA1CFD35D2C339F6474D109CC6966C1FD33B
SHA-512:	3E4B93E410265BF918A4887BE6FC42CF798906B8A88C433206B8D88F123F05AE233F6EF7C76D6DA2133E8A5FA7A53D393714E1D84704A4AD29FB3924563F8AA0
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/svg4everybody.min.js
Preview:	!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"==typeof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.cloneNode(!0);f.childNodes.length;)d.appendChild(f.firstChild);a.appendChild(d)}}function b(b){b.onreadystatechange=function(){if(4===b.readyState){var c=b._cachedDocument;c\|\|(c=b._cachedDocument=document.implementation.createHTMLDocument(""),c.body.innerHTML=b.responseText,b._cachedTarget={}),b._embeds.splice(0).map(function(d){var e=b._cachedTarget[d.id];e\|\|(e=b._cachedTarget[d.id]=c.getElementById(d.id)),a(d.parent,d.svg,e)})}},b.onreadystatechange()}function c(c){function e(){for(var c=0;c<o.length;){var h=o[c],i=h.parentNode,j=d(i),k=h.getAttribute("xlink:href")\|\|h.getAttribute("href");if(!k&&g.attributeName&&(k=h.getAttribut

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 352x480, components 3
Category:	downloaded
Size (bytes):	24581
Entropy (8bit):	7.955847172221789
Encrypted:	false
SSDEEP:	384:5exEKnWR0Y+DatWDzQno3z1vUtjoOM0ZzjRcbUOCDk8aYw8rI2TrR5Uxow3EzE:56EkutWSCz1vUtj/jObUjRab2HLUOw3
MD5:	488888F0CA92E17B6DB7B0BD0F80539B
SHA1:	D8F94EDF9B4DD516DBE549FE46D804FDA9C69B0B
SHA-256:	9AF2CEC1FFF0119BF30337B3F51CB0E512428BC7CB3A651A638CCE543A66FFAE
SHA-512:	533B13850933495F8D8DCD58B6C34A3F84EF2006644616C6009D5E15E5391162CD14BC5BB209EFF3CB28B9DCEAB3DE4891458574319DB326B000F7FD029B788A
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg
Preview:	.............................................................................................................................................,....Adobe.d.............`........................................................................................!1..AQ..aq..."2.....#3B..$4Rr...%b...5.6Cd...STt..........................!1..AQ2aq......"..B.............?....@ ........).x&d ..R....d.4..o.....F8..\|W{$(k....5...0j9..R..7.+...R.T4....3.?...\....\|.#n..3..}..\|~..`(...@ .......@ .......@ .........@ ......Np..sw.h..K:.".w.6c........n.F...{..o.R.qG.u.M..}......Ob..k..g....j..^..tb5Y.z........N..S..........-....\|]..i...e.hm6.>G.[.A..:v`.2..UX,....b.\|j.{0l...r.......;x[.....O....C.l.....7'..g....K8!.e...V..94.Sh~q.>...[.u...`x..:...?.c,....(7".0........cZ.....nj.i.t72F...g....8.xj..8F\..u..A.......*`k..J......7T......@ ............@ ....\..C......l.B..h4.4Z......j.Z....YZ..6u...9.h..Ob..=...y7..J...J...s..=..LR.1..k...w.QN......@....V.3...!i....[.oJ..J7..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17972
Entropy (8bit):	3.1378751986668756
Encrypted:	false
SSDEEP:	96:9dakbWQROXtnYaNFlTup2TXi2tXRPHGgHzHMtb6iMpeZX04sR8KY6mK010t752HB:9dakNRk/TkWiCEiRJ01U752F3
MD5:	B8D355B65AE7754ED8DCC87E9A798737
SHA1:	083E2B287CDD8CC970AAF7E6A9D23C4E459FB387
SHA-256:	C93F352E6FE929DBD3F107FDE5C26A5298ABEC8BFAB02FFAD96720C77BA7451A
SHA-512:	F1EE9D5775BCB8FDBB4CFD4454033421A3F322391251F1AF33E6EF455798878865CACB2EE5A583DBE5D3670086DFF879537968D9C83DF1AE24D1427FD80D4B25
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS
Preview:	.PNG........IHDR.......2.......Q.....pHYs.........g..R..:,iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c137 1.000000, 0000/00/00-00:00:00 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". ns1:Physicalheightininches="0.3333057761192322". ns1:Physicalwidthininches="1.17323637008667". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:extracted="2017-09-14T19:09:04.766Z". ns1:Bitsperpixel="32". ns1:MIMEtype="image/png". ns1

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://insightsandmarkets.com/i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb
Preview:	OK

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1977), with CRLF line terminators
Category:	downloaded
Size (bytes):	29241
Entropy (8bit):	5.329339161343714
Encrypted:	false
SSDEEP:	768:XmXDTstcu8g3hmxCgk6FrORgGxwEyF6A/BV:XmXqgk6FK3wEyF6A5V
MD5:	2A5FC364EB609EB776FC6E380D49DEE0
SHA1:	3719D3CE393A39C67B2095C074531445026ACBFC
SHA-256:	79BFB0E9785FD689591F30D35F9AFAFCC81F8C2A77E6D831BE8C7C6EE6DE872C
SHA-512:	7A3520933501C83D312A1D39D7B80F8523CE51552934D51F4BBC8671B41244CF8A8570CFB37931A21998651B6DDEACB39998960BE35730A48B2810136579FC34
Malicious:	false
Reputation:	low
URL:	https://pushrev.pushbroker.com/javascripts/trackpush-v2-cm.js
Preview:	function _TRKPushDeferred() {.. this._done = [], this._fail = []..}....function getUrlVars() {.. var a = {};.. window.location.href.replace(/[?&]+([^=&]+)=([^&]*)/gi, function(b, c, d) {.. a[c] = d.. });.. return a..}....function urlBase64ToUint8Array(base64String) {.. const padding = '='.repeat((4 - base64String.length % 4) % 4);.. const base64 = (base64String + padding).. .replace(/\-/g, '+').. .replace(/_/g, '/').. ;.. const rawData = window.atob(base64);.. return Uint8Array.from([...rawData].map((char) => char.charCodeAt(0)));..}....function _TRKPushGetDeviceType() {.. var a = 1,.. b = "desktop";.. return function(b) {.. (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino/

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HBIvYn:evY
MD5:	0E920111498FD92C3FBD7F00C428D762
SHA1:	5082EB504DD47582063312CDBE3AB7187FBF3960
SHA-256:	3E45F5E239FF94FE839057AF3EFC8AE568C5C32DBF2D3D0CF1C347E26DFC10AF
SHA-512:	61FF4D176BDAD99FD25255DA2ED84532035592D8BEA79EACB3F76A7C039C3AEC9D5FFB593C5F584E1E54A2FD9A7CD885DFE721A829CF8CFC113C0FB5935AC357
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnMRvUgwGJS9RIFDf-qZLM=?alt=proto
Preview:	CgkKBw3/qmSzGgA=

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
Category:	downloaded
Size (bytes):	18028
Entropy (8bit):	7.988319422898098
Encrypted:	false
SSDEEP:	384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA
MD5:	448C34A56D699C29117ADC64C43AFFEB
SHA1:	CA35B697D99CAE4D1B60F2D60FCD37771987EB07
SHA-256:	FE185D11A49676890D47BB783312A0CDA5A44C4039214094E7957B4C040EF11C
SHA-512:	3811804F56EC3C82F0BEF35DE0A9250E546A1E357FB59E2784F610D638FEC355A27B480E3F796243C0E3D3743BE3EADDA8F9064C2B5B49577E16B7E40EFCDB83
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/files/glyphicons-halflings-regular.woff2
Preview:	wOF2......Fl.......\..F....M....................?FFTM.. .`..r.......$..e.6.$..t..0.. .."..Q?webf..e.5...@..?....... ..t............,3+.2q..F..YO...&>..b.m.5.Z..H$..Y....{.H.jd......%....y"......+.@..]..e..{...v..Nc.)..n...?~?.h...._.&i..........?.>..^K .v.-.c.1....2K..y..,'n....(.3Ewi.B....&.....T.lh.0M.....d.Y.r...nti.].yur........VXsj.....gMn...H.W..... r2.>iT`V7..R(.......+.o6.'c..B.....4..........T.]a[Qd<3wq8,...rTI..8....0>E.?.E...#..7'.....S...oc..._.7&#.+)....+4a..A6.c..y...f(b.F.....$;{ YA.1vP-tG........".....C.f- W.......uK.K..#.....*K.<... (.......Z.`...[.%.Y.T..{%..$....s{o.........vt"p..4`.....}o.`....'n.e.>..G.5s.z._N...PK.vmU...{z............."3`l.....W#..^.@+.,.c..ko..AO.p.nu...z.zJ).......1.}...O=.....x.R..`.J.`.q....Us/.+.k.v.1xl....j.l..El.\nD.....V.....jg.{Zd..z7...5..!.xm.5o.[....u..&..1.H.BkA...qr..R........(\gh....7...y.=.H.Z.UPh..$8.Rg.....z.g..N:...1u.$.....>R.]......."..f7....K.^.'...3.+E/..^.YU5].NB......8..+.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27217
Entropy (8bit):	7.981960591301598
Encrypted:	false
SSDEEP:	768:Tij+ghiGZ+wz5kzR2NJL9oXaqktxLZzzcz4PD5:a+KrzK2Nya7F0z475
MD5:	A7A8652074177770A82765E81E273D69
SHA1:	DA57A27462E9A23C597EA7AD97A399DF81F3380A
SHA-256:	9336DB8390B17DD4D91F8580DBB905DC84391183CC06426AA47C4DD6530C5A0A
SHA-512:	5B936DC127AB41ED861C5C7009F892B02D109213CCAB4BFB82EC8AB81B4AEEA709BD77E27CB46919B2A62CDD00559BE85BC5838D751A9AF87AC6B9F61D54B86E
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS
Preview:	.PNG........IHDR..............X......sRGB....... .IDATx^.].T.W..../H....c.%...[lX"FA%.....-.b.XQc/.....c.X.`4vEP:.wgg....qV#,...s8......8V....DGG....D..?V>y.JOO'322..h4..f3I.4a...GG8........Y.R.(..Z.T..j5...y{{..J.2H$..V.Z)u.... .......d.7n.P..y...?...u..G.>JJJ..`0..H$&...iZ.a...8G.$.0...8J$..X...,+.8...p.......l69..bq....38..,V..P(...../..].j...T.^......J.,..T...@...>..@^b.9../^...._4....}...w.h..i.Z}1..`.&.(.FQ.NQ..!.....A.D6.`Y6.....LOp<{i(......u..p,...R..n..m4MS,..E6...B.0Y(.>(S...J....'.d.S'.E.....^b.......b...<.\|.......qqq........8.k....)$I......)..v..c..'..$1 ....\.....L.......:x..@..w BB...C...~+.0&...B..R.J..S..M.4yR.r.......\...@^0A'O.T...x\.x...W..4].eY..R.$y..0.D.....#...D.a.Xx.x.........L .<..H$9......O$......h...e7;.q...(.zH.....+.k.....Kn.}F1.<;........8u....u....@....A...A.p....p...".... .P.fw>..5..g..-...6;\.D0.E...'.D..^..D....(.z.a.,.Z9..0..#I.F.5w.l....>.,.C.....a.5....Iw............).a..Hd#IR.q...2...S.>.M+.....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	945
Entropy (8bit):	7.254539253699463
Encrypted:	false
SSDEEP:	24:shtyDkHqfxlftjvapBTVzR3KMSDfiAvKhK1:shz6vapBTSDfjvn1
MD5:	2A71AE4C13F0E8FFD49EB78D13704BD2
SHA1:	2F022AD7106078108F2D8F6A9EBD46A0AD01547F
SHA-256:	74280BADD58E8ED08180D3C37647603FCFB58137249D39AA3419FD0EB6C56F30
SHA-512:	2B4EB5DA30358EEF402F6BF0542C0D568007894AA4ED0AE409C4EB24AF1C4EA85DFA85B16A501A4216007C57D8BE987047513BBDA59F50C2FB2EE9C61650253F
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky..............Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@@@@@@@@@@@@......2.2.."................................................................................!.1.A.Qq.2.3a..."B..Rbr.#CS4.......................1A.!q"3.a............?.e.8...h...s.[7.I.>.,k[...U.Y,ty.b8.\|\..dJ.....".<J..........V~:..=..uk.....J..6.-.T.0M+.....M....0i..nOG..\..,....vs$.....E.".}."d...;... .....kS$)B.=.%....s\|Yf..w....)^.O$]tb..L.I}.?`.Yi\Y..$.9F...I..-.......y.9..._CE.9.+........{R..........)..j...X.5........K.D.h.#......D.X..B..Ds.........]8o.e.....P..+.-y2d\|Mm.....L.!......c.KA.u.:......\..Z..#<...@Z.;.(...1.u.!..L.L2........8..W..u...ihc.F..C[W..../R.%...c.k....X.[&I......O3........G..?.J...7.,.x."..%~........=G/..<zw......t.g]u(B...v'....&.}...>.!Ql#.......<...t.W..pB...P..[..!g...u0ZrtBKHq

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	dropped
Size (bytes):	37544
Entropy (8bit):	5.7831965742373095
Encrypted:	false
SSDEEP:	768:ozHO0UVJw156fPBzg4LWZtF3229m9GxVvw7I15b62NEai4JXH8Xzuhvi4yAoTdbs:ozHO0UVW76fpM4LWZtF3229ma4k22NEA
MD5:	D56A1947AE3583E101D46A86CD20560F
SHA1:	8E7EA02D82BBD0F03D91C6194666B557CC019F16
SHA-256:	CDFA9A147AE8D8357855515BAB5291B8C9342EEED9D638B47103C19D9D9AAF36
SHA-512:	CACF202E369ACBD5B063BEFC74CFE7E37AC3A1F9FC285867E77C543FCF53A19C05586A8CED8A33C4192F872E7DD26C7E6D9B2C21CF24DB1D1E9C9AD1EFF0CB82
Malicious:	false
Reputation:	low
Preview:	/!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/.!function(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;d<e;++d)if(c===a[d].toLowerCase())return!0;return!1}function d(a){for(var b in a)h.call(a,b)&&(a[b]=new RegExp(a[b],"i"))}function e(a,b){this.ua=a\|\|"",this._cache={},this.maxPhoneWidth=b\|\|600}var f={};f.mobileDetectRules={phones:{iPhone:"\\biPhone\\b\|\\biPod\\b",BlackBerry:"BlackBerry\|\\bBB10\\b\|rim[0-9]+",HTC:"HTC\|HTC.(Sensation\|Evo\|Vision\|Explorer\|6800\|8100\|8900\|A7272\|S510e\|C110e\|Legend\|Desire\|T8282)\|APX515CKT\|Qtek9090\|APA9292KT\|HD_mini\|Sensation.Z710e\|PG86100\|Z715e\|Desire.(A8181\|HD)\|ADR6200\|ADR6400L\|ADR6425\|001HT\|Inspire 4G\|Android.\\bEVO\\b\|T-Mobile G1\|Z520m",Nexus:"Nexus One\|Nexus S\|Galaxy.Nexus\|Android.Nexus.Mobile\|Nexus 4\|Nexus 5\|Nexus 6",Dell:"Dell.Streak\|Dell.*Aero\|Dell.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9738), with no line terminators
Category:	downloaded
Size (bytes):	9738
Entropy (8bit):	4.728754788881187
Encrypted:	false
SSDEEP:	192:MbaMb54a7tW39NFfaNFmyIPhZIogrRPM8UD9m0luevVgVZ4:UxtVuPr40lQ4
MD5:	D4A8D59A54C0D3312FCB6E9C5CE7A8B7
SHA1:	2165D6F0F7A6A14AA84D2B525C6726ED6BC6A54A
SHA-256:	A1B5924D7D4BCFA97503BB44731598A1FE30947DA940E0BEF8273F2C199C61AC
SHA-512:	0F8120CF37F4953D9068FB1B39ECD8336460B415D9FA741640462E8BEC5192977BB88BB26B33D4A6A0A9707216A66F2E126143A452636DBAFC93A03B258B0F2D
Malicious:	false
Reputation:	low
URL:	https://pushlite.pushbroker.com/javascripts/service_worker.js?v1
Preview:	var _$_5575=["\x69\x6E\x73\x74\x61\x6C\x6C","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x49\x6E\x73\x74\x61\x6C\x6C\x69\x6E\x67\x20\x73\x65\x72\x76\x69\x63\x65\x20\x77\x6F\x72\x6B\x65\x72","\x6C\x6F\x67","\x73\x6B\x69\x70\x57\x61\x69\x74\x69\x6E\x67","\x77\x61\x69\x74\x55\x6E\x74\x69\x6C","\x61\x64\x64\x45\x76\x65\x6E\x74\x4C\x69\x73\x74\x65\x6E\x65\x72","\x61\x63\x74\x69\x76\x61\x74\x65","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x41\x63\x74\x69\x76\x61\x74\x69\x6E\x67\x20\x73\x65\x72\x76\x69\x63\x65\x20\x77\x6F\x72\x6B\x65\x72","\x63\x6C\x61\x69\x6D","\x63\x6C\x69\x65\x6E\x74\x73","\x6D\x65\x73\x73\x61\x67\x65","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x48\x61\x6E\x64\x6C\x69\x6E\x67\x20\x6D\x65\x73\x73\x61\x67\x65\x20\x65\x76\x65\x6E\x74\x3A","\x70\x75\x73\x68","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x52\x65\x63\x65\x69\x76\x6

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1182
Entropy (8bit):	4.629771669203164
Encrypted:	false
SSDEEP:	24:t47YAp2RNTVgZLWSyQnF/2upwgbwMghhItP4A46CqlJY:U2RBtSvFmgbwMghhItPwZ
MD5:	6201AB0217306B232E0119FC48D36C98
SHA1:	3F6B572D725765E6EC8D95E2F9268638B418A5E0
SHA-256:	62F7EF6281D5E0DB3F14298CA3707EE3A9F61D1EE85AC5FA5DADE011EAFB32E9
SHA-512:	944568E8A13D0D17B46BFB73E881C44852732BA9D5219E0DD71F0DBA846E01319E0018F6570A708C53807ABE4D57BD4FDC7275D0F2A44DDE4AC1BF1C579541E7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="60" height="60"><g fill="none"><path fill="#A98258" d="M49.655 0h-39.31L0 16.552V60h60V16.552z"/><path fill="#DAAE86" d="M10.345 0L0 16.552h60L49.655 0z"/><path fill="#D8B18B" d="M34.138 55.862L30 51.724l-4.138 4.138-2.069-2.069V60h12.414v-6.207z"/><path fill="#E8D5B2" d="M20.69 31.034h18.621v16.552H20.69z"/><path fill="#D4C3A5" d="M31.034 42.414h-6.207a1.034 1.034 0 1 0 0 2.069h6.207a1.034 1.034 0 1 0 0-2.07zm4.138 0h-1.034a1.034 1.034 0 1 0 0 2.069h1.034a1.034 1.034 0 1 0 0-2.07zm-6.207-6.207h6.207a1.034 1.034 0 1 0 0-2.069h-6.207a1.034 1.034 0 1 0 0 2.069zm6.207 2.069h-2.069a1.034 1.034 0 1 0 0 2.069h2.07a1.034 1.034 0 1 0 0-2.07zm-10.345 2.069h2.07a1.034 1.034 0 1 0 0-2.07h-2.07a1.034 1.034 0 1 0 0 2.07zm0-4.138h1.035a1.034 1.034 0 1 0 0-2.069h-1.035a1.034 1.034 0 1 0 0 2.069zm4.438 2.369c-.186.195-.3.454-.3.734 0 .28.114.538.3.735.197.186.466.3.735.3.269 0 .538-.114.734-.3.187-.197.3-.466.3-.735a1.08 1.08 0 0 0-.3-.734c-.393-.383-1.08

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11084), with no line terminators
Category:	downloaded
Size (bytes):	11084
Entropy (8bit):	5.26714858103651
Encrypted:	false
SSDEEP:	192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip
MD5:	65F1D21D5FCC9D21DA758ADABABD0C3C
SHA1:	E0661D07D64C00008BC9D013D16EEC0A0F156DC7
SHA-256:	D2B82E612D2A812E8BE2A57300DAB8923C4F2EDBE7A799E7DA70791B595646FE
SHA-512:	DE7D7DC739CED2E6CFA52C1809144180787ADC3AD5F9B7597C72B9D9BD5EB2F21DE06B1FC12B5034F2458DE428B368772700A6665D3F2E02F148A300239E6183
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
Preview:	window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)return"pfx"==t?o:!0}return!1}function s(e,t,r){for(var o in e){var i=t[e[o]];if(i!==n)return r===!1?e[o]:a(i,"function")?i.bind(r\|\|t):i}return!1}function u(e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r;r++)j[n[r]]=!!(n[r]in E);return j.list&&(j.list=!(!t.createElement("datalist")\|\|!e.HTMLDataListElement)),j}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),p.inputtypes=function(e){for(var r,o,a,i=0,c=e.length;c>i;i++)E.setAttribute("type",o=e[i]),r="text"!==E.type,r&&(E.value=x,E.style.cssText="position:

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	4.403989446485262
Encrypted:	false
SSDEEP:	3:agHln1AXB/FwOSCUHoAn:agHox/FwFIAn
MD5:	E901EF36FE4322981D42AD6BA305EC1B
SHA1:	66A8A5FBC507B0D257ED969C0D880C226FBEE7D0
SHA-256:	7E89417A4D783306A36D217F13DDDFF662F2CC5DA57A995877961E85446A96F1
SHA-512:	0B1C0B9E94A34D8242BAF9A6ABBB9D9333641452AEE5B85BD4FEF582F2AB31C08976EF86E82960146D835CC0828F9B9462E77405083199AFACF20DFF5D7ACEDD
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/manifest.json
Preview:	{ .. "gcm_sender_id": "325377692881"..}

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1941
Entropy (8bit):	7.680495525765774
Encrypted:	false
SSDEEP:	48:ZXUCFOvxXSsxw+Ct9hyXLkYWMtonip7YY:ZXUFJS+p29hEsM+3Y
MD5:	4A6F4A1D7A2D7EFCFC0E08C181C535F4
SHA1:	AAE496D4878C8E0693A0FF705BDA73EDAED83966
SHA-256:	439E3ECE05384466977DBB1867AD87F4625F7FF7CEDFCA83DFA819250593D7F2
SHA-512:	E1C372F2047867E2DFC188F82A7984EAEAA8B62A5D178256C8E039CCB857E7C5409CCC70C0E9DE37B7CECE742A22BAE6F8B6423A0C29A99E9BE169BC59394930
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................2.2....................................................................................!..12.A"34Qaq..Rb.Sc.5..TU.6...Br.#$D.7......................!1Q..A.aq."2...R..............?.\|.:.}....4.v...(.&.BK.svR..&.C.....E..S...~..{9.Sj..:.T...P..r...`.qy....,.[?R5.eS\..0...9.1J...$g..oC...M.W.D..he'%n."....m.C}w..._^O/...".y&C".....\mU.Rh.w[..{+..KuVf...Dc...p6.j..J......V.+.o/..y>...j5..z.y.]..V=..T#0......c.6..!(.....[....C#6....S.kv....u.g.o..H....>......%.G.y.;..7..q.g.d..@..G<..=..#O..\|....x.%x#u.u.[..F%.5.&..A.d...\c...8..U...]F..I-^JS......U....7.[..K...9~N..@......[.w........4....a.T....).$}..;.;.....k.[I..v....P\|...N...A.]7/..{mE1.v...KY..*.....@.N4.On)>`.Qu28.q...N..l..;...;.j<.=R...q .o...fv..~.w..m.....v-..x[M.I5...\.5QZ..gf5..<x_..x.l...Cv......

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 439, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50012
Entropy (8bit):	7.964426013334859
Encrypted:	false
SSDEEP:	768:TOlxVqVzMCloKQrriUA4k1ahkCHycMsADiQY/PUrVltTUz1Dou6ZEa+UXpwMGit:TqVqlM+dcWTk2CH0vbY/PQVQypZVpw4
MD5:	134555B7A6737F64AC8C2ACC66F6C1F7
SHA1:	4CE4519B3E53077AA66DEC63F3893017EB90A5B0
SHA-256:	F80FE6F1A1A6E26CFA451EC907BCA5DE43DC433B713129F14079E53A2AA80B9F
SHA-512:	98C180C0D345C8853BAA2F51AF9B8671326C085B185CC7E3AEFBF742AE9EFF213EEA187912246E8AF907BA54E7CC78C52B925F84FF58C9B82C9891AEE00838D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............7.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:DocumentID="xmp.did:05DBAA4A1E3211EDA021992EFCCF128C" xmpMM:InstanceID="xmp.iid:05DBAA491E3211EDA021992EFCCF128C" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2022-08-10T12:05:20+05:30" xmp:ModifyDate="2022-08-17T19:09:31+05:30" xmp:MetadataDate="2022-08-17T19:09:31+05:30" dc:format="image/png"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22A15C25187711ED93C28D3C6FA64152" stRef:documentID="xmp.did:22A15C26187711ED93

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	34893
Entropy (8bit):	5.042342336893538
Encrypted:	false
SSDEEP:	768:wUIKaTcOFRnDT7K3aZ2CaXB656k5q1iKFZRQSuSz89m9h1:wUIKaTcu5q1iKXRQyz8QP1
MD5:	156A114D8476DCADFD3E12B1FDB9F3FB
SHA1:	39D3669D9D4459E8AF3CC7F70F2EBE0679E45A2A
SHA-256:	E85A91EE3E2075F3F141E5E5D22700084E79C244D4564430AF6676F241A59DCC
SHA-512:	59A9A3BD703A0DB16A2700CAA0D0FDAAA6CC13003282DB8672A7ABA89EDAE6B0930E0375E7D00C3711551497B07FEFFE8E350AA6B31C3F591B94AC318D1A2B6C
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/55e8cf6703bf45bce4822d01a5874562.css?v=25&reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMk52ZFhKcFpYSXVZM056SWl3aWRIbHdaU0k2SW1OemN5SXNJbllpT2lJeUluMD0=aaIiaKjaseS
Preview:	@charset "UTF-8";../* -----------------------------------------------------.+.+ FRONT-MAN.com.+.------------------------------------------------------ /../! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /../ Document. ========================================================================== /../. 1. Correct the line height in all browsers.. * 2. Prevent adjustments of font size after orientation changes in iOS.. /..html {. line-height: 1.15;. / 1 /. -webkit-text-size-adjust: 100%;. / 2 /.}../ Sections. ========================================================================== /../. Remove the margin in all browsers.. /..body {. margin: 0;. color: #242424;.}...price {. font-weight: 700;.}../. Correct the font size and margin on `h1` elements within `section` and. * `article` contexts in Chrome, Firefox, and Safari.. /..h1 {. font-size: 2em;. margin: 0.67em 0;.}../ Grouping content. =======================================

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2317
Entropy (8bit):	7.548636434917496
Encrypted:	false
SSDEEP:	48:euNn2vDUlgUnJ3DUegUTQnZ7PL4ds90HL04WI0u5opXWwKHzTV2:B2AlfmefT4Gs6Waimw+w
MD5:	B296D08461DEEE25E44F147383D669A1
SHA1:	00A8C3074D422C2F21CA3CAC757FBF9AF376F6C4
SHA-256:	90E1AB069A054BC77C830EF692878BBC006DBCD9D70B1F209D1E8EE03DF65D2F
SHA-512:	7D054589D84CD6C7505B0D46E2FC9CB1AF27388C323B88EFC606BA622FDC1991B4C421B4E87C98681DFE12701A3C4486A38C49553A88645FCE315A95A82A2261
Malicious:	false
Reputation:	low
URL:	https://cove.richquickcart.com/fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS
Preview:	.PNG........IHDR...G..........g......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:39AE36C700F211E6A391A97BE02DA045" xmpMM:DocumentID="xmp.did:39AE36C800F211E6A391A97BE02DA045"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:39AE36C500F211E6A391A97BE02DA045" stRef:documentID="xmp.did:39AE36C600F211E6A391A97BE02DA045"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\|......rIDATx..XklTU........ZZ(....1.JP.......D.5$.yJ....DBP.`"..b1.1.?.R...C....(..BJ[Z.n...v.....X.l...=..

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 377x379, components 3
Category:	downloaded
Size (bytes):	20636
Entropy (8bit):	7.970835636718526
Encrypted:	false
SSDEEP:	384:SHwjnxJN9foYsyOeTUrzm4d0uDs7hu/+oQtysji7fJ/Ua+DsmPx3NQGFkTBM:SAXSyHQ3zRDeu/+oiywi9/MbxCyGM
MD5:	1B8B6C3FD346D4492A6596C60408A20D
SHA1:	789E01B518DC5A47A1ED09C5159BE3BCBF83CA5B
SHA-256:	7CE351E6D7461D7BD7D7AF99D8AE0E514F6C5E4A2B806A91713A68123E6ACE21
SHA-512:	507D9E2B3FE9D73409B514D318DE773F6429E005863C269B252CF7D804A3C9B27B8CE4583946D867ADCB848EA524CC14E31F5B1239FED08D89DD5046992E8AC8
Malicious:	false
Reputation:	low
URL:	https://clipresource.com/nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg
Preview:	............................................ !#! .++..++>===>@@@@@@@@@@......................".....",......,&)###)&//,,//;;9;;@@@@@@@@@@..........Adobe.d...........{.y..".................................................................................!.1..AQaq."2....#BR....3b..$Sr..45CT.....%Dc..s......................A!............?..iR.@.R.A...u..F....1#..$....B.......K.._.h5.U.[..X\.....?...(...=...D.k<.?_...]...}...A......PS.7....P..m.#..?.Y....@9..."...8..IO....T..?...2.....{y!...g....yY..N5..z._1Uw.7.%.zQ.w"...Z$.....j66.3\F....c.....n.~....+];.I'..]........./.I..D.!.F..#..i]..MKsu......gj....N._.?...H...#....)...V....R.c.......=........P.y2.>U....#0..[t.S....L.p.w.....d.w..>....~5..w.B\|k..cQ...cP.......B\|E{........+......}-~~.......B.P.>.....c..X...w...7..a....q...._Y.S..B...w^.u.u......B..6.}..ys.^.]..4...Y.p..X..MJ...gD.,....Y.0U.....P....d.xw...5.(.....1S...20e<.9......=.G..R...F..A!...o...U.{@.R.@.R.@.R.A...iR.@.R.@..C..._.?...te.Aa...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1228
Entropy (8bit):	7.496938815500527
Encrypted:	false
SSDEEP:	24:00h/Wm5Bm4xE3C88JpQP5vdWALfTtES3VOhr3uhUq1:XxWmq318JpQRkALfhLmLup1
MD5:	485843245E3150BA9A0E75FC9C9FCDDD
SHA1:	7FAEF94B78C3D8B73F7FEC77C0F4D4B99B4DB7BC
SHA-256:	B366FD760FE4BB07FD4BA257219DD77B8D2C831EF2F38336DB6657EDC8308BB6
SHA-512:	6A9D1D1A2753AE4C51F424ADFA7DE3D97602E7695E9757B08ED42FE112E6FEC555BFE9992A9C9E05BD1084E8B883D07DF9DF6346A315109ADE41E5ACE065D597
Malicious:	false
Reputation:	low
URL:	https://upload.wikimedia.org/wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png
Preview:	RIFF....WEBPVP8L..../......I.#IR....7+...`..m.6..m'.....o(Wl;i..m.l...Ir./.G....p.........._..../......_..../......_..../......j.......=../0..E...M]j............F..%....\yE..D<t8..+g.... .t`\|.hZ...5...X...z..........D.6..5...T2}.!.....k>f.I..X.._....`...0.g.......z....,.M..H...,.)..K....yy..$..q......y....x.z.~...a......)............I...>J ).i......C-.').S-..q../......W......\|.}........k..v....w......(.l..5y).b...T'.li........N..-.w......V.....l...wK...w......~e........\.7.].U7.^...l-....,...<,..3...../d.Er.o..b~..........\|~\..c\.s..].\|...Ry..rA..m....b^.a.C..).v...vK..yMg...;;..Z......Z.w...<...r.Y./.{.c..\|z.+.....F....};..5.)!......2ym.@...u[4B.m<..Z.9..?...pp...f.G........6.&m....uv...WJ...X.t.SG,/7.=.7.}..S..>....U.>......W...../.?.$..R..e.....oy9..]y...n8....).z0..I...@A...Ia..:...).F~..n.;...g.....[..9<..=..a.&....).;..A...5G..N.K...M}...N^zh...O.[v.......\|....v._..{ve\!U..p.....>. Cs....*..L.._..../......_..../......_..........?wq...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20947
Entropy (8bit):	7.93621799572514
Encrypted:	false
SSDEEP:	384:ML4QGouA2iDLVZDp3CPZfy58+/Ij0VQfwSTdlvE+OeUXQw24HVVpvnpT/QUPX0eb:MLpGouA2iDL7t3CP8O0Q5/zOeSr2EVp5
MD5:	9368160397598E24EB5E324C0365E523
SHA1:	AEBB62FD31141B7B67DF031A400F964217B74D4F
SHA-256:	BF86A101B204F380EF9C934CC87F83A7AD132E6A2EE4DBA3F30A33FAB142E2F0
SHA-512:	2B00697F9A861CF356839640693AD3ADF1CE6D1E2141A788B5AF90DC3F8EE2CCE5D84D9261BECB02FA42B380C0AE86AA132180D6083A1F2D86AF3EB20D565473
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.......... .IDATx......a..9gfG..,B.!...,d.d........%N...$1v.....#\_.o..\....u.9.&...!...ql?..u.-$!$!....!.X.I.e.,....s...=.3.3.=;.s..O..`..?}.{..~.9_..244P..-[...'..Z[.....g...k...S.F.....w.....@..A..km.c....'+.......p.......c..3...R..yu"......G..s.0..W....8.......}.i.~u+.H.I;...as\|1.s.Z........a..{.......-{..F.0......9.../A...x0.~.Z..X......`.Z.;......M....0..H...pv.v.....-[..{..>A..E.....E...@.{.\|......\|-=2.._...3..F....h...n.......@7..(!..:..!DI/.&..1t..9....{.P..>.....r..?.0..=.0.<Wn.}...08X.i..~..}....e_..,..F..u....-F.......SZ.ghMF..a_.0..2.....>.U'2.....C..d.....n..(.#.)....w....#"..?..:..8.{....+...\|\+!.U...q....(...F.(/.5X.......R........AU.....E.b.A..._{Ca8..2..l'1p.s..........1.i.pi..X..p..\...z..v...61.....s..Z'..p.l.d8.ra1.F.....S.0(...1..F..dhM.k.i....:J@..v...G.....r..}z(.]..EH..#a$.y2....I.KFX.m...2..........f9.2...;...O .].b...`0'~.b...0.2.W.6.1<T..d.`..........2.(q....[.pt. ...q\.T......0.0*

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-12T23:03:13.160471+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	49745	104.21.32.130	443	TCP
2024-12-12T23:03:16.784267+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	49749	104.21.68.16	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 23:02:51.760987997 CET	49675	443	192.168.2.4	173.222.162.32
Dec 12, 2024 23:03:01.375479937 CET	49675	443	192.168.2.4	173.222.162.32
Dec 12, 2024 23:03:05.510216951 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:05.510304928 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:05.510513067 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:05.510850906 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:05.510931015 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:06.453346014 CET	80	49723	217.20.58.98	192.168.2.4
Dec 12, 2024 23:03:06.453499079 CET	49723	80	192.168.2.4	217.20.58.98
Dec 12, 2024 23:03:06.453558922 CET	49723	80	192.168.2.4	217.20.58.98
Dec 12, 2024 23:03:06.496769905 CET	80	49724	217.20.58.98	192.168.2.4
Dec 12, 2024 23:03:06.496860027 CET	49724	80	192.168.2.4	217.20.58.98
Dec 12, 2024 23:03:06.496901989 CET	49724	80	192.168.2.4	217.20.58.98
Dec 12, 2024 23:03:06.573503017 CET	80	49723	217.20.58.98	192.168.2.4
Dec 12, 2024 23:03:06.616760015 CET	80	49724	217.20.58.98	192.168.2.4
Dec 12, 2024 23:03:07.200438976 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.200877905 CET	49740	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.210262060 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:07.210823059 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:07.210858107 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:07.212327957 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:07.212409019 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:07.215606928 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:07.215869904 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:07.261363029 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:07.261423111 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:07.308928013 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:07.309096098 CET	49741	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.320573092 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:07.320784092 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.320826054 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.320883989 CET	80	49740	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:07.321295977 CET	49740	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.429233074 CET	80	49741	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:07.429449081 CET	49741	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:07.440736055 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:08.806344032 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:08.849546909 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:08.851180077 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:08.972286940 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:09.377043009 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:09.421379089 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:09.672282934 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.672316074 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:09.672559977 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.672636032 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.672720909 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:09.672786951 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.672801018 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:09.672991991 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.673104048 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:09.673135996 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.893345118 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.893769979 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.893831015 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.895513058 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.895682096 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899171114 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899213076 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899267912 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899280071 CET	443	49744	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.899354935 CET	49744	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899611950 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.899703979 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.899784088 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.900134087 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.900170088 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.901751041 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.909847975 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.909869909 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.912565947 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.912748098 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913470030 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913480997 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913517952 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913605928 CET	443	49743	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.913667917 CET	49743	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913754940 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.913817883 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:10.914041996 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.914150000 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:10.914180994 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.125350952 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.125729084 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.125763893 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.127435923 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.127604961 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.128500938 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.128591061 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.128607988 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.171360016 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.177759886 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.177797079 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.219105005 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.219518900 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.219583035 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.221029043 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.221316099 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.221623898 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.221750021 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.225507021 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.272017956 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:12.272078037 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:12.319266081 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:13.160490990 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:13.160743952 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:13.160823107 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:13.160888910 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:13.160923958 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:13.160986900 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:13.161998987 CET	49745	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:13.162029982 CET	443	49745	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:13.490379095 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:13.490468979 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:13.490554094 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:13.490787983 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:13.490816116 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.382277966 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:14.382489920 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:14.708980083 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.709515095 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.709575891 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.711046934 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.711396933 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.711694002 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.711694002 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.711694002 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.711829901 CET	443	49747	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.711936951 CET	49747	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.712045908 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.712084055 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:14.712517023 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.712517023 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:14.712574959 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:15.487303972 CET	49739	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:15.607502937 CET	80	49739	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:15.953113079 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:15.964426041 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:15.964445114 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:15.966367006 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:15.966460943 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:15.970868111 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:15.971081972 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:15.971091986 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:15.971179962 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.012967110 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.012985945 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.066088915 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.784317017 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.784503937 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.784585953 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.784607887 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.784725904 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.784797907 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.786293030 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.786304951 CET	443	49749	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.786314964 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.787309885 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.787331104 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.787343979 CET	49749	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.787406921 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.787714005 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:16.787727118 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:16.916812897 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:16.916889906 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:16.917288065 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:17.481111050 CET	49737	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:03:17.481175900 CET	443	49737	142.250.181.132	192.168.2.4
Dec 12, 2024 23:03:18.005702019 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.006283998 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.006304026 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.010226965 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.010451078 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011307955 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011331081 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011403084 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011486053 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.011734009 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011737108 CET	443	49751	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.011805058 CET	49751	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011897087 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.011945009 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:18.012031078 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.012331009 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:18.012350082 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:19.298829079 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:19.299252033 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:19.299328089 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:19.299796104 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:19.300251961 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:19.300340891 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:19.300566912 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:19.343349934 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.137573957 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.137726068 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.137897968 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.137933016 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.138006926 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.140005112 CET	49753	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.140042067 CET	443	49753	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.236115932 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.236202002 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.236310959 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.236351013 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.236453056 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.236536980 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.236706972 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.236743927 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:20.236984015 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:20.237025976 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.451358080 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.452186108 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.452249050 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.453967094 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.454054117 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.454639912 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.454675913 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.454718113 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.454746962 CET	443	49757	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.454811096 CET	49757	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.454963923 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.455185890 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.455269098 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.455358028 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.455358028 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.455389977 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.455615997 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.455646038 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.458271980 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.458342075 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461142063 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461175919 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461235046 CET	443	49756	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.461267948 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461291075 CET	49756	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461663008 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.461730003 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:21.461807966 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.462023020 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:21.462055922 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.738696098 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.739145041 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.739192009 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.740889072 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.741019964 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.741311073 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.741450071 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.741566896 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.741591930 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.741874933 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.741910934 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.745479107 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.745568037 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.746083021 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.746267080 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.789719105 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.789746046 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.789796114 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.789827108 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:22.837755919 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:22.837871075 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.715398073 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715590000 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715677023 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.715686083 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715759039 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715815067 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.715833902 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715923071 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.715977907 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.715991020 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.724473953 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.724539995 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.724555016 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.733403921 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.733504057 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.733519077 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.738598108 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.738687038 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.738771915 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.738951921 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.739044905 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.739118099 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.740459919 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.740506887 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.740545034 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.740649939 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.740658045 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.741034031 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.741080046 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.741291046 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.741327047 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.742213964 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.742245913 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.779551029 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.835238934 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.877337933 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877410889 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:24.877429962 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877487898 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:24.877573967 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877579927 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877739906 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877757072 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:24.877865076 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:24.877899885 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:24.887875080 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.907219887 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.910809040 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.911169052 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.911232948 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.918663979 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.918755054 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.918773890 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.925915956 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.925993919 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.926007032 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.933096886 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.933605909 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.933619022 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.940633059 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.940711021 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.940723896 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.947982073 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.948049068 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.948061943 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.962867975 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.963026047 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.963038921 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.963057041 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.963320017 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.970417976 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.978096008 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.978151083 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.978328943 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.978343010 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.978490114 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.985498905 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.999520063 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:24.999702930 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:24.999764919 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.042562962 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.042622089 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.073595047 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.073713064 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.073816061 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.073909998 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.073995113 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.074014902 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.074079990 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.074163914 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.074831963 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.079591036 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.090186119 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.092569113 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.092745066 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.092808962 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.099410057 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.103408098 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.103502035 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.103534937 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.111550093 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.111613035 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.111628056 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.126214027 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.126404047 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.126465082 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.126552105 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.137392044 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.137454987 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.139853954 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.139890909 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.139939070 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.144325972 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.144397020 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.144412994 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.144531012 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.153322935 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.153361082 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.153520107 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.161554098 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.161575079 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.161634922 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.161650896 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.170490026 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.170686007 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.170697927 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.170948982 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.174684048 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.174701929 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.174758911 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.183072090 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.183393955 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.183577061 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.192323923 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.192517996 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.193614960 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.198007107 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.198246002 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.198308945 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.201118946 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.201211929 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.205149889 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.205357075 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.221947908 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.222131014 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.247574091 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.265074015 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.268708944 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.268806934 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.268842936 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.282253981 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.282345057 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.282572985 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.282639980 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.283001900 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.289985895 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.295371056 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.295695066 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.297121048 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.297350883 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.297414064 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.304394007 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.304483891 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.306188107 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.306272984 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.306437969 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.306510925 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.306912899 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.307717085 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.307804108 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.312180042 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.315556049 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.315635920 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.319722891 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.319856882 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.320030928 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.320094109 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.320489883 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.320489883 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.322338104 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.322428942 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.326289892 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.326379061 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.332559109 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.332648039 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.338907957 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.339083910 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.345627069 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.345839977 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.348843098 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.349045038 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.352205992 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.352382898 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.354110003 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.354279041 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.357878923 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.358068943 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.361413956 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.361577034 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.365092039 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.365264893 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.367213011 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.367441893 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.370783091 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.370995998 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.372647047 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.372756004 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.372812033 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.373018980 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.373018980 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.625920057 CET	49759	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.625983953 CET	443	49759	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.673687935 CET	49758	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.673755884 CET	443	49758	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.953344107 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.953741074 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.953773022 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.954644918 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.954724073 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955209017 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955224991 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955261946 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.955332994 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955343962 CET	443	49762	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.955358982 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955400944 CET	49762	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955845118 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.955924034 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.956018925 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.956306934 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.956336975 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.958429098 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.958954096 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.959023952 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.960484982 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.960704088 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961019039 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961070061 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961070061 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961124897 CET	443	49761	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.961196899 CET	49761	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961364985 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961452961 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.961543083 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961766005 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.961805105 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.987070084 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.987484932 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.987549067 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.989202023 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.989288092 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.989737034 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.989770889 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.989810944 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.989831924 CET	443	49763	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.989903927 CET	49763	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.990142107 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.990170956 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:25.990247011 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.990490913 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:25.990514040 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:26.101752043 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.102252960 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.102263927 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.103297949 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.103406906 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.103840113 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.104290009 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.104353905 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.104751110 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.104805946 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.104971886 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.104979038 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.105948925 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.106141090 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.107367992 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.107367992 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.107450008 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.107531071 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.152962923 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.153072119 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.153132915 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.199603081 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.536274910 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536418915 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536499977 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536514044 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.536546946 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536604881 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.536654949 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536802053 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.536853075 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.536859989 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.543905020 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.543998957 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.544006109 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548021078 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548149109 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548302889 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548346996 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.548423052 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548526049 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.548531055 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548559904 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.548633099 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.548666000 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.556193113 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.556291103 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.556308985 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.560736895 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.560808897 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.560817003 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.565377951 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.565551996 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.626588106 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.656428099 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.702527046 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.745085955 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.748785019 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.748897076 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.748927116 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.756633043 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.756716967 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.756747007 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.764565945 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.764662027 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.764692068 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.772494078 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.772649050 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.772656918 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.788232088 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.788306952 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.788314104 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.796176910 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.796240091 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.796246052 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.797931910 CET	49766	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.797969103 CET	443	49766	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.804197073 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.804267883 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.804274082 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.812184095 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.812258005 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.812273026 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.820796013 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.820897102 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.820925951 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.828556061 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.828656912 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.828687906 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.836241961 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.836318970 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.836327076 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.891705036 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.936594009 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.939049959 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.939124107 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.939131975 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.942641020 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.942713022 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.942806959 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.943079948 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.943110943 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.944493055 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.944555998 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.944561958 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.950040102 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.950125933 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.950133085 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.960691929 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.960776091 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.960782051 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.960838079 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.970704079 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.970710039 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.970788002 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.970794916 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.970844984 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.980432987 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.980452061 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.980539083 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.990160942 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.990176916 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.990259886 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:26.994981050 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:26.995064974 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.004672050 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.004761934 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.014332056 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.014420986 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.014496088 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.014559031 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.019340038 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.019428015 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.019433975 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.019511938 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.019546032 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.019553900 CET	443	49767	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.019577026 CET	49767	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.020556927 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:27.020703077 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:27.020771980 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:27.022984028 CET	49746	443	192.168.2.4	104.21.32.130
Dec 12, 2024 23:03:27.023005962 CET	443	49746	104.21.32.130	192.168.2.4
Dec 12, 2024 23:03:27.023454905 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.023538113 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.023633957 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.023899078 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:27.023932934 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:27.221056938 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.221323967 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.221352100 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.224874020 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.224941969 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.225440025 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.225630045 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.225657940 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.228729010 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.229877949 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.229940891 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.231415987 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.231497049 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.232378006 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.232471943 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.232800007 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.232819080 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.233809948 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.234045982 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.234054089 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.235481977 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.235537052 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.235951900 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.236030102 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.236181974 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.236196995 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.276702881 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.276709080 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.276727915 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.276828051 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.322966099 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.671508074 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.671658039 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.671753883 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.671791077 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.671854019 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.671920061 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.671936989 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.672039986 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.672103882 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.672116041 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.679759026 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.679825068 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.679881096 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.679896116 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.679964066 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.680044889 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.681037903 CET	49770	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.681066990 CET	443	49770	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.682415009 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.682517052 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.682609081 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.683600903 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.683650017 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684525967 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684591055 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684629917 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684669971 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684700966 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684789896 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.684823990 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.684823990 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.684895992 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.686506033 CET	49769	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.686542988 CET	443	49769	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.687814951 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.687894106 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.687926054 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.696326017 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.696403027 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.696422100 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.745868921 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.790827990 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.821887970 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:27.821969032 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:27.822077036 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:27.822261095 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:27.822304010 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:27.828839064 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:27.828871012 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:27.828942060 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:27.829155922 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:27.829169035 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:27.844098091 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.863363028 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.867566109 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.867643118 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.867661953 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.875420094 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.875498056 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.875511885 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.883379936 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.883455992 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.883469105 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.899221897 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.899303913 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.899302959 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.899348021 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.899401903 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.907047033 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.915154934 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.915221930 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.915236950 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.923520088 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.923609972 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.923624992 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.931164980 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.931231976 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.931245089 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.938199997 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.938278913 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.938292027 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:27.983284950 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:27.983309984 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.030054092 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.055860996 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.058259010 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.058331013 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.058345079 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.062983036 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.063060999 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.063074112 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.067846060 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.067907095 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.067919016 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.077187061 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.077255011 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.077266932 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.082031965 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.082107067 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.082118988 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.082192898 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.091453075 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.091473103 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.091526985 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.096118927 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.096193075 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.096205950 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.105407000 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.105489016 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.105509996 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.105575085 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.114614010 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.114638090 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.114687920 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.119395971 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.119482040 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.119494915 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.119555950 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.128762960 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.128843069 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.138092995 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.138171911 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.236491919 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.236726999 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.236785889 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.237662077 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.237729073 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.238055944 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.238118887 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.238182068 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.238195896 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.240394115 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.240664005 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.240725994 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.242182970 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.242254019 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.242480040 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.242556095 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.242568970 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.248514891 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.248594046 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.256376028 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.256441116 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.260245085 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.260313034 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.267802954 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.267899036 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.271333933 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.271411896 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.278465033 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.278570890 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.285465956 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.285547018 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.289132118 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.289211988 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.292593956 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.292598963 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.292656898 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.296272993 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.296345949 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.303220987 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.303302050 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.308132887 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.308214903 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.314964056 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.315080881 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.321922064 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.322019100 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.325614929 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.325706959 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.331801891 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.331897974 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.331918955 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.332000017 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.332020998 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.332097054 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.332168102 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.332231998 CET	49768	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.332266092 CET	443	49768	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.340313911 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.682353020 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.682388067 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.682568073 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.682615995 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.682657003 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.682682991 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.690679073 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.690754890 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.690771103 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.699213028 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.699286938 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.699300051 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.707515001 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.707582951 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.707726002 CET	49771	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.707758904 CET	443	49771	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.721580982 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.721714973 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.721810102 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.721813917 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.721879959 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.721942902 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.721960068 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.729578018 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.729660034 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.729671955 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.729700089 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.729751110 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.737868071 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.746259928 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.746468067 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.746530056 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.790491104 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.841111898 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.884000063 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.884031057 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.894375086 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.894721031 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.894781113 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.896253109 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.896332979 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.896619081 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.896653891 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.896677017 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.896718025 CET	443	49774	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.896789074 CET	49774	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.896958113 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.897047043 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.897128105 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.897341967 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:28.897376060 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:28.916714907 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.916840076 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.916889906 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.916915894 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.916971922 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.924539089 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.927735090 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.927836895 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.927854061 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.943303108 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.943423033 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.943497896 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.943523884 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.943583965 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.951021910 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.958832979 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.958920002 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.959021091 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.959034920 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.959115982 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.966653109 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.974520922 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.974751949 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.974785089 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.982371092 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.982443094 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.982456923 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.990222931 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.990303993 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.990315914 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.997941017 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:28.998017073 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:28.998030901 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.043873072 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.043947935 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.061467886 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.061671972 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.061697960 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.063112020 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.063177109 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063469887 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063524961 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063524961 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063549995 CET	443	49777	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.063606977 CET	49777	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063823938 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.063858032 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.063916922 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.064078093 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:29.064090967 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:29.090511084 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.104914904 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.107223034 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.107301950 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.107353926 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.112205029 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.112272024 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.112286091 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.122128010 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.122147083 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.122230053 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.122243881 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.131669998 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.131747007 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.131766081 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.131829023 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.136044025 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.140507936 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.140583992 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.140595913 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.140683889 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.149540901 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.149559975 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.149622917 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.158262968 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.158281088 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.158350945 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.167048931 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.167068005 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.167125940 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.171586037 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.171657085 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.171669006 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.171753883 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.176105022 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.176246881 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.176256895 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.176301003 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.176362038 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.176378965 CET	443	49772	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:29.176574945 CET	49772	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:29.233232021 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.233557940 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.233601093 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.235239983 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.235344887 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.236188889 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.236279964 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.236365080 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.278474092 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.278491974 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.325510025 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872380972 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872454882 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872476101 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872582912 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872637987 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872668982 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872668028 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872668028 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872733116 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872769117 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.872795105 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872795105 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872967005 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.872967958 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.919181108 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.947753906 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.947890043 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.947906017 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.947942019 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.948014021 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.948344946 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.948345900 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.948380947 CET	443	49776	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:29.948451996 CET	49776	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:29.951709032 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:29.951798916 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:29.951916933 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:29.952285051 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:29.952327013 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.092113972 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:30.092200041 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:30.092443943 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:30.092556953 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:30.092592001 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:30.115605116 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.115839005 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.115900993 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.117136955 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.117490053 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.117574930 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.117688894 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.172010899 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.274732113 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.275039911 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.275065899 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.275948048 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.276026964 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.276313066 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.276370049 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.276556969 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.276571989 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.324599981 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.501113892 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.501172066 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.501267910 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.501472950 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:30.501574039 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:30.501660109 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:30.501765966 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.501853943 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.501920938 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502091885 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502186060 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.502264977 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502387047 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502407074 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.502475023 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502645969 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502677917 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.502769947 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:30.502808094 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:30.502926111 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.502966881 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.503092051 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.503125906 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.503231049 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.503257990 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.561635971 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.561779022 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.561872005 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.561965942 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.561968088 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.562047958 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.562091112 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.569514036 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.569627047 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.569653988 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.578044891 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.578161001 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.578175068 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.586433887 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.586555958 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.586568117 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.639537096 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.670825958 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:30.670911074 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:30.671308994 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:30.671308994 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:30.671435118 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:30.681289911 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.723584890 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.723609924 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.723678112 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.723784924 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.723784924 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.724308014 CET	49779	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.724328995 CET	443	49779	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.728329897 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.728389978 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.757173061 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.757404089 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.757519960 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.757637978 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.768790960 CET	49778	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:30.768816948 CET	443	49778	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:30.771687984 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.771737099 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:30.771821976 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.772110939 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:30.772140980 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.194073915 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.252995968 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.399080992 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.399107933 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.403053045 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.403090954 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.403386116 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443387985 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443387985 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443387985 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443660021 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443737984 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.443813086 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.443965912 CET	443	49780	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.443981886 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.444000006 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.444160938 CET	49780	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.494074106 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.494350910 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.494414091 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.495301962 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.495376110 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.496279001 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.496346951 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.496385098 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.539374113 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.541380882 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.541441917 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:31.588325024 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:31.718542099 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:31.718935013 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:31.718972921 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:31.719592094 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:31.719888926 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:31.719994068 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:31.719997883 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:31.720984936 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.721158028 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.721190929 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.721456051 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.721625090 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.721685886 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.722729921 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.722791910 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.722804070 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723053932 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723105907 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723105907 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723149061 CET	443	49784	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.723207951 CET	49784	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723437071 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723479033 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.723491907 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723509073 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.723543882 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723582029 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.723655939 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723728895 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723742962 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.723957062 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723989964 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.723990917 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.724090099 CET	443	49785	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.724145889 CET	49785	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.724189043 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.724211931 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.724267006 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.724455118 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.724466085 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.725042105 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.725116968 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725356102 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725394011 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725394011 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725466013 CET	443	49786	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.725522995 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725522995 CET	49786	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725578070 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.725641012 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725812912 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.725842953 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.728457928 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.728627920 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.728688002 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.730155945 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.730252981 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730478048 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730514050 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730514050 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730564117 CET	443	49782	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.730623960 CET	49782	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730664015 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730720997 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.730794907 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730941057 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:31.730967999 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:31.763353109 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:31.773502111 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:31.988430977 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.988802910 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.988863945 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.990303040 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.990462065 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.990684986 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.990742922 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.990744114 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.990772009 CET	443	49788	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.990835905 CET	49788	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.990983009 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.991067886 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:31.991142988 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.991358995 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:31.991399050 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:32.062051058 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.062391043 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.062454939 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.063285112 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.063615084 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.063678026 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.063839912 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.064460039 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.064528942 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.064660072 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.064677000 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.117039919 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.160520077 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160537958 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160542965 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160582066 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160621881 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160641909 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160712957 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.160712957 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.160712957 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.160712957 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.160789013 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.160856009 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.169351101 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169445992 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169492006 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.169512033 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169616938 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169684887 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.169698000 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169799089 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.169862032 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.169873953 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.184762001 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.184814930 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.184819937 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.184847116 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.184890032 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.193116903 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.226739883 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.226800919 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.226895094 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.226895094 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.227251053 CET	49781	443	192.168.2.4	78.46.22.9
Dec 12, 2024 23:03:32.227282047 CET	443	49781	78.46.22.9	192.168.2.4
Dec 12, 2024 23:03:32.246664047 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.289455891 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.338188887 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.338206053 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.364367962 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.364419937 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.364437103 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.370421886 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.370618105 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.370678902 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.378412962 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.378465891 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.378483057 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.386198044 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.386244059 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.386255026 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.394053936 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.394108057 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.394119978 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.409478903 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.409539938 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.409560919 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.417243004 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.417299032 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.417310953 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.425020933 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.425082922 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.425093889 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.432782888 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.432832956 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.432843924 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.440717936 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.440768957 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.440779924 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.451726913 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.451781988 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.451792955 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.481601954 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.481686115 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.481751919 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.525871992 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.552633047 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.556324005 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.556384087 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.556400061 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.564102888 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.564166069 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.564178944 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.578934908 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.579008102 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.579020023 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.579085112 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.581263065 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.581439972 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.581628084 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.582402945 CET	49787	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.582442045 CET	443	49787	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.585823059 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.585876942 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.585916996 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.586080074 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.586134911 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.586224079 CET	49783	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.586256027 CET	443	49783	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.595354080 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.595385075 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.595458984 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.595652103 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:32.595669985 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:32.662065983 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.662301064 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.662322998 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.665874958 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.666050911 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.666488886 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.666623116 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.666659117 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.711224079 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.711230993 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.725052118 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.725073099 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.725244999 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.725296021 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:32.725302935 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:32.758270025 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.941457033 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.941966057 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.942001104 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.943485975 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.943871975 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.943941116 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.943979025 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.944072008 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.944575071 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.944889069 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.944922924 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.948327065 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.948559046 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.948823929 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.948882103 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.948936939 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.950850964 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.950942039 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.951020956 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.951030970 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.951141119 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.951203108 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.952670097 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.952749014 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.952872038 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.952944994 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.952980042 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.953061104 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.953221083 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.953303099 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.953309059 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.953377962 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.953476906 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.994648933 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.994651079 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.994658947 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.994661093 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.994689941 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:32.994771004 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:32.994831085 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.040291071 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.040407896 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.040411949 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.170634031 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.170782089 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.170810938 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.170850992 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.170871973 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.170900106 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.170912981 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.171057940 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.171111107 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.171116114 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.179088116 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.179173946 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.179179907 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.195630074 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.195734978 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.195740938 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.210246086 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.210613012 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.210648060 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.211114883 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.211539030 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.211539030 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.211677074 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.244404078 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.259723902 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.290851116 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.337286949 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.337297916 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.366368055 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.366556883 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.366564035 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.372721910 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.372751951 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.372915030 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.372921944 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.372977972 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.380693913 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.388772964 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.388943911 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.388950109 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392129898 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392246962 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392321110 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392389059 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392456055 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392549992 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392616034 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.392616034 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.392683029 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.392740965 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.395803928 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.395865917 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.395944118 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.395950079 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.396190882 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.396465063 CET	49790	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.396482944 CET	443	49790	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.397015095 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.397087097 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.398605108 CET	49789	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.398617029 CET	443	49789	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399230957 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399300098 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399350882 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399364948 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.399372101 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399414062 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.399418116 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399935961 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.399959087 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400078058 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400140047 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.400170088 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400202990 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400226116 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.400254965 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400294065 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.400300026 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400404930 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.400465012 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.401938915 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.401962996 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.402039051 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.402908087 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.402919054 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.407227993 CET	49793	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.407241106 CET	443	49793	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.407674074 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.407732010 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.407901049 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.407907009 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.407921076 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.408013105 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.408067942 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.408103943 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.408442020 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.408701897 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.408736944 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.408834934 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.408898115 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.410656929 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.410664082 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.410731077 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.411535978 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.411577940 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.412224054 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.412233114 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.412265062 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.412661076 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.412667036 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.412924051 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.412940025 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.412945986 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.413228035 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.413234949 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.416007042 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.424532890 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.424621105 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.424626112 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.449958086 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.450018883 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.467372894 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.499253988 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.519172907 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.572619915 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.572638035 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.584387064 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.588687897 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.589878082 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.589941025 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.595206976 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.596199036 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.596358061 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.596364021 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.596471071 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.596533060 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.604228020 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.604408026 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.604430914 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.604470968 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.604480982 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.604486942 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.612143993 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.612833023 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.612907887 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.612915039 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.612945080 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.613061905 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.613125086 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.613290071 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.620119095 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.620668888 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.620884895 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.620948076 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.628655910 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.629715919 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.629720926 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636013985 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636100054 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636389017 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.636451960 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636575937 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636626959 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.636637926 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.636723995 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.643958092 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.644205093 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.644478083 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.644510984 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:33.644535065 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.644675970 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.644676924 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.644680023 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.644793987 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.644845009 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.644859076 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:33.645200014 CET	49792	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.645262957 CET	443	49792	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.652715921 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.653183937 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.653192043 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.653197050 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.653235912 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:33.653623104 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.653940916 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:33.653978109 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:33.655359983 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.655446053 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.657659054 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.658083916 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.658166885 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.659722090 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.659923077 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.659998894 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.660115004 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.660170078 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.660183907 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.660183907 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.660250902 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.660305023 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.660706997 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.661628962 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.661935091 CET	49791	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.661943913 CET	443	49791	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.668211937 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.668572903 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.668636084 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.679519892 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.679594040 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.679768085 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.679965019 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:33.679996014 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:33.684875011 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.685570955 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.685657024 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.685765982 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.685769081 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.685832024 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.686109066 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.686188936 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.733498096 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.763523102 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.763566017 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.763585091 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.763655901 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.763696909 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.763794899 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.763794899 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.763859987 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.763870955 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.765212059 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.765249014 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.765908957 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.765938997 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.766204119 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:33.766283035 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:33.779633045 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.809964895 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:33.821393967 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.851659060 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.855392933 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.855528116 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:33.855559111 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.855591059 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.855622053 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.855690002 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.930702925 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:33.930721045 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:33.931222916 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:33.932272911 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:33.932362080 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:33.932655096 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:33.933075905 CET	49794	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:33.933146954 CET	443	49794	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:33.975368023 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264401913 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264447927 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264487028 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264496088 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.264513016 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264549971 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264564991 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.264570951 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.264638901 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.264646053 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.273403883 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.273457050 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.273464918 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.281833887 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.281898975 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.281905890 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.308521986 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.309829950 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.309853077 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.311280012 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.311355114 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.311362028 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.311402082 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.311624050 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.311698914 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.311769009 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.311773062 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.323268890 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.353939056 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.384664059 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.431236982 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.431245089 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.456108093 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.456165075 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.456173897 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.461019993 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.461072922 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.461087942 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.468535900 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.468586922 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.468594074 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.483336926 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.483416080 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.483422995 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.490761042 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.490833998 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.490842104 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.498235941 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.498311043 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.498318911 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.505608082 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.505686045 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.505692959 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.513166904 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.513235092 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.513242006 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.520628929 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.520703077 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.520710945 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.527204990 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.527272940 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.527281046 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.540277958 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.540304899 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.540357113 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.540369034 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.540429115 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.576112032 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.619658947 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.620440006 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.621763945 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.621784925 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.623213053 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.623301029 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.623863935 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.623893976 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.623948097 CET	443	49797	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.623965025 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.624012947 CET	49797	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.624408007 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.624433994 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.624502897 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.624705076 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.624717951 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.625932932 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.626183987 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.626213074 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.627644062 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.627724886 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628144026 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628170967 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628221035 CET	443	49798	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.628226995 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628274918 CET	49798	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628590107 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628617048 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.628685951 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628930092 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.628942013 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.629117012 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.629327059 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.629336119 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.630769014 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.630845070 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631123066 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631136894 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631175995 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631200075 CET	443	49799	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.631258965 CET	49799	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631458998 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631542921 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.631623983 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631792068 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.631828070 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.661475897 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.663558006 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.663652897 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.663652897 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.663667917 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.663824081 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.669336081 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.673757076 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.673841953 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.673851967 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.673913956 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.678013086 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.678090096 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.678096056 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.678111076 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.678174973 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.678276062 CET	49795	443	192.168.2.4	104.17.24.14
Dec 12, 2024 23:03:34.678286076 CET	443	49795	104.17.24.14	192.168.2.4
Dec 12, 2024 23:03:34.866395950 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.866867065 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.866914034 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.870110035 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.870203972 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.874382019 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.876586914 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.876650095 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.876689911 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.876701117 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.876724958 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.876739025 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.876748085 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.876801014 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.877013922 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.877026081 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.877074003 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.877095938 CET	443	49800	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.877156019 CET	49800	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.877526045 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.877609968 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.877700090 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.878065109 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.878076077 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.878108978 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.878189087 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.878242016 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.878777981 CET	49796	443	192.168.2.4	185.15.58.240
Dec 12, 2024 23:03:34.878787041 CET	443	49796	185.15.58.240	192.168.2.4
Dec 12, 2024 23:03:34.880187035 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.880264997 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.880635023 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.880652905 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.880686045 CET	443	49801	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.880691051 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.880744934 CET	49801	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.881000042 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.881108999 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.881194115 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.881350994 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.881391048 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.897250891 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.897464991 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.897492886 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.898332119 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.898412943 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898650885 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898693085 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898693085 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898720026 CET	443	49802	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.898787975 CET	49802	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898890018 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.898931980 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.899013042 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.899158955 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.899183989 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.915421963 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.915653944 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.915683985 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.916023016 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.916882992 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.916904926 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.917777061 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.917864084 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918173075 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918173075 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918216944 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918240070 CET	443	49804	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.918306112 CET	49804	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918451071 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918545008 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.918629885 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918910980 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.918950081 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.919078112 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.919162035 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919435978 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919436932 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919476032 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919547081 CET	443	49803	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.919619083 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919620991 CET	49803	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919637918 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.919718027 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919847965 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:34.919872046 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:34.955967903 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.956298113 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.956357956 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.959587097 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.959700108 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.959985018 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.959985971 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960021973 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960097075 CET	443	49805	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.960164070 CET	49805	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960177898 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960217953 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.960306883 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960459948 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:34.960491896 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:34.960910082 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.961086035 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.961102962 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.962532997 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.962615967 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.962881088 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.962881088 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.962915897 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.962975979 CET	443	49806	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.963040113 CET	49806	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.963056087 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.963116884 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:34.963186979 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.963576078 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:34.963608027 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.037029028 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.037358999 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.037384033 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.038247108 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.038410902 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.038435936 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.039271116 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.039359093 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039608002 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039640903 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039640903 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039695978 CET	443	49809	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.039762974 CET	49809	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039825916 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.039880037 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.039910078 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.039957047 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040024042 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040147066 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040169001 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.040344954 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040380955 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040380955 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040441990 CET	443	49807	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.040504932 CET	49807	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040637970 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040657043 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.040714025 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040936947 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.040950060 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.066878080 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.067128897 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.067184925 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.070379019 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.070449114 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.070744038 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.070760012 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.070796013 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.070821047 CET	443	49808	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.070879936 CET	49808	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.071088076 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.071103096 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.071172953 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.071342945 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:35.071352959 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:35.841226101 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.845534086 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.845801115 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.848622084 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.848681927 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.848817110 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:35.848834038 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.849085093 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.849114895 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.850171089 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.850255013 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.850302935 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.850367069 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:35.850905895 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.850994110 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.851396084 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:35.851480007 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.851775885 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.851794004 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.851962090 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:35.851969957 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:35.852160931 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.852260113 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.852730036 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.852883101 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.852982044 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.852998018 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:35.901757002 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:35.901806116 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:35.901825905 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.102761030 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.103481054 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.103539944 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.105027914 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.105128050 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.106426001 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.106532097 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.106755972 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.106771946 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.109174967 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.110902071 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.110981941 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.114546061 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.114670992 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.116044044 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.116154909 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.116225004 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.131194115 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.131557941 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.131620884 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.132541895 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.132621050 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.134169102 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.134242058 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.134531021 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.134550095 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.144186020 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.144512892 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.151520967 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.153635979 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.153697014 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.153697014 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.153750896 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.154572964 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.154647112 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.156217098 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.156279087 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.157536030 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.157627106 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.157836914 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.157855988 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.158534050 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.158628941 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.158953905 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.158972025 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.163538933 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.163602114 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.182024956 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.184014082 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.187069893 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.187175035 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.187239885 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.187433958 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.187462091 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.189368963 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.189443111 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.190294027 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.190370083 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.190557957 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.190649033 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.191452980 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.191545010 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.191971064 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.191984892 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.192296982 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.192317009 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.199132919 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.199723005 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.215751886 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.233050108 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.236592054 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.264697075 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.265158892 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.267162085 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.267183065 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.267520905 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.267539978 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.268814087 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.268903971 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.269381046 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.269448042 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.270565033 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.270653009 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.272098064 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.272167921 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.272588968 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.272600889 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.272828102 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.272835970 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.293217897 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.293363094 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.293457031 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.293603897 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.293668985 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.293704033 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.293962002 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.294596910 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.294730902 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.294929981 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.295078039 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.298604012 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.299163103 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.299401045 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.299556017 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.299618959 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.315329075 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.315356016 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.339910030 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.393387079 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.393414021 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.397476912 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.397578001 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.399689913 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.400120020 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.407299042 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.407306910 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.409168959 CET	49811	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.409193039 CET	443	49811	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.409960032 CET	49810	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.410003901 CET	443	49810	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.412724018 CET	49812	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.412786007 CET	443	49812	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.457602024 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.550561905 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550601959 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550631046 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550659895 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550687075 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550787926 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.550787926 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.550853014 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.550926924 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.553278923 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.561877012 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.561913013 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.561995983 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.562011957 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.562091112 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.570183992 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578171015 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578310013 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578399897 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578437090 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.578519106 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578598022 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.578615904 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578664064 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.578728914 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.599688053 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.599817038 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.599906921 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.599966049 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.599999905 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.600028992 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.600097895 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.600126028 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.600184917 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.600215912 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.607630014 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.607702017 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.607734919 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.624356031 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.624442101 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.624464035 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.624573946 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.639481068 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.639563084 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.639659882 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.640222073 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.640304089 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.640651941 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.640949965 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.641076088 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.641262054 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.641282082 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.641408920 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.641488075 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.641567945 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.641992092 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.642023087 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.644740105 CET	49815	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.644787073 CET	443	49815	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.646297932 CET	49819	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:36.646311045 CET	443	49819	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:36.648982048 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.649035931 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.649111032 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.649456978 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.649482965 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.659272909 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.659321070 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.659415007 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.659596920 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.659609079 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.661083937 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.661169052 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.661350965 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.661549091 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.661581993 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.665610075 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.665656090 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.665786028 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.665993929 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.666026115 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.666403055 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.667562008 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.667715073 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.667809010 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.667849064 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.667875051 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.667968035 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.667999029 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.668014050 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.668065071 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.668078899 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.670914888 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.675626040 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.675728083 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.675740957 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.692751884 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.692822933 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.692836046 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.712254047 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712372065 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712415934 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712451935 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712464094 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.712477922 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712517023 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.712539911 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.712580919 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.712600946 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.715097904 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.715271950 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.715295076 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.715353966 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.715367079 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.715481043 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.715575933 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.715585947 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.719527960 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.720539093 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.720769882 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.720778942 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.724917889 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.725142002 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.725152016 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.728920937 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.728972912 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.728979111 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.729545116 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.729614973 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.729623079 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.733692884 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.742423058 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.747872114 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.747987032 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.748090982 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.748157978 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.748245001 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.753667116 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.753880024 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.753961086 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.753968954 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.754080057 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.754182100 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.754235983 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.754242897 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.754636049 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.754642010 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.756611109 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.761446953 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.761460066 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.764249086 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.764478922 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.764502048 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.766041040 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.766098976 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.766105890 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.772417068 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.772475958 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.772490978 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.774637938 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.774717093 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.774724960 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.779381990 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.779383898 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.780726910 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.780810118 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.781130075 CET	49814	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.781153917 CET	443	49814	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.788269043 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.795264959 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.795430899 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.795463085 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.804769039 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.804827929 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.804838896 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.812766075 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.812823057 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.812830925 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.815174103 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.820705891 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.820761919 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.820770025 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.828737974 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.828797102 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.828810930 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.832180977 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.834697962 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.836817980 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.836889982 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.836899042 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.838870049 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.838959932 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.843677044 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.843694925 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.843745947 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.843868017 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.843928099 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.845052004 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.845119953 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.845135927 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.845352888 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.845408916 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.862987041 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.863065958 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.863089085 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.864648104 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.864720106 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.864734888 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.872210979 CET	49817	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.872283936 CET	443	49817	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.874034882 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.875232935 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.880361080 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.880443096 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.880510092 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.880574942 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.880637884 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.888297081 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.896361113 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.896420956 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.896436930 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.903912067 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.903966904 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.903980017 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.904460907 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.906963110 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.907231092 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.907286882 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.908308983 CET	49822	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.908333063 CET	443	49822	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.908390045 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.908440113 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.908446074 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.911679029 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.911750078 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.911763906 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.916412115 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.916482925 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.916487932 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.918392897 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.919522047 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.919599056 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.919620991 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.923965931 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.924012899 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.924016953 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.927366972 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.927423000 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.934429884 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.934602976 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.934777021 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.937670946 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.937755108 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.937838078 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.938869953 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.938905954 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.939534903 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.939584970 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.939589977 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.940124035 CET	49820	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:36.940150023 CET	443	49820	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:36.943592072 CET	49816	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.943633080 CET	443	49816	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.945040941 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.945247889 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.945297003 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.945303917 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.945425987 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.945486069 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.945751905 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.945775986 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.945842028 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.946214914 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.946243048 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.946369886 CET	49823	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.946383953 CET	443	49823	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.947283030 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.947329044 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.947333097 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.950041056 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.950102091 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.950170040 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.950520992 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.950542927 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.950562000 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.950634956 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.950694084 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.951198101 CET	49818	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.951216936 CET	443	49818	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.953500032 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.953511953 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.953577042 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.953792095 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:36.953809023 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:36.955377102 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.955416918 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.955426931 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.955440998 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.955502987 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.962912083 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.970797062 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.970851898 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.970856905 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.978722095 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:36.978773117 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:36.978776932 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.025532007 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.025561094 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.072463036 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.096748114 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.100358963 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.100414991 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.100431919 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.111140966 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.111213923 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.111219883 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.119045973 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.119107008 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.119111061 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.126426935 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.126492977 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.126497984 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.140870094 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.140928984 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.140933990 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.140976906 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.155350924 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.155361891 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.155411959 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.162839890 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.162847996 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.162892103 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.177103996 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.177112103 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.177155018 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.191735983 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.191787958 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.191792965 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.191832066 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.199125051 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.199132919 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.199184895 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.213646889 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.213654041 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.213720083 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.228202105 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.228281975 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.242578030 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.242628098 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.242635012 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.242688894 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.242727041 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.249948978 CET	49821	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.249959946 CET	443	49821	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.253551006 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.253612041 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.253685951 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.253938913 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.253961086 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.414000988 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414042950 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.414086103 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414105892 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414108992 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414160967 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.414171934 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.414222002 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414252043 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414473057 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414490938 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.414669991 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414706945 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.414838076 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:37.414858103 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:37.418091059 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418104887 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:37.418236971 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418273926 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:37.418282986 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418322086 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418505907 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418529034 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:37.418695927 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:37.418715000 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:37.869235039 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.869891882 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.872385025 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.878293991 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.879374027 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.885262966 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.917823076 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.917831898 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.918217897 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.919174910 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.933096886 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.936996937 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.937027931 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.937150955 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.937187910 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.937206984 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.937290907 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.937304974 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.937448978 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.937458038 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.937613010 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.937627077 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.937777042 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.937797070 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.939621925 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.939640999 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.939713955 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.939788103 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.939867973 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940457106 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940490007 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940534115 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940557957 CET	443	49826	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.940648079 CET	49826	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940933943 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.940953016 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.940988064 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.941034079 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941090107 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.941540956 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.941617966 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941684961 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941684961 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941726923 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941797972 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.941828966 CET	443	49828	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.941834927 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.941896915 CET	49828	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.941904068 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.941939116 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.942059994 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942095041 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.942156076 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942608118 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942629099 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942676067 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942831039 CET	443	49827	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.942900896 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942909002 CET	49827	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.942953110 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.943017006 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.943234921 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.943257093 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.943711996 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.943741083 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.943783998 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.943917036 CET	443	49829	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.943983078 CET	49829	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.944056034 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.944066048 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.944123030 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.944583893 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.944601059 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.944639921 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.944814920 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.944824934 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.944883108 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.944931030 CET	443	49825	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.944996119 CET	49825	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.945358992 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945380926 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945424080 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945544958 CET	443	49824	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.945605993 CET	49824	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945667982 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945677042 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:37.945734978 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.945941925 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.945955038 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.946141958 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.946180105 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.946327925 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:37.946338892 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:37.946533918 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:37.946546078 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:37.946708918 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:37.946721077 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.171070099 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.172224998 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.175928116 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.175988913 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.176067114 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.176065922 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.176084042 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.176553011 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.176584005 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.179424047 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.179630995 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.179780006 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.179935932 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.180126905 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.180191040 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.180697918 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.180805922 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.180830002 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.180969000 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.180969000 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.181009054 CET	443	49830	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.181081057 CET	49830	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.184091091 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.184139967 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.184211016 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.185087919 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.185087919 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.185087919 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.185323954 CET	443	49831	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.185417891 CET	49831	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.185678959 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.185688972 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.185755014 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.186503887 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.186533928 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.186566114 CET	443	49833	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.186589003 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.186620951 CET	49833	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.187298059 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.187361956 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.187443018 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.187553883 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.187570095 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.187724113 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.187736988 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.187907934 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:38.187931061 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:38.410542011 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.410890102 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.410919905 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.414452076 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.414520025 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415118933 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415152073 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415285110 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415292025 CET	443	49832	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.415365934 CET	49832	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415800095 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.415827990 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.416044950 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.417385101 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.417411089 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.498521090 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.498759031 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.498790026 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.500232935 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.500298023 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501060963 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501079082 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501164913 CET	443	49834	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.501178026 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501220942 CET	49834	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501637936 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501684904 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.501753092 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501928091 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:38.501944065 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:38.688350916 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.688555002 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.688591003 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.689631939 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.689693928 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.689783096 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.689980030 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.689991951 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690066099 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.690190077 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690198898 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.690207958 CET	443	49842	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.690208912 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690253019 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690454006 CET	49842	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690474987 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690567017 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.690574884 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.690607071 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.690665007 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690823078 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.690859079 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.691631079 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.691696882 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.691917896 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.691956043 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.691956997 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.692040920 CET	443	49841	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.692101002 CET	49841	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.692300081 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.692384958 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.692471027 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.692609072 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.692651987 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.693171978 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.693356037 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.693373919 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.693685055 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.693739891 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.693831921 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.693845034 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.694088936 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.694148064 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.694794893 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.694859028 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695139885 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695154905 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695178986 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695223093 CET	443	49843	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.695281982 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.695324898 CET	49843	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695338964 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.695420980 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695463896 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.695524931 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.695600986 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.695664883 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.695816040 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.695827961 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.695866108 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.695900917 CET	443	49839	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.695951939 CET	49839	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696044922 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696067095 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.696134090 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696289062 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696289062 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696325064 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696382999 CET	443	49840	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.696444035 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696448088 CET	49840	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696472883 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.696530104 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696676970 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:38.696692944 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:38.696788073 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.696801901 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:38.700385094 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:38.700412989 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.184328079 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.187551022 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.188677073 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.188707113 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.188852072 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.188904047 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.192348957 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.192364931 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.192442894 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.192462921 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.192634106 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.192683935 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.192691088 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.192707062 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.192826033 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.192831993 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.192948103 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.192955017 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.194014072 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.194024086 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.194092035 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.194227934 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.194272041 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.194289923 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.194295883 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.194356918 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.194463015 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.194524050 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.195430994 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.195434093 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.195503950 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.195530891 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.195734024 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.195827007 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.199532032 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.199615002 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.199840069 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.200037956 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.207813978 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.207997084 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.208302975 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.208498955 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.208507061 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.208672047 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.208693027 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.208722115 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.208772898 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.208786011 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.208857059 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.208873987 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.208898067 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.208918095 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.208997965 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.209011078 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.261473894 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.261491060 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.261491060 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.261513948 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.261607885 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.261607885 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.408171892 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.408579111 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.408611059 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.409473896 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.409559965 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.409833908 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.409894943 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.409955978 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.409970045 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.422840118 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.423311949 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.423374891 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.424858093 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.424935102 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.425153017 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.425245047 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.425256968 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.426563025 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.426748991 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.426764965 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.430202007 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.430272102 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.430521965 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.430613041 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.430629015 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.464253902 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.467411995 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.471355915 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.476558924 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.476619005 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.479587078 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.479603052 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.525932074 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.525933981 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.634248972 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.634394884 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.634490013 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.634509087 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.634572983 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.634630919 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.634639025 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.634684086 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.636466026 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.636600971 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.636818886 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.636816025 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.636902094 CET	49846	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.636925936 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.636935949 CET	443	49846	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.637586117 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.637788057 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.637850046 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.637881041 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.637969017 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.638052940 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.638072014 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.638087034 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.638149977 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.638161898 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.639215946 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.639354944 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.639394999 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.639460087 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.639473915 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.639616013 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.639682055 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.639935970 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.639997959 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.641444921 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.641520023 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.641864061 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.641954899 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.642721891 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.642741919 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.643129110 CET	49847	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.643162012 CET	443	49847	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.646267891 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.646337986 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.646352053 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.646445990 CET	49845	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:39.646459103 CET	443	49845	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:39.663009882 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.663572073 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.663592100 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.684393883 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.713514090 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.714752913 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.715037107 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.715070963 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.716517925 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.716590881 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.716892958 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.716970921 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.717008114 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.758797884 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.759571075 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.759601116 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.806255102 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.806369066 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.806430101 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.831928968 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.832144022 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.832205057 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.845057011 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.845132113 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.845352888 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.845417976 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.845724106 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.852998018 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860276937 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860332966 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860353947 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860379934 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860408068 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860445976 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.860471010 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860601902 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.860626936 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.860850096 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.860935926 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.861006021 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.861021042 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.861087084 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.868529081 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.868935108 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.874082088 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.874206066 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.874232054 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.877110958 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.877392054 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.877453089 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.885055065 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.885762930 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.885778904 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.893673897 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.893832922 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.893846035 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.901463032 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.901818991 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.901830912 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.905216932 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.905523062 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.905550003 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.906428099 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.906709909 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.906773090 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.906862974 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.906900883 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.908631086 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.908793926 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.908834934 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.909703970 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.909774065 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.910013914 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.910075903 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.910089016 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.914398909 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.914469004 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.914594889 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.914658070 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.915050983 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.915966034 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.915982962 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.916084051 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.917423010 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.917455912 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.919224024 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.919297934 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.919596910 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.919677973 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.919715881 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.920833111 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.920840979 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.921139956 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.921150923 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.921221018 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.921361923 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.921381950 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.922658920 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.922739983 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.922985077 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.923064947 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.923073053 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.923237085 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.923305988 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.923552990 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.923633099 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.923639059 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.947190046 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.947251081 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.951353073 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.962379932 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.962387085 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.962384939 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.962385893 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:39.962405920 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.962408066 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.963283062 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:39.963330030 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:39.963347912 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.963421106 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.963479996 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:39.981021881 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:39.990112066 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.990531921 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.990740061 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.991197109 CET	49844	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.991214991 CET	443	49844	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.993956089 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.994055033 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.994191885 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.995304108 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:39.995333910 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.995744944 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:39.998784065 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:39.998955965 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.000308990 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.000375032 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.000453949 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.000485897 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.004640102 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.004673958 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.004971981 CET	49849	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.004995108 CET	443	49849	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.008083105 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.008151054 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.008236885 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.008472919 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.008500099 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.008567095 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.008893967 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.008929968 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.009186029 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.009208918 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.011802912 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.011805058 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.011806965 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.013618946 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.021832943 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.024157047 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.024343014 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.024360895 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.025094032 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.025156021 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.028641939 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.028733015 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.029040098 CET	49848	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.029067039 CET	443	49848	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.032238960 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.032264948 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.032337904 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.032638073 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.032644987 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.032706976 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.032952070 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.032964945 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.033143044 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.033152103 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.073900938 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.082535982 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.086230993 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.086353064 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.086433887 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.086498976 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.086581945 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.094043016 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.101541042 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.101632118 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.101645947 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.109427929 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.109488010 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.109499931 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.109545946 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.109828949 CET	49850	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.109854937 CET	443	49850	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112107038 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.112138987 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112217903 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.112262964 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112340927 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.112364054 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.112416029 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.112500906 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112590075 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112656116 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.112720013 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112788916 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.112803936 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.112885952 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.112904072 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.113328934 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.113341093 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.120378971 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.120467901 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.120619059 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.120636940 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.120692015 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.128698111 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.171961069 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.172049999 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.172116041 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.172123909 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.172133923 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.172205925 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.172209024 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.172264099 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.180140972 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.181235075 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.181294918 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.188481092 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.188544989 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.188575983 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.196851969 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.196929932 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.196948051 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.229348898 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.233874083 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.244482994 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.253320932 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.253711939 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.253973961 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.254451990 CET	49852	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.254492044 CET	443	49852	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.256597042 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.256674051 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.257102966 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.257128000 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.257186890 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.257208109 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.257386923 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.257419109 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.257544994 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.257556915 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.275465012 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.275526047 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.292318106 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.304936886 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.305123091 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.305185080 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.310007095 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.313884020 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.313946009 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.322448015 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.322552919 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.322814941 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.322988987 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.323065996 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.323086023 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.323116064 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.323198080 CET	49851	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:40.323241949 CET	443	49851	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:40.323354959 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.331232071 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.334877014 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.334917068 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:40.335026026 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.335352898 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.335382938 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.335450888 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.335607052 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.335633993 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:40.335992098 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.336003065 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.339272022 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.339375019 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.339449883 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.339513063 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.339589119 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.345982075 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.347409964 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.355293989 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355340958 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355360985 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355401993 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355422974 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355464935 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.355685949 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.355685949 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.355725050 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.355753899 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.356050968 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.356050968 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.356125116 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.363600969 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.363802910 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.363821983 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.363910913 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.363928080 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.364053011 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.364114046 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.369040012 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.369659901 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.369698048 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.370712042 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.370800018 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.370831013 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.370879889 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.370888948 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.370909929 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.370943069 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.374249935 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.374342918 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.374357939 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.374428988 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.374504089 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.374526024 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.376311064 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.376446962 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.376465082 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.379458904 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.379475117 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.379489899 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.379518032 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.379532099 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.379559040 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.379570007 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.379596949 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.384334087 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.384407043 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.384429932 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.386734962 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.386920929 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.387005091 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.387012005 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.387037039 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.387090921 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.387126923 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.387866974 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.392929077 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.393023968 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.393086910 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.393151045 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.393764973 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.395688057 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.395716906 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.395760059 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.395781040 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.396174908 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.397296906 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.397473097 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.397535086 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.403006077 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.403402090 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.403527021 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.403542042 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.406230927 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.411413908 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.411480904 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.411494017 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.414709091 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.414777994 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.414789915 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.416141033 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.416162014 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.419512033 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.419529915 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.419589996 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.419601917 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.419699907 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.427716970 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.433589935 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.433676958 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.433681965 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.440766096 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.440831900 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.440845966 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.448647022 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.448647976 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.448717117 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.451275110 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.451370001 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.451412916 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.459760904 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.459842920 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.459858894 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.464426994 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.465562105 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.495102882 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.495431900 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.500269890 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.503097057 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.503292084 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.503353119 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.510225058 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.510796070 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.510812998 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.512267113 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.512289047 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.512346029 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.512411118 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.512447119 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.522315979 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.522505999 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.522567034 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.522820950 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.526424885 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.526443958 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.526783943 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.534395933 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.534478903 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.534513950 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.534607887 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.541171074 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.542176008 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.542195082 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.542253017 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.549227953 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.549243927 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.549269915 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.549326897 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.549354076 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.549354076 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.549371958 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.549524069 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.549524069 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.549964905 CET	49856	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.549992085 CET	443	49856	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.554229021 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.554248095 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.554316044 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.556384087 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.556384087 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.559967041 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.562087059 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.562174082 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.562573910 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.562638044 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.562655926 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.565315008 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.565380096 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.565393925 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.565485954 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.566375017 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.566380024 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.566452980 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.567029953 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.567044020 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.570549011 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.570652008 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.572745085 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.573622942 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.573663950 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.573676109 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.573699951 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.573719978 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.573780060 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.577961922 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.578263998 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.578406096 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.578424931 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.578459024 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.578567028 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.578633070 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.578650951 CET	49859	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.578685045 CET	443	49859	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.582427979 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.582586050 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.583087921 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.583093882 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.583163023 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.588063002 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.588069916 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.588144064 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.588347912 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.588432074 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.588447094 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.588495970 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.589791059 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.592430115 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.592678070 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.596371889 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.596388102 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.596541882 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.596853018 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.596858978 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.596915007 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.604177952 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.604422092 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.604711056 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.604773998 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.604859114 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.605889082 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.605895996 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.605968952 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.610809088 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.610815048 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.610882998 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.612159967 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.619744062 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.619944096 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.620150089 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.620349884 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.620413065 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.626163006 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.626343012 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.627957106 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.628180027 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.628241062 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.632534027 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.632687092 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.635952950 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.636149883 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.636154890 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.636456013 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.636518955 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.641896963 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.641972065 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.645216942 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.645394087 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.650156021 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.650330067 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.650424004 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.650489092 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.651467085 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.657783031 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.680103064 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.680300951 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.689243078 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.689671040 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.694752932 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.694988012 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.697808981 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.697891951 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.704132080 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.704240084 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.704863071 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.704894066 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.707449913 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.707529068 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.712757111 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.712888002 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.718223095 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.718393087 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.718542099 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.718641996 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.718966961 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.719732046 CET	49855	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.719774008 CET	443	49855	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.724008083 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.724085093 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.726516962 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.726811886 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.731682062 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.731802940 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.737353086 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.737709999 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.738054037 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.738142967 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.738337040 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.739006996 CET	49857	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:40.739051104 CET	443	49857	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:40.742233038 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.742527962 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.745069027 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.745160103 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.748524904 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.748610020 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.749161005 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.749232054 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.749274969 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.749340057 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.749367952 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.749427080 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.749640942 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.749871969 CET	49853	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.749901056 CET	443	49853	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.752454042 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.752553940 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.754443884 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.754481077 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:40.754563093 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.754923105 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.754933119 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.755356073 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.755395889 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.755436897 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.755481958 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:40.755489111 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.755498886 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:40.755506039 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.755522966 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.755871058 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.755892038 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.760366917 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.761085033 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.761172056 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.761847019 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.761909008 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.766458035 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.766563892 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.769030094 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.769202948 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.774022102 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.774097919 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.778685093 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.778899908 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.779901028 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.779937983 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.780251026 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.780251980 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.780318022 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.781132936 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.781215906 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.784037113 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.784249067 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.784320116 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.784492016 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.785989046 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.786060095 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.790682077 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.790770054 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.795416117 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.795506001 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.797900915 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.798069000 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.802642107 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.802829981 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.805067062 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.805154085 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.806549072 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.806570053 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.806621075 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.806663990 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.806683064 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.806737900 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.806739092 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.806739092 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.806807995 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.808862925 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.808965921 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.812056065 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.812127113 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.813226938 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.813569069 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.813631058 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.813709021 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.815556049 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.815630913 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.817374945 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.817440987 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.821510077 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.821682930 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.821696997 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.821753979 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.823553085 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.823664904 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.826982975 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.827058077 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.829004049 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.829070091 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.829852104 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.830030918 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.832344055 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.832406998 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.834122896 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.834322929 CET	443	49858	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:40.834517002 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.834517002 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.834517956 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.834517956 CET	49858	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:40.941842079 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.942029953 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.942075968 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.942251921 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.944835901 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.945008039 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.953250885 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.953258038 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.953442097 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.953465939 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.953668118 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.959824085 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.959903955 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.959919930 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.960084915 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.968993902 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.969007015 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.969223022 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.969238997 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.978001118 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.978018999 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.978240013 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.978240013 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.978264093 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.986681938 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.986692905 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.986917019 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.986932993 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.995626926 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.995640993 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.995757103 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:40.995871067 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.995871067 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.996539116 CET	49854	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:40.996568918 CET	443	49854	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.001097918 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.001143932 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.001229048 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.001415968 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.001427889 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.001491070 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.001780987 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.001800060 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.002048969 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.002058029 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.244060040 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.246423960 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.246474981 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.246592999 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.246963978 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.246985912 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.248122931 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.248203993 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.248480082 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.248554945 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.248723030 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.248758078 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.248816967 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.248846054 CET	443	49860	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.248924017 CET	49860	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.249125957 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.249171972 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.249254942 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.249336004 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.249679089 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.249703884 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.249728918 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.249790907 CET	443	49863	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.249852896 CET	49863	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.249943972 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.249969006 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.250024080 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.250159025 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.250170946 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.250427961 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.250467062 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.250616074 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.250629902 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.251077890 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.251369953 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.251409054 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.251717091 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.251780987 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252171993 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252192974 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252244949 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252264977 CET	443	49861	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.252324104 CET	49861	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252326965 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.252525091 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252599955 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.252662897 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252744913 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.252756119 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.252955914 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.252969027 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.254396915 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.254462004 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.254527092 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.254848003 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.254858971 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.254890919 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.254925966 CET	443	49864	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.254956961 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.254980087 CET	49864	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.255022049 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255110979 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.255153894 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.255217075 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.255270958 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.255278111 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.255642891 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255642891 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255678892 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255835056 CET	443	49862	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.255836964 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255871058 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.255897045 CET	49862	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.255924940 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.256072998 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.256087065 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.256316900 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.256335020 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.257194042 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.257275105 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.257654905 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.257669926 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.257725954 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.257750034 CET	443	49865	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.257807016 CET	49865	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.257942915 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.258027077 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.258100033 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.258313894 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.258353949 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.330529928 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.330893040 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.330902100 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.331877947 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.331955910 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332470894 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332489967 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332532883 CET	443	49866	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.332561016 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332616091 CET	49866	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332941055 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.332977057 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.333048105 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.333216906 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.333312035 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:41.333326101 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:41.333491087 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.333508015 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.337047100 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.337121964 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.337511063 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.337686062 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.338391066 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.338396072 CET	443	49867	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.338464022 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.338489056 CET	49867	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.338848114 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.338931084 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.339014053 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.340802908 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.340837955 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.471860886 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.472215891 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.472235918 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.473661900 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.473733902 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474282026 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474309921 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474360943 CET	443	49868	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.474401951 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474452972 CET	49868	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474813938 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.474884033 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.474968910 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.475229979 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:41.475260019 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:41.476321936 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.476527929 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.476551056 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.480155945 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.480221033 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.481472969 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.481492043 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.481559992 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.481599092 CET	443	49869	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.481662989 CET	49869	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.482018948 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.482104063 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.482191086 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.483365059 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.483402014 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.555937052 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.556257963 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.556278944 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.557127953 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.557199955 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.563560963 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.563608885 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.563642979 CET	443	49870	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.563659906 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.563699007 CET	49870	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.564013004 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.564086914 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.564161062 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.564359903 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.564392090 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.565156937 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.609479904 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.755947113 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.755959034 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.759727001 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.759932041 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.804541111 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.804578066 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.804651022 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.804977894 CET	443	49871	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.805063009 CET	49871	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.805290937 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.805376053 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.805471897 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.805964947 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:41.806001902 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:41.971417904 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.972256899 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.972280979 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.973726034 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.973814011 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974323988 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974348068 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974411964 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974411964 CET	443	49872	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.974493980 CET	49872	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974844933 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.974879026 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.974975109 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.975162029 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:41.975178003 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:41.975455046 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.975689888 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.975704908 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.978926897 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.979018927 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979372978 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979388952 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979420900 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979454994 CET	443	49873	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.979521990 CET	49873	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979870081 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.979878902 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:41.979947090 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.980274916 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:41.980288029 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.224718094 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.225298882 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.225316048 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.226174116 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.226244926 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.226916075 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.226942062 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.226970911 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.227046013 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.227058887 CET	443	49874	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.227072954 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.227108002 CET	49874	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.227736950 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.227758884 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.227838993 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.228137016 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.228152037 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.230549097 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.235642910 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.235652924 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.237061977 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.237128019 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.237680912 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.237724066 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.237761974 CET	443	49875	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.237792015 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.237858057 CET	49875	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.238460064 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.238471985 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.238543034 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.238771915 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.238786936 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.485630035 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.488985062 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.489002943 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.489948988 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.490016937 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.490677118 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.490787983 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.490911961 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.490917921 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.491429090 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.491611004 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.491625071 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.492387056 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.492643118 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.492656946 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.492921114 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.493143082 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.493208885 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.493393898 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.493463993 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.493751049 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.493841887 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.493844986 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.494286060 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.494343996 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.494709015 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.494791985 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.494987965 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.497636080 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.503132105 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.503149033 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.503340960 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.503437996 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.503720999 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.503818989 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.504054070 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.504111052 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.504271030 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.504308939 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.504334927 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.504350901 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.504720926 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.504796028 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.505136013 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.505223989 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.505232096 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.505814075 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.505887985 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.506310940 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.506402016 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.506481886 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.506496906 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.535336971 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.544298887 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.544318914 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.544318914 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.544327021 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.544481039 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.547353983 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.557080030 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.557722092 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.557754993 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.562624931 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.563638926 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.563702106 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.565306902 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.565599918 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.565633059 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.567235947 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.567327976 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.567657948 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.567794085 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.567840099 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.569159031 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.569232941 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.569494009 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.569585085 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.569617987 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.589802980 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.603907108 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.611407042 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.622358084 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.622384071 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.622420073 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.622442961 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.672324896 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.672333956 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.694123983 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.694560051 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.694621086 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.698785067 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.698889017 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.699661970 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.700639009 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.700706005 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.700984955 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.701191902 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.701301098 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.701318026 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:42.702164888 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.702245951 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.711112022 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.711209059 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.711534977 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.711570978 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:42.746612072 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:42.751605034 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:42.780805111 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.782954931 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.783016920 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.786550045 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.786665916 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.787142992 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.787348032 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.787372112 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.787502050 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.830518007 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.830578089 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:42.873928070 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:42.936520100 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.936748981 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.936831951 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.936918020 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.936949015 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.937027931 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.937067986 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.937129021 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.937191010 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.937206984 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.944852114 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.944946051 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.944960117 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.948666096 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.948893070 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.948980093 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.948997021 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.949060917 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.949122906 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.949140072 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.956631899 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.956723928 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.956736088 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.960103989 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.960284948 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:42.960299969 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:42.968400002 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.968477011 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.968485117 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.968509912 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:42.968564987 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:42.977013111 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.012868881 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013062000 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013150930 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013238907 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013246059 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.013310909 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013391018 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.013411045 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.013597965 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.013658047 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.014646053 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.024261951 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.024631023 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.024694920 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.025855064 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.026043892 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.026115894 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.026129007 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.026145935 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.026215076 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.026218891 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.026281118 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.026293993 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.026763916 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.026854992 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.026925087 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.026942968 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.029268026 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.029355049 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.029371023 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.029779911 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.033808947 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.033888102 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.033901930 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.037662029 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.037750006 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.037784100 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.042311907 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.042395115 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.042402983 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.042423010 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.042480946 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.050780058 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.056349993 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.068605900 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.079722881 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.080610037 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.093630075 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.102356911 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.117724895 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.120868921 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.121042967 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.121229887 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.126138926 CET	49878	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.126162052 CET	443	49878	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.128237963 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.132116079 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.132328033 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.132392883 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.132786036 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.140036106 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.140121937 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.140141964 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.140419006 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.144292116 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.144490957 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.144552946 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.145508051 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.147926092 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.148015976 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.148030043 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.158556938 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.158644915 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.158776045 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.158840895 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.158915997 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.164921999 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.165069103 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.165117979 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.165184021 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.165250063 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.166580915 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.171557903 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.174580097 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.174659967 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.174674988 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.179471970 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.179573059 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.179676056 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.179694891 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.179892063 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.182571888 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.182658911 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.182672024 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.185609102 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.185612917 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.185981989 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.186707020 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.186728001 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.187374115 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.187589884 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.187660933 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.187927961 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.187990904 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.188091993 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.188102961 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.190681934 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.190764904 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.190772057 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.195476055 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.195559025 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.195574045 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.198656082 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.198735952 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.198741913 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.199390888 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.199563026 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.199573040 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.203075886 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.203088999 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.203150988 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.203164101 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.203196049 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.203444004 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.203594923 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.203612089 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.204363108 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.206672907 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.206742048 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.206770897 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.208381891 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.208442926 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.208451986 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.210791111 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.210864067 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.210877895 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.214798927 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.214884996 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.214896917 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.216470003 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.216551065 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.216562033 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.216703892 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.216766119 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.217727900 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.218297958 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.218372107 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.218386889 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.221493959 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.221575022 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.221590996 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.223036051 CET	49882	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.223062992 CET	443	49882	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.226445913 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.226552010 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.226643085 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.226943970 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.226984024 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.227653980 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.227694988 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.227729082 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.227742910 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.227857113 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.227929115 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.227989912 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.228018045 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.228080988 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.228264093 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.228285074 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.228363037 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.228786945 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.228811979 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.230139017 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.231343985 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.231431961 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.231445074 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.232178926 CET	49886	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.232208967 CET	443	49886	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.235863924 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.235946894 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.235960960 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.237554073 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.237571955 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.237662077 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.237936974 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.237962961 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.238714933 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.238792896 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.238805056 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.241645098 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.241688013 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:43.241791010 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.241992950 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.242021084 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:43.243793011 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.243863106 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.243876934 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.243942022 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.244002104 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.244220972 CET	49883	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.244250059 CET	443	49883	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.245959997 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.245969057 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.265294075 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.265360117 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.280569077 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.296030045 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.311458111 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.317945957 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.318131924 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.318227053 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.318527937 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.318685055 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.318747997 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.319324970 CET	49876	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.319366932 CET	443	49876	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.320780993 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.320871115 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.320950985 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.322748899 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.324887991 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.324966908 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.324999094 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.325042963 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.325103045 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.327145100 CET	49877	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.327166080 CET	443	49877	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.328224897 CET	49881	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.328253984 CET	443	49881	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.332307100 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.333594084 CET	49879	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.333635092 CET	443	49879	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.336226940 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.336430073 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.336492062 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.337707043 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.337757111 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.337850094 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.339859009 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.339893103 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.343918085 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.344008923 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.344024897 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.364309072 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.364392042 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.364665985 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.364773035 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.364804983 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.365586996 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.365607977 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.365799904 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.365799904 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.365866899 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.370400906 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.370490074 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.370507002 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.370568037 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.378801107 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.378819942 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.378892899 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.383579016 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.383754969 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.383791924 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.383840084 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.384063005 CET	49880	443	192.168.2.4	104.21.31.175
Dec 12, 2024 23:03:43.384089947 CET	443	49880	104.21.31.175	192.168.2.4
Dec 12, 2024 23:03:43.423000097 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.423157930 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.423361063 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.469707012 CET	49885	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.469778061 CET	443	49885	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.494848013 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.494944096 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.495065928 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.496028900 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.496068954 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.515465975 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.515795946 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.515808105 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.516545057 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.516635895 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.516949892 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.517002106 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.517096043 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.517105103 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.526653051 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.526998997 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.527009010 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.530280113 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.530373096 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.530822039 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.530901909 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.531035900 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.531043053 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.562282085 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.577414989 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.601861000 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:43.601957083 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:43.602073908 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:43.602404118 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:43.602441072 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:43.638938904 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.639169931 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.639394999 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.643682957 CET	49888	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.643702030 CET	443	49888	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.646403074 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.646651983 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.646745920 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.646790028 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.646809101 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.646859884 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.646868944 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.648401022 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.648431063 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:43.648499012 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.649049044 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:43.649065018 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:43.654603958 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.654700994 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.654710054 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.662898064 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.663001060 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.663095951 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.663110018 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.663168907 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.671226978 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.719624043 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.767786026 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.795866966 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.796034098 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.796328068 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.802073956 CET	49884	443	192.168.2.4	104.21.3.108
Dec 12, 2024 23:03:43.802114010 CET	443	49884	104.21.3.108	192.168.2.4
Dec 12, 2024 23:03:43.806900978 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.806910038 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.806981087 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.807447910 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.807462931 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.807969093 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.821086884 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.821245909 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.821475983 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.822129965 CET	49887	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:43.822179079 CET	443	49887	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:43.839586020 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.843231916 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.848279953 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.848366976 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.849222898 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.849241972 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.864300966 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.864391088 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.864408970 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.864430904 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.864479065 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.873311043 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.879304886 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.879407883 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.879520893 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.879853964 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.879894018 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.881198883 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.881272078 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.881283045 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.889162064 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.889246941 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.889256954 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.896517038 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.896608114 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.896619081 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.904489994 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.904573917 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.904587984 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.911489964 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.911572933 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.911581993 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.925556898 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.925641060 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.925734043 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.925745010 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.925800085 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.932605028 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.972472906 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.972588062 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.972631931 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.972666025 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.972708941 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.972737074 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.972759962 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.972789049 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.972821951 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.972830057 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.980740070 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.980830908 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.980839968 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.984957933 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.984966040 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.988828897 CET	49890	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:43.988850117 CET	443	49890	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:43.988998890 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.989056110 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.989064932 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.997386932 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:43.997471094 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:43.997479916 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.026232004 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.026318073 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.026416063 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.027607918 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.030750036 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.032850981 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.032915115 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.032927036 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.036022902 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.036062002 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.037626028 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.037677050 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.037688017 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.045917988 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.047060013 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.047142029 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.047153950 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.047204018 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.056210995 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.056235075 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.056324959 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.060466051 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.060548067 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.060561895 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.060612917 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.068856955 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.068876028 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.068929911 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.077260017 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.077370882 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.077390909 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.077445984 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.081448078 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.081469059 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.081516027 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.090131998 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.090218067 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.090229988 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.090298891 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.092235088 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.098144054 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.098268986 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.106345892 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.106439114 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.110650063 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.110743046 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.118864059 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.118963957 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.123089075 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.123179913 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.131402016 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.131484032 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.138257027 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.164253950 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.167996883 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.168108940 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.168134928 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.176136971 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.176219940 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.176229000 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.183974981 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.184053898 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.184073925 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.199486971 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.199594021 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.199614048 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.207041025 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.207129955 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.207180023 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.207200050 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.207252026 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.215255976 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.222665071 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.222784996 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.222879887 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.222951889 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.222968102 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.224121094 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.224195957 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.230508089 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.230586052 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.230598927 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.230624914 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.230694056 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.237010956 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.237083912 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.237097025 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.237097979 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.237169981 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.243294001 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.243390083 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.243464947 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.243522882 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.243532896 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.246397972 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.246474028 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.249857903 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.249928951 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.249943972 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.252196074 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.252258062 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.255271912 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.255347967 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.260849953 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.260934114 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.266227007 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.266304970 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.271699905 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.271828890 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.274576902 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.274650097 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.278913975 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.278994083 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.280523062 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.280586004 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.283835888 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.283904076 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.285485983 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.285562992 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.285581112 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.285643101 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.285648108 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.285715103 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.302270889 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.302283049 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.342186928 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.357002020 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.359159946 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.359246969 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.359261990 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.364064932 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.364161015 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.364171028 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.373363972 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.373457909 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.373466015 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.373522043 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.382088900 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.382110119 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.382170916 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.386445045 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.386524916 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.386533022 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.386583090 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.394608974 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.394629955 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.394690990 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.402806044 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.402890921 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.402899027 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.402942896 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.406991005 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.407011032 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.407067060 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.415606022 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.415682077 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.415690899 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.415740013 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.423348904 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.423432112 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.431667089 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.431747913 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.435867071 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.435945034 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.443917036 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.443994045 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.448184013 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.448262930 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.456327915 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.456406116 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.460587025 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.461283922 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.461994886 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.464750051 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.464819908 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.464998960 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.513592005 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.513592005 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.513592005 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.513605118 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.550255060 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.550334930 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.554903030 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.554968119 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.557825089 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.561496973 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.561567068 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.567893982 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.567972898 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.571172953 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.571265936 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.577043056 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.577135086 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.579960108 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.580037117 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.585542917 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.585632086 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.590526104 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.591001987 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.591063976 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.596477985 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.596551895 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.599258900 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.599328995 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.604933977 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.604976892 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.605029106 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.607549906 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.607634068 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.613054037 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.613137960 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.618248940 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.618324041 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.623627901 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.623706102 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.626344919 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.626421928 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.630191088 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.631721973 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.631789923 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.634756088 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.636192083 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.636245966 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.636403084 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.636403084 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.636467934 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.636523962 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.636565924 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.636579037 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.637165070 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.637244940 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.639939070 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.640021086 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.640080929 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.640100956 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.640166998 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.641417027 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.641453981 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.641500950 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.641666889 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.641702890 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.641736984 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.642463923 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.642532110 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.644769907 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.644824028 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.644965887 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.644994020 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.645183086 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.645266056 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.648464918 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.648475885 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.648549080 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.648598909 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.650501966 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.650538921 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.650571108 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.650612116 CET	443	49895	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.650646925 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.650686979 CET	49895	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.650724888 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.653450966 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.653520107 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.655774117 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.655874014 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.655975103 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.656157970 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.656157970 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.656198025 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.656522989 CET	443	49893	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.656568050 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.656594038 CET	49893	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.656626940 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.656697035 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.657115936 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.657115936 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.657157898 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.657388926 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.657407045 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.657471895 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.657471895 CET	443	49894	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.657538891 CET	49894	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658210039 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658246040 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658277988 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658436060 CET	443	49892	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.658499002 CET	49892	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658814907 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.658874989 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.658940077 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.659622908 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.659663916 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.659715891 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.659987926 CET	443	49896	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.660063982 CET	49896	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.660327911 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.660387039 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.660461903 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.660986900 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661063910 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661103964 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661205053 CET	443	49897	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.661281109 CET	49897	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661442995 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661468029 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.661540985 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.661753893 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.662214994 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.662247896 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.662427902 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.662455082 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.662600040 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.662622929 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.662781954 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:44.662816048 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:44.662897110 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.662925005 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.663161039 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:44.663186073 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:44.670156956 CET	49889	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.670173883 CET	443	49889	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.708201885 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.708540916 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.708584070 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.709461927 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.709537983 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.709887981 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.709887981 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.709930897 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.709960938 CET	443	49899	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.710020065 CET	49899	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.710151911 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.710171938 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.710242987 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.710563898 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.710576057 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.740840912 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.740931034 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.741698027 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.741775036 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.746007919 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.746078014 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.756256104 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.756275892 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.756316900 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.756342888 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.756355047 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.756382942 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.756421089 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.767802000 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.767848015 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.767878056 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.767885923 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.767946005 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.778440952 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.778518915 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.778520107 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.778569937 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.778625011 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.790554047 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.790597916 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.790668964 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.790678978 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.798883915 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.798947096 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.798976898 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.798989058 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.799036980 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.806379080 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.806420088 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.806508064 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.806518078 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.806529999 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.807651043 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.807713032 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.807722092 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.807807922 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.807862043 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.807900906 CET	49891	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:44.807914019 CET	443	49891	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:44.817209005 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.817617893 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.817688942 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.819475889 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.819546938 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.820410013 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.820441961 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.820492983 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.820631027 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.820643902 CET	443	49900	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.820676088 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.820700884 CET	49900	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.821770906 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.821841955 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.821921110 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.822412968 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:44.822443962 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:44.865261078 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.865845919 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.865859985 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.869244099 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.869324923 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.871449947 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.871474981 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.871531963 CET	443	49902	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.871545076 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.871598959 CET	49902	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.872123957 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.872206926 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:44.872302055 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.872675896 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:44.872710943 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.037514925 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.037931919 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.037993908 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.039753914 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.039836884 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040132046 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040132999 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040174961 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040224075 CET	443	49904	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.040291071 CET	49904	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040394068 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040433884 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.040498018 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040744066 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.040757895 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.098891020 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.099252939 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.099315882 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.102835894 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.102925062 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103225946 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103225946 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103265047 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103432894 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103441954 CET	443	49905	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.103516102 CET	49905	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.103530884 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.103610992 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.104331970 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.104371071 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.248750925 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.249025106 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.249100924 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.249988079 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.250066996 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250387907 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250387907 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250427961 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250453949 CET	443	49906	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.250519991 CET	49906	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250855923 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.250940084 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.251038074 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.251211882 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.251246929 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.882797956 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.883197069 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.883270979 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.884057999 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.884898901 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.885065079 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.885114908 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.885159016 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.889175892 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.889504910 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.889568090 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.890089035 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.890315056 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.890331030 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.890332937 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.890568018 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.890599012 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.890672922 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.891086102 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.891168118 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.891225100 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.891468048 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.891557932 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.891776085 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.891783953 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.891951084 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.892043114 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.892126083 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.892141104 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.892252922 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.892314911 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.892374992 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.892390966 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:45.892402887 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.892472029 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.892849922 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.892936945 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.893023968 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.893033028 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:45.893805981 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.893883944 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.893964052 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.894040108 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.894298077 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.894391060 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.894656897 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.894751072 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.894804001 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.894815922 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.894860983 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.894877911 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:45.928843975 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.929131031 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.929152966 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.929603100 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.929996967 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.930074930 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.930131912 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.931348085 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:45.932471991 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.932521105 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:45.932698011 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:45.947598934 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.948143005 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:45.948795080 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:45.971357107 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.045435905 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.045793056 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.045854092 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.047518015 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.047606945 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.048841000 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.048934937 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.049084902 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.049103975 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.087172031 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.087572098 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.087634087 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.088510036 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.088716030 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.089128971 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.089191914 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.089195013 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.092971087 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.131378889 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.139543056 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.139601946 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.185540915 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.258467913 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.258878946 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.258913994 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.260365009 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.260579109 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.261091948 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.261177063 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.261192083 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.303380966 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.307796955 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.307832956 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.320985079 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.321533918 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.321597099 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.325162888 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.325516939 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.325979948 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.325979948 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.326066971 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.326211929 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.330768108 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.330900908 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.331037998 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.331087112 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.331218004 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.333089113 CET	49909	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.333137035 CET	443	49909	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.337440968 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.337532043 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.337843895 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.338154078 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.338208914 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.338247061 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.338304043 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.338402033 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.338448048 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.338574886 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.338637114 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.339108944 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.339257002 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.339401007 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.339435101 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.339504004 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.340328932 CET	49910	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.340361118 CET	443	49910	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.344094992 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.344134092 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.344219923 CET	49907	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.344293118 CET	443	49907	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.344346046 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.344656944 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.344671011 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.350100994 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.351414919 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.351660013 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.351725101 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.351747036 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.351907969 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.351968050 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.351996899 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.352164984 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.352229118 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.352240086 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.364089966 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.364303112 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.364315987 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.370974064 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.371033907 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.376127958 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.376180887 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.376214981 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.376245022 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.376271009 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.376398087 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.376398087 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.384237051 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.384394884 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.392350912 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.400999069 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.401441097 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.401463032 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.416635036 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.416656017 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.416747093 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.447453976 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.462738037 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.468121052 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.468652010 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.468717098 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.469644070 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.469839096 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.470262051 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.470302105 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.470313072 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.470330000 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.471189976 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.485193968 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485295057 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485363960 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485445976 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485527992 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485591888 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.485591888 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.485661030 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.485719919 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.487515926 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.496177912 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.496246099 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.496263981 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.496264935 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.496279955 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.496447086 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.504637003 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.524013042 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.524070978 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.524121046 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.524180889 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.536341906 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.536401033 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.536583900 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.537420988 CET	49915	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.537461042 CET	443	49915	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.539166927 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.539179087 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.546569109 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.546643019 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.546663046 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554450989 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554526091 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.554538965 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554672956 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554732084 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.554743052 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554821968 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.554938078 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.554991961 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.555387974 CET	49908	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.555408001 CET	443	49908	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.571913958 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.572137117 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.572146893 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.574256897 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.581352949 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.581383944 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.581526995 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.581533909 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.581584930 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.589301109 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.597680092 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.597698927 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.597735882 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.597743988 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.597786903 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.605484009 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.605937958 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.613464117 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.613742113 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.613765001 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.621500969 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.621779919 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.621802092 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.629605055 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.629678011 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.629699945 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.637772083 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.637994051 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.638010979 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.638035059 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.638072968 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.638205051 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.639388084 CET	49912	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.639426947 CET	443	49912	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.652785063 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.652853966 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.652862072 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.652879953 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.652925968 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.656991005 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.660379887 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.676695108 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.679081917 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.679362059 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.679383993 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.686657906 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.686743021 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.686759949 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.688601971 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.688736916 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.688760042 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.689136982 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.689232111 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.689515114 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.690651894 CET	49911	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:46.690692902 CET	443	49911	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:46.694360971 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.694444895 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.694458008 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.701747894 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.701924086 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.701936007 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.717140913 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.717216015 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.717314959 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.717351913 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.717457056 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.717511892 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.717645884 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.719156027 CET	49914	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:46.719182014 CET	443	49914	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:46.729808092 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.750308990 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.750411987 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.750528097 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.750904083 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.750940084 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.759840965 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.761234999 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.761297941 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.761313915 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.767482042 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.767622948 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.767725945 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.767815113 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.767855883 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.767927885 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.767968893 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.775353909 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.775367022 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.775419950 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.775430918 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.775492907 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.775557041 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.775582075 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.784349918 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.784554005 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.784560919 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.784756899 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.789099932 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.789163113 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.790689945 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.790759087 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.790987968 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.791053057 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.791132927 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.793662071 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.793697119 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.793755054 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.793965101 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.794131041 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.794413090 CET	49913	443	192.168.2.4	172.67.178.237
Dec 12, 2024 23:03:46.794429064 CET	443	49913	172.67.178.237	192.168.2.4
Dec 12, 2024 23:03:46.887608051 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.891661882 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.892090082 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.892151117 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.894812107 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:46.894902945 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:46.895078897 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:46.895349979 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:46.895385027 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:46.918102026 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.918329000 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.918823957 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.919913054 CET	49918	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:46.919955015 CET	443	49918	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:46.933425903 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.959630966 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.963798046 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.963958025 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:46.964132071 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.964200020 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.965483904 CET	49917	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:46.965544939 CET	443	49917	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.062601089 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:47.062839985 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:47.063155890 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:47.499908924 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.499994040 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.500077963 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.500986099 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.501086950 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.501161098 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.501806021 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.501843929 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.502521992 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.502557039 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.503741980 CET	49916	443	192.168.2.4	172.67.130.148
Dec 12, 2024 23:03:47.503771067 CET	443	49916	172.67.130.148	192.168.2.4
Dec 12, 2024 23:03:47.560301065 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.568053961 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.599556923 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.599622965 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.599838018 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.599865913 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.603466034 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.603516102 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.603554010 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.603621006 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.604660988 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.604692936 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.604840994 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.604865074 CET	443	49920	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.604933977 CET	49920	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.605760098 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.605792046 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.605869055 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.606498957 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.606563091 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.606563091 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.606692076 CET	443	49919	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.606766939 CET	49919	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.607042074 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.607084036 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.607147932 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.608129025 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.608146906 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.608721972 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:47.608733892 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:47.976686001 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.977098942 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.977160931 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.978602886 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.978678942 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.979398966 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.979434013 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.979489088 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.979491949 CET	443	49921	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.979548931 CET	49921	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.980003119 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.980048895 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:47.980109930 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.980357885 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:47.980370998 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.111228943 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.111517906 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.111578941 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.115106106 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.115183115 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.115657091 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.115740061 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.115741014 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.115842104 CET	443	49922	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.115905046 CET	49922	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.116107941 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.116158962 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.116230011 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.116480112 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:48.116497993 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:48.773874998 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.774280071 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.774346113 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.775460958 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.775547981 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.775964022 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.775995016 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776048899 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776050091 CET	443	49924	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.776110888 CET	49924	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776465893 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776513100 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.776592016 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776844978 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.776868105 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.780875921 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.781192064 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.781253099 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.784818888 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.784902096 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785295963 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785336018 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785382032 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785480976 CET	443	49923	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.785543919 CET	49923	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785631895 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785667896 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.785725117 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785901070 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:48.785912991 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:48.825747967 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.826025009 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.826056957 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.827194929 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.827624083 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.827780008 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.827786922 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.827804089 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.829396009 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.829612017 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.829634905 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.830090046 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.830471992 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.830559015 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.830596924 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.871292114 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:48.871313095 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:48.871330023 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.199740887 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.200201035 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.200267076 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.201924086 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.202092886 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.202548027 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.202631950 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.202708006 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.202816963 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.244589090 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.244621992 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.279599905 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.279803038 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.279938936 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.280128002 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.280422926 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.281377077 CET	49925	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.281408072 CET	443	49925	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.286640882 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.286763906 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.286827087 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.286849022 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.286984921 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.287039042 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.287919998 CET	49926	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.287930012 CET	443	49926	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.291459084 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.334980965 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.335220098 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.335288048 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.336903095 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.337006092 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.337321997 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.337444067 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.337582111 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.385479927 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.385540009 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.432173014 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.655185938 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655390024 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655503988 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655621052 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.655652046 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655685902 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655765057 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.655829906 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655889034 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.655920029 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.655958891 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.656022072 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.658907890 CET	49927	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:49.658940077 CET	443	49927	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:49.663333893 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.663383961 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.663557053 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.663727999 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:49.663743019 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:49.780713081 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780766010 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780803919 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780833006 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780862093 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780910969 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.780989885 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.780991077 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.781076908 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.781127930 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.797962904 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.798069954 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.798077106 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.798101902 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.798172951 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.806323051 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.859688997 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:49.901160955 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:49.942379951 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.027681112 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.031024933 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.031200886 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.031230927 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.037241936 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.037410975 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.037419081 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.044037104 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.044214010 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.044223070 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.050297976 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.050375938 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.050383091 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.057024956 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.057193995 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.057199955 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.063385010 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.063615084 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.098505974 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.098727942 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.138639927 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.150252104 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.150281906 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.150397062 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.150425911 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.153166056 CET	49928	443	192.168.2.4	104.21.1.144
Dec 12, 2024 23:03:50.153198004 CET	443	49928	104.21.1.144	192.168.2.4
Dec 12, 2024 23:03:50.154067039 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.154232979 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.154355049 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.154453039 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.155693054 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.155889034 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.156316042 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.156503916 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.156610966 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.156627893 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.156765938 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.156774998 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.200993061 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.201006889 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.544636011 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.544868946 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.544944048 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.549875021 CET	49929	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.549896955 CET	443	49929	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.706262112 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:50.706302881 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:50.706382036 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:50.706808090 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:50.706825018 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:50.887244940 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.887630939 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.887691975 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.889389992 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.889475107 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.889950991 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.889983892 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.890042067 CET	443	49931	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.890093088 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.890218019 CET	49931	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.890876055 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.890968084 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.891258001 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.891452074 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:50.891506910 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:50.926017046 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.926177979 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:50.926251888 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.928127050 CET	49930	443	192.168.2.4	104.21.68.16
Dec 12, 2024 23:03:50.928142071 CET	443	49930	104.21.68.16	192.168.2.4
Dec 12, 2024 23:03:51.924266100 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:51.924663067 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.924686909 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:51.928215027 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:51.928313017 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.928649902 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.928668976 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.928720951 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.928736925 CET	443	49932	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:51.928903103 CET	49932	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.929126024 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.929152012 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:51.929225922 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.929420948 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:51.929459095 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:52.109513044 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.110497952 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.110579014 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.111206055 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.112546921 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.112653971 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.112792015 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.155332088 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.322079897 CET	49740	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:52.431473970 CET	49741	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:03:52.442219973 CET	80	49740	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:52.551902056 CET	80	49741	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:52.556859970 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557015896 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557089090 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.557096958 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557143927 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557204962 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.557224035 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557378054 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:52.557441950 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.691850901 CET	49933	443	192.168.2.4	172.67.184.220
Dec 12, 2024 23:03:52.691893101 CET	443	49933	172.67.184.220	192.168.2.4
Dec 12, 2024 23:03:53.148070097 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.148699999 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.148724079 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.150386095 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.150597095 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.151791096 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.151855946 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.151941061 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.199064016 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.199084044 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.246166945 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.593929052 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594028950 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594090939 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594161034 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594232082 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.594243050 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594250917 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.594271898 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.594331026 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.594373941 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.601840973 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.602041006 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:53.602158070 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.602158070 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.602745056 CET	49934	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:03:53.602767944 CET	443	49934	172.67.152.66	192.168.2.4
Dec 12, 2024 23:03:59.669078112 CET	80	49740	154.59.24.60	192.168.2.4
Dec 12, 2024 23:03:59.669255018 CET	49740	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:04:00.089790106 CET	80	49741	154.59.24.60	192.168.2.4
Dec 12, 2024 23:04:00.090137959 CET	49741	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:04:01.481389999 CET	49741	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:04:01.481419086 CET	49740	80	192.168.2.4	154.59.24.60
Dec 12, 2024 23:04:01.602097988 CET	80	49741	154.59.24.60	192.168.2.4
Dec 12, 2024 23:04:01.602232933 CET	80	49740	154.59.24.60	192.168.2.4
Dec 12, 2024 23:04:05.433525085 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:05.433563948 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:05.433636904 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:05.434114933 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:05.434133053 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:07.126708031 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:07.127341032 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:07.127353907 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:07.127824068 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:07.128283024 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:07.128374100 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:07.181119919 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:11.149236917 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:11.269447088 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:11.269754887 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:11.270008087 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:11.390490055 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.517869949 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.517899990 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.517918110 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.517946959 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:12.517977953 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.517996073 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.518012047 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.518218994 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:12.519908905 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:12.520364046 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:12.639801979 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:12.640242100 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:13.015902996 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:13.057049990 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:13.249244928 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:13.291362047 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.413516045 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.446204901 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.446233034 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.446335077 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.446858883 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.446898937 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.447479963 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.447489023 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.447525978 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.447546959 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.447875977 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.447890043 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.448151112 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.448163986 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.448545933 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:15.448584080 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:15.462873936 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.533612013 CET	5228	49971	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:15.533788919 CET	49971	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.582859039 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:15.583062887 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.583149910 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:15.703218937 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.680747986 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.681510925 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.683984995 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.720832109 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.737169027 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.739763975 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.741458893 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.741462946 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.741468906 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.741476059 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.741585016 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.741589069 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.744642973 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.744682074 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.744725943 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.745173931 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.745239973 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.745238066 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.745275974 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.745296955 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.757162094 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.757220030 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.757220030 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.757590055 CET	443	49981	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.757661104 CET	49981	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.761049986 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.761084080 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.761152983 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.768914938 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.768934011 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.768971920 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.769174099 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.769201040 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.769252062 CET	443	49983	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.769253016 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.769299984 CET	49983	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.773442984 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.773458958 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.773489952 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.773756027 CET	443	49982	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.773825884 CET	49982	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.777645111 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.777743101 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.777839899 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.785613060 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.785628080 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.785746098 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.785754919 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.785876036 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:16.785916090 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:16.828073978 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:16.828201056 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:16.828264952 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:16.830403090 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830449104 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830463886 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830610037 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830625057 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830627918 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:16.830638885 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:16.830720901 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:16.830720901 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:16.892481089 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:16.893074989 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:17.012342930 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:17.012826920 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:17.088973045 CET	49953	443	192.168.2.4	142.250.181.132
Dec 12, 2024 23:04:17.088989019 CET	443	49953	142.250.181.132	192.168.2.4
Dec 12, 2024 23:04:17.375840902 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:17.420011044 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:17.611932039 CET	5228	49984	108.177.15.188	192.168.2.4
Dec 12, 2024 23:04:17.654225111 CET	49984	5228	192.168.2.4	108.177.15.188
Dec 12, 2024 23:04:18.010015011 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.010277987 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.010948896 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.010966063 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.011199951 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.011223078 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.012389898 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.012458086 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.012650967 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.012701988 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.013191938 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.013272047 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.013658047 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.013732910 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.013957977 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.013964891 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.014110088 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.014116049 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.030690908 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.031063080 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.031100035 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.034620047 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.034699917 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.035300970 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.035499096 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.037178040 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.037199020 CET	443	49988	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.068176985 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.068177938 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.083573103 CET	49988	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.862823963 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.863001108 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.863051891 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.864227057 CET	49986	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.864248991 CET	443	49986	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.865868092 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.865920067 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:18.865997076 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.866734028 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:18.866756916 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:19.211097002 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:19.211175919 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:19.211395979 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:19.212116957 CET	49987	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:19.212129116 CET	443	49987	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:19.212996006 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:19.213080883 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:19.213170052 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:19.213639021 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:19.213675976 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.176181078 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.179955006 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.179986000 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.181653023 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.181729078 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.182504892 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.182544947 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.182610989 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.182749987 CET	443	49994	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.182807922 CET	49994	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.183000088 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.183032990 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.183094025 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.183357000 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.183371067 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.468609095 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.469048023 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.469110966 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.470566034 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.470632076 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471124887 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471159935 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471211910 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471220016 CET	443	49995	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.471271992 CET	49995	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471472025 CET	50002	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471528053 CET	443	50002	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:20.471596003 CET	50002	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471798897 CET	50002	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:20.471828938 CET	443	50002	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.415251970 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.415908098 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.415971041 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.419517994 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.419893980 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.420306921 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.420413017 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.420511007 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.420557022 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.420612097 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.463262081 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.463323116 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.509989023 CET	50001	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:21.693701029 CET	443	50002	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:21.744357109 CET	50002	443	192.168.2.4	172.67.152.66
Dec 12, 2024 23:04:22.257639885 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:22.257891893 CET	443	50001	172.67.152.66	192.168.2.4
Dec 12, 2024 23:04:22.258476973 CET	50001	443	192.168.2.4	172.67.152.66

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 23:03:01.272201061 CET	53	55400	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:01.356967926 CET	53	59354	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:04.175961018 CET	53	50300	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:05.370294094 CET	53783	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:05.370404005 CET	63659	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:05.509131908 CET	53	53783	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:05.509190083 CET	53	63659	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:06.792258978 CET	51853	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:06.792774916 CET	57056	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:07.199561119 CET	53	57056	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:07.199656010 CET	53	51853	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:09.395965099 CET	58478	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:09.396009922 CET	58170	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:09.671372890 CET	53	58170	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:09.671432972 CET	53	58478	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:13.165015936 CET	60048	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:13.165348053 CET	51846	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:13.489321947 CET	53	60048	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:13.489846945 CET	53	51846	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:20.263402939 CET	138	138	192.168.2.4	192.168.2.255
Dec 12, 2024 23:03:21.177783012 CET	53	58659	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:24.739311934 CET	56220	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:24.739527941 CET	61829	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:24.875233889 CET	53	57050	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:24.876806021 CET	53	56220	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:24.876849890 CET	53	61829	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:26.804172039 CET	50350	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:26.804388046 CET	62753	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:26.941514969 CET	53	62753	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:26.942084074 CET	53	50350	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:27.683016062 CET	57828	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:27.683201075 CET	62594	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:27.690233946 CET	54791	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:27.690371990 CET	52890	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:27.821250916 CET	53	57828	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:27.821259975 CET	53	62594	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:27.828080893 CET	53	52890	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:27.828490019 CET	53	54791	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:29.952042103 CET	54932	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:29.952042103 CET	62812	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:30.091365099 CET	53	54932	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:30.091382980 CET	53	62812	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:30.500025034 CET	65170	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:30.500150919 CET	60405	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:30.639147043 CET	53	65170	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:30.697640896 CET	53	60405	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:32.585527897 CET	53027	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:32.585648060 CET	49280	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:32.724423885 CET	53	49280	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:32.724457979 CET	53	53027	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:33.410320997 CET	63033	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:33.410439014 CET	52686	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:33.410948038 CET	49463	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:33.411207914 CET	51925	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:33.643347025 CET	53	49463	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:33.643872976 CET	53	51925	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:33.732667923 CET	53	52686	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:33.733045101 CET	53	63033	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:34.674664974 CET	53	55223	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:37.271837950 CET	59924	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:37.272031069 CET	51584	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:37.274490118 CET	50976	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:37.274636030 CET	64043	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:37.411937952 CET	53	51584	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:37.413573980 CET	53	59924	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:37.415666103 CET	53	50976	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:37.417578936 CET	53	64043	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:40.269367933 CET	53	53819	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:43.322594881 CET	50606	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:43.322714090 CET	56551	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:43.600869894 CET	53	50606	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:43.600897074 CET	53	56551	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:46.754899979 CET	60594	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:46.755086899 CET	55560	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:46.893918037 CET	53	60594	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:46.893963099 CET	53	55560	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:50.562767982 CET	62508	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:50.563076973 CET	55101	53	192.168.2.4	1.1.1.1
Dec 12, 2024 23:03:50.705038071 CET	53	62508	1.1.1.1	192.168.2.4
Dec 12, 2024 23:03:50.705660105 CET	53	55101	1.1.1.1	192.168.2.4
Dec 12, 2024 23:04:01.106318951 CET	53	63701	1.1.1.1	192.168.2.4
Dec 12, 2024 23:04:03.201945066 CET	53	62531	1.1.1.1	192.168.2.4
Dec 12, 2024 23:04:15.456372023 CET	137	137	192.168.2.4	192.168.2.255
Dec 12, 2024 23:04:16.212934017 CET	137	137	192.168.2.4	192.168.2.255
Dec 12, 2024 23:04:16.970237970 CET	137	137	192.168.2.4	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 12, 2024 23:03:30.697849035 CET	192.168.2.4	1.1.1.1	c21d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 23:03:05.370294094 CET	192.168.2.4	1.1.1.1	0xe336	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:05.370404005 CET	192.168.2.4	1.1.1.1	0xe76	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:06.792258978 CET	192.168.2.4	1.1.1.1	0x6850	Standard query (0)	www.pej935.pro	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:06.792774916 CET	192.168.2.4	1.1.1.1	0x1672	Standard query (0)	www.pej935.pro	65	IN (0x0001)	false
Dec 12, 2024 23:03:09.395965099 CET	192.168.2.4	1.1.1.1	0x884b	Standard query (0)	t4.prizepathonyourway.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:09.396009922 CET	192.168.2.4	1.1.1.1	0x1e11	Standard query (0)	t4.prizepathonyourway.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:13.165015936 CET	192.168.2.4	1.1.1.1	0x1bfa	Standard query (0)	cove.richquickcart.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:13.165348053 CET	192.168.2.4	1.1.1.1	0x93	Standard query (0)	cove.richquickcart.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:24.739311934 CET	192.168.2.4	1.1.1.1	0x8c92	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:24.739527941 CET	192.168.2.4	1.1.1.1	0xc640	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:26.804172039 CET	192.168.2.4	1.1.1.1	0x3f41	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:26.804388046 CET	192.168.2.4	1.1.1.1	0xb5e7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:27.683016062 CET	192.168.2.4	1.1.1.1	0xe8bc	Standard query (0)	www.freeiconspng.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:27.683201075 CET	192.168.2.4	1.1.1.1	0xdf3a	Standard query (0)	www.freeiconspng.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:27.690233946 CET	192.168.2.4	1.1.1.1	0xb4b3	Standard query (0)	cove.richquickcart.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:27.690371990 CET	192.168.2.4	1.1.1.1	0xe97	Standard query (0)	cove.richquickcart.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:29.952042103 CET	192.168.2.4	1.1.1.1	0x8934	Standard query (0)	www.freeiconspng.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:29.952042103 CET	192.168.2.4	1.1.1.1	0xf0fc	Standard query (0)	www.freeiconspng.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:30.500025034 CET	192.168.2.4	1.1.1.1	0x8e10	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:30.500150919 CET	192.168.2.4	1.1.1.1	0x29da	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Dec 12, 2024 23:03:32.585527897 CET	192.168.2.4	1.1.1.1	0x9b6c	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:32.585648060 CET	192.168.2.4	1.1.1.1	0xd4b1	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Dec 12, 2024 23:03:33.410320997 CET	192.168.2.4	1.1.1.1	0xb0b8	Standard query (0)	clipresource.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.410439014 CET	192.168.2.4	1.1.1.1	0xefe7	Standard query (0)	clipresource.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:33.410948038 CET	192.168.2.4	1.1.1.1	0x95f9	Standard query (0)	insightsandmarkets.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.411207914 CET	192.168.2.4	1.1.1.1	0x1ae3	Standard query (0)	insightsandmarkets.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:37.271837950 CET	192.168.2.4	1.1.1.1	0x8eca	Standard query (0)	clipresource.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.272031069 CET	192.168.2.4	1.1.1.1	0x9293	Standard query (0)	clipresource.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:37.274490118 CET	192.168.2.4	1.1.1.1	0x8eec	Standard query (0)	insightsandmarkets.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.274636030 CET	192.168.2.4	1.1.1.1	0x60d2	Standard query (0)	insightsandmarkets.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:43.322594881 CET	192.168.2.4	1.1.1.1	0x9880	Standard query (0)	pushrev.pushbroker.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:43.322714090 CET	192.168.2.4	1.1.1.1	0x89d2	Standard query (0)	pushrev.pushbroker.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:46.754899979 CET	192.168.2.4	1.1.1.1	0x4a49	Standard query (0)	pushrev.pushbroker.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:46.755086899 CET	192.168.2.4	1.1.1.1	0xb14c	Standard query (0)	pushrev.pushbroker.com	65	IN (0x0001)	false
Dec 12, 2024 23:03:50.562767982 CET	192.168.2.4	1.1.1.1	0xab1f	Standard query (0)	pushlite.pushbroker.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:50.563076973 CET	192.168.2.4	1.1.1.1	0xe804	Standard query (0)	pushlite.pushbroker.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 23:03:05.509131908 CET	1.1.1.1	192.168.2.4	0xe336	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:05.509190083 CET	1.1.1.1	192.168.2.4	0xe76	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:07.199656010 CET	1.1.1.1	192.168.2.4	0x6850	No error (0)	www.pej935.pro		154.59.24.60	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:09.671372890 CET	1.1.1.1	192.168.2.4	0x1e11	No error (0)	t4.prizepathonyourway.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:09.671432972 CET	1.1.1.1	192.168.2.4	0x884b	No error (0)	t4.prizepathonyourway.com		104.21.32.130	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:09.671432972 CET	1.1.1.1	192.168.2.4	0x884b	No error (0)	t4.prizepathonyourway.com		172.67.152.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:13.489321947 CET	1.1.1.1	192.168.2.4	0x1bfa	No error (0)	cove.richquickcart.com		104.21.68.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:13.489321947 CET	1.1.1.1	192.168.2.4	0x1bfa	No error (0)	cove.richquickcart.com		172.67.184.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:13.489846945 CET	1.1.1.1	192.168.2.4	0x93	No error (0)	cove.richquickcart.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:24.876806021 CET	1.1.1.1	192.168.2.4	0x8c92	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:24.876806021 CET	1.1.1.1	192.168.2.4	0x8c92	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:24.876849890 CET	1.1.1.1	192.168.2.4	0xc640	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:26.941514969 CET	1.1.1.1	192.168.2.4	0xb5e7	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:26.942084074 CET	1.1.1.1	192.168.2.4	0x3f41	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:26.942084074 CET	1.1.1.1	192.168.2.4	0x3f41	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:27.821250916 CET	1.1.1.1	192.168.2.4	0xe8bc	No error (0)	www.freeiconspng.com	freeiconspng.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 23:03:27.821250916 CET	1.1.1.1	192.168.2.4	0xe8bc	No error (0)	freeiconspng.com		78.46.22.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:27.821259975 CET	1.1.1.1	192.168.2.4	0xdf3a	No error (0)	www.freeiconspng.com	freeiconspng.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 23:03:27.828080893 CET	1.1.1.1	192.168.2.4	0xe97	No error (0)	cove.richquickcart.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:27.828490019 CET	1.1.1.1	192.168.2.4	0xb4b3	No error (0)	cove.richquickcart.com		172.67.184.220	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:27.828490019 CET	1.1.1.1	192.168.2.4	0xb4b3	No error (0)	cove.richquickcart.com		104.21.68.16	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:30.091365099 CET	1.1.1.1	192.168.2.4	0x8934	No error (0)	www.freeiconspng.com	freeiconspng.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 23:03:30.091382980 CET	1.1.1.1	192.168.2.4	0xf0fc	No error (0)	www.freeiconspng.com	freeiconspng.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 23:03:30.091382980 CET	1.1.1.1	192.168.2.4	0xf0fc	No error (0)	freeiconspng.com		78.46.22.9	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:30.639147043 CET	1.1.1.1	192.168.2.4	0x8e10	No error (0)	upload.wikimedia.org		185.15.58.240	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:32.724457979 CET	1.1.1.1	192.168.2.4	0x9b6c	No error (0)	upload.wikimedia.org		185.15.58.240	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.643347025 CET	1.1.1.1	192.168.2.4	0x95f9	No error (0)	insightsandmarkets.com		104.21.3.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.643347025 CET	1.1.1.1	192.168.2.4	0x95f9	No error (0)	insightsandmarkets.com		172.67.130.148	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.643872976 CET	1.1.1.1	192.168.2.4	0x1ae3	No error (0)	insightsandmarkets.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:33.732667923 CET	1.1.1.1	192.168.2.4	0xefe7	No error (0)	clipresource.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:33.733045101 CET	1.1.1.1	192.168.2.4	0xb0b8	No error (0)	clipresource.com		104.21.31.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:33.733045101 CET	1.1.1.1	192.168.2.4	0xb0b8	No error (0)	clipresource.com		172.67.178.237	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.411937952 CET	1.1.1.1	192.168.2.4	0x9293	No error (0)	clipresource.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:37.413573980 CET	1.1.1.1	192.168.2.4	0x8eca	No error (0)	clipresource.com		172.67.178.237	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.413573980 CET	1.1.1.1	192.168.2.4	0x8eca	No error (0)	clipresource.com		104.21.31.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.415666103 CET	1.1.1.1	192.168.2.4	0x8eec	No error (0)	insightsandmarkets.com		172.67.130.148	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.415666103 CET	1.1.1.1	192.168.2.4	0x8eec	No error (0)	insightsandmarkets.com		104.21.3.108	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:37.417578936 CET	1.1.1.1	192.168.2.4	0x60d2	No error (0)	insightsandmarkets.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:43.600869894 CET	1.1.1.1	192.168.2.4	0x9880	No error (0)	pushrev.pushbroker.com		172.67.152.66	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:43.600869894 CET	1.1.1.1	192.168.2.4	0x9880	No error (0)	pushrev.pushbroker.com		104.21.1.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:43.600897074 CET	1.1.1.1	192.168.2.4	0x89d2	No error (0)	pushrev.pushbroker.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:46.893918037 CET	1.1.1.1	192.168.2.4	0x4a49	No error (0)	pushrev.pushbroker.com		104.21.1.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:46.893918037 CET	1.1.1.1	192.168.2.4	0x4a49	No error (0)	pushrev.pushbroker.com		172.67.152.66	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:46.893963099 CET	1.1.1.1	192.168.2.4	0xb14c	No error (0)	pushrev.pushbroker.com			65	IN (0x0001)	false
Dec 12, 2024 23:03:50.705038071 CET	1.1.1.1	192.168.2.4	0xab1f	No error (0)	pushlite.pushbroker.com		172.67.152.66	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:50.705038071 CET	1.1.1.1	192.168.2.4	0xab1f	No error (0)	pushlite.pushbroker.com		104.21.1.144	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:03:50.705660105 CET	1.1.1.1	192.168.2.4	0xe804	No error (0)	pushlite.pushbroker.com			65	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		142.250.181.142	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		216.58.208.238	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:08.410813093 CET	1.1.1.1	192.168.2.4	0xbe96	No error (0)	android.l.google.com		172.217.19.14	A (IP address)	IN (0x0001)	false
Dec 12, 2024 23:04:11.148618937 CET	1.1.1.1	192.168.2.4	0xdd0f	No error (0)	mobile-gtalk.l.google.com		108.177.15.188	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.pej935.pro

t4.prizepathonyourway.com

cove.richquickcart.com

https:

cdnjs.cloudflare.com

www.freeiconspng.com

upload.wikimedia.org

insightsandmarkets.com

clipresource.com

pushrev.pushbroker.com

pushlite.pushbroker.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	154.59.24.60	80	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 23:03:07.320826054 CET	450	OUT	GET /Ume-ZD~Hl_1c0e5b67/C/ HTTP/1.1 Host: www.pej935.pro Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 12, 2024 23:03:08.806344032 CET	383	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:08 GMT Server: Apache Content-Type: text/html; charset=UTF-8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Data Raw: 62 30 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 21 2d 2d 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 77 5a 57 6f 35 4d 7a 55 75 63 48 4a 76 4c 31 56 74 5a 53 31 61 52 48 35 49 62 46 38 78 59 7a 42 6c 4e 57 49 32 4e 79 39 44 4c 79 39 53 4d 30 51 78 55 6a 4e 44 4e 79 38 3d 22 29 0a 2f 2f 2d 2d 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: b0<html><body><script type="text/javascript">...window.location = atob("aHR0cDovL3d3dy5wZWo5MzUucHJvL1VtZS1aRH5IbF8xYzBlNWI2Ny9DLy9SM0QxUjNDNy8=")//--></script></body></html>0
Dec 12, 2024 23:03:08.851180077 CET	514	OUT	GET /Ume-ZD~Hl_1c0e5b67/C//R3D1R3C7/ HTTP/1.1 Host: www.pej935.pro Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 12, 2024 23:03:09.377043009 CET	483	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:09 GMT Server: Apache Content-Type: text/html; charset=UTF-8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Data Raw: 31 31 34 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 21 2d 2d 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 4e 43 35 77 63 6d 6c 36 5a 58 42 68 64 47 68 76 62 6e 6c 76 64 58 4a 33 59 58 6b 75 59 32 39 74 4c 32 46 6d 5a 6c 39 6a 50 32 39 6d 5a 6d 56 79 58 32 6c 6b 50 54 51 7a 4e 79 5a 68 5a 6d 5a 66 61 57 51 39 4d 54 67 32 4e 69 5a 68 5a 6d 5a 66 63 33 56 69 50 57 5a 6c 5a 48 64 68 62 47 77 6d 59 57 5a 6d 58 33 4e 31 59 6a 49 39 59 32 39 77 62 47 6c 6e 61 48 51 6d 59 57 5a 6d 58 33 4e 31 59 6a 4d 39 4a 6d 46 6d 5a 6c 39 7a 64 57 49 30 50 53 5a 68 5a 6d 5a 66 63 33 56 69 4e 54 30 3d 22 29 0a 2f 2f 2d 2d 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 114<html><body><script type="text/javascript">...window.location = atob("aHR0cHM6Ly90NC5wcml6ZXBhdGhvbnlvdXJ3YXkuY29tL2FmZl9jP29mZmVyX2lkPTQzNyZhZmZfaWQ9MTg2NiZhZmZfc3ViPWZlZHdhbGwmYWZmX3N1YjI9Y29wbGlnaHQmYWZmX3N1YjM9JmFmZl9zdWI0PSZhZmZfc3ViNT0=")//--></script></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	154.59.24.60	80	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 23:03:52.322079897 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	154.59.24.60	80	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 23:03:52.431473970 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49745	104.21.32.130	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:12 UTC	781	OUT	GET /aff_c?offer_id=437&aff_id=1866&aff_sub=fedwall&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5= HTTP/1.1 Host: t4.prizepathonyourway.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://www.pej935.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:13 UTC	1333	IN	HTTP/1.1 302 Found Date: Thu, 12 Dec 2024 22:03:12 GMT Content-Type: text/plain; charset=utf-8; SameSite=None; Secure Content-Length: 0 Connection: close Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2BkyujkC0o5StJjiLseedzT4z5I0eBZFNMAvsfpumpJ0izNyBw8Qg7adgJI%2BGl00nJ%2FAKqGtABhrL3U3WzGahYjvlfu1O8TrNIYFGZJ8JLaTwVNnpmjc2vnB2wAzzv9JMSQ%3D"}],"group":"cf-nel","max_age":604800} Location: https://cove.richquickcart.com/fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7C437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=Level+3+Parent+Llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=New+York&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7Bvid%7D&view=%7Bskipped2%7D&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284 Pragma: no-cache Alt-Svc: h3=":443"; ma=86400 Server-Timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1611&rtt_var=21&sent=765&recv=494&lost=0&retrans=0&sent_bytes=600028&recv_bytes=280257&delivery_rate=3533862&cwnd=256&unsent_bytes=0&cid=8beeda56126d3c99&ts=343585&x=0" Nrid: 4074451666
2024-12-12 22:03:13 UTC	1384	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 66 65 39 65 63 66 36 38 2d 36 35 38 32 2d 34 38 62 61 2d 38 66 64 36 2d 38 34 31 35 36 34 37 31 32 33 66 65 2d 76 34 3d 4a 46 32 46 35 75 4b 51 44 6b 32 4e 4c 64 79 33 2d 77 33 74 61 78 65 30 61 45 58 71 30 46 54 6e 63 58 39 70 56 7a 44 39 78 54 38 3b 20 4d 61 78 2d 41 67 65 3d 38 36 34 30 30 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 31 33 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 33 3a 31 32 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 65 70 2d 76 34 3d 6b 64 6e 5a 7a 41 43 32 61 38 6c 59 6b 6b 43 31 4c 38 75 51 72 52 56 57 67 5a 61 44 38 69 34 36 36 6b 56 48 38 78 49 73 62 46 44 77 Data Ascii: Set-Cookie: fe9ecf68-6582-48ba-8fd6-8415647123fe-v4=JF2F5uKQDk2NLdy3-w3taxe0aEXq0FTncX9pVzD9xT8; Max-Age=86400; Expires=Fri, 13 Dec 2024 22:03:12 GMT; Path=/; HttpOnly; SameSite=None; SecureSet-Cookie: cep-v4=kdnZzAC2a8lYkkC1L8uQrRVWgZaD8i466kVH8xIsbFDw
2024-12-12 22:03:13 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 39 31 26 6d 69 6e 5f 72 74 74 3d 31 35 38 32 26 72 74 74 5f 76 61 72 3d 36 31 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 36 32 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 36 34 33 35 30 26 63 77 6e 64 3d 32 32 36 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 65 62 38 32 39 36 30 38 32 35 61 31 62 38 64 65 26 74 73 3d 31 30 33 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1582&rtt_var=611&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1359&delivery_rate=1764350&cwnd=226&unsent_bytes=0&cid=eb82960825a1b8de&ts=1030&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49749	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:15 UTC	1200	OUT	GET /fclkv2/fdx-pkgmsn/index.php?aff_id=push_aff_id&aff_sub2=coplight&aff_sub3=&aff_sub4=&aff_sub5=&affiliate_id=1866&c=%7C437&cc=us&clickid=w9m2bptvgkqebu86jhi9555i&cpc=0.0&id=w9m2bptvgkqebu86jhi9555i&isp=Level+3+Parent+Llc&k=fedwall&keyword=fedwall&lpc=1734040992811&lptoken=17d934c5049627009210&modifier=&offer_id=437&privacy=1&region=New+York&s=1866&source=&src=&superclk=v4&tracker=surfadvance.com&vid=%7Bvid%7D&view=%7Bskipped2%7D&oho=t4.prizepathonyourway.com&currts=1734040992&ptf=26934eb377001f66e37289a5c93fe284 HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.pej935.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:16 UTC	312	IN	HTTP/1.1 302 Found Date: Thu, 12 Dec 2024 22:03:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache
2024-12-12 22:03:16 UTC	2177	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6f 76 65 2e 72 69 63 68 71 75 69 63 6b 63 61 72 74 2e 63 6f 6d 2f 63 6f 78 69 78 6f 2f 79 6f 79 65 2f 79 61 73 69 6c 69 2f 78 6f 2f 69 6e 64 65 78 2e 70 68 70 23 2f 63 6f 78 69 78 6f 2f 79 6f 79 65 2f 79 61 73 69 6c 69 2f 78 6f 2f 69 6e 64 65 78 2e 70 68 70 3f 72 70 63 6c 6b 3d 32 44 61 79 35 44 53 6f 4b 54 56 43 6f 61 25 32 42 6a 33 61 34 56 70 64 72 75 39 6e 4a 6f 5a 35 4d 75 5a 6e 35 77 4b 70 66 32 54 64 43 44 6c 33 45 71 39 79 58 30 6c 78 36 5a 63 6e 56 41 4c 57 57 54 67 68 46 61 4f 6d 74 45 66 61 75 35 25 32 46 6c 48 36 35 64 6e 38 5a 43 77 79 35 48 57 4f 50 65 39 68 71 61 65 4a 79 52 6b 6f 61 79 63 39 33 48 45 4e 64 4b 6e 62 72 36 64 79 49 72 25 32 42 36 4e 6c 69 25 32 42 38 7a 56 57 63 25 32 Data Ascii: Location: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php#/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2
2024-12-12 22:03:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:19 UTC	761	OUT	GET /coxixo/yoye/yasili/xo/index.php HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.pej935.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr
2024-12-12 22:03:20 UTC	1238	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?ponakala=nemanemobayuceluxo Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8zBPNoIpH6LPqO6exgbcoYav1Ub3Fvr4Md95iPfnz0SuQuuGvK%2BDwKKxXzx1%2B1EECIgphGvsby9sh1iY%2FCkHxDY3l5VS4DUjmfmiCXJr3HeWRgyBDFNYYBkEjeZC62Q8%2Fk2fdhNYIOj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1100f76e60188d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1667&min_rtt=1664&rtt_var=630&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1339&delivery_rate=1728833&cwnd=174&unsent_bytes=0&cid=b08e9163bdc9d143&ts=849&x=0"
2024-12-12 22:03:20 UTC	131	IN	Data Raw: 34 64 31 0d 0a ef bb bf 3c 73 63 72 69 70 74 3e 0d 0a 09 76 61 72 20 5f 30 78 34 35 61 33 3d 5b 27 68 72 65 66 27 2c 27 33 31 30 33 32 36 54 65 6d 61 6d 59 27 2c 27 24 31 2f 2f 24 32 27 2c 27 33 37 38 39 6a 71 4c 41 6a 49 27 2c 27 32 30 31 32 36 30 43 75 66 59 42 52 27 2c 27 69 6e 63 6c 75 64 65 73 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 36 32 34 38 35 36 6f 67 64 4d 72 7a 27 2c 27 32 38 Data Ascii: 4d1<script>var _0x45a3=['href','310326TemamY','$1//$2','3789jqLAjI','201260CufYBR','includes','location','624856ogdMrz','28
2024-12-12 22:03:20 UTC	1109	IN	Data Raw: 70 52 57 68 58 58 27 2c 27 31 30 37 33 34 79 76 74 46 71 7a 27 2c 27 33 35 32 52 75 4d 4d 70 51 27 2c 27 31 33 33 39 50 76 70 52 41 68 27 2c 27 33 39 32 38 36 38 50 63 74 6b 64 59 27 2c 27 69 6e 64 65 78 4f 66 27 2c 27 35 39 36 42 6d 5a 78 76 59 27 5d 3b 76 61 72 20 5f 30 78 35 63 65 37 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 34 62 62 31 37 2c 5f 30 78 33 37 37 31 38 64 29 7b 5f 30 78 33 34 62 62 31 37 3d 5f 30 78 33 34 62 62 31 37 2d 30 78 31 62 38 3b 76 61 72 20 5f 30 78 34 35 61 33 37 61 3d 5f 30 78 34 35 61 33 5b 5f 30 78 33 34 62 62 31 37 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 35 61 33 37 61 3b 7d 3b 76 61 72 20 5f 30 78 33 63 38 32 65 31 3d 5f 30 78 35 63 65 37 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 32 37 39 62 65 2c 5f 30 78 34 61 30 31 34 Data Ascii: pRWhXX','10734yvtFqz','352RuMMpQ','1339PvpRAh','392868PctkdY','indexOf','596BmZxvY'];var _0x5ce7=function(_0x34bb17,_0x37718d){_0x34bb17=_0x34bb17-0x1b8;var _0x45a37a=_0x45a3[_0x34bb17];return _0x45a37a;};var _0x3c82e1=_0x5ce7;(function(_0x4279be,_0x4a014
2024-12-12 22:03:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49758	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:22 UTC	1898	OUT	GET /coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5IZSZmXBaJ5xJMgvVqqfdAZFMe87PE%3D%3A [TRUNCATED] Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr
2024-12-12 22:03:24 UTC	1167	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: cid=w9m2bptvgkqebu86jhi9555i; expires=Fri, 13-Dec-2024 22:03:24 GMT; Max-Age=86400; path=/; domain=cove.richquickcart.com Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBnkGCrgM8%2BrA1%2Fk0aGupmUHAbaFXG4HQQzlbPT2sCinlEWUaWjMoI9YDcdA1p%2BbowIjX7jrk%2Fi51qUeXCeKjg7H6HNuJ3ZyKVNnge48mjLdvYwPKDLXsam4uXudX2Zc7Jhz22blvt%2B6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11010ced6f41d9-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:24 UTC	218	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 35 36 37 26 6d 69 6e 5f 72 74 74 3d 31 36 33 36 26 72 74 74 5f 76 61 72 3d 31 32 37 38 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 33 26 72 65 63 76 5f 62 79 74 65 73 3d 32 34 37 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 38 34 38 34 31 26 63 77 6e 64 3d 32 33 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 61 38 37 31 39 33 31 62 64 61 31 65 39 65 30 26 74 73 3d 31 39 38 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=2567&min_rtt=1636&rtt_var=1278&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2476&delivery_rate=1784841&cwnd=235&unsent_bytes=0&cid=6a871931bda1e9e0&ts=1985&x=0"
2024-12-12 22:03:24 UTC	1353	IN	Data Raw: 35 63 64 32 0d 0a ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 52 45 43 2d 68 74 6d 6c 34 30 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 28 62 2c 61 29 7b 72 65 74 75 72 6e 2b 2b 61 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 62 3c 22 5b 22 3f 39 31 3a 31 32 33 29 3e 28 62 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 29 2b 31 33 29 3f 62 3a 62 2d 32 Data Ascii: 5cd2<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd"><html class="no-js" lang="en-GB"><head><script> function r(b,a){return++a?String.fromCharCode((b<"["?91:123)>(b=b.charCodeAt()+13)?b:b-2
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 65 53 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2e 2f 66 69 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 6c 69 6e 6b 20 69 64 3d 22 74 74 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 62 66 37 35 39 66 38 35 61 33 34 39 37 31 64 66 63 62 33 61 32 62 30 35 34 64 62 39 63 65 36 64 2e 63 73 73 3f 72 65 63 69 3d 5a 58 6c 4b 65 57 49 79 4f 54 42 4a 61 6d 39 70 57 45 4d 35 62 56 70 49 5a 33 52 6a 52 33 52 75 59 6c 68 4f 64 56 68 44 4f 47 6c 4d 51 30 70 74 59 56 64 34 62 45 6c 71 62 32 6c 4d 62 48 64 32 57 6d 31 73 63 31 70 59 54 6d 4e 4d 4d 30 34 77 5a 56 64 34 62 45 31 70 4e 57 70 6a 4d 30 31 70 54 45 4e 4b 4d 47 56 59 51 6d 78 4a 61 6d 39 70 57 54 4e Data Ascii: eS"><link href="./files/bootstrap.min.css" rel="stylesheet"><link id="tt1" rel="stylesheet" href="bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTN
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 24 28 27 2e 6d 61 69 6e 2d 2d 31 27 29 2e 66 61 64 65 4f 75 74 28 31 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 70 61 67 65 2d 2d 69 6e 6e 65 72 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6d 61 69 6e 2d 2d 32 27 29 2e 66 61 64 65 49 6e 28 31 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 31 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $('.main--1').fadeOut(100); $('.page').addClass('page--inner'); setTimeout( function () { $('.main--2').fadeIn(1000); }, 100
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 51 20 3d 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 27 2e 71 75 65 73 74 69 6f 6e 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 78 74 51 20 3d 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 27 2e 71 75 65 73 74 69 6f 6e 27 29 2e 6e 65 78 74 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 51 2e 66 61 64 65 4f 75 74 28 33 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 Data Ascii: var currentQ = $(this).parents('.question'), nextQ = $(this).parents('.question').next(); setTimeout(function () { currentQ.fadeOut(300); }, 500); setTime
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 31 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6d 61 69 6e 2d 2d 35 27 29 2e 66 61 64 65 4f 75 74 28 31 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6d 61 69 6e 2d 2d 36 27 29 2e 66 61 64 65 49 6e 28 31 30 30 30 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 66 6c 65 78 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 34 33 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 70 6d 5f 74 61 67 20 3d 20 27 30 32 32 30 32 Data Ascii: 100); $('.main--5').fadeOut(100); $('.main--6').fadeIn(1000).css('display', 'flex'); }, 4300 ); }); }); </script><script>var pm_tag = '02202
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 70 61 67 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 32 2c 20 32 34 32 2c 20 32 34 32 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6d 6f 64 61 6c 20 73 70 61 6e 2e 6c 6f 67 6f 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 33 30 70 78 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 6f 64 61 6c 20 2e 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 32 30 70 78 20 30 70 78 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 6f 64 61 6c 20 2e 63 6f 6e 74 65 6e 74 20 68 Data Ascii: } .page { background-color: rgb(242, 242, 242); } .modal span.logo img { margin: 0 auto 30px } .modal .content { padding: 0px 20px 0px } .modal .content h
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 65 72 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 23 6f 66 66 65 72 77 72 61 70 70 65 72 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 23 6f 66 66 65 72 77 72 61 70 70 65 72 20 2e 64 64 61 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 23 6f 66 66 65 72 77 72 61 70 70 65 72 20 73 70 61 6e 2e 6c 6f 67 6f 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 23 6f 66 Data Ascii: er h2 { margin-top: 0 } #offerwrapper h3 { font-weight: 700 } #offerwrapper .dday { margin-bottom: 0 } #offerwrapper span.logo img { margin-bottom: 0 } #of
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 64 64 61 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 37 37 2c 20 32 30 2c 20 31 34 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 23 72 69 6e 67 74 6f 6e 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: rflow: auto; display: none; } .dday { text-align: center; background: rgb(77, 20, 140); color: #FFF; margin-bottom: 15px; padding: 5px 0 } #ringtone {
2024-12-12 22:03:24 UTC	1369	IN	Data Raw: 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 23 6f 66 66 65 72 77 72 61 70 70 65 72 20 23 6f 66 66 65 72 73 20 2e 62 6f 78 20 2e 6f 66 66 65 72 2d 64 65 73 63 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 Data Ascii: ne; border-bottom: 1px solid #ccc } #offerwrapper #offers .box .offer-desc { margin-left: 0; padding-right: 0; text-align: center } } @media (min-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49759	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:24 UTC	1955	OUT	GET /fdx-pkgmsn/55e8cf6703bf45bce4822d01a5874562.css?v=25&reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMk52ZFhKcFpYSXVZM056SWl3aWRIbHdaU0k2SW1OemN5SXNJbllpT2lJeUluMD0=aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:25 UTC	1203	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:24 GMT Content-Type: text/css Content-Length: 34893 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4676 Last-Modified: Thu, 12 Dec 2024 20:45:28 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4LbvV0DY8PS%2BQQz5%2Bl3IITB1MhJxDgjl0MBUePaRDAJ6tUSSAufThTfG4oQSxR%2FTQKsXOhhEhXaQJKlOg5gNbhavM6CurQ%2Ff53Sh5yn%2FuQkOsKSCNh%2Fb3u0T6SnpWmQQxvL568PLzTF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110118ab2b8c71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2637&min_rtt=1955&rtt_var=1220&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2533&delivery_rate=1493606&cwnd=193&unsent_bytes=0&cid=5670457aab8fa8f2&ts=2342&x=0"
2024-12-12 22:03:25 UTC	166	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2b 0a 2b 20 46 52 4f 4e 54 2d 4d 41 4e 2e 63 6f 6d 0a 2b 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 Data Ascii: @charset "UTF-8";/* -----------------------------------------------------++ FRONT-MAN.com+------------------------------------------------------ //! normali
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 61 64 6a 75 73 74 6d 65 6e 74 73 20 6f 66 20 66 6f 6e 74 20 73 69 7a 65 20 61 66 74 65 Data Ascii: ze.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css // Document ========================================================================== //* * 1. Correct the line height in all browsers. * 2. Prevent adjustments of font size afte
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 6d 6f 76 65 20 74 68 65 20 67 72 61 79 20 62 61 63 6b 67 72 6f 75 6e 64 20 6f 6e 20 61 63 74 69 76 65 20 6c 69 6e 6b 73 20 69 6e 20 49 45 20 31 30 2e 0a 20 2a 2f 0a 0a 61 20 7b 0a 20 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 2a 2f 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 62 6f 74 74 6f 6d 20 62 6f 72 64 65 72 20 69 6e 20 43 68 72 6f 6d 65 20 35 37 2d 0a 20 2a 20 32 2e 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 74 65 78 74 20 64 65 63 6f 72 61 74 69 Data Ascii: ======================================================= //* * Remove the gray background on active links in IE 10. /a { / background-color: transparent; /}/* * 1. Remove the bottom border in Chrome 57- * 2. Add the correct text decorati
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 68 61 6e 67 65 20 74 68 65 20 66 6f 6e 74 20 73 74 79 6c 65 73 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 6d 61 72 67 69 6e 20 69 6e 20 46 69 72 65 66 6f 78 20 61 6e 64 20 53 61 66 61 72 69 2e 0a 20 2a 2f 0a 0a 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 2c 0a 6f 70 74 67 72 6f 75 70 2c 0a 73 65 6c 65 63 74 2c 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a Data Ascii: ====================================================================== //* * 1. Change the font styles in all browsers. * 2. Remove the margin in Firefox and Safari. /button,input,optgroup,select,textarea { font-family: inherit; / 1 */
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 74 65 78 74 20 77 72 61 70 70 69 6e 67 20 69 6e 20 45 64 67 65 20 61 6e 64 20 49 45 2e 0a 20 2a 20 32 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 63 6f 6c 6f 72 20 69 6e 68 65 72 69 74 61 6e 63 65 20 66 72 6f 6d 20 60 66 69 65 6c 64 73 65 74 60 20 65 6c 65 6d 65 6e 74 73 20 69 6e 20 49 45 2e 0a 20 2a 20 33 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 70 61 64 64 69 6e 67 20 73 6f 20 64 65 76 65 6c 6f 70 65 72 73 20 61 72 65 20 6e 6f 74 20 63 61 75 67 68 74 20 6f 75 74 20 77 68 65 6e 20 74 68 65 79 20 7a 65 72 6f 20 6f 75 74 0a 20 2a 20 20 20 20 60 66 69 65 6c 64 73 65 74 60 20 65 6c 65 6d 65 6e 74 73 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 2f 0a 0a 6c 65 67 65 6e 64 20 7b 0a 20 20 2d 77 Data Ascii: * 1. Correct the text wrapping in Edge and IE. * 2. Correct the color inheritance from `fieldset` elements in IE. * 3. Remove the padding so developers are not caught out when they zero out * `fieldset` elements in all browsers. */legend { -w
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 22 73 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 69 6e 61 62 69 6c 69 74 79 20 74 6f 20 73 74 79 6c 65 20 63 6c 69 63 6b 61 62 6c 65 20 74 79 70 65 73 20 69 6e 20 69 4f 53 20 61 6e 64 20 53 61 66 61 72 69 2e 0a 20 2a 20 32 2e 20 43 68 61 6e 67 65 20 66 6f 6e 74 20 70 72 6f 70 65 72 74 69 65 73 20 74 6f 20 60 69 6e 68 65 72 69 74 60 20 69 6e 20 53 61 66 61 72 69 2e 0a 20 2a 2f 0a 0a 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: "search"]::-webkit-search-decoration { -webkit-appearance: none;}/** * 1. Correct the inability to style clickable types in iOS and Safari. * 2. Change font properties to `inherit` in Safari. */::-webkit-file-upload-button { -webkit-appearance
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 72 6d 61 6c 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 2a 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 2a 2c 0a 2a 3a 3a 62 65 66 6f 72 65 2c 0a 2a 3a 3a 61 66 74 65 72 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: rmal; -ms-flex-direction: column; flex-direction: column;}body * { -webkit-box-sizing: border-box; box-sizing: border-box;},::before,*::after { -webkit-box-sizing: border-box; box-sizing: border-box;}::-moz-selection { backgroun
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 74 2d 63 68 69 6c 64 2c 0a 64 6c 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 0a 70 72 65 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 0a 62 6c 6f 63 6b 71 75 6f 74 65 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 0a 20 20 20 20 40 42 41 53 45 20 23 4c 49 Data Ascii: t-child,dl:last-child,pre:last-child,blockquote:last-child { margin-bottom: 0;}hr { background-color: none; border: none; border-bottom: 1px solid #eee; height: 1px; margin: 0px 0;}/------------------------------------ @BASE #LI
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 69 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 20 30 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 20 30 73 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 2c 0a 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0a 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 62 74 6e 29 2c 0a 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 62 74 6e 29 2c 0a 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 3a 6e 6f 74 28 2e 62 74 6e 29 20 7b 0a 20 Data Ascii: inter; -webkit-transition: all 0.3s ease 0s; -o-transition: all 0.3s ease 0s; transition: all 0.3s ease 0s;}button,button:focus,button:active { outline: none !important;}button:not(.btn),button:focus:not(.btn),button:active:not(.btn) {
2024-12-12 22:03:25 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 20 30 73 3b 0a 7d 0a 0a 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 5f 5f 69 6e 70 75 74 20 7b 0a 20 20 72 65 73 69 7a 65 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 70 78 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 20 7b 0a 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 74 65 78 74 66 69 65 6c 64 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 Data Ascii: sition: all 0.3s ease 0s;}textarea.form__input { resize: none; overflow-x: hidden; line-height: 1.5; padding-top: 8px;}input[type="number"] { -moz-appearance: textfield;}input[type="number"]::-webkit-inner-spin-button,input[type="numbe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49767	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:26 UTC	557	OUT	GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cove.richquickcart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:26 UTC	963	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64ed75bb-76fe" Last-Modified: Tue, 29 Aug 2023 04:36:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1293449 Expires: Tue, 02 Dec 2025 22:03:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ysLc43umrX%2BNJJVRG277D7HXN%2F%2BZFrhJ9N7H54qIU1cVo%2Bk4bi%2FnpaKqAdHj03hj9POP8N47gE9j5AEJT2gYckiBB2yES60QVwAs89t4QyrQaITeJ9HljMfmzqr3ZJEdOUBEBSQt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f110121ddbade9b-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:26 UTC	406	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bed/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 Data Ascii: getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: call(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){ret
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 63 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 Data Ascii: ce},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d Data Ascii: e.contains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"=
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c Data Ascii: ([+-]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\\)\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 65 73 74 28 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 55 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 Data Ascii: est(t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&U(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d Data Ascii: mentElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 Data Ascii: t.getElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.queryS
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f Data Ascii: atchesSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49766	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:26 UTC	568	OUT	GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:26 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03f26-2b4c" Last-Modified: Mon, 04 May 2020 16:13:26 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 100819 Expires: Tue, 02 Dec 2025 22:03:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZRqY0vUMWC2X8sVQH10cST6VwTjTbiWDPIUx3FeBKmqOK9NeyZ7zZ3VT2kUCCYMZdLu6Rx7g83BBz5EUL%2FSrAMQ5PVx8AhfHemlweJkyTrgupqWaGTAl1W2lkh2jt6x70Jw%2BW9tp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f110121defe7d18-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:26 UTC	413	IN	Data Raw: 32 62 34 63 0d 0a 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 62 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 53 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 69 66 28 21 69 28 6f 2c 22 2d 22 29 26 26 62 5b 6f 5d 21 3d Data Ascii: 2b4cwindow.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!=
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 6c 69 63 65 28 31 29 2c 6f 3d 28 65 2b 22 20 22 2b 6b 2e 6a 6f 69 6e 28 72 2b 22 20 22 29 2b 72 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 61 28 74 2c 22 73 74 72 69 6e 67 22 29 7c 7c 61 28 74 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 63 28 6f 2c 74 29 3a 28 6f 3d 28 65 2b 22 20 22 2b 54 2e 6a 6f 69 6e 28 72 2b 22 20 22 29 2b 72 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 73 28 6f 2c 74 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 70 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 3e 72 3b 72 2b 2b 29 6a 5b 6e 5b 72 5d 5d 3d 21 Data Ascii: (e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r;r++)j[n[r]]=!
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 2c 69 2c 63 2c 73 2c 75 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 3d 74 2e 62 6f 64 79 2c 64 3d 6c 7c 7c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 29 3b 69 66 28 70 61 72 73 65 49 6e 74 28 72 2c 31 30 29 29 66 6f 72 28 3b 72 2d 2d 3b 29 63 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 63 2e 69 64 3d 6f 3f 6f 5b 72 5d 3a 76 2b 28 72 2b 31 29 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 72 65 74 75 72 6e 20 61 3d 5b 22 26 23 31 37 33 3b 22 2c 27 3c 73 74 79 6c 65 20 69 64 3d 22 73 27 2c 76 2c 27 22 3e 27 2c 65 2c 22 3c 2f 73 74 79 6c 65 3e 22 5d 2e 6a 6f 69 6e 28 22 22 29 2c 75 2e 69 64 3d 76 2c 28 6c 3f 75 3a 64 Data Ascii: ion(e,n,r,o){var a,i,c,s,u=t.createElement("div"),l=t.body,d=l\|\|t.createElement("body");if(parseInt(r,10))for(;r--;)c=t.createElement("div"),c.id=o?o[r]:v+(r+1),u.appendChild(c);return a=["",'<style id="s',v,'">',e,"</style>"].join(""),u.id=v,(l?u:d
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 6e 3d 44 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 61 3d 6e 65 77 20 6f 2c 69 3d 74 2e 61 70 70 6c 79 28 61 2c 6e 2e 63 6f 6e 63 61 74 28 44 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 29 3d 3d 3d 69 3f 69 3a 61 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 6e 2e 63 6f Data Ascii: t=this;if("function"!=typeof t)throw new TypeError;var n=D.call(arguments,1),r=function(){if(this instanceof r){var o=function(){};o.prototype=t.prototype;var a=new o,i=t.apply(a,n.concat(D.call(arguments)));return Object(i)===i?i:a}return t.apply(e,n.co
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 57 65 62 53 6f 63 6b 65 74 22 69 6e 20 65 7c 7c 22 4d 6f 7a 57 65 62 53 6f 63 6b 65 74 22 69 6e 20 65 7d 2c 4d 2e 72 67 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 35 30 2c 32 35 35 2c 31 35 30 2c 2e 35 29 22 29 2c 69 28 62 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2c 22 72 67 62 61 22 29 7d 2c 4d 2e 68 73 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 31 32 30 2c 34 30 25 2c 31 30 30 25 2c 2e 35 29 22 29 2c 69 28 62 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2c 22 72 67 62 61 22 29 7c 7c 69 28 62 2e 62 61 63 6b 67 72 Data Ascii: tion(){return"WebSocket"in e\|\|"MozWebSocket"in e},M.rgba=function(){return r("background-color:rgba(150,255,150,.5)"),i(b.backgroundColor,"rgba")},M.hsla=function(){return r("background-color:hsla(120,40%,100%,.5)"),i(b.backgroundColor,"rgba")\|\|i(b.backgr
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 66 6f 72 6d 2d 33 64 29 7b 23 6d 6f 64 65 72 6e 69 7a 72 7b 6c 65 66 74 3a 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 33 70 78 3b 7d 7d 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3d 39 3d 3d 3d 74 2e 6f 66 66 73 65 74 4c 65 66 74 26 26 33 3d 3d 3d 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 2c 65 7d 2c 4d 2e 63 73 73 74 72 61 6e 73 69 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 29 7d 2c 4d 2e 66 6f 6e 74 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 46 28 27 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 66 6f 6e 74 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f Data Ascii: form-3d){#modernizr{left:9px;position:absolute;height:3px;}}",function(t){e=9===t.offsetLeft&&3===t.offsetHeight}),e},M.csstransitions=function(){return u("transition")},M.fontface=function(){var e;return F('@font-face {font-family:"font";src:url("https:/
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 61 6c 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 76 2c 76 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 76 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 4d 2e 73 65 73 73 69 6f 6e 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 76 2c 76 29 2c 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 76 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 4d 2e 77 65 62 77 6f 72 6b 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: alstorage=function(){try{return localStorage.setItem(v,v),localStorage.removeItem(v),!0}catch(e){return!1}},M.sessionstorage=function(){try{return sessionStorage.setItem(v,v),sessionStorage.removeItem(v),!0}catch(e){return!1}},M.webworkers=function(){retu
2024-12-12 22:03:26 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 20 22 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 76 5b 65 5b 68 5d 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 67 2b 2b 2c 65 5b 68 5d 3d 67 2c 76 5b 67 5d 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 2c 72 29 7b 69 66 28 6e 7c 7c 28 6e 3d 74 29 2c 6c 29 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3b 72 7c 7c 28 72 3d 6f 28 6e 29 29 3b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 61 3d 72 2e 63 61 63 68 65 5b 65 5d 3f 72 2e 63 61 63 68 65 5b 65 5d 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 3a 70 2e 74 65 73 74 28 65 29 3f 28 72 2e 63 61 63 68 65 5b 65 5d 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 28 65 29 29 2e 63 6c 6f 6e 65 4e 6f Data Ascii: =typeof e?e.split(" "):e}function o(e){var t=v[e[h]];return t\|\|(t={},g++,e[h]=g,v[g]=t),t}function a(e,n,r){if(n\|\|(n=t),l)return n.createElement(e);r\|\|(r=o(n));var a;return a=r.cache[e]?r.cache[e].cloneNode():p.test(e)?(r.cache[e]=r.createElem(e)).cloneNo
2024-12-12 22:03:26 UTC	1096	IN	Data Raw: 6e 67 7c 73 74 79 6c 65 7c 74 61 62 6c 65 7c 74 62 6f 64 79 7c 74 64 7c 74 68 7c 74 72 7c 75 6c 29 24 2f 69 2c 68 3d 22 5f 68 74 6d 6c 35 73 68 69 76 22 2c 67 3d 30 2c 76 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 78 79 7a 3e 3c 2f 78 79 7a 3e 22 2c 75 3d 22 68 69 64 64 65 6e 22 69 6e 20 65 2c 6c 3d 31 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 76 61 72 20 65 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d Data Ascii: ng\|style\|table\|tbody\|td\|th\|tr\|ul)$/i,h="_html5shiv",g=0,v={};!function(){try{var e=t.createElement("a");e.innerHTML="<xyz></xyz>",u="hidden"in e,l=1==e.childNodes.length\|\|function(){t.createElement("a");var e=t.createDocumentFragment();return"undefined"==
2024-12-12 22:03:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49768	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:27 UTC	1780	OUT	GET /fdx-pkgmsn/files/bootstrap.min.css HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:27 UTC	1246	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:27 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:05 GMT ETag: W/"239c0-625d934dabef3-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4679 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aD598l%2FVrH3fXDrIm%2BCjUNkgYNY8DCHcBc9AMYgHZNUVvr8BZlBTMM%2BvLm19f9FAgq08gjc1x8%2FsV3eiuD%2FyexCLBLLFyJzW1myuHej2LEN%2BA0joKn%2B9lD0ULisi6o5qXZY9PVqaKwvk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110128e8a1434b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6507&min_rtt=1664&rtt_var=3660&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2358&delivery_rate=1754807&cwnd=243&unsent_bytes=0&cid=83b2f54f84a0be58&ts=460&x=0"
2024-12-12 22:03:27 UTC	123	IN	Data Raw: 37 62 39 61 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f Data Ascii: 7b9a/! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https:/
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 61 72 74 69 Data Ascii: /github.com/twbs/bootstrap/blob/master/LICENSE) / /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html { font-family: sans-serif; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;}body { margin: 0;}arti
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 72 67 69 6e 3a 20 30 3b 0a 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 0a 73 65 6c 65 63 74 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 0a 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 62 75 74 74 Data Ascii: rgin: 0; font: inherit; color: inherit;}button { overflow: visible;}button,select { text-transform: none;}button,html input[type="button"],input[type="reset"],input[type="submit"] { -webkit-appearance: button; cursor: pointer;}butt
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 61 66 74 65 72 2c 0a 20 20 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 61 2c 0a 20 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 7d 0a 20 20 61 5b 68 72 65 66 5d Data Ascii: after, :before { color: #000 !important; text-shadow: none !important; background: 0 0 !important; -webkit-box-shadow: none !important; box-shadow: none !important; } a, a:visited { text-decoration: underline; } a[href]
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 20 20 20 20 75 72 6c 28 2e 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 2e 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 0a 20 20 20 20 75 72 6c 28 2e 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 73 76 67 23 67 6c 79 70 68 69 63 6f 6e 73 5f 68 61 6c 66 6c 69 6e 67 73 72 65 67 75 6c 61 72 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c Data Ascii: format("woff2"), url(./glyphicons-halflings-regular.woff) format("woff"), url(./glyphicons-halflings-regular.ttf) format("truetype"), url(./glyphicons-halflings-regular.svg#glyphicons_halflingsregular) format("svg");}.glyphicon { position: rel
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f Data Ascii: ";}.glyphicon-ok:before { content: "\e013";}.glyphicon-remove:before { content: "\e014";}.glyphicon-zoom-in:before { content: "\e015";}.glyphicon-zoom-out:before { content: "\e016";}.glyphicon-off:before { content: "\e017";}.glyphico
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 30 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 31 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 67 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 32 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 34 35 22 Data Ascii: content: "\e040";}.glyphicon-tag:before { content: "\e041";}.glyphicon-tags:before { content: "\e042";}.glyphicon-book:before { content: "\e043";}.glyphicon-bookmark:before { content: "\e044";}.glyphicon-print:before { content: "\e045"
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 65 30 36 38 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 65 70 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 36 39 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 37 30 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 37 31 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 37 32 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a Data Ascii: e068";}.glyphicon-step-backward:before { content: "\e069";}.glyphicon-fast-backward:before { content: "\e070";}.glyphicon-backward:before { content: "\e071";}.glyphicon-play:before { content: "\e072";}.glyphicon-pause:before { content:
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 61 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 39 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 39 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 39 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 73 69 67 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 30 31 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 69 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f Data Ascii: 4";}.glyphicon-share-alt:before { content: "\e095";}.glyphicon-resize-full:before { content: "\e096";}.glyphicon-resize-small:before { content: "\e097";}.glyphicon-exclamation-sign:before { content: "\e101";}.glyphicon-gift:before { co
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 32 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 32 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 32 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 32 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 32 38 22 3b 0a 7d 0a 2e 67 Data Ascii: ertificate:before { content: "\e124";}.glyphicon-thumbs-up:before { content: "\e125";}.glyphicon-thumbs-down:before { content: "\e126";}.glyphicon-hand-right:before { content: "\e127";}.glyphicon-hand-left:before { content: "\e128";}.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49769	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:27 UTC	1950	OUT	GET /fdx-pkgmsn/bf759f85a34971dfcb3a2b054db9ce6d.css?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM04wZVd4bE1pNWpjM01pTENKMGVYQmxJam9pWTNOeklpd2lkaUk2SWpJaWZRPT0=aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:27 UTC	1201	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:27 GMT Content-Type: text/css Content-Length: 5539 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4679 Last-Modified: Thu, 12 Dec 2024 20:45:28 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dFvxVTQfuRTBs3jqtLOc8e%2FvlyTGWbupV2AHXjW0Vw52ORua5SiNHr%2FTqXLTCJoNMMBoTMbNcML6hbAaGPIduh2WouX74JPvP75M8Ii5x%2Fy4%2BbY6%2FvuMNmvVVbKa5f4zEVuWE2u%2FXumQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110128e94e4251-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4730&min_rtt=1720&rtt_var=2606&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2528&delivery_rate=1697674&cwnd=248&unsent_bytes=0&cid=0725eddca48fdab1&ts=470&x=0"
2024-12-12 22:03:27 UTC	168	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 61 6e 73 2b 50 72 6f 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 39 30 30 3b 31 2c 32 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 36 30 30 3b 31 2c 37 30 30 3b 31 2c 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d Data Ascii: @import url('https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap');
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 0a 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 20 2f 2a 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 65 65 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 39 34 39 34 39 3b 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 7b 0d 0a 20 20 20 20 2f 2a 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 3b 20 2a 2f 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 68 65 61 64 Data Ascii: body{ /* font-family: 'Source Sans Pro', sans-serif; padding: 0; margin: 0; width: 100%; background-color: #eeeeee; color: #494949; /}.container{ / max-width: 768px; */ margin: auto;}.container-head
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 36 30 70 78 29 20 7b 0d 0a 20 20 20 20 2e 70 61 63 6b 2d 63 6f 6e 20 69 6d 67 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 35 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 70 61 63 6b 2d 68 65 61 64 20 70 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 39 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 70 31 2c 2e 70 32 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 70 33 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 2e 68 69 64 64 65 6e 7b 0d 0a 20 20 20 20 64 69 Data Ascii: @media (max-width:460px) { .pack-con img{ max-width: 150px; } .pack-head p{ font-size: 29px; } .p1,.p2{ font-size: 22px; } .p3{ font-size: 19px; }}.hidden{ di
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 23 62 74 6e 2d 63 6c 6f 73 65 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 36 62 36 62 36 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 23 62 74 6e 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 34 34 34 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 2d 63 6f 6e 2d 69 6e 6e 7b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 6f 76 65 2d 63 6f 6e 20 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6d 6f 76 65 2d 63 6f 6e 20 7b 0d 0a 20 20 20 20 30 25 7b 6f 70 61 63 69 74 79 Data Ascii: #btn-close{ color: #b6b6b6; cursor: pointer; border: 0px; background-color: #fff;}#btn-close:hover{ color: #ff4444;}.mod-con-inn{ animation: move-con 1s ease-in-out;}@keyframes move-con { 0%{opacity
2024-12-12 22:03:27 UTC	1264	IN	Data Raw: 72 67 69 6e 3a 20 34 30 70 78 20 61 75 74 6f 3b 7d 7d 0d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 33 31 30 70 78 29 20 7b 20 2e 6d 6f 64 61 6c 7b 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 7d 7d 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 68 65 61 64 2d 70 76 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 62 6f 64 79 20 6f 6c 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 62 6f 64 79 20 6f 6c 20 6c Data Ascii: rgin: 40px auto;}} @media (max-width:310px) { .modal{ margin: 10px auto;}}}.modal-head-pv2{ display: flex; justify-content: space-between; align-items: center;}.modal-body ol{ margin-bottom: 0px;}.modal-body ol l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49770	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:27 UTC	1769	OUT	GET /fdx-pkgmsn/files/svg4everybody.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:27 UTC	1253	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:19 GMT ETag: W/"769-625d935b02f38-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4679 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbBne1kqin654NDSB%2BIMAH2id%2BMjkgx0di0q9zallcDkODoSqBHWp25Bjf38Zq2j8pWgjOVb2d186nyEE5836vhVIdumkbFgSkCFb%2Bw2mbnR1PcPP%2F7BQblyMEy2p7OfsT69Wmj23rv%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110128fbcc0f8c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1490&rtt_var=567&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2347&delivery_rate=1914754&cwnd=212&unsent_bytes=0&cid=0d44b9c80bb200f3&ts=452&x=0"
2024-12-12 22:03:27 UTC	116	IN	Data Raw: 37 36 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 76 67 34 65 76 65 72 79 62 6f 64 79 3d 62 28 29 7d 29 3a 22 6f 62 6a 65 63 74 22 Data Ascii: 769!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"
2024-12-12 22:03:27 UTC	1369	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 3a 61 2e 73 76 67 34 65 76 65 72 79 62 6f 64 79 3d 62 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 29 7b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 65 3d 21 62 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 29 26 26 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 29 3b 65 26 26 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 2c 65 29 3b 66 6f 72 28 76 61 72 20 66 3d 63 2e 63 6c 6f 6e Data Ascii: ==typeof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.clon
2024-12-12 22:03:27 UTC	419	IN	Data Raw: 5c 2f 2e 28 5c 64 2b 29 5c 62 2f 2c 6c 3d 77 69 6e 64 6f 77 2e 74 6f 70 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 6c 66 3b 66 3d 22 70 6f 6c 79 66 69 6c 6c 22 69 6e 20 67 3f 67 2e 70 6f 6c 79 66 69 6c 6c 3a 68 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 6a 29 7c 7c 5b 5d 29 5b 31 5d 3c 31 30 35 34 37 7c 7c 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 69 29 7c 7c 5b 5d 29 5b 31 5d 3c 35 33 37 7c 7c 6b 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 26 26 6c 3b 76 61 72 20 6d 3d 7b 7d 2c 6e 3d 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c Data Ascii: \/.(\d+)\b/,l=window.top!==window.self;f="polyfill"in g?g.polyfill:h.test(navigator.userAgent)\|\|(navigator.userAgent.match(j)\|\|[])[1]<10547\|\|(navigator.userAgent.match(i)\|\|[])[1]<537\|\|k.test(navigator.userAgent)&&l;var m={},n=window.requestAnimationFrame\|
2024-12-12 22:03:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49771	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:28 UTC	386	OUT	GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:28 UTC	970	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03f26-2b4c" Last-Modified: Mon, 04 May 2020 16:13:26 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 100821 Expires: Tue, 02 Dec 2025 22:03:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4M%2BmndLwWC7T86%2FHgp5OiDIgD0a6oCKMEtDX81%2FkmPQDuzC1at65PGTurqHYQMLmQE1F739aBJ%2Fhr2endCtQuhZNCnfj9sZyX%2BhnO%2Bt5cng6AFv74Zk%2FB7W1BjBmO%2FcsMIhEcjD%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f11012f3b684327-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:28 UTC	399	IN	Data Raw: 32 62 34 63 0d 0a 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 62 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 53 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 69 66 28 21 69 28 6f 2c 22 2d 22 29 26 26 62 5b 6f 5d 21 3d Data Ascii: 2b4cwindow.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!=
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 6c 69 63 65 28 31 29 2c 6f 3d 28 65 2b 22 20 22 2b 6b 2e 6a 6f 69 6e 28 72 2b 22 20 22 29 2b 72 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 61 28 74 2c 22 73 74 72 69 6e 67 22 29 7c 7c 61 28 74 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 63 28 6f 2c 74 29 3a 28 6f 3d 28 65 2b 22 20 22 2b 54 2e 6a 6f 69 6e 28 72 2b 22 20 22 29 2b 72 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 73 28 6f 2c 74 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 70 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 3e 72 Data Ascii: n!1}function u(e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 2e 73 6c 69 63 65 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 2c 69 2c 63 2c 73 2c 75 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 3d 74 2e 62 6f 64 79 2c 64 3d 6c 7c 7c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 29 3b 69 66 28 70 61 72 73 65 49 6e 74 28 72 2c 31 30 29 29 66 6f 72 28 3b 72 2d 2d 3b 29 63 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 63 2e 69 64 3d 6f 3f 6f 5b 72 5d 3a 76 2b 28 72 2b 31 29 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 72 65 74 75 72 6e 20 61 3d 5b 22 26 23 31 37 33 3b 22 2c 27 3c 73 74 79 6c 65 20 69 64 3d 22 73 27 2c 76 2c 27 22 3e 27 2c 65 2c 22 3c 2f 73 74 79 6c 65 3e 22 5d 2e 6a 6f 69 6e 28 22 22 29 Data Ascii: .slice,F=function(e,n,r,o){var a,i,c,s,u=t.createElement("div"),l=t.body,d=l\|\|t.createElement("body");if(parseInt(r,10))for(;r--;)c=t.createElement("div"),c.id=o?o[r]:v+(r+1),u.appendChild(c);return a=["",'<style id="s',v,'">',e,"</style>"].join("")
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 6e 3d 44 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 61 3d 6e 65 77 20 6f 2c 69 3d 74 2e 61 70 70 6c 79 28 61 2c 6e 2e 63 6f 6e 63 61 74 28 44 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 29 3d 3d 3d 69 3f 69 3a 61 7d 72 65 74 75 72 6e 20 Data Ascii: unction(e){var t=this;if("function"!=typeof t)throw new TypeError;var n=D.call(arguments,1),r=function(){if(this instanceof r){var o=function(){};o.prototype=t.prototype;var a=new o,i=t.apply(a,n.concat(D.call(arguments)));return Object(i)===i?i:a}return
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 65 62 73 6f 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 57 65 62 53 6f 63 6b 65 74 22 69 6e 20 65 7c 7c 22 4d 6f 7a 57 65 62 53 6f 63 6b 65 74 22 69 6e 20 65 7d 2c 4d 2e 72 67 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 35 30 2c 32 35 35 2c 31 35 30 2c 2e 35 29 22 29 2c 69 28 62 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2c 22 72 67 62 61 22 29 7d 2c 4d 2e 68 73 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 31 32 30 2c 34 30 25 2c 31 30 30 25 2c 2e 35 29 22 29 2c 69 28 62 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2c 22 72 67 62 61 Data Ascii: ebsockets=function(){return"WebSocket"in e\|\|"MozWebSocket"in e},M.rgba=function(){return r("background-color:rgba(150,255,150,.5)"),i(b.backgroundColor,"rgba")},M.hsla=function(){return r("background-color:hsla(120,40%,100%,.5)"),i(b.backgroundColor,"rgba
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 28 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 33 64 29 7b 23 6d 6f 64 65 72 6e 69 7a 72 7b 6c 65 66 74 3a 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 33 70 78 3b 7d 7d 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3d 39 3d 3d 3d 74 2e 6f 66 66 73 65 74 4c 65 66 74 26 26 33 3d 3d 3d 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 2c 65 7d 2c 4d 2e 63 73 73 74 72 61 6e 73 69 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 29 7d 2c 4d 2e 66 6f 6e 74 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 46 28 27 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 66 6f 6e 74 22 3b 73 72 Data Ascii: (-webkit-transform-3d){#modernizr{left:9px;position:absolute;height:3px;}}",function(t){e=9===t.offsetLeft&&3===t.offsetHeight}),e},M.csstransitions=function(){return u("transition")},M.fontface=function(){var e;return F('@font-face {font-family:"font";sr
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 7d 2c 4d 2e 6c 6f 63 61 6c 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 76 2c 76 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 76 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 4d 2e 73 65 73 73 69 6f 6e 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 76 2c 76 29 2c 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 76 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 4d 2e 77 65 62 77 6f 72 6b 65 72 73 3d 66 Data Ascii: eturn n},M.localstorage=function(){try{return localStorage.setItem(v,v),localStorage.removeItem(v),!0}catch(e){return!1}},M.sessionstorage=function(){try{return sessionStorage.setItem(v,v),sessionStorage.removeItem(v),!0}catch(e){return!1}},M.webworkers=f
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 20 22 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 76 5b 65 5b 68 5d 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 67 2b 2b 2c 65 5b 68 5d 3d 67 2c 76 5b 67 5d 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 2c 72 29 7b 69 66 28 6e 7c 7c 28 6e 3d 74 29 2c 6c 29 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3b 72 7c 7c 28 72 3d 6f 28 6e 29 29 3b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 61 3d 72 2e 63 61 63 68 65 5b 65 5d 3f 72 2e 63 61 63 68 65 5b 65 5d 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 3a 70 2e 74 65 73 74 28 65 29 3f 28 72 2e 63 61 63 68 65 5b 65 5d 3d 72 2e 63 72 65 61 74 65 45 6c Data Ascii: eturn"string"==typeof e?e.split(" "):e}function o(e){var t=v[e[h]];return t\|\|(t={},g++,e[h]=g,v[g]=t),t}function a(e,n,r){if(n\|\|(n=t),l)return n.createElement(e);r\|\|(r=o(n));var a;return a=r.cache[e]?r.cache[e].cloneNode():p.test(e)?(r.cache[e]=r.createEl
2024-12-12 22:03:28 UTC	1110	IN	Data Raw: 7c 70 7c 71 7c 73 70 61 6e 7c 73 74 72 6f 6e 67 7c 73 74 79 6c 65 7c 74 61 62 6c 65 7c 74 62 6f 64 79 7c 74 64 7c 74 68 7c 74 72 7c 75 6c 29 24 2f 69 2c 68 3d 22 5f 68 74 6d 6c 35 73 68 69 76 22 2c 67 3d 30 2c 76 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 78 79 7a 3e 3c 2f 78 79 7a 3e 22 2c 75 3d 22 68 69 64 64 65 6e 22 69 6e 20 65 2c 6c 3d 31 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 76 61 72 20 65 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 72 65 74 75 72 Data Ascii: \|p\|q\|span\|strong\|style\|table\|tbody\|td\|th\|tr\|ul)$/i,h="_html5shiv",g=0,v={};!function(){try{var e=t.createElement("a");e.innerHTML="<xyz></xyz>",u="hidden"in e,l=1==e.childNodes.length\|\|function(){t.createElement("a");var e=t.createDocumentFragment();retur
2024-12-12 22:03:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49772	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:28 UTC	380	OUT	GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:28 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64ed75bb-76fe" Last-Modified: Tue, 29 Aug 2023 04:36:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1293451 Expires: Tue, 02 Dec 2025 22:03:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FmPZiSBqSg9rxEI3x7VKjU8g2FQRfwEtnCHvo2vrWPAdm4H%2B8FgiLsG3kCxeZ5D5jdUcQrVqju%2FHSi2qAJiCCIYM96YvtQfPHOOn2vZo768wTlbkiNDslGjrWCRjcsOHOuP60ln"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f11012f4d4a5e79-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:28 UTC	410	IN	Data Raw: 37 62 66 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf1/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 Data Ascii: rototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"nu
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: (e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 Data Ascii: n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|\|11
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f Data Ascii: ntains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 Data Ascii: ]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\\)\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|text
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 55 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 Data Ascii: t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&U(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{ret
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 Data Ascii: Element&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=ce.e
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 Data Ascii: tElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.querySelec
2024-12-12 22:03:28 UTC	1369	IN	Data Raw: 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 Data Ascii: esSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDocume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49776	78.46.22.9	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:29 UTC	630	OUT	GET /thumbs/search-icon-png/search-icon-png-5.png HTTP/1.1 Host: www.freeiconspng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:29 UTC	287	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 12 Dec 2024 22:03:29 GMT Content-Type: image/png Content-Length: 20947 Last-Modified: Mon, 06 Jul 2020 17:19:52 GMT Connection: close ETag: "5f035d38-51d3" Cache-Control: no-cache, must-revalidate Accept-Ranges: bytes
2024-12-12 22:03:29 UTC	16097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 20 00 49 44 41 54 78 9c ed bd 7f 90 1c d5 61 ef fb 39 67 66 47 ab d5 b2 2c 42 08 21 84 10 b2 2c 64 19 64 10 b2 c0 84 90 0d bb f1 25 4e e2 eb 8b 7f 24 31 76 1c e2 10 db c5 23 5c 5f ae 6f ca e5 a2 5c 94 cb cf 8f f2 75 f9 39 0e 26 84 10 c7 21 b1 1d c7 71 6c 3f c7 f1 75 84 2d 24 21 24 21 04 08 b1 08 21 84 58 0b 49 88 65 b5 2c ab dd d9 d9 99 73 de 1f dd 3d db 33 d3 33 d3 3d 3b d3 73 ba a7 4f 95 aa 60 b6 bb 3f 7d ba 7b ce 9c fe 7e cf 39 5f 81 cf 32 34 34 50 fc ef 2d 5b b6 06 da 27 c8 f6 5a 5b ff fd f0 c3 d1 67 08 d1 fa 6b 15 07 86 53 12 46 c2 08 9b 91 ae 77 a0 c1 c1 01 84 40 02 ce 97 41 f9 81 6b 6d ed 63 97 9a fb d8 27 2b c1 fa b2 d5 db de cd 70 be a0 f5 f6 Data Ascii: PNGIHDR@@ IDATxa9gfG,B!,dd%N$1v#\_o\u9&!ql?u-$!$!!XIe,s=33=;sO`?}{~9_244P-['Z[gkSFw@Akmc'+p
2024-12-12 22:03:29 UTC	4850	IN	Data Raw: 5c 60 e7 60 91 0d 46 0f ca 10 cd 9b 45 72 12 f8 36 96 46 f8 01 ac 2f ce 15 80 8c 90 51 10 55 c6 64 2a 95 fa d9 c2 85 0b ef 5b bd fa e2 3d 4b 96 9c 3b d9 24 81 5d 01 db 80 8f 4a 29 1f 92 52 ac 6e 71 3d 9a 7d ad 92 f0 f5 da 8c 8a 0b 1c f9 60 74 9a 67 78 34 ca 18 c7 72 1b 7f 08 bc 4f 08 f1 51 29 e5 26 21 e8 31 d8 28 88 22 43 01 c7 53 a9 d4 d6 de de 45 0f 5c 70 c1 b2 43 2b 56 2c 1f a7 05 02 7b 36 3b f3 d4 d3 4f 3f 73 fb f4 74 f6 2b 4a a9 75 11 bc 56 d7 93 84 af fb 62 d4 5d 0c 81 10 0d 0f f0 3f 8b 84 d6 19 1e 8d 30 14 30 3a 34 34 f0 f7 17 5d 74 e1 cd 99 4c e6 0e 21 c4 2f 94 52 ca 40 a3 20 8a 8c 09 e0 7f 77 77 77 df bc 71 e3 86 3b de f9 ce 8d 4f 5d 78 e1 f2 09 5a 24 b0 77 77 2f 48 5f 71 c5 86 9d 99 4c d7 27 94 52 9e c6 48 83 f5 00 42 b9 1f 52 ce 85 af 2f 37 cc Data Ascii: \``FEr6F/QUd*[=K;$]J)Rnq=}`tgx4rOQ)&!1("CSE\pC+V,{6;O?st+JuVb]?00:44]tL!/R@ wwwq;O]xZ$ww/H_qL'RHBR/7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49778	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:30 UTC	2000	OUT	GET /fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:30 UTC	1208	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:30 GMT Content-Type: image/png Content-Length: 17972 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4682 Last-Modified: Thu, 12 Dec 2024 20:45:28 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P0Kg4l73YXiGdI4sgEOzwN8BjaWrlfc6hmh1ddwTzXscqUr0CdbJj3ZcMxImY6V3vi69QVGJ%2B%2BV%2BfsYCQ3L%2FQhy%2FsFbbp%2BlbWe1YsRf2NW%2F3okr1Zir1c%2BXPUW80N%2BatwACK2mJwzwWe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11013afcb542cd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1627&min_rtt=1627&rtt_var=611&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2600&delivery_rate=1790312&cwnd=242&unsent_bytes=0&cid=83e4e0b8feaa5014&ts=455&x=0"
2024-12-12 22:03:30 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 3a 2c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f Data Ascii: PNGIHDR2QpHYsgR:,iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="ado
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 37 20 31 2e 30 30 30 30 30 30 2c 20 30 30 30 30 2f 30 30 2f 30 30 2d 30 30 3a 30 30 3a 30 30 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 6e 73 31 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 64 61 79 2e 63 6f 6d 2f 64 61 6d 2f 31 2e 30 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 Data Ascii: be:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c137 1.000000, 0000/00/00-00:00:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:ns1="http://www.day.com/dam/1.0" xmlns:tiff="http://ns.a
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 74 65 3d 22 32 30 31 37 2d 30 38 2d 32 31 54 31 36 3a 32 35 3a 30 39 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 37 2d 30 38 2d 32 31 54 31 36 3a 32 35 3a 30 39 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 37 2d 30 38 2d 32 31 54 31 36 3a 32 30 3a 34 38 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 64 63 3a 6d 6f 64 69 66 69 65 64 3d 22 32 30 31 37 2d 31 30 2d 30 37 54 31 34 3a 33 39 3a 33 33 2e 35 37 36 5a 22 0a 20 20 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 31 31 33 37 34 37 35 2d 63 Data Ascii: te="2017-08-21T16:25:09.000-04:00" xmp:ModifyDate="2017-08-21T16:25:09.000-04:00" xmp:CreateDate="2017-08-21T16:20:48.000-04:00" dc:format="image/png" dc:modified="2017-10-07T14:39:33.576Z" xmpMM:DocumentID="adobe:docid:photoshop:31137475-c
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49779	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:30 UTC	459	OUT	GET /fdx-pkgmsn/files/svg4everybody.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:30 UTC	1248	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:19 GMT ETag: W/"769-625d935b02f38-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4682 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fnL%2BVo8aFOxKiJ%2BxRUMrA1LKHybX4uBOf1CvncPPStkUr3dJXXRbZRvlJpZ%2FeaH2ONfSwqLYPqhzyBffv9hZAgfRSbqfMtSO5nqY7cxyamhHPTzaOF6fKfozq6EwOqYBvLlIMJ6QOT3c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11013bf9a54344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1644&min_rtt=1596&rtt_var=633&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1037&delivery_rate=1829573&cwnd=47&unsent_bytes=0&cid=92c9dd1025c35f5e&ts=453&x=0"
2024-12-12 22:03:30 UTC	121	IN	Data Raw: 37 36 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 76 67 34 65 76 65 72 79 62 6f 64 79 3d 62 28 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 Data Ascii: 769!function(a,b){"function"==typeof define&&define.amd?define([],function(){return a.svg4everybody=b()}):"object"==typ
2024-12-12 22:03:30 UTC	1369	IN	Data Raw: 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 3a 61 2e 73 76 67 34 65 76 65 72 79 62 6f 64 79 3d 62 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 29 7b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 65 3d 21 62 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 29 26 26 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 29 3b 65 26 26 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 2c 65 29 3b 66 6f 72 28 76 61 72 20 66 3d 63 2e 63 6c 6f 6e 65 4e 6f 64 65 Data Ascii: eof module&&module.exports?module.exports=b():a.svg4everybody=b()}(this,function(){function a(a,b,c){if(c){var d=document.createDocumentFragment(),e=!b.hasAttribute("viewBox")&&c.getAttribute("viewBox");e&&b.setAttribute("viewBox",e);for(var f=c.cloneNode
2024-12-12 22:03:30 UTC	414	IN	Data Raw: 64 2b 29 5c 62 2f 2c 6c 3d 77 69 6e 64 6f 77 2e 74 6f 70 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 6c 66 3b 66 3d 22 70 6f 6c 79 66 69 6c 6c 22 69 6e 20 67 3f 67 2e 70 6f 6c 79 66 69 6c 6c 3a 68 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 6a 29 7c 7c 5b 5d 29 5b 31 5d 3c 31 30 35 34 37 7c 7c 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 69 29 7c 7c 5b 5d 29 5b 31 5d 3c 35 33 37 7c 7c 6b 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 26 26 6c 3b 76 61 72 20 6d 3d 7b 7d 2c 6e 3d 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 73 65 74 54 Data Ascii: d+)\b/,l=window.top!==window.self;f="polyfill"in g?g.polyfill:h.test(navigator.userAgent)\|\|(navigator.userAgent.match(j)\|\|[])[1]<10547\|\|(navigator.userAgent.match(i)\|\|[])[1]<537\|\|k.test(navigator.userAgent)&&l;var m={},n=window.requestAnimationFrame\|\|setT
2024-12-12 22:03:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49781	78.46.22.9	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:31 UTC	388	OUT	GET /thumbs/search-icon-png/search-icon-png-5.png HTTP/1.1 Host: www.freeiconspng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:32 UTC	287	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 12 Dec 2024 22:03:31 GMT Content-Type: image/png Content-Length: 20947 Last-Modified: Mon, 06 Jul 2020 17:19:52 GMT Connection: close ETag: "5f035d38-51d3" Cache-Control: no-cache, must-revalidate Accept-Ranges: bytes
2024-12-12 22:03:32 UTC	16097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 20 00 49 44 41 54 78 9c ed bd 7f 90 1c d5 61 ef fb 39 67 66 47 ab d5 b2 2c 42 08 21 84 10 b2 2c 64 19 64 10 b2 c0 84 90 0d bb f1 25 4e e2 eb 8b 7f 24 31 76 1c e2 10 db c5 23 5c 5f ae 6f ca e5 a2 5c 94 cb cf 8f f2 75 f9 39 0e 26 84 10 c7 21 b1 1d c7 71 6c 3f c7 f1 75 84 2d 24 21 24 21 04 08 b1 08 21 84 58 0b 49 88 65 b5 2c ab dd d9 d9 99 73 de 1f dd 3d db 33 d3 33 d3 3d 3b d3 73 ba a7 4f 95 aa 60 b6 bb 3f 7d ba 7b ce 9c fe 7e cf 39 5f 81 cf 32 34 34 50 fc ef 2d 5b b6 06 da 27 c8 f6 5a 5b ff fd f0 c3 d1 67 08 d1 fa 6b 15 07 86 53 12 46 c2 08 9b 91 ae 77 a0 c1 c1 01 84 40 02 ce 97 41 f9 81 6b 6d ed 63 97 9a fb d8 27 2b c1 fa b2 d5 db de cd 70 be a0 f5 f6 Data Ascii: PNGIHDR@@ IDATxa9gfG,B!,dd%N$1v#\_o\u9&!ql?u-$!$!!XIe,s=33=;sO`?}{~9_244P-['Z[gkSFw@Akmc'+p
2024-12-12 22:03:32 UTC	4850	IN	Data Raw: 5c 60 e7 60 91 0d 46 0f ca 10 cd 9b 45 72 12 f8 36 96 46 f8 01 ac 2f ce 15 80 8c 90 51 10 55 c6 64 2a 95 fa d9 c2 85 0b ef 5b bd fa e2 3d 4b 96 9c 3b d9 24 81 5d 01 db 80 8f 4a 29 1f 92 52 ac 6e 71 3d 9a 7d ad 92 f0 f5 da 8c 8a 0b 1c f9 60 74 9a 67 78 34 ca 18 c7 72 1b 7f 08 bc 4f 08 f1 51 29 e5 26 21 e8 31 d8 28 88 22 43 01 c7 53 a9 d4 d6 de de 45 0f 5c 70 c1 b2 43 2b 56 2c 1f a7 05 02 7b 36 3b f3 d4 d3 4f 3f 73 fb f4 74 f6 2b 4a a9 75 11 bc 56 d7 93 84 af fb 62 d4 5d 0c 81 10 0d 0f f0 3f 8b 84 d6 19 1e 8d 30 14 30 3a 34 34 f0 f7 17 5d 74 e1 cd 99 4c e6 0e 21 c4 2f 94 52 ca 40 a3 20 8a 8c 09 e0 7f 77 77 77 df bc 71 e3 86 3b de f9 ce 8d 4f 5d 78 e1 f2 09 5a 24 b0 77 77 2f 48 5f 71 c5 86 9d 99 4c d7 27 94 52 9e c6 48 83 f5 00 42 b9 1f 52 ce 85 af 2f 37 cc Data Ascii: \``FEr6F/QUd*[=K;$]J)Rnq=}`tgx4rOQ)&!1("CSE\pC+V,{6;O?st+JuVb]?00:44]tL!/R@ wwwq;O]xZ$ww/H_qL'RHBR/7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49783	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:31 UTC	566	OUT	GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cove.richquickcart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:32 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65d4c5f6-40b9" Last-Modified: Tue, 20 Feb 2024 15:32:06 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1164728 Expires: Tue, 02 Dec 2025 22:03:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=juO9h9QBIgl8hD%2Buk1BEO4hf9awtPGttW9NPeKsEEJDSwwCqx9ucRWvjuqWEMRcwZSeq1SJqXxhTc4B6ZY3KySEi2xjeODjzfQkdP0GrlHm0IvEPZE92pYsrFR930dXDhk4ykIyi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f110144fc95c454-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:32 UTC	414	IN	Data Raw: 33 39 37 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 3978/! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 72 65 22 5d 2c 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 65 28 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 2c 7b 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 3a 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 7d 29 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 29 7b 63 6f 6e 73 74 20 73 3d 4f 62 6a 65 63 74 2e 67 65 Data Ascii: re"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.ge
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 75 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 6f 6f 74 4e Data Ascii: odeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),u=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootN
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f 21 69 26 26 73 3f 74 5b 6e 2d 31 5d 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 73 26 26 28 6f 3d 28 6f 2b 6e 29 25 6e 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 6e 2d 31 29 29 5d 29 7d 2c 41 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 45 3d 2f 5c 2e 2e 2a 2f 2c 43 3d 2f 3a 3a 5c 64 2b 24 2f 2c 54 3d 7b 7d 3b 6c 65 74 20 6b 3d 31 3b 63 6f 6e 73 74 20 24 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 53 3d 6e 65 77 20 53 65 74 28 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 6c 69 63 6b 22 2c 22 6d 6f 75 73 65 75 70 22 Data Ascii: o=t.indexOf(e);return-1===o?!i&&s?t[n-1]:t[0]:(o+=i?1:-1,s&&(o=(o+n)%n),t[Math.max(0,Math.min(o,n-1))])},A=/[^.](?=\..)\.\|./,E=/\../,C=/::\d+$/,T={};let k=1;const $={mouseenter:"mouseover",mouseleave:"mouseout"},S=new Set(["click","dblclick","mouseup"
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 6e 29 3b 63 6f 6e 73 74 20 64 3d 4c 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 41 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 6e 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 63 6f 6e 73 74 20 61 20 6f 66 20 6f 29 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 46 28 6e 2c 7b 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 3a 72 7d 29 2c 73 Data Ascii: ,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=L(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.querySelectorAll(e);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(const a of o)if(a===r)return F(n,{delegateTarget:r}),s
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 28 6e 29 2c 6f 3d 21 6e 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 6e 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 46 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 6e 26 26 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 28 Data Ascii: (n),o=!n.isPropagationStopped(),r=!n.isImmediatePropagationStopped(),a=n.isDefaultPrevented());const l=F(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPrevented&&n&&n.preventDefault(),l}};function F(
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 65 2c 22 63 6f 6e 66 69 67 22 29 3a 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 2c 2e 2e 2e 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 65 29 3a 7b 7d 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: figAfterMerge(t),this._typeCheckConfig(t),t}_configAfterMerge(t){return t}_mergeConfigObj(t,e){const i=l(e)?B.getDataAttribute(e,"config"):{};return{...this.constructor.Default,..."object"==typeof i?i:{},...l(e)?B.getDataAttributes(e):{},..."object"==type
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 72 6e 60 2e 24 7b 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 7d 60 7d 73 74 61 74 69 63 20 65 76 65 6e 74 4e 61 6d 65 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 24 7b 74 68 69 73 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 7d 7d 63 6f 6e 73 74 20 52 3d 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 21 69 7c 7c 21 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 Data Ascii: rn`.${this.DATA_KEY}`}static eventName(t){return`${t}${this.EVENT_KEY}`}}const R=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 56 3d 28 74 2c 65 3d 22 68 69 64 65 22 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 60 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 24 7b 74 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 2c 73 3d 74 2e 4e 41 4d 45 3b 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 60 5b 64 61 74 61 2d 62 73 2d 64 69 73 6d 69 73 73 3d 22 24 7b 73 7d 22 5d 60 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5b 22 41 22 2c 22 41 52 45 41 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 29 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 64 28 74 68 69 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 4b 2e 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 68 69 73 29 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 60 2e 24 7b 73 7d 60 29 Data Ascii: V=(t,e="hide")=>{const i=`click.dismiss${t.EVENT_KEY}`,s=t.NAME;j.on(document,i,`[data-bs-dismiss="${s}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),d(this))return;const n=K.getElementFromSelector(this)\|\|this.closest(`.${s}`)
2024-12-12 22:03:32 UTC	1369	IN	Data Raw: 20 5a 3d 22 2e 62 73 2e 73 77 69 70 65 22 2c 74 74 3d 60 74 6f 75 63 68 73 74 61 72 74 24 7b 5a 7d 60 2c 65 74 3d 60 74 6f 75 63 68 6d 6f 76 65 24 7b 5a 7d 60 2c 69 74 3d 60 74 6f 75 63 68 65 6e 64 24 7b 5a 7d 60 2c 73 74 3d 60 70 6f 69 6e 74 65 72 64 6f 77 6e 24 7b 5a 7d 60 2c 6e 74 3d 60 70 6f 69 6e 74 65 72 75 70 24 7b 5a 7d 60 2c 6f 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 7d 2c 72 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e Data Ascii: Z=".bs.swipe",tt=`touchstart${Z}`,et=`touchmove${Z}`,it=`touchend${Z}`,st=`pointerdown${Z}`,nt=`pointerup${Z}`,ot={endCallback:null,leftCallback:null,rightCallback:null},rt={endCallback:"(function\|null)",leftCallback:"(function\|null)",rightCallback:"(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49787	185.15.58.240	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	662	OUT	GET /wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:32 UTC	1060	IN	HTTP/1.1 200 OK content-type: image/webp content-disposition: inline;filename=UTF-8''Hamburger_icon.svg.webp last-modified: Tue, 20 Aug 2024 16:10:13 GMT content-length: 1228 date: Thu, 12 Dec 2024 00:19:24 GMT server: envoy etag: 485843245e3150ba9a0e75fc9c9fcddd age: 78247 x-cache: cp6003 hit, cp6003 hit/142 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp6003" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2024-12-12 22:03:32 UTC	1228	IN	Data Raw: 52 49 46 46 c4 04 00 00 57 45 42 50 56 50 38 4c b7 04 00 00 2f 1f c3 c7 10 a0 1c 49 92 23 49 52 fe b9 de c3 37 2b 91 0f 1f 60 11 90 6d db 36 e5 d8 b6 6d 27 ad e2 1f c4 b6 cd 6f 28 57 6c 3b 69 ba eb 9e 6d a7 6c 1b e1 81 03 49 72 dc a6 2f f2 47 a6 2e 81 04 70 a8 8d 98 e4 7f e5 bf fc 97 ff f2 5f fe cb 7f f9 2f ff e5 bf fc 97 ff f2 5f fe cb 7f f9 2f ff e5 bf fc 97 ff f2 5f fe cb 7f f9 2f ff e5 bf fc 97 ff be 6a ca 7f dc a1 d5 ea b2 e5 c4 3d 1a b9 2f 30 ab f2 45 8e e6 de 89 4d 5d 6a a1 b9 bf 17 1f 05 a6 d1 c1 d4 0a df aa 46 c1 0f 25 16 c5 1b 98 5c 79 45 16 f3 44 3c 74 38 07 c3 2b 67 da 9f f7 1f 9e 20 c3 74 60 7c c5 68 5a e0 cb 08 35 cc 00 06 58 be ad 88 7a 15 f6 ba fc 80 11 96 1f c3 9c 9e 44 06 36 f8 9f 35 b6 8f d1 54 32 7d 0e 21 0e c0 18 cb de 6b 3e 66 96 49 Data Ascii: RIFFWEBPVP8L/I#IR7+`m6m'o(Wl;imlIr/G.p_/_/_/j=/0EM]jF%\yED<t8+g t`\|hZ5XzD65T2}!k>fI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49789	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	1992	OUT	GET /fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1198	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: image/png Content-Length: 27217 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4684 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KYRlKgiZclmXKIGmk9t9mm0uJEaCGq9YXoFH%2B2hrt72qxu2NuwNZda%2Fz9f%2BjzydvWs7GfbBvg%2Fyqp1UQ8qXN8Vy5jVnQenddsHA49QgpPwYC3TSoMizJX8aAqJRpYx6T6QleRkUsRMkm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014b3f5c429d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1603&min_rtt=1600&rtt_var=607&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2592&delivery_rate=1792510&cwnd=246&unsent_bytes=0&cid=6b57b3085a7c9d66&ts=516&x=0"
2024-12-12 22:03:33 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 54 14 57 17 9e b6 bd 2f 48 b5 f7 96 18 63 8d 25 c6 d8 10 5b 6c 58 22 46 41 25 f6 de f5 0f 89 2d a2 62 c7 58 51 63 2f 18 15 bb c6 1a 63 94 58 92 60 34 76 45 50 3a db 77 67 67 e6 cf 1d f6 71 56 23 2c 2a a2 8b bc 73 38 c0 ee 94 d7 ee bb fd bb 38 56 dc de e8 0c 44 47 47 ab b3 b2 b2 44 8f 1f 3f 56 3e 79 f2 84 4a 4f 4f 27 33 32 32 e0 b7 c4 Data Ascii: PNGIHDRXsRGB IDATx^]TW/Hc%[lX"FA%-bXQc/cX`4vEP:wggqV#,*s88VDGGD?V>yJOO'322
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 68 34 0a cc 66 33 49 d3 34 61 b7 db 09 47 47 38 1c c7 19 8a a2 18 1c c7 59 a5 52 c9 28 14 0a 5a a9 54 da d5 6a 35 e3 e5 e5 85 79 7b 7b b3 a5 4a 95 32 48 24 12 ba 56 ad 5a 29 75 eb d6 a5 df e8 20 de e3 87 e3 ef f1 d8 0b 64 e8 37 6e dc 50 c0 e6 bf 79 f3 a6 fc cf 3f ff 94 df ba 75 ab ec a3 47 8f 3e 4a 4a 4a fa d0 60 30 94 97 48 24 26 9b cd a6 a0 69 5a 88 61 18 89 e3 38 47 92 24 cd 30 8c 90 e3 38 4a 24 12 e9 58 96 15 b2 2c 2b e2 38 0e ae c1 70 1c b7 11 04 c1 ff d8 6c 36 39 fc 06 62 71 dc 03 97 c0 33 38 8a a2 2c 56 ab 95 50 28 14 f7 bc bd bd 2f 97 2e 5d fa 6a e5 ca 95 1f 54 af 5e dd f0 c1 07 1f e8 4a 96 2c a9 ab 54 a9 92 ae 40 06 fa 9e 3e a4 98 40 5e 62 e1 39 8e c3 2f 5e bc a8 fd e5 97 5f 34 e7 ce 9d d3 dc be 7d bb ee dd bb 77 03 68 9a 2e 69 b5 5a 7d 31 0c 93 Data Ascii: h4f3I4aGG8YR(ZTj5y{{J2H$VZ)u d7nPy?uG>JJJ`0H$&iZa8G$08J$X,+8pl69bq38,VP(/.]jT^J,T@>@^b9/^_4}wh.iZ}1
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 21 a0 4d ea 6c b6 85 cf 80 00 9e 3f a1 9d 39 8e f3 09 fd bc 32 8f c4 38 67 31 cc 59 d1 86 eb 41 44 42 e2 19 22 56 e7 e7 40 ff 9c 09 02 71 1e 44 80 b0 c1 9d 39 d6 f3 fe 17 17 1c 24 47 77 81 e7 48 a5 52 18 6f 86 c9 04 46 30 ea be b7 b7 77 6c 50 50 d0 e6 be 7d fb 3e ae 5d bb 76 66 51 24 94 22 49 20 13 27 4e 2c bd 6e dd ba 0e 3a 9d ae a7 d5 6a fd 90 24 49 81 54 2a 95 c0 a6 41 27 a6 4c 26 e3 65 ee 94 94 94 3c d7 15 29 c9 ce 16 28 e7 1b d0 06 84 ef e1 b4 47 e2 10 84 8a 08 04 a0 ce d8 c0 1f 41 72 1c 07 a2 1c 98 87 d1 0f 84 94 80 d9 95 05 c7 1d 41 10 10 5a e2 90 90 78 93 31 ba 87 02 f5 c5 f1 03 5e 46 c2 61 01 a3 09 82 c0 c1 ec cc 30 8c 00 1c 85 ce 1c 02 89 54 40 c0 ce 3a 89 f3 78 d0 21 91 d7 04 c0 1c 59 ad 56 0c cc d5 30 36 b1 58 cc 9b 96 ad 56 ab 11 3e 93 4a a5 Data Ascii: !Ml?928g1YADB"V@qD9$GwHRoF0wlPP}>]vfQ$"I 'N,n:j$IT*A'L&e<)(GArAZx1^Fa0T@:x!YV06XV>J
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 0c 18 08 f8 c3 04 71 11 a4 dc c3 ff c0 a9 ad 74 de 2a 06 cb 30 98 9f bf bf 29 f1 f1 63 5a a5 d1 9c ff e6 db e9 13 7b 77 ef 7d d7 c7 c7 c7 2d c2 57 dc 82 40 20 29 69 d2 b4 69 75 f6 ff b4 27 5c 24 16 f9 0b 04 c2 d2 3a 9d 4e c8 8b 52 96 bc 95 4c 24 43 03 d7 80 53 10 16 1c b8 08 8e e3 46 90 97 6d 36 1b 28 96 d7 05 02 c1 81 ba 75 eb 9e 0e 0a 0a 4a 1d 3d 7a b4 db 73 8a 97 21 14 b8 16 74 97 93 27 4f 7a c7 c4 c4 d4 88 8b 8b fb 92 a6 e9 26 42 21 04 2e 93 72 ab d5 aa 00 9d 43 2e 97 f3 e2 14 88 af 30 87 d0 5c 70 10 de 20 60 a7 69 4c 0b 31 5f b4 ed b1 41 6f 30 77 0f ea 36 61 e2 b8 89 17 ea d6 ad 9b f4 b2 fd 2c ec eb df 79 02 d9 b4 69 53 c9 f0 ef be 0b ba 7d eb 9f 91 02 91 50 81 63 b8 06 05 e7 01 67 e0 98 ec 7c 89 dc 1a 10 05 2c 28 22 14 82 20 68 92 24 33 c1 ea 84 61 Data Ascii: qt*0)cZ{w}-W@ )iiu'\$:NRL$CSFm6(uJ=zs!t'Oz&B!.rC.0\p `iL1_Ao0w6a,yiS}Pcg\|,(" h$3a
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 5d 4e 9e 3e 35 9b 24 c9 72 14 45 01 ba 20 cf 7e 51 96 1d c8 ae d0 60 42 81 ab 80 f5 03 71 10 f8 dc c3 d3 33 23 2d 25 15 94 f1 bd e5 ca 95 5b be 64 c9 92 db 1d 3a 74 c8 3b 45 b0 90 37 ce fb f6 ba cd bb 77 97 99 3e 71 7c cf 7b f7 ee 0f e2 58 d6 4f a3 d5 0a 33 d2 d3 79 b4 3c e0 fa c0 41 80 a3 f0 f9 35 a0 b8 73 18 4f 20 f0 3f 88 66 60 ad 74 84 b5 80 03 37 b3 79 f3 e6 df ed da b5 6b c7 db e2 24 6f 8d 40 6a d5 aa 15 fc d7 5f 7f fd 0f 27 09 2f b1 58 ac 84 c9 01 8e 00 2c 99 47 e5 a0 69 0c ac 56 c0 7e b3 32 33 79 e5 1c 6c ea 4f 92 92 f8 bf 55 2a 55 72 52 62 a2 81 c0 89 15 23 47 8e dc ba 70 e1 42 70 fc 15 b7 77 60 06 20 9b 73 de a2 45 d5 d7 af 59 b3 00 c3 b8 7a be 7e 7e a4 4e a7 93 02 f7 f0 f3 f7 e7 fd 52 06 bd 9e 97 06 c0 0a 09 22 17 3a 00 91 38 0d 52 02 c7 71 06 Data Ascii: ]N>5$rE ~Q`Bq3#-%[d:t;E7w>q\|{XO3y<A5sO ?f`t7yk$o@j_'/X,GiV~23ylOU*UrRb#GpBpw` sEYz~~NR":8Rq
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 8b a2 a8 a7 14 45 a5 97 29 53 66 41 4c 4c cc f6 a2 c8 39 32 33 33 35 89 89 89 9e 4f 9e 3c 91 3e 7c f8 90 32 99 4c 82 f4 f4 74 a1 c1 60 80 68 02 1c 8a 76 6a 34 1a 2b 14 e9 f4 f7 f7 a7 01 5c ce d7 d7 37 cb db db bb c8 e9 5f 7f fc f1 87 a6 43 a7 4e 21 49 49 89 fd e5 72 79 c9 f4 b4 34 15 98 80 79 5d d4 61 d5 04 5d 15 9c 8c c0 3d 78 3d d5 6a e5 89 04 f6 8d 51 6f c8 f2 f5 f5 5d 76 e1 c2 85 05 65 ca 94 29 70 f3 6f 81 13 c8 bd 7b f7 c4 9d ba 74 e9 ff c7 d5 2b 93 85 22 51 49 c0 93 02 f3 1d 58 a7 40 9e 44 15 97 80 53 80 3e 42 e0 04 2f 62 81 92 e6 e5 e5 05 50 31 19 e5 cb 97 9f b5 75 eb d6 dd 45 85 38 6e de bc e9 ff eb af bf aa af 5d bb e6 fb d7 5f 7f 7d 7c eb d6 ad da 8f 1f 3f 6e 4c d3 b4 12 c7 71 80 18 e5 21 45 1d f0 a2 b0 07 20 fa 18 a0 49 f9 3a 84 24 49 9a 4a 94 Data Ascii: E)SfALL92335O<>\|2Lt`hvj4+\7_CN!IIry4y]a]=x=jQo]ve)po{t+"QIX@DS>B/bP1uE8n]_}\|?nLq!E I:$IJ
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 3a 82 20 2e 36 6e dc 78 fe 9c 39 73 ae 34 6c d8 d0 ad c0 a3 a7 4d 9b 56 6e e6 ac 99 3f f8 fa f9 55 67 18 a6 64 f2 d3 a7 bc 79 d7 31 3e 5e a7 05 11 0b e6 1d fe 06 02 71 44 63 24 2a 14 8a 3d 7b f6 ec 09 07 6b df eb cc ff 6b 11 08 88 56 c1 5f 05 87 c4 5d 8a 9b 2e 95 c9 14 d0 39 30 e7 42 f8 32 84 0d 80 07 14 e5 8e 23 27 8f 23 10 2d 2d 2b 33 33 7d d0 90 41 3d 57 2d 5f 75 f9 75 06 50 d8 f7 6e de bc 59 f3 bf ff fd af d3 9d 3b 77 26 10 04 51 5a ad 56 cb 20 42 80 b7 d6 09 85 bc 9f 07 39 3e c1 e3 9b 9a fa 5a eb e3 72 78 8e f8 24 fe 30 42 d5 ad 50 49 6a c7 cd a9 16 8b 25 cb cb cb 2b 72 d9 b2 65 3b 83 82 82 dc ca 00 12 12 16 52 6b dd aa 75 6b d4 1a 4d 39 9d 4e e7 01 3e 34 70 1a c2 1c c3 5c 43 3e 09 e8 b6 90 95 08 d1 bf 40 24 90 33 a4 d7 eb 9f b6 6a d5 6a e0 d1 a3 47 Data Ascii: : .6nx9s4lMVn?Ugdy1>^qDc$*={kkV_].90B2#'#--+33}A=W-_uuPnY;w&QZV B9>Zrx$0BPIj%+re;RkukM9N>4p\C>@$3jjG
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: ad 56 83 5c 2e 9b fd e7 b5 3f 17 fb f9 f9 e5 1b 5c f0 a5 56 b7 47 8f 1e 0d b7 6f df be 47 26 93 f9 a0 62 98 2e ea 6c 5b 19 86 b1 fa fb fb 2f 3b 73 e6 4c 44 41 c5 c7 bc da b4 e6 ff ae 16 2d 5a b4 3c 71 e2 c4 0f 2a 95 aa 44 56 56 96 12 89 29 28 a4 01 95 95 e6 f5 ab 77 5c c4 42 25 d3 9c fb 0e 9c 04 ac 40 60 59 d4 a8 35 e6 8c 8c 8c b4 7a f5 ea 8d bc 74 e9 52 4c fe 67 e9 ed 5d 09 46 92 8a 15 2b 06 03 4e 16 41 91 6a a8 aa 90 5b 6f 10 a6 9a 5a a3 31 67 66 64 3c 19 36 6a 58 a7 65 0b 97 fd 99 df de e7 9b 40 7e fb ed 37 8f 86 0d 1b 6e f6 f4 f4 84 ca a8 5e 28 e3 cb 05 07 d1 4b 24 92 8b 33 66 cc 18 34 7a f4 e8 57 b6 45 e7 77 30 05 71 dd cc 99 33 cb 4c 9f 3e 7d 93 4a a5 aa 94 95 95 c5 73 49 e4 11 e7 ad 41 56 2b 6f 56 84 89 07 c2 a1 99 77 bb 6a 1b 4a 67 06 51 03 9c b6 Data Ascii: V\.?\VGoG&b.l[/;sLDA-Z<q*DVV)(w\B%@`Y5ztRLg]F+NAj[oZ1gfd<6jXe@~7n^(K$3f4zWEw0q3L>}JsIAV+oVwjJgQ
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 2a 55 96 2e 2b eb ea de 9f f6 f6 ee d4 a9 53 ae 51 e5 b9 12 08 50 65 d3 a6 4d bb fc fa eb af ab a5 52 a9 0a 64 37 60 51 3c 42 a2 63 42 91 a8 05 a2 88 c3 5f 60 aa 5a b5 ea d2 5d bb 76 45 d4 a8 51 c3 2d 70 74 c7 8e 1d 5b 75 c1 82 05 87 54 2a 95 8f 4e a7 13 23 3f 01 8c 13 58 33 12 3d 8a aa 88 05 09 47 b0 9e 28 54 1e c6 29 93 c9 00 45 fd fe e4 c9 93 bb cd 99 33 e7 9d 29 c9 9c d7 e1 79 f2 e4 49 6a d8 c8 61 dd ae c7 ff 1d 29 12 89 bc 2d 66 33 01 79 48 3c b6 96 23 15 c3 51 85 97 4f ac 52 ab d5 6c 46 7a 7a 72 cf 1e 3d bf d8 b6 6d db 6f b9 3d 3b 57 02 39 79 f2 a4 ba 79 f3 e6 1b 35 1a 4d e3 8c 8c 0c 2d 10 03 72 94 21 27 21 b0 30 60 67 40 38 d9 d6 35 b3 65 e4 c8 91 ad 17 2f 5e 7c a9 b0 39 c1 ab be af 42 85 0a 5f 3d 7c f8 70 11 c3 30 6a c4 11 81 e0 81 0d 23 fd 2a af Data Ascii: U.+SQPeMRd7`Q<BcB_`Z]vEQ-pt[uTN#?X3=G(T)E3)yIja)-f3yH<#QORlFzzr=mo=;W9yy5M-r!'!0`g@85e/^\|9B_=\|p0j#*
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: f8 19 02 99 3c 79 72 f5 b9 73 e7 c6 90 24 59 09 4a 82 a1 60 2f 84 8a 81 02 13 1d f5 18 58 ab d5 9a d5 bd 7b f7 8e ee 02 c6 e0 3c ad 5f 7c f1 45 fd 9f 7e fa e9 10 41 91 da fc 4d 77 11 bd ca 05 81 30 0c 93 d9 be 7d fb ae fb f7 ef ff d9 dd 66 a0 4f 9f 3e 15 37 6d da 74 48 28 14 fa 32 0c 23 43 29 1a 28 ac 06 f6 31 1c fe f0 39 41 10 26 96 65 af 2f 5e bc b8 9b b3 34 f4 0c 81 34 6e dc 38 08 8a 21 62 18 56 12 d5 b6 40 54 e6 f4 20 54 f7 c2 4e 92 e4 ad 0d 1b 36 b4 fd f2 cb 2f dd 4a bc 82 85 6e d3 a6 4d d3 23 47 8e ec 73 24 fd bb db da 17 5c 7f 5d 10 88 dd 6e 37 b4 6d db 36 e8 d0 a1 43 87 0a ee a5 85 f3 a4 2d 5b b6 78 06 07 07 6f 62 18 a6 b9 48 24 82 02 a9 3c f7 80 06 d2 10 e2 24 0e 88 5c ce 66 b3 3d e9 dd bb 77 e0 96 2d 5b 72 02 6d 73 08 04 40 b9 6a d5 aa b5 ce 60 Data Ascii: <yrs$YJ`/X{<_\|E~AMw0}fO>7mtH(2#C)(19A&e/^44n8!bV@T TN6/JnM#Gs$\]n7m6C-[xobH$<$\f=w-[rms@j`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49790	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	1821	OUT	GET /fdx-pkgmsn/files/icon-box.svg HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1230	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: image/svg+xml Content-Length: 1182 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:12 GMT ETag: "49e-625d9354ed582" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4684 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2IxQTI05CIh9yxYHsWH9SSeo86FSSXZ%2BAmOx2fRHmQsugSYE87Wn4iti%2BI%2FzAI4kn9rLxnwuDSORxv0FH5VEhaBTgtXrhNaS%2F7WjC2pV0kFWNUXDcKzc2HEOi1LnF7XDaWpmuvtF%2Bm7U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014cae914361-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1771&min_rtt=1705&rtt_var=772&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2399&delivery_rate=1305319&cwnd=221&unsent_bytes=0&cid=ec969f643f6e83e7&ts=462&x=0"
2024-12-12 22:03:33 UTC	139	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 41 39 38 32 35 38 22 20 64 3d 22 4d 34 39 2e 36 35 35 20 30 68 2d 33 39 2e 33 31 4c 30 20 31 36 2e 35 35 32 56 36 30 68 36 30 56 31 36 2e 35 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="60" height="60"><g fill="none"><path fill="#A98258" d="M49.655 0h-39.31L0 16.552V60h60V16.55
2024-12-12 22:03:33 UTC	1043	IN	Data Raw: 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 41 41 45 38 36 22 20 64 3d 22 4d 31 30 2e 33 34 35 20 30 4c 30 20 31 36 2e 35 35 32 68 36 30 4c 34 39 2e 36 35 35 20 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 38 42 31 38 42 22 20 64 3d 22 4d 33 34 2e 31 33 38 20 35 35 2e 38 36 32 4c 33 30 20 35 31 2e 37 32 34 6c 2d 34 2e 31 33 38 20 34 2e 31 33 38 2d 32 2e 30 36 39 2d 32 2e 30 36 39 56 36 30 68 31 32 2e 34 31 34 76 2d 36 2e 32 30 37 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 38 44 35 42 32 22 20 64 3d 22 4d 32 30 2e 36 39 20 33 31 2e 30 33 34 68 31 38 2e 36 32 31 76 31 36 2e 35 35 32 48 32 30 2e 36 39 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 34 43 33 41 35 22 20 64 3d 22 4d 33 31 2e 30 33 34 20 34 32 2e 34 31 Data Ascii: 2z"/><path fill="#DAAE86" d="M10.345 0L0 16.552h60L49.655 0z"/><path fill="#D8B18B" d="M34.138 55.862L30 51.724l-4.138 4.138-2.069-2.069V60h12.414v-6.207z"/><path fill="#E8D5B2" d="M20.69 31.034h18.621v16.552H20.69z"/><path fill="#D4C3A5" d="M31.034 42.41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49792	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	1775	OUT	GET /js/fingerprintjs2/1.5.0/fingerprint2.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1254	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 25 Oct 2023 20:20:19 GMT ETag: W/"870d-608902f2762e1-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4903 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a937at3KFNFt4o5uryZ47yiGjEDQYXE8BFXEXhqaFZTAQg7wr266sG%2BVyqviPQhF%2FwbpJaFS%2B6Z7hX9CfP0%2BN5yUH4YFmg3tWUZfZ9YoWwdRROHwHl83e0n3%2BDDv0Gq9iXOHD8uRQNSb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014cab810f81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1586&rtt_var=610&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2353&delivery_rate=1771844&cwnd=239&unsent_bytes=0&cid=05f775987447d6b7&ts=457&x=0"
2024-12-12 22:03:33 UTC	115	IN	Data Raw: 37 62 39 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 Data Ascii: 7b92!function(e,t,i){"use strict";"function"==typeof define&&define.amd?define(i):"undefined"!=typeof module&&mod
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 29 3a 74 2e 65 78 70 6f 72 74 73 3f 74 2e 65 78 70 6f 72 74 73 3d 69 28 29 3a 74 5b 65 5d 3d 69 28 29 7d 28 22 46 69 6e 67 65 72 70 72 69 6e 74 32 22 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 27 74 68 69 73 27 20 69 73 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 Data Ascii: ule.exports?module.exports=i():t.exports?t.exports=i():t[e]=i()}("Fingerprint2",this,function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(e,t){var i;if(null==this)throw new TypeError("'this' is null or undefined");var a=Objec
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 70 6c 75 67 69 6e 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 63 61 6e 76 61 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 77 65 62 67 6c 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 61 64 42 6c 6f 63 6b 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 4c 61 6e 67 75 61 67 65 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 52 65 73 6f 6c 75 74 69 6f 6e 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 4f 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 42 72 6f 77 73 65 72 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 74 6f 75 63 68 53 75 70 70 6f 72 74 4b 65 79 28 74 29 3b 76 61 72 20 69 3d 74 68 69 73 3b 74 68 69 73 2e 66 6f 6e 74 73 4b 65 79 28 74 2c 66 75 6e Data Ascii: ey(t),t=this.pluginsKey(t),t=this.canvasKey(t),t=this.webglKey(t),t=this.adBlockKey(t),t=this.hasLiedLanguagesKey(t),t=this.hasLiedResolutionKey(t),t=this.hasLiedOsKey(t),t=this.hasLiedBrowserKey(t),t=this.touchSupportKey(t);var i=this;this.fontsKey(t,fun
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 65 65 6e 2e 68 65 69 67 68 74 5d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 26 26 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 74 7d 29 2c 65 7d 2c 61 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 3f 65 3a 74 68 69 73 2e 67 65 74 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 28 65 29 7d 2c 67 65 74 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 Data Ascii: een.height],"undefined"!=typeof t&&e.push({key:"resolution",value:t}),e},availableScreenResolutionKey:function(e){return this.options.excludeAvailableScreenResolution?e:this.getAvailableScreenResolution(e)},getAvailableScreenResolution:function(e){var t;r
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 64 61 74 61 62 61 73 65 22 2c 76 61 6c 75 65 3a 31 7d 29 2c 65 7d 2c 63 70 75 43 6c 61 73 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 43 70 75 43 6c 61 73 73 7c 7c 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 63 70 75 5f 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 67 65 74 4e 61 76 69 67 61 74 6f 72 43 70 75 43 6c 61 73 73 28 29 7d 29 2c 65 7d 2c 70 6c 61 74 66 6f 72 6d 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 50 6c 61 74 66 6f 72 6d 7c 7c 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 6e 61 76 69 67 61 74 6f 72 5f 70 6c 61 74 66 6f 72 6d 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 67 65 74 Data Ascii: database",value:1}),e},cpuClassKey:function(e){return this.options.excludeCpuClass\|\|e.push({key:"cpu_class",value:this.getNavigatorCpuClass()}),e},platformKey:function(e){return this.options.excludePlatform\|\|e.push({key:"navigator_platform",value:this.get
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 4a 73 46 6f 6e 74 73 3f 74 68 69 73 2e 66 6c 61 73 68 46 6f 6e 74 73 4b 65 79 28 65 2c 74 29 3a 74 68 69 73 2e 6a 73 46 6f 6e 74 73 4b 65 79 28 65 2c 74 29 7d 2c 66 6c 61 73 68 46 6f 6e 74 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 46 6c 61 73 68 46 6f 6e 74 73 3f 74 28 65 29 3a 74 68 69 73 2e 68 61 73 53 77 66 4f 62 6a 65 63 74 4c 6f 61 64 65 64 28 29 26 26 74 68 69 73 2e 68 61 73 4d 69 6e 46 6c 61 73 68 49 6e 73 74 61 6c 6c 65 64 28 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 77 66 50 61 74 68 3f 74 28 65 29 3a 76 6f 69 64 20 74 68 Data Ascii: n this.options.excludeJsFonts?this.flashFontsKey(e,t):this.jsFontsKey(e,t)},flashFontsKey:function(e,t){return this.options.excludeFlashFonts?t(e):this.hasSwfObjectLoaded()&&this.hasMinFlashInstalled()?"undefined"==typeof this.options.swfPath?t(e):void th
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 65 62 75 63 68 65 74 20 4d 53 22 2c 22 56 65 72 64 61 6e 61 22 2c 22 57 69 6e 67 64 69 6e 67 73 22 2c 22 57 69 6e 67 64 69 6e 67 73 20 32 22 2c 22 57 69 6e 67 64 69 6e 67 73 20 33 22 5d 2c 6e 3d 5b 22 41 62 61 64 69 20 4d 54 20 43 6f 6e 64 65 6e 73 65 64 20 4c 69 67 68 74 22 2c 22 41 63 61 64 65 6d 79 20 45 6e 67 72 61 76 65 64 20 4c 45 54 22 2c 22 41 44 4f 42 45 20 43 41 53 4c 4f 4e 20 50 52 4f 22 2c 22 41 64 6f 62 65 20 47 61 72 61 6d 6f 6e 64 22 2c 22 41 44 4f 42 45 20 47 41 52 41 4d 4f 4e 44 20 50 52 4f 22 2c 22 41 67 65 6e 63 79 20 46 42 22 2c 22 41 68 61 72 6f 6e 69 22 2c 22 41 6c 62 65 72 74 75 73 20 45 78 74 72 61 20 42 6f 6c 64 22 2c 22 41 6c 62 65 72 74 75 73 20 4d 65 64 69 75 6d 22 2c 22 41 6c 67 65 72 69 61 6e 22 2c 22 41 6d 61 7a 6f 6e 65 20 Data Ascii: ebuchet MS","Verdana","Wingdings","Wingdings 2","Wingdings 3"],n=["Abadi MT Condensed Light","Academy Engraved LET","ADOBE CASLON PRO","Adobe Garamond","ADOBE GARAMOND PRO","Agency FB","Aharoni","Albertus Extra Bold","Albertus Medium","Algerian","Amazone
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 61 72 64 20 53 45 22 2c 22 43 68 61 6c 6b 64 75 73 74 65 72 22 2c 22 43 68 61 72 6c 65 73 77 6f 72 74 68 22 2c 22 43 68 61 72 74 65 72 20 42 64 20 42 54 22 2c 22 43 68 61 72 74 65 72 20 42 54 22 2c 22 43 68 61 75 63 65 72 22 2c 22 43 68 65 6c 74 68 6d 49 54 43 20 42 6b 20 42 54 22 2c 22 43 68 69 6c 6c 65 72 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 43 6c 6f 69 73 74 65 72 42 6c 61 63 6b 20 42 54 22 2c 22 43 6f 63 68 69 6e 22 2c 22 43 6f 6c 6f 6e 6e 61 20 4d 54 22 2c 22 43 6f 6e 73 74 61 6e 74 69 61 22 2c 22 43 6f 6f 70 65 72 20 42 6c 61 63 6b 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 Data Ascii: ard SE","Chalkduster","Charlesworth","Charter Bd BT","Charter BT","Chaucer","ChelthmITC Bk BT","Chiller","Clarendon","Clarendon Condensed","CloisterBlack BT","Cochin","Colonna MT","Constantia","Cooper Black","Copperplate","Copperplate Gothic","Copperplate
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 61 22 2c 22 47 6c 6f 75 63 65 73 74 65 72 20 4d 54 20 45 78 74 72 61 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 47 4f 54 48 41 4d 22 2c 22 47 4f 54 48 41 4d 20 42 4f 4c 44 22 2c 22 47 6f 75 64 79 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 47 6f 75 64 79 20 53 74 6f 75 74 22 2c 22 47 6f 75 64 79 48 61 6e 64 74 6f 6f 6c 65 64 20 42 54 22 2c 22 47 6f 75 64 79 4f 4c 53 74 20 42 54 22 2c 22 47 75 6a 61 72 61 74 69 20 53 61 6e 67 61 6d 20 4d 4e 22 2c 22 47 75 6c 69 6d 22 2c 22 47 75 6c 69 6d 43 68 65 22 2c 22 47 75 6e 67 73 75 68 22 2c 22 47 75 6e 67 73 75 68 43 68 65 22 2c 22 47 75 72 6d 75 6b 68 69 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 22 2c 22 48 61 72 6c 6f 77 20 53 6f 6c 69 64 20 49 74 61 6c 69 63 22 2c 22 48 61 72 72 69 6e 67 74 6f 6e Data Ascii: a","Gloucester MT Extra Condensed","GOTHAM","GOTHAM BOLD","Goudy Old Style","Goudy Stout","GoudyHandtooled BT","GoudyOLSt BT","Gujarati Sangam MN","Gulim","GulimChe","Gungsuh","GungsuhChe","Gurmukhi MN","Haettenschweiler","Harlow Solid Italic","Harrington
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 6e 67 4c 69 55 5f 48 4b 53 43 53 22 2c 22 4d 69 6e 67 4c 69 55 5f 48 4b 53 43 53 2d 45 78 74 42 22 2c 22 4d 69 6e 67 4c 69 55 2d 45 78 74 42 22 2c 22 4d 69 6e 69 6f 6e 22 2c 22 4d 69 6e 69 6f 6e 20 50 72 6f 22 2c 22 4d 69 72 69 61 6d 22 2c 22 4d 69 72 69 61 6d 20 46 69 78 65 64 22 2c 22 4d 69 73 74 72 61 6c 22 2c 22 4d 6f 64 65 72 6e 22 2c 22 4d 6f 64 65 72 6e 20 4e 6f 2e 20 32 30 22 2c 22 4d 6f 6e 61 20 4c 69 73 61 20 53 6f 6c 69 64 20 49 54 43 20 54 54 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 4f 4e 4f 22 2c 22 4d 6f 6f 6c 42 6f 72 61 6e 22 2c 22 4d 72 73 20 45 61 76 65 73 22 2c 22 4d 53 20 4c 69 6e 65 44 72 61 77 22 2c 22 4d 53 20 4d 69 6e 63 68 6f 22 2c 22 4d 53 20 50 4d 69 6e 63 68 6f 22 2c 22 4d 53 20 52 65 66 65 72 65 6e 63 Data Ascii: ngLiU_HKSCS","MingLiU_HKSCS-ExtB","MingLiU-ExtB","Minion","Minion Pro","Miriam","Miriam Fixed","Mistral","Modern","Modern No. 20","Mona Lisa Solid ITC TT","Mongolian Baiti","MONO","MoolBoran","Mrs Eaves","MS LineDraw","MS Mincho","MS PMincho","MS Referenc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49791	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	1786	OUT	GET /assets/js/mobile-detect.js-master/mobile-detect.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1254	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 25 Oct 2023 20:20:04 GMT ETag: W/"92a8-608902e452135-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4903 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9GAJppDd%2Fv8WLg1PA7Ea74rT2txy%2FhSUuBNZS3w6GmY71AsWUT%2BX4LivcESVzl3TZMdEshOlRU7j0Z382NpqEs6%2Bs2uT1KNyX5mZBVrUmzvrH18K0EKvudJvYbQr64G09%2BVd05LwZFtz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014cb9761a2c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2090&min_rtt=2016&rtt_var=809&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2364&delivery_rate=1448412&cwnd=174&unsent_bytes=0&cid=dcd8cea6707770ce&ts=465&x=0"
2024-12-12 22:03:33 UTC	115	IN	Data Raw: 37 62 39 32 0d 0a 2f 2a 21 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 48 65 69 6e 72 69 63 68 20 47 6f 65 62 6c 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 68 67 6f 65 62 6c 2f 6d 6f 62 69 6c 65 2d 64 65 74 65 63 74 2e 6a 73 2a 2f 0a 21 66 Data Ascii: 7b92/!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/!f
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 6e 75 6c 6c 21 3d 62 26 26 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 21 65 7c 7c 21 62 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 63 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 3d 30 3b 64 3c 65 3b 2b 2b 64 29 69 66 28 63 3d 3d 3d 61 5b 64 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: unction(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;d<e;++d)if(c===a[d].toLowerCase())return!0;return!1}function
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 7c 4d 54 38 37 30 7c 4d 54 39 31 37 7c 4d 6f 74 6f 72 6f 6c 61 2e 2a 54 49 54 41 4e 49 55 4d 7c 57 58 34 33 35 7c 57 58 34 34 35 7c 58 54 33 30 30 7c 58 54 33 30 31 7c 58 54 33 31 31 7c 58 54 33 31 36 7c 58 54 33 31 37 7c 58 54 33 31 39 7c 58 54 33 32 30 7c 58 54 33 39 30 7c 58 54 35 30 32 7c 58 54 35 33 30 7c 58 54 35 33 31 7c 58 54 35 33 32 7c 58 54 35 33 35 7c 58 54 36 30 33 7c 58 54 36 31 30 7c 58 54 36 31 31 7c 58 54 36 31 35 7c 58 54 36 38 31 7c 58 54 37 30 31 7c 58 54 37 30 32 7c 58 54 37 31 31 7c 58 54 37 32 30 7c 58 54 38 30 30 7c 58 54 38 30 36 7c 58 54 38 36 30 7c 58 54 38 36 32 7c 58 54 38 37 35 7c 58 54 38 38 32 7c 58 54 38 38 33 7c 58 54 38 39 34 7c 58 54 39 30 31 7c 58 54 39 30 37 7c 58 54 39 30 39 7c 58 54 39 31 30 7c 58 54 39 31 32 7c 58 Data Ascii: \|MT870\|MT917\|Motorola.*TITANIUM\|WX435\|WX445\|XT300\|XT301\|XT311\|XT316\|XT317\|XT319\|XT320\|XT390\|XT502\|XT530\|XT531\|XT532\|XT535\|XT603\|XT610\|XT611\|XT615\|XT681\|XT701\|XT702\|XT711\|XT720\|XT800\|XT806\|XT860\|XT862\|XT875\|XT882\|XT883\|XT894\|XT901\|XT907\|XT909\|XT910\|XT912\|X
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 2d 49 39 31 30 30 7c 47 54 2d 49 39 31 30 33 7c 47 54 2d 49 39 32 32 30 7c 47 54 2d 49 39 32 35 30 7c 47 54 2d 49 39 33 30 30 7c 47 54 2d 49 39 33 30 35 7c 47 54 2d 49 39 35 30 30 7c 47 54 2d 49 39 35 30 35 7c 47 54 2d 4d 33 35 31 30 7c 47 54 2d 4d 35 36 35 30 7c 47 54 2d 4d 37 35 30 30 7c 47 54 2d 4d 37 36 30 30 7c 47 54 2d 4d 37 36 30 33 7c 47 54 2d 4d 38 38 30 30 7c 47 54 2d 4d 38 39 31 30 7c 47 54 2d 4e 37 30 30 30 7c 47 54 2d 53 33 31 31 30 7c 47 54 2d 53 33 33 31 30 7c 47 54 2d 53 33 33 35 30 7c 47 54 2d 53 33 33 35 33 7c 47 54 2d 53 33 33 37 30 7c 47 54 2d 53 33 36 35 30 7c 47 54 2d 53 33 36 35 33 7c 47 54 2d 53 33 37 37 30 7c 47 54 2d 53 33 38 35 30 7c 47 54 2d 53 35 32 31 30 7c 47 54 2d 53 35 32 32 30 7c 47 54 2d 53 35 32 32 39 7c 47 54 2d 53 35 Data Ascii: -I9100\|GT-I9103\|GT-I9220\|GT-I9250\|GT-I9300\|GT-I9305\|GT-I9500\|GT-I9505\|GT-M3510\|GT-M5650\|GT-M7500\|GT-M7600\|GT-M7603\|GT-M8800\|GT-M8910\|GT-N7000\|GT-S3110\|GT-S3310\|GT-S3350\|GT-S3353\|GT-S3370\|GT-S3650\|GT-S3653\|GT-S3770\|GT-S3850\|GT-S5210\|GT-S5220\|GT-S5229\|GT-S5
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 48 2d 41 32 35 37 7c 53 47 48 2d 41 34 33 37 7c 53 47 48 2d 41 35 31 37 7c 53 47 48 2d 41 35 39 37 7c 53 47 48 2d 41 36 33 37 7c 53 47 48 2d 41 36 35 37 7c 53 47 48 2d 41 36 36 37 7c 53 47 48 2d 41 36 38 37 7c 53 47 48 2d 41 36 39 37 7c 53 47 48 2d 41 37 30 37 7c 53 47 48 2d 41 37 31 37 7c 53 47 48 2d 41 37 32 37 7c 53 47 48 2d 41 37 33 37 7c 53 47 48 2d 41 37 34 37 7c 53 47 48 2d 41 37 36 37 7c 53 47 48 2d 41 37 37 37 7c 53 47 48 2d 41 37 39 37 7c 53 47 48 2d 41 38 31 37 7c 53 47 48 2d 41 38 32 37 7c 53 47 48 2d 41 38 33 37 7c 53 47 48 2d 41 38 34 37 7c 53 47 48 2d 41 38 36 37 7c 53 47 48 2d 41 38 37 37 7c 53 47 48 2d 41 38 38 37 7c 53 47 48 2d 41 38 39 37 7c 53 47 48 2d 41 39 32 37 7c 53 47 48 2d 42 31 30 30 7c 53 47 48 2d 42 31 33 30 7c 53 47 48 2d 42 Data Ascii: H-A257\|SGH-A437\|SGH-A517\|SGH-A597\|SGH-A637\|SGH-A657\|SGH-A667\|SGH-A687\|SGH-A697\|SGH-A707\|SGH-A717\|SGH-A727\|SGH-A737\|SGH-A747\|SGH-A767\|SGH-A777\|SGH-A797\|SGH-A817\|SGH-A827\|SGH-A837\|SGH-A847\|SGH-A867\|SGH-A877\|SGH-A887\|SGH-A897\|SGH-A927\|SGH-B100\|SGH-B130\|SGH-B
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 48 2d 54 36 33 39 7c 53 47 48 2d 54 36 35 39 7c 53 47 48 2d 54 36 36 39 7c 53 47 48 2d 54 36 37 39 7c 53 47 48 2d 54 37 30 39 7c 53 47 48 2d 54 37 31 39 7c 53 47 48 2d 54 37 32 39 7c 53 47 48 2d 54 37 33 39 7c 53 47 48 2d 54 37 34 36 7c 53 47 48 2d 54 37 34 39 7c 53 47 48 2d 54 37 35 39 7c 53 47 48 2d 54 37 36 39 7c 53 47 48 2d 54 38 30 39 7c 53 47 48 2d 54 38 31 39 7c 53 47 48 2d 54 38 33 39 7c 53 47 48 2d 54 39 31 39 7c 53 47 48 2d 54 39 32 39 7c 53 47 48 2d 54 39 33 39 7c 53 47 48 2d 54 39 35 39 7c 53 47 48 2d 54 39 38 39 7c 53 47 48 2d 55 31 30 30 7c 53 47 48 2d 55 32 30 30 7c 53 47 48 2d 55 38 30 30 7c 53 47 48 2d 56 32 30 35 7c 53 47 48 2d 56 32 30 36 7c 53 47 48 2d 58 31 30 30 7c 53 47 48 2d 58 31 30 35 7c 53 47 48 2d 58 31 32 30 7c 53 47 48 2d 58 Data Ascii: H-T639\|SGH-T659\|SGH-T669\|SGH-T679\|SGH-T709\|SGH-T719\|SGH-T729\|SGH-T739\|SGH-T746\|SGH-T749\|SGH-T759\|SGH-T769\|SGH-T809\|SGH-T819\|SGH-T839\|SGH-T919\|SGH-T929\|SGH-T939\|SGH-T959\|SGH-T989\|SGH-U100\|SGH-U200\|SGH-U800\|SGH-V205\|SGH-V206\|SGH-X100\|SGH-X105\|SGH-X120\|SGH-X
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 30 49 7c 53 4d 2d 47 39 30 30 4a 7c 53 4d 2d 47 39 30 30 4b 7c 53 4d 2d 47 39 30 30 4c 7c 53 4d 2d 47 39 30 30 4d 7c 53 4d 2d 47 39 30 30 50 7c 53 4d 2d 47 39 30 30 52 34 7c 53 4d 2d 47 39 30 30 53 7c 53 4d 2d 47 39 30 30 54 7c 53 4d 2d 47 39 30 30 56 7c 53 4d 2d 47 39 30 30 57 38 7c 53 48 56 2d 45 31 36 30 4b 7c 53 43 48 2d 50 37 30 39 7c 53 43 48 2d 50 37 32 39 7c 53 4d 2d 54 32 35 35 38 7c 47 54 2d 49 39 32 30 35 7c 53 4d 2d 47 39 33 35 30 7c 53 4d 2d 4a 31 32 30 46 22 2c 4c 47 3a 22 5c 5c 62 4c 47 5c 5c 62 3b 7c 4c 47 5b 2d 20 5d 3f 28 43 38 30 30 7c 43 39 30 30 7c 45 34 30 30 7c 45 36 31 30 7c 45 39 30 30 7c 45 2d 39 30 30 7c 46 31 36 30 7c 46 31 38 30 4b 7c 46 31 38 30 4c 7c 46 31 38 30 53 7c 37 33 30 7c 38 35 35 7c 4c 31 36 30 7c 4c 53 37 34 30 7c Data Ascii: 0I\|SM-G900J\|SM-G900K\|SM-G900L\|SM-G900M\|SM-G900P\|SM-G900R4\|SM-G900S\|SM-G900T\|SM-G900V\|SM-G900W8\|SHV-E160K\|SCH-P709\|SCH-P729\|SM-T2558\|GT-I9205\|SM-G9350\|SM-J120F",LG:"\\bLG\\b;\|LG[- ]?(C800\|C900\|E400\|E610\|E900\|E-900\|F160\|F180K\|F180L\|F180S\|730\|855\|L160\|LS740\|
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 4d 2d 41 36 33 30 4b 7c 49 4d 2d 41 36 30 30 53 7c 56 45 47 41 20 50 54 4c 32 31 7c 50 54 30 30 33 7c 50 38 30 31 30 7c 41 44 52 39 31 30 4c 7c 50 36 30 33 30 7c 50 36 30 32 30 7c 50 39 30 37 30 7c 50 34 31 30 30 7c 50 39 30 36 30 7c 50 35 30 30 30 7c 43 44 4d 38 39 39 32 7c 54 58 54 38 30 34 35 7c 41 44 52 38 39 39 35 7c 49 53 31 31 50 54 7c 50 32 30 33 30 7c 50 36 30 31 30 7c 50 38 30 30 30 7c 50 54 30 30 32 7c 49 53 30 36 7c 43 44 4d 38 39 39 39 7c 50 39 30 35 30 7c 50 54 30 30 31 7c 54 58 54 38 30 34 30 7c 50 32 30 32 30 7c 50 39 30 32 30 7c 50 32 30 30 30 7c 50 37 30 34 30 7c 50 37 30 30 30 7c 43 37 39 30 22 2c 46 6c 79 3a 22 49 51 32 33 30 7c 49 51 34 34 34 7c 49 51 34 35 30 7c 49 51 34 34 30 7c 49 51 34 34 32 7c 49 51 34 34 31 7c 49 51 32 34 35 7c Data Ascii: M-A630K\|IM-A600S\|VEGA PTL21\|PT003\|P8010\|ADR910L\|P6030\|P6020\|P9070\|P4100\|P9060\|P5000\|CDM8992\|TXT8045\|ADR8995\|IS11PT\|P2030\|P6010\|P8000\|PT002\|IS06\|CDM8999\|P9050\|PT001\|TXT8040\|P2020\|P9020\|P2000\|P7040\|P7000\|C790",Fly:"IQ230\|IQ444\|IQ450\|IQ440\|IQ442\|IQ441\|IQ245\|
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 39 7c 53 47 48 2d 54 38 35 39 7c 53 47 48 2d 54 38 36 39 7c 53 50 48 2d 50 31 30 30 7c 47 54 2d 50 33 31 30 30 7c 47 54 2d 50 33 31 30 38 7c 47 54 2d 50 33 31 31 30 7c 47 54 2d 50 35 31 30 30 7c 47 54 2d 50 35 31 31 30 7c 47 54 2d 50 36 32 30 30 7c 47 54 2d 50 37 33 32 30 7c 47 54 2d 50 37 35 31 31 7c 47 54 2d 4e 38 30 30 30 7c 47 54 2d 50 38 35 31 30 7c 53 47 48 2d 49 34 39 37 7c 53 50 48 2d 50 35 30 30 7c 53 47 48 2d 54 37 37 39 7c 53 43 48 2d 49 37 30 35 7c 53 43 48 2d 49 39 31 35 7c 47 54 2d 4e 38 30 31 33 7c 47 54 2d 50 33 31 31 33 7c 47 54 2d 50 35 31 31 33 7c 47 54 2d 50 38 31 31 30 7c 47 54 2d 4e 38 30 31 30 7c 47 54 2d 4e 38 30 30 35 7c 47 54 2d 4e 38 30 32 30 7c 47 54 2d 50 31 30 31 33 7c 47 54 2d 50 36 32 30 31 7c 47 54 2d 50 37 35 30 31 7c 47 Data Ascii: 9\|SGH-T859\|SGH-T869\|SPH-P100\|GT-P3100\|GT-P3108\|GT-P3110\|GT-P5100\|GT-P5110\|GT-P6200\|GT-P7320\|GT-P7511\|GT-N8000\|GT-P8510\|SGH-I497\|SPH-P500\|SGH-T779\|SCH-I705\|SCH-I915\|GT-N8013\|GT-P3113\|GT-P5113\|GT-P8110\|GT-N8010\|GT-N8005\|GT-N8020\|GT-P1013\|GT-P6201\|GT-P7501\|G
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 2d 54 35 36 37 7c 53 4d 2d 54 33 35 37 54 7c 53 4d 2d 54 35 35 35 7c 53 4d 2d 54 35 36 31 7c 53 4d 2d 54 37 31 33 7c 53 4d 2d 54 37 31 39 7c 53 4d 2d 54 38 31 33 7c 53 4d 2d 54 38 31 39 7c 53 4d 2d 54 35 38 30 7c 53 4d 2d 54 33 35 35 59 7c 53 4d 2d 54 32 38 30 22 2c 4b 69 6e 64 6c 65 3a 22 4b 69 6e 64 6c 65 7c 53 69 6c 6b 2e 2a 41 63 63 65 6c 65 72 61 74 65 64 7c 41 6e 64 72 6f 69 64 2e 2a 5c 5c 62 28 4b 46 4f 54 7c 4b 46 54 54 7c 4b 46 4a 57 49 7c 4b 46 4a 57 41 7c 4b 46 4f 54 45 7c 4b 46 53 4f 57 49 7c 4b 46 54 48 57 49 7c 4b 46 54 48 57 41 7c 4b 46 41 50 57 49 7c 4b 46 41 50 57 41 7c 57 46 4a 57 41 45 7c 4b 46 53 41 57 41 7c 4b 46 53 41 57 49 7c 4b 46 41 53 57 49 7c 4b 46 41 52 57 49 29 5c 5c 62 22 2c 53 75 72 66 61 63 65 54 61 62 6c 65 74 3a 22 57 69 Data Ascii: -T567\|SM-T357T\|SM-T555\|SM-T561\|SM-T713\|SM-T719\|SM-T813\|SM-T819\|SM-T580\|SM-T355Y\|SM-T280",Kindle:"Kindle\|Silk.Accelerated\|Android.\\b(KFOT\|KFTT\|KFJWI\|KFJWA\|KFOTE\|KFSOWI\|KFTHWI\|KFTHWA\|KFAPWI\|KFAPWA\|WFJWAE\|KFSAWA\|KFSAWI\|KFASWI\|KFARWI)\\b",SurfaceTablet:"Wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49793	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:32 UTC	1824	OUT	GET /fdx-pkgmsn/files/foot-icon03.svg HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1228	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: image/svg+xml Content-Length: 3866 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:09 GMT ETag: "f1a-625d9351e20d7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4684 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UdOUXc2BNzcieNKd76g7KMsne%2BBKJBnz%2F8KAHYTQd5STP9Gv0BnD36AYQfbL8JFEoBXixkmeRo71yMJiJq4YJKvifp5bE3HLkbLTK%2BtnahdSl0iFCZ0TtrPXWKmJOIq%2Bc9GBAdDRR904"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014cbc2bc327-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1521&min_rtt=1516&rtt_var=579&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2402&delivery_rate=1871794&cwnd=189&unsent_bytes=0&cid=1d3851ab4ea83378&ts=462&x=0"
2024-12-12 22:03:33 UTC	141	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 64 65 66 73 3e 3c 70 61 74 68 20 69 64 3d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="40" height="40" viewBox="0 0 40 40"><defs><path id=
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 22 76 76 64 30 62 22 20 64 3d 22 4d 32 36 36 2e 36 37 36 20 35 38 38 2e 39 35 39 76 31 36 2e 35 30 32 63 30 20 39 2e 34 34 38 2d 37 2e 34 34 31 20 31 37 2e 31 32 36 2d 31 36 2e 36 37 33 20 31 37 2e 31 32 36 2d 39 2e 32 35 36 20 30 2d 31 36 2e 36 37 33 2d 37 2e 37 30 36 2d 31 36 2e 36 37 33 2d 31 37 2e 31 32 36 56 35 38 38 2e 39 36 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 31 2e 30 32 34 2d 31 2e 31 37 39 63 2e 31 2d 2e 30 31 34 20 39 2e 38 34 32 2d 31 2e 34 31 20 31 33 2e 39 32 35 2d 33 2e 39 32 36 6c 31 2e 31 2d 2e 36 37 37 61 31 2e 31 38 36 20 31 2e 31 38 36 20 30 20 30 20 31 20 31 2e 32 34 39 20 30 6c 31 2e 30 39 38 2e 36 37 37 63 34 2e 30 38 38 20 32 2e 35 31 38 20 31 33 2e 38 32 37 20 33 2e 39 31 32 20 31 33 2e 39 32 35 20 33 2e 39 32 36 61 Data Ascii: "vvd0b" d="M266.676 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126-9.256 0-16.673-7.706-16.673-17.126V588.96a1.19 1.19 0 0 1 1.024-1.179c.1-.014 9.842-1.41 13.925-3.926l1.1-.677a1.186 1.186 0 0 1 1.249 0l1.098.677c4.088 2.518 13.827 3.912 13.925 3.926a
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 31 2e 38 37 36 20 31 30 2e 33 38 31 20 32 2e 39 32 39 20 31 30 2e 34 35 35 20 32 2e 39 34 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 31 2e 30 32 34 20 31 2e 31 37 38 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 61 22 20 64 3d 22 4d 32 33 30 20 35 39 35 2e 34 37 68 34 30 76 31 35 2e 30 38 38 68 2d 34 30 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 67 22 20 64 3d 22 4d 32 36 38 2e 38 31 20 35 39 35 2e 34 37 68 2d 33 37 2e 36 32 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 30 2d 31 2e 31 39 20 31 2e 31 39 76 31 32 2e 37 30 37 63 30 20 2e 36 35 37 2e 35 33 33 20 31 2e 31 39 20 31 2e 31 39 20 31 2e 31 39 68 33 37 2e 36 32 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 30 20 31 2e 31 39 2d 31 2e 31 39 56 35 39 36 2e 36 36 61 31 2e 31 39 Data Ascii: 1.876 10.381 2.929 10.455 2.94a1.19 1.19 0 0 1 1.024 1.178"/><path id="vvd0a" d="M230 595.47h40v15.088h-40z"/><path id="vvd0g" d="M268.81 595.47h-37.62a1.19 1.19 0 0 0-1.19 1.19v12.707c0 .657.533 1.19 1.19 1.19h37.62a1.19 1.19 0 0 0 1.19-1.19V596.66a1.19
2024-12-12 22:03:33 UTC	987	IN	Data Raw: 61 74 68 20 69 64 3d 22 76 76 64 30 6e 22 20 64 3d 22 4d 32 35 33 2e 32 34 20 36 30 34 2e 35 35 32 63 30 20 31 2e 35 2d 31 2e 32 32 20 32 2e 37 32 2d 32 2e 37 32 20 32 2e 37 32 48 32 35 30 76 2d 32 2e 33 38 68 2e 35 32 61 2e 33 34 2e 33 34 20 30 20 30 20 30 20 30 2d 2e 36 38 31 48 32 35 30 76 2d 32 2e 33 38 31 68 2e 35 32 63 31 2e 35 20 30 20 32 2e 37 32 20 31 2e 32 32 20 32 2e 37 32 20 32 2e 37 32 32 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 6f 22 20 64 3d 22 4d 32 35 32 2e 30 35 20 36 30 31 2e 31 35 31 48 32 35 30 76 2d 32 2e 33 38 31 68 32 2e 30 35 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 30 20 32 2e 33 38 31 22 2f 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 76 76 64 30 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 Data Ascii: ath id="vvd0n" d="M253.24 604.552c0 1.5-1.22 2.72-2.72 2.72H250v-2.38h.52a.34.34 0 0 0 0-.681H250v-2.381h.52c1.5 0 2.72 1.22 2.72 2.722"/><path id="vvd0o" d="M252.05 601.151H250v-2.381h2.05a1.19 1.19 0 0 1 0 2.381"/><clipPath id="vvd0f"><use xlink:href="#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49794	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:33 UTC	630	OUT	GET /fdx-pkgmsn/9ffd320085ee7f4970fc413d25ee698e.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXVjRzVuSWl3aWRIbHdaU0k2SW1sdFlXZGxJaXdpZGlJNklqSWlmUT09aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:33 UTC	1198	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:33 GMT Content-Type: image/png Content-Length: 17972 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4685 Last-Modified: Thu, 12 Dec 2024 20:45:28 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdV5Q84Fx5m4g4Ix3HQ%2F7QjmjKLMcAi9%2FwUVXE45yCgvildkGYCnKjGzUE1RcVGoxrqOAgHA7I%2Ba1%2FpfbDBNdeNnqYi0LkviByG2w4UDXs5vXwxbfwmwRbVkQNlKTXY32FmlcHvoKWpQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11014e5ee84297-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2233&min_rtt=1774&rtt_var=993&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1208&delivery_rate=1645997&cwnd=245&unsent_bytes=0&cid=1ebac86fa737bdf2&ts=459&x=0"
2024-12-12 22:03:33 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 3a 2c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 Data Ascii: PNGIHDR2QpHYsgR:,iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 37 20 31 2e 30 30 30 30 30 30 2c 20 30 30 30 30 2f 30 30 2f 30 30 2d 30 30 3a 30 30 3a 30 30 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 6e 73 31 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 64 61 79 2e 63 6f 6d 2f 64 61 6d 2f 31 2e 30 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 Data Ascii: /" x:xmptk="Adobe XMP Core 5.6-c137 1.000000, 0000/00/00-00:00:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:ns1="http://www.day.com/dam/1.0" xmlns:tiff="http://ns.adobe.com/t
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 38 2d 32 31 54 31 36 3a 32 35 3a 30 39 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 37 2d 30 38 2d 32 31 54 31 36 3a 32 35 3a 30 39 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 37 2d 30 38 2d 32 31 54 31 36 3a 32 30 3a 34 38 2e 30 30 30 2d 30 34 3a 30 30 22 0a 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 64 63 3a 6d 6f 64 69 66 69 65 64 3d 22 32 30 31 37 2d 31 30 2d 30 37 54 31 34 3a 33 39 3a 33 33 2e 35 37 36 5a 22 0a 20 20 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 31 31 33 37 34 37 35 2d 63 37 33 64 2d 31 31 37 61 2d 61 Data Ascii: 8-21T16:25:09.000-04:00" xmp:ModifyDate="2017-08-21T16:25:09.000-04:00" xmp:CreateDate="2017-08-21T16:20:48.000-04:00" dc:format="image/png" dc:modified="2017-10-07T14:39:33.576Z" xmpMM:DocumentID="adobe:docid:photoshop:31137475-c73d-117a-a
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-12 22:03:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49795	104.17.24.14	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:33 UTC	389	OUT	GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:34 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65d4c5f6-40b9" Last-Modified: Tue, 20 Feb 2024 15:32:06 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1164730 Expires: Tue, 02 Dec 2025 22:03:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UOuHPyV5zICSKzN%2Behdzk5NQTxKh7Q7l6Kx0IE8qsaAqRc7bisaiQZ4FJEN5p1vlo%2FB9j93rVEUsYGgMGVbmNcjNpImLRZhfPxM2o%2Fc08YsVTUVfaGCKUSB8nxLUT7L2BQTzO8xi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f1101521fe442c9-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 22:03:34 UTC	410	IN	Data Raw: 33 39 37 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 3978/! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 73 2f 63 6f 72 65 22 5d 2c 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 65 28 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 2c 7b 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 3a 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 7d 29 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 29 7b 63 6f 6e 73 74 20 73 3d 4f 62 6a 65 63 Data Ascii: s/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Objec
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 7c 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 75 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 Data Ascii: \|t.nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),u=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getR
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 6c 65 74 20 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f 21 69 26 26 73 3f 74 5b 6e 2d 31 5d 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 73 26 26 28 6f 3d 28 6f 2b 6e 29 25 6e 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 6e 2d 31 29 29 5d 29 7d 2c 41 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 45 3d 2f 5c 2e 2e 2a 2f 2c 43 3d 2f 3a 3a 5c 64 2b 24 2f 2c 54 3d 7b 7d 3b 6c 65 74 20 6b 3d 31 3b 63 6f 6e 73 74 20 24 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 53 3d 6e 65 77 20 53 65 74 28 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 6c 69 63 6b 22 2c 22 6d 6f 75 73 Data Ascii: let o=t.indexOf(e);return-1===o?!i&&s?t[n-1]:t[0]:(o+=i?1:-1,s&&(o=(o+n)%n),t[Math.max(0,Math.min(o,n-1))])},A=/[^.](?=\..)\.\|./,E=/\../,C=/::\d+$/,T={};let k=1;const $={mouseenter:"mouseover",mouseleave:"mouseout"},S=new Set(["click","dblclick","mous
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 6e 29 3b 63 6f 6e 73 74 20 64 3d 4c 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 41 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 6e 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 63 6f 6e 73 74 20 61 20 6f 66 20 6f 29 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 46 28 6e 2c 7b 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 3a 72 Data Ascii: (c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=L(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.querySelectorAll(e);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(const a of o)if(a===r)return F(n,{delegateTarget:r
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 67 67 65 72 28 6e 29 2c 6f 3d 21 6e 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 6e 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 46 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 6e 26 26 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 7d 7d 3b 66 75 6e 63 74 69 6f Data Ascii: gger(n),o=!n.isPropagationStopped(),r=!n.isImmediatePropagationStopped(),a=n.isDefaultPrevented());const l=F(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPrevented&&n&&n.preventDefault(),l}};functio
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 65 2c 22 63 6f 6e 66 69 67 22 29 3a 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 2c 2e 2e 2e 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 65 29 3a 7b 7d 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d Data Ascii: _configAfterMerge(t),this._typeCheckConfig(t),t}_configAfterMerge(t){return t}_mergeConfigObj(t,e){const i=l(e)?B.getDataAttribute(e,"config"):{};return{...this.constructor.Default,..."object"==typeof i?i:{},...l(e)?B.getDataAttributes(e):{},..."object"==
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 60 2e 24 7b 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 7d 60 7d 73 74 61 74 69 63 20 65 76 65 6e 74 4e 61 6d 65 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 24 7b 74 68 69 73 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 7d 7d 63 6f 6e 73 74 20 52 3d 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 21 69 7c 7c 21 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 Data Ascii: return`.${this.DATA_KEY}`}static eventName(t){return`${t}${this.EVENT_KEY}`}}const R=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.starts
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 5d 7d 7d 2c 56 3d 28 74 2c 65 3d 22 68 69 64 65 22 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 60 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 24 7b 74 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 2c 73 3d 74 2e 4e 41 4d 45 3b 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 60 5b 64 61 74 61 2d 62 73 2d 64 69 73 6d 69 73 73 3d 22 24 7b 73 7d 22 5d 60 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5b 22 41 22 2c 22 41 52 45 41 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 29 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 64 28 74 68 69 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 4b 2e 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 68 69 73 29 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 60 2e 24 7b Data Ascii: ]}},V=(t,e="hide")=>{const i=`click.dismiss${t.EVENT_KEY}`,s=t.NAME;j.on(document,i,`[data-bs-dismiss="${s}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),d(this))return;const n=K.getElementFromSelector(this)\|\|this.closest(`.${
2024-12-12 22:03:34 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 5a 3d 22 2e 62 73 2e 73 77 69 70 65 22 2c 74 74 3d 60 74 6f 75 63 68 73 74 61 72 74 24 7b 5a 7d 60 2c 65 74 3d 60 74 6f 75 63 68 6d 6f 76 65 24 7b 5a 7d 60 2c 69 74 3d 60 74 6f 75 63 68 65 6e 64 24 7b 5a 7d 60 2c 73 74 3d 60 70 6f 69 6e 74 65 72 64 6f 77 6e 24 7b 5a 7d 60 2c 6e 74 3d 60 70 6f 69 6e 74 65 72 75 70 24 7b 5a 7d 60 2c 6f 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 7d 2c 72 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 22 Data Ascii: onst Z=".bs.swipe",tt=`touchstart${Z}`,et=`touchmove${Z}`,it=`touchend${Z}`,st=`pointerdown${Z}`,nt=`pointerup${Z}`,ot={endCallback:null,leftCallback:null,rightCallback:null},rt={endCallback:"(function\|null)",leftCallback:"(function\|null)",rightCallback:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49796	185.15.58.240	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:34 UTC	420	OUT	GET /wikipedia/commons/thumb/b/b2/Hamburger_icon.svg/800px-Hamburger_icon.svg.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:34 UTC	1062	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 03:13:21 GMT etag: f8ad51c6ec91c615af984cb7e4f6ad0e server: ATS/9.2.6 content-type: image/png content-disposition: inline;filename=UTF-8''Hamburger_icon.svg.png last-modified: Sat, 20 Jul 2024 08:14:44 GMT content-length: 5764 age: 67813 x-cache: cp6007 hit, cp6003 hit/375 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp6003" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2024-12-12 22:03:34 UTC	5764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 04 00 00 00 71 79 ce e3 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 07 74 49 4d 45 07 e8 07 14 08 0e 2b 67 b4 aa e1 00 00 15 8c 49 44 41 54 78 da ed dd df 6f 57 67 1d 07 f0 77 4b c1 8d 82 11 8a a3 c2 98 03 66 0b 4e a3 98 4c 67 64 8a 06 b6 39 1d 26 a2 4e b7 11 34 21 de 99 38 67 d4 9b 5d b9 78 a1 31 9a 60 4c 34 2e 1b b2 28 17 12 cd fc b1 74 23 f3 c7 d8 8f b8 0b 8c 51 d6 16 06 0c 18 3f 36 81 41 61 09 65 a6 5e 2d 59 14 95 96 ef f7 39 a7 a7 af d7 3f f0 3c cf f9 7c 72 de 7d 4e cf f9 3e 09 00 00 00 00 00 Data Ascii: PNGIHDR qygAMAa cHRMz&u0`:pQ<bKGDtIME+gIDATxoWgwKfNLgd9&N4!8g]x1`L4.(t#Q?6Aae^-Y9?<\|r}N>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49812	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:35 UTC	2000	OUT	GET /fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1197	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/png Content-Length: 2888 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ICeHoOENvyKa1a2qiEVgomvEzvpQadvh5BE42UcpOrkQ1Xgyjs%2Fa4lNrjiW%2Ba3qdTZRC%2FYErz9x9JvhfuTSQQkYYALJTsyBCnbI%2BpNPqU8P7SZBkSjLpKvRwtYs73NKgzkwRsdqLsw8X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11015ecf3c18c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1749&min_rtt=1713&rtt_var=668&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2600&delivery_rate=1704611&cwnd=169&unsent_bytes=0&cid=bafd9038ed2a24de&ts=454&x=0"
2024-12-12 22:03:36 UTC	172	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 a8 08 03 00 00 00 6d f5 23 3d 00 00 01 23 50 4c 54 45 ff ff ff 40 2b 8f f2 7a 21 3f 2c 8f 35 1b 8c a8 9d c7 f5 7b 1c 37 26 8a cf 6f 49 f9 f5 ed f1 e9 fd e8 72 0e 3d 23 8f fc df c1 f3 79 1f 3b 24 8d f0 73 04 fe f3 e1 6f 62 9c f0 ee f3 30 15 85 c0 bc d3 cf ca df 30 12 8a f5 73 00 bf ba cd e8 d2 c0 d7 d0 ec ed c5 a7 ab a4 c2 ef 9f 5f d6 cd ef fa cc a0 e6 e2 ee f2 9a 55 29 00 80 72 63 ac 63 55 9c ff ff fa cd c4 e5 db d5 ec 66 54 a8 2e 0e 87 28 00 Data Ascii: PNGIHDR,m#=#PLTE@+z!?,5{7&oIr=#y;$sob00s_U)rccUfT.(
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 82 f9 f5 ff ee 9b 56 97 8a c2 f3 76 14 33 10 8d ef 8e 46 ef de ce ba b0 d8 8e 7d be f8 f3 ff 5c 48 a3 b5 a9 d8 81 71 b7 4d 37 9a de d9 ea fa e4 ca 5a 4a 95 ac a0 d3 53 3f 9c e4 ab 7c fc c2 90 e2 9f 6d c3 b9 e1 e2 94 58 fd d8 af f2 af 7d e3 84 3a f4 c1 96 e6 7a 22 ff f0 da f5 89 32 e8 cd b3 e5 c1 a3 69 5c 9f 43 2e 88 85 7b ab 93 8b b3 75 69 a2 e2 8a 46 e8 e5 eb 4b 39 8a f1 a5 6c 81 75 ab f3 ea de 60 51 9c 9c 90 c5 aa a2 c6 ed b1 7f e3 b4 8f e0 86 40 e3 7c 2b 77 6c 9f 62 54 91 15 32 a0 a0 00 00 09 d6 49 44 41 54 78 9c ed 9d f1 5f da 46 14 c0 03 9c 52 34 e6 52 8d 84 ce e9 a4 8a 60 a4 50 ab a2 a6 b5 ed 5c 9d 5a 27 da 49 6b 75 9b ed ff ff 57 2c 44 d0 90 7b 2f e4 2e c1 76 dd fb fe b0 f9 91 5c 38 be cd 1d 2f ef de 45 4d 23 08 82 20 08 82 20 08 82 20 08 82 20 08 Data Ascii: Vv3F}\HqM7ZJS?\|mX}:z"2i\C.{uiFK9lu`Q@\|+wlbT2IDATx_FR4R`P\Z'IkuW,D{/.v\8/EM#
2024-12-12 22:03:36 UTC	1347	IN	Data Raw: b0 a8 02 53 34 5c f7 16 f3 56 5b 0f e7 6f 7c 8a 60 88 01 c9 1a 97 5b b0 78 13 cb 96 11 0e 46 d5 64 35 a0 b9 b7 7f 82 5c ae fb 23 98 8d 47 b1 e0 b4 73 27 6e 3e 4b 52 d6 ca af 58 b8 15 04 cc 39 cb cb 02 a7 9d 24 b4 e1 f7 39 83 c6 61 0a b2 22 42 f9 80 ab bf b0 d6 72 b2 5e ab e7 0c 40 f4 33 f8 7d 66 a1 88 2c 0d 59 78 9e f9 de 95 18 8c 2a c9 aa 27 8f f6 07 c8 89 71 c3 2d ae 0d bc 53 2a b2 b4 cb 9b e8 69 ab f9 0c 59 53 94 95 35 21 93 4d 8e 03 18 a3 79 6c 8d 6a 18 6a 11 79 e6 5b 57 50 30 aa 26 2b 41 36 0a 64 09 79 fa 48 3d 17 73 75 47 41 96 f6 53 44 70 0a 07 a3 4a b2 5c f5 9c 30 8c 85 2d f0 bf 1e a1 2c 2f 94 c7 5c 19 47 91 8f 64 f9 c6 b2 b0 ea a4 16 f0 4d 92 9a 2c ed 29 36 10 9b f8 e4 2e 2d 2b f5 61 e8 7c 93 2b eb 2d 96 ad c9 66 91 22 08 25 59 69 4f f0 4b 70 4c Data Ascii: S4\V[o\|`[xFd5\#Gs'n>KRX9$9a"Br^@3}f,Yx'q-SiYS5!Myljjy[WP0&+A6dyH=suGASDpJ\0-,/\GdM,)6.-+a\|+-f"%YiOKpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49811	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:35 UTC	451	OUT	GET /fdx-pkgmsn/files/icon-box.svg HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1232	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/svg+xml Content-Length: 1182 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:12 GMT ETag: "49e-625d9354ed582" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lUvoo06FIRTqts6DYTQA9R7AChWeGW3ZDSK810aUvYdnWkGONLDZEkGhTz8W6zaH0HSoGxsfIdUg4wn%2FCgZ5ZkZ0%2FVHqvh%2BnEVpPboBQV7uvlomUWnwofLi%2BjrHRsg8BCWXH%2BZ8z%2FquZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11015ece39c468-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1609&min_rtt=1586&rtt_var=640&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1029&delivery_rate=1649717&cwnd=235&unsent_bytes=0&cid=81f468c4ed6d3bda&ts=463&x=0"
2024-12-12 22:03:36 UTC	137	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 41 39 38 32 35 38 22 20 64 3d 22 4d 34 39 2e 36 35 35 20 30 68 2d 33 39 2e 33 31 4c 30 20 31 36 2e 35 35 32 56 36 30 68 36 30 56 31 36 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="60" height="60"><g fill="none"><path fill="#A98258" d="M49.655 0h-39.31L0 16.552V60h60V16.
2024-12-12 22:03:36 UTC	1045	IN	Data Raw: 35 35 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 41 41 45 38 36 22 20 64 3d 22 4d 31 30 2e 33 34 35 20 30 4c 30 20 31 36 2e 35 35 32 68 36 30 4c 34 39 2e 36 35 35 20 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 38 42 31 38 42 22 20 64 3d 22 4d 33 34 2e 31 33 38 20 35 35 2e 38 36 32 4c 33 30 20 35 31 2e 37 32 34 6c 2d 34 2e 31 33 38 20 34 2e 31 33 38 2d 32 2e 30 36 39 2d 32 2e 30 36 39 56 36 30 68 31 32 2e 34 31 34 76 2d 36 2e 32 30 37 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 38 44 35 42 32 22 20 64 3d 22 4d 32 30 2e 36 39 20 33 31 2e 30 33 34 68 31 38 2e 36 32 31 76 31 36 2e 35 35 32 48 32 30 2e 36 39 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 34 43 33 41 35 22 20 64 3d 22 4d 33 31 2e 30 33 34 20 34 32 2e Data Ascii: 552z"/><path fill="#DAAE86" d="M10.345 0L0 16.552h60L49.655 0z"/><path fill="#D8B18B" d="M34.138 55.862L30 51.724l-4.138 4.138-2.069-2.069V60h12.414v-6.207z"/><path fill="#E8D5B2" d="M20.69 31.034h18.621v16.552H20.69z"/><path fill="#D4C3A5" d="M31.034 42.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49810	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:35 UTC	1992	OUT	GET /fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1199	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/png Content-Length: 2181 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxKA8QvP6CVWe2EAdVAnxjCbHKik%2FfQ4AIaAGcA0vyQhdIUTwwVygap%2FrlsUe6vWXtPdWoz%2BXEnppnsXOZ2piELP%2BBjD1%2BOq9w644EPAWpUYZCcjKo6aoMJLnDy3vg5pcl1aEbwG1iLc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11015ecd754267-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1675&min_rtt=1650&rtt_var=637&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2592&delivery_rate=1769696&cwnd=234&unsent_bytes=0&cid=f048d53be962bfb1&ts=461&x=0"
2024-12-12 22:03:36 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 11 08 06 00 00 00 8f 67 b1 f5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 Data Ascii: PNGIHDRGgtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 Data Ascii: :x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.a
2024-12-12 22:03:36 UTC	642	IN	Data Raw: 17 c5 4c b0 82 ef ee 39 3e 08 bf a9 67 a7 e1 72 2e aa 99 d8 24 c7 ed 59 2a 8c c1 0e aa b9 64 4e 99 5b 34 44 4b 34 45 db cd 1c 24 17 c9 49 72 5b e6 7c bc 7e 55 79 10 2f e2 49 b4 c4 a3 78 15 cf e2 3d 90 b8 c2 71 ad 2b df 39 07 fd f7 11 d1 5e c1 b5 db 3d 98 e3 13 08 f3 29 86 74 a3 8d 33 2e dd 94 fe 9d 1c d7 bf 62 a9 1e f4 d3 28 bf 4e 03 f7 be 87 77 da 78 fa 0f 38 d9 b5 5d 03 d2 bf 9f e3 ba 56 71 2c b4 b6 03 dd de 41 04 63 62 c6 60 a4 8d b3 ff ca b0 f4 bf c0 71 43 6b b6 95 cc 25 73 ca dc a2 f1 20 57 d1 96 1c 24 17 c9 49 72 5b c9 f5 f1 fe 2e e5 25 ae af f4 e8 a7 67 f1 1e d1 5e 56 b5 58 f3 42 6e 99 95 95 71 12 23 5c 62 b9 14 b5 12 b2 b2 0d 04 24 e9 cb ec ff 35 e9 cb ad 65 56 56 c6 e7 b8 41 ce 66 72 9a 24 bb 20 9c 97 fd df a4 e0 64 65 9c c5 e8 24 39 7d 59 6f 7a Data Ascii: L9>gr.$Y*dN[4DK4E$Ir[\|~Uy/Ix=q+9^=)t3.b(Nwx8]Vq,Acb`qCk%s W$Ir[.%g^VXBnq#\b$5eVVAfr$ de$9}Yoz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49814	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	622	OUT	GET /fdx-pkgmsn/11ddbb291266552fd513b7261eed8318.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMM0J5TG5CdVp5SXNJblI1Y0dVaU9pSnBiV0ZuWlNJc0luWWlPaUl5SW4wPQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1198	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/png Content-Length: 27217 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hIB%2B4g0XUHaH%2Bhg0JEshzTnbMhGsx0umF3p9wPONTmoqZ6sdr7kkj97xXcEr6QPyJISCqK5WZZSE6Z6K5qrB4CeF0FSvfKAz3dFVdnpsCYJPrzF3pOSEuIHBqz7ragfhdk%2B5bg%2FdqToY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101606fd1c32c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2178&min_rtt=1744&rtt_var=964&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1200&delivery_rate=1674311&cwnd=171&unsent_bytes=0&cid=6639effeae2c22ea&ts=455&x=0"
2024-12-12 22:03:36 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 54 14 57 17 9e b6 bd 2f 48 b5 f7 96 18 63 8d 25 c6 d8 10 5b 6c 58 22 46 41 25 f6 de f5 0f 89 2d a2 62 c7 58 51 63 2f 18 15 bb c6 1a 63 94 58 92 60 34 76 45 50 3a db 77 67 67 e6 cf 1d f6 71 56 23 2c 2a a2 8b bc 73 38 c0 ee 94 d7 ee bb fd bb 38 56 dc de e8 0c 44 47 47 ab b3 b2 b2 44 8f 1f 3f 56 3e 79 f2 84 4a 4f 4f 27 33 32 32 e0 b7 c4 Data Ascii: PNGIHDRXsRGB IDATx^]TW/Hc%[lX"FA%-bXQc/cX`4vEP:wggqV#,*s88VDGGD?V>yJOO'322
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 68 34 0a cc 66 33 49 d3 34 61 b7 db 09 47 47 38 1c c7 19 8a a2 18 1c c7 59 a5 52 c9 28 14 0a 5a a9 54 da d5 6a 35 e3 e5 e5 85 79 7b 7b b3 a5 4a 95 32 48 24 12 ba 56 ad 5a 29 75 eb d6 a5 df e8 20 de e3 87 e3 ef f1 d8 0b 64 e8 37 6e dc 50 c0 e6 bf 79 f3 a6 fc cf 3f ff 94 df ba 75 ab ec a3 47 8f 3e 4a 4a 4a fa d0 60 30 94 97 48 24 26 9b cd a6 a0 69 5a 88 61 18 89 e3 38 47 92 24 cd 30 8c 90 e3 38 4a 24 12 e9 58 96 15 b2 2c 2b e2 38 0e ae c1 70 1c b7 11 04 c1 ff d8 6c 36 39 fc 06 62 71 dc 03 97 c0 33 38 8a a2 2c 56 ab 95 50 28 14 f7 bc bd bd 2f 97 2e 5d fa 6a e5 ca 95 1f 54 af 5e dd f0 c1 07 1f e8 4a 96 2c a9 ab 54 a9 92 ae 40 06 fa 9e 3e a4 98 40 5e 62 e1 39 8e c3 2f 5e bc a8 fd e5 97 5f 34 e7 ce 9d d3 dc be 7d bb ee dd bb 77 03 68 9a 2e 69 b5 5a 7d 31 0c 93 Data Ascii: h4f3I4aGG8YR(ZTj5y{{J2H$VZ)u d7nPy?uG>JJJ`0H$&iZa8G$08J$X,+8pl69bq38,VP(/.]jT^J,T@>@^b9/^_4}wh.iZ}1
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 21 a0 4d ea 6c b6 85 cf 80 00 9e 3f a1 9d 39 8e f3 09 fd bc 32 8f c4 38 67 31 cc 59 d1 86 eb 41 44 42 e2 19 22 56 e7 e7 40 ff 9c 09 02 71 1e 44 80 b0 c1 9d 39 d6 f3 fe 17 17 1c 24 47 77 81 e7 48 a5 52 18 6f 86 c9 04 46 30 ea be b7 b7 77 6c 50 50 d0 e6 be 7d fb 3e ae 5d bb 76 66 51 24 94 22 49 20 13 27 4e 2c bd 6e dd ba 0e 3a 9d ae a7 d5 6a fd 90 24 49 81 54 2a 95 c0 a6 41 27 a6 4c 26 e3 65 ee 94 94 94 3c d7 15 29 c9 ce 16 28 e7 1b d0 06 84 ef e1 b4 47 e2 10 84 8a 08 04 a0 ce d8 c0 1f 41 72 1c 07 a2 1c 98 87 d1 0f 84 94 80 d9 95 05 c7 1d 41 10 10 5a e2 90 90 78 93 31 ba 87 02 f5 c5 f1 03 5e 46 c2 61 01 a3 09 82 c0 c1 ec cc 30 8c 00 1c 85 ce 1c 02 89 54 40 c0 ce 3a 89 f3 78 d0 21 91 d7 04 c0 1c 59 ad 56 0c cc d5 30 36 b1 58 cc 9b 96 ad 56 ab 11 3e 93 4a a5 Data Ascii: !Ml?928g1YADB"V@qD9$GwHRoF0wlPP}>]vfQ$"I 'N,n:j$IT*A'L&e<)(GArAZx1^Fa0T@:x!YV06XV>J
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 0c 18 08 f8 c3 04 71 11 a4 dc c3 ff c0 a9 ad 74 de 2a 06 cb 30 98 9f bf bf 29 f1 f1 63 5a a5 d1 9c ff e6 db e9 13 7b 77 ef 7d d7 c7 c7 c7 2d c2 57 dc 82 40 20 29 69 d2 b4 69 75 f6 ff b4 27 5c 24 16 f9 0b 04 c2 d2 3a 9d 4e c8 8b 52 96 bc 95 4c 24 43 03 d7 80 53 10 16 1c b8 08 8e e3 46 90 97 6d 36 1b 28 96 d7 05 02 c1 81 ba 75 eb 9e 0e 0a 0a 4a 1d 3d 7a b4 db 73 8a 97 21 14 b8 16 74 97 93 27 4f 7a c7 c4 c4 d4 88 8b 8b fb 92 a6 e9 26 42 21 04 2e 93 72 ab d5 aa 00 9d 43 2e 97 f3 e2 14 88 af 30 87 d0 5c 70 10 de 20 60 a7 69 4c 0b 31 5f b4 ed b1 41 6f 30 77 0f ea 36 61 e2 b8 89 17 ea d6 ad 9b f4 b2 fd 2c ec eb df 79 02 d9 b4 69 53 c9 f0 ef be 0b ba 7d eb 9f 91 02 91 50 81 63 b8 06 05 e7 01 67 e0 98 ec 7c 89 dc 1a 10 05 2c 28 22 14 82 20 68 92 24 33 c1 ea 84 61 Data Ascii: qt*0)cZ{w}-W@ )iiu'\$:NRL$CSFm6(uJ=zs!t'Oz&B!.rC.0\p `iL1_Ao0w6a,yiS}Pcg\|,(" h$3a
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 5d 4e 9e 3e 35 9b 24 c9 72 14 45 01 ba 20 cf 7e 51 96 1d c8 ae d0 60 42 81 ab 80 f5 03 71 10 f8 dc c3 d3 33 23 2d 25 15 94 f1 bd e5 ca 95 5b be 64 c9 92 db 1d 3a 74 c8 3b 45 b0 90 37 ce fb f6 ba cd bb 77 97 99 3e 71 7c cf 7b f7 ee 0f e2 58 d6 4f a3 d5 0a 33 d2 d3 79 b4 3c e0 fa c0 41 80 a3 f0 f9 35 a0 b8 73 18 4f 20 f0 3f 88 66 60 ad 74 84 b5 80 03 37 b3 79 f3 e6 df ed da b5 6b c7 db e2 24 6f 8d 40 6a d5 aa 15 fc d7 5f 7f fd 0f 27 09 2f b1 58 ac 84 c9 01 8e 00 2c 99 47 e5 a0 69 0c ac 56 c0 7e b3 32 33 79 e5 1c 6c ea 4f 92 92 f8 bf 55 2a 55 72 52 62 a2 81 c0 89 15 23 47 8e dc ba 70 e1 42 70 fc 15 b7 77 60 06 20 9b 73 de a2 45 d5 d7 af 59 b3 00 c3 b8 7a be 7e 7e a4 4e a7 93 02 f7 f0 f3 f7 e7 fd 52 06 bd 9e 97 06 c0 0a 09 22 17 3a 00 91 38 0d 52 02 c7 71 06 Data Ascii: ]N>5$rE ~Q`Bq3#-%[d:t;E7w>q\|{XO3y<A5sO ?f`t7yk$o@j_'/X,GiV~23ylOU*UrRb#GpBpw` sEYz~~NR":8Rq
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 8b a2 a8 a7 14 45 a5 97 29 53 66 41 4c 4c cc f6 a2 c8 39 32 33 33 35 89 89 89 9e 4f 9e 3c 91 3e 7c f8 90 32 99 4c 82 f4 f4 74 a1 c1 60 80 68 02 1c 8a 76 6a 34 1a 2b 14 e9 f4 f7 f7 a7 01 5c ce d7 d7 37 cb db db bb c8 e9 5f 7f fc f1 87 a6 43 a7 4e 21 49 49 89 fd e5 72 79 c9 f4 b4 34 15 98 80 79 5d d4 61 d5 04 5d 15 9c 8c c0 3d 78 3d d5 6a e5 89 04 f6 8d 51 6f c8 f2 f5 f5 5d 76 e1 c2 85 05 65 ca 94 29 70 f3 6f 81 13 c8 bd 7b f7 c4 9d ba 74 e9 ff c7 d5 2b 93 85 22 51 49 c0 93 02 f3 1d 58 a7 40 9e 44 15 97 80 53 80 3e 42 e0 04 2f 62 81 92 e6 e5 e5 05 50 31 19 e5 cb 97 9f b5 75 eb d6 dd 45 85 38 6e de bc e9 ff eb af bf aa af 5d bb e6 fb d7 5f 7f 7d 7c eb d6 ad da 8f 1f 3f 6e 4c d3 b4 12 c7 71 80 18 e5 21 45 1d f0 a2 b0 07 20 fa 18 a0 49 f9 3a 84 24 49 9a 4a 94 Data Ascii: E)SfALL92335O<>\|2Lt`hvj4+\7_CN!IIry4y]a]=x=jQo]ve)po{t+"QIX@DS>B/bP1uE8n]_}\|?nLq!E I:$IJ
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 3a 82 20 2e 36 6e dc 78 fe 9c 39 73 ae 34 6c d8 d0 ad c0 a3 a7 4d 9b 56 6e e6 ac 99 3f f8 fa f9 55 67 18 a6 64 f2 d3 a7 bc 79 d7 31 3e 5e a7 05 11 0b e6 1d fe 06 02 71 44 63 24 2a 14 8a 3d 7b f6 ec 09 07 6b df eb cc ff 6b 11 08 88 56 c1 5f 05 87 c4 5d 8a 9b 2e 95 c9 14 d0 39 30 e7 42 f8 32 84 0d 80 07 14 e5 8e 23 27 8f 23 10 2d 2d 2b 33 33 7d d0 90 41 3d 57 2d 5f 75 f9 75 06 50 d8 f7 6e de bc 59 f3 bf ff fd af d3 9d 3b 77 26 10 04 51 5a ad 56 cb 20 42 80 b7 d6 09 85 bc 9f 07 39 3e c1 e3 9b 9a fa 5a eb e3 72 78 8e f8 24 fe 30 42 d5 ad 50 49 6a c7 cd a9 16 8b 25 cb cb cb 2b 72 d9 b2 65 3b 83 82 82 dc ca 00 12 12 16 52 6b dd aa 75 6b d4 1a 4d 39 9d 4e e7 01 3e 34 70 1a c2 1c c3 5c 43 3e 09 e8 b6 90 95 08 d1 bf 40 24 90 33 a4 d7 eb 9f b6 6a d5 6a e0 d1 a3 47 Data Ascii: : .6nx9s4lMVn?Ugdy1>^qDc$*={kkV_].90B2#'#--+33}A=W-_uuPnY;w&QZV B9>Zrx$0BPIj%+re;RkukM9N>4p\C>@$3jjG
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: ad 56 83 5c 2e 9b fd e7 b5 3f 17 fb f9 f9 e5 1b 5c f0 a5 56 b7 47 8f 1e 0d b7 6f df be 47 26 93 f9 a0 62 98 2e ea 6c 5b 19 86 b1 fa fb fb 2f 3b 73 e6 4c 44 41 c5 c7 bc da b4 e6 ff ae 16 2d 5a b4 3c 71 e2 c4 0f 2a 95 aa 44 56 56 96 12 89 29 28 a4 01 95 95 e6 f5 ab 77 5c c4 42 25 d3 9c fb 0e 9c 04 ac 40 60 59 d4 a8 35 e6 8c 8c 8c b4 7a f5 ea 8d bc 74 e9 52 4c fe 67 e9 ed 5d 09 46 92 8a 15 2b 06 03 4e 16 41 91 6a a8 aa 90 5b 6f 10 a6 9a 5a a3 31 67 66 64 3c 19 36 6a 58 a7 65 0b 97 fd 99 df de e7 9b 40 7e fb ed 37 8f 86 0d 1b 6e f6 f4 f4 84 ca a8 5e 28 e3 cb 05 07 d1 4b 24 92 8b 33 66 cc 18 34 7a f4 e8 57 b6 45 e7 77 30 05 71 dd cc 99 33 cb 4c 9f 3e 7d 93 4a a5 aa 94 95 95 c5 73 49 e4 11 e7 ad 41 56 2b 6f 56 84 89 07 c2 a1 99 77 bb 6a 1b 4a 67 06 51 03 9c b6 Data Ascii: V\.?\VGoG&b.l[/;sLDA-Z<q*DVV)(w\B%@`Y5ztRLg]F+NAj[oZ1gfd<6jXe@~7n^(K$3f4zWEw0q3L>}JsIAV+oVwjJgQ
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 2a 55 96 2e 2b eb ea de 9f f6 f6 ee d4 a9 53 ae 51 e5 b9 12 08 50 65 d3 a6 4d bb fc fa eb af ab a5 52 a9 0a 64 37 60 51 3c 42 a2 63 42 91 a8 05 a2 88 c3 5f 60 aa 5a b5 ea d2 5d bb 76 45 d4 a8 51 c3 2d 70 74 c7 8e 1d 5b 75 c1 82 05 87 54 2a 95 8f 4e a7 13 23 3f 01 8c 13 58 33 12 3d 8a aa 88 05 09 47 b0 9e 28 54 1e c6 29 93 c9 00 45 fd fe e4 c9 93 bb cd 99 33 e7 9d 29 c9 9c d7 e1 79 f2 e4 49 6a d8 c8 61 dd ae c7 ff 1d 29 12 89 bc 2d 66 33 01 79 48 3c b6 96 23 15 c3 51 85 97 4f ac 52 ab d5 6c 46 7a 7a 72 cf 1e 3d bf d8 b6 6d db 6f b9 3d 3b 57 02 39 79 f2 a4 ba 79 f3 e6 1b 35 1a 4d e3 8c 8c 0c 2d 10 03 72 94 21 27 21 b0 30 60 67 40 38 d9 d6 35 b3 65 e4 c8 91 ad 17 2f 5e 7c a9 b0 39 c1 ab be af 42 85 0a 5f 3d 7c f8 70 11 c3 30 6a c4 11 81 e0 81 0d 23 fd 2a af Data Ascii: U.+SQPeMRd7`Q<BcB_`Z]vEQ-pt[uTN#?X3=G(T)E3)yIja)-f3yH<#QORlFzzr=mo=;W9yy5M-r!'!0`g@85e/^\|9B_=\|p0j#*
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: f8 19 02 99 3c 79 72 f5 b9 73 e7 c6 90 24 59 09 4a 82 a1 60 2f 84 8a 81 02 13 1d f5 18 58 ab d5 9a d5 bd 7b f7 8e ee 02 c6 e0 3c ad 5f 7c f1 45 fd 9f 7e fa e9 10 41 91 da fc 4d 77 11 bd ca 05 81 30 0c 93 d9 be 7d fb ae fb f7 ef ff d9 dd 66 a0 4f 9f 3e 15 37 6d da 74 48 28 14 fa 32 0c 23 43 29 1a 28 ac 06 f6 31 1c fe f0 39 41 10 26 96 65 af 2f 5e bc b8 9b b3 34 f4 0c 81 34 6e dc 38 08 8a 21 62 18 56 12 d5 b6 40 54 e6 f4 20 54 f7 c2 4e 92 e4 ad 0d 1b 36 b4 fd f2 cb 2f dd 4a bc 82 85 6e d3 a6 4d d3 23 47 8e ec 73 24 fd bb db da 17 5c 7f 5d 10 88 dd 6e 37 b4 6d db 36 e8 d0 a1 43 87 0a ee a5 85 f3 a4 2d 5b b6 78 06 07 07 6f 62 18 a6 b9 48 24 82 02 a9 3c f7 80 06 d2 10 e2 24 0e 88 5c ce 66 b3 3d e9 dd bb 77 e0 96 2d 5b 72 02 6d 73 08 04 40 b9 6a d5 aa b5 ce 60 Data Ascii: <yrs$YJ`/X{<_\|E~AMw0}fO>7mtH(2#C)(19A&e/^44n8!bV@T TN6/JnM#Gs$\]n7m6C-[xobH$<$\f=w-[rms@j`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49815	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	454	OUT	GET /fdx-pkgmsn/files/foot-icon03.svg HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1228	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/svg+xml Content-Length: 3866 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:09 GMT ETag: "f1a-625d9351e20d7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qA5xUyQSRkVGCU36PdRw7Yb2E33e9QZQxZZVBPM3WS%2B2XNxpgpvQNU0vWQoAh4FYLk%2BD8ARryrh090hzZatBFCylsSxJoBsM94bRTR%2BNPWKqunjZgcKLaJyvdiMPndas1dvA%2FzOxi2Lp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101606ee94310-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1615&rtt_var=613&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1032&delivery_rate=1808049&cwnd=241&unsent_bytes=0&cid=05b289b9b5edebb0&ts=482&x=0"
2024-12-12 22:03:36 UTC	141	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 64 65 66 73 3e 3c 70 61 74 68 20 69 64 3d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="40" height="40" viewBox="0 0 40 40"><defs><path id=
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 22 76 76 64 30 62 22 20 64 3d 22 4d 32 36 36 2e 36 37 36 20 35 38 38 2e 39 35 39 76 31 36 2e 35 30 32 63 30 20 39 2e 34 34 38 2d 37 2e 34 34 31 20 31 37 2e 31 32 36 2d 31 36 2e 36 37 33 20 31 37 2e 31 32 36 2d 39 2e 32 35 36 20 30 2d 31 36 2e 36 37 33 2d 37 2e 37 30 36 2d 31 36 2e 36 37 33 2d 31 37 2e 31 32 36 56 35 38 38 2e 39 36 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 31 2e 30 32 34 2d 31 2e 31 37 39 63 2e 31 2d 2e 30 31 34 20 39 2e 38 34 32 2d 31 2e 34 31 20 31 33 2e 39 32 35 2d 33 2e 39 32 36 6c 31 2e 31 2d 2e 36 37 37 61 31 2e 31 38 36 20 31 2e 31 38 36 20 30 20 30 20 31 20 31 2e 32 34 39 20 30 6c 31 2e 30 39 38 2e 36 37 37 63 34 2e 30 38 38 20 32 2e 35 31 38 20 31 33 2e 38 32 37 20 33 2e 39 31 32 20 31 33 2e 39 32 35 20 33 2e 39 32 36 61 Data Ascii: "vvd0b" d="M266.676 588.959v16.502c0 9.448-7.441 17.126-16.673 17.126-9.256 0-16.673-7.706-16.673-17.126V588.96a1.19 1.19 0 0 1 1.024-1.179c.1-.014 9.842-1.41 13.925-3.926l1.1-.677a1.186 1.186 0 0 1 1.249 0l1.098.677c4.088 2.518 13.827 3.912 13.925 3.926a
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 20 31 2e 38 37 36 20 31 30 2e 33 38 31 20 32 2e 39 32 39 20 31 30 2e 34 35 35 20 32 2e 39 34 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 31 2e 30 32 34 20 31 2e 31 37 38 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 61 22 20 64 3d 22 4d 32 33 30 20 35 39 35 2e 34 37 68 34 30 76 31 35 2e 30 38 38 68 2d 34 30 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 67 22 20 64 3d 22 4d 32 36 38 2e 38 31 20 35 39 35 2e 34 37 68 2d 33 37 2e 36 32 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 30 2d 31 2e 31 39 20 31 2e 31 39 76 31 32 2e 37 30 37 63 30 20 2e 36 35 37 2e 35 33 33 20 31 2e 31 39 20 31 2e 31 39 20 31 2e 31 39 68 33 37 2e 36 32 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 30 20 31 2e 31 39 2d 31 2e 31 39 56 35 39 36 2e 36 36 61 31 2e 31 39 Data Ascii: 1.876 10.381 2.929 10.455 2.94a1.19 1.19 0 0 1 1.024 1.178"/><path id="vvd0a" d="M230 595.47h40v15.088h-40z"/><path id="vvd0g" d="M268.81 595.47h-37.62a1.19 1.19 0 0 0-1.19 1.19v12.707c0 .657.533 1.19 1.19 1.19h37.62a1.19 1.19 0 0 0 1.19-1.19V596.66a1.19
2024-12-12 22:03:36 UTC	987	IN	Data Raw: 61 74 68 20 69 64 3d 22 76 76 64 30 6e 22 20 64 3d 22 4d 32 35 33 2e 32 34 20 36 30 34 2e 35 35 32 63 30 20 31 2e 35 2d 31 2e 32 32 20 32 2e 37 32 2d 32 2e 37 32 20 32 2e 37 32 48 32 35 30 76 2d 32 2e 33 38 68 2e 35 32 61 2e 33 34 2e 33 34 20 30 20 30 20 30 20 30 2d 2e 36 38 31 48 32 35 30 76 2d 32 2e 33 38 31 68 2e 35 32 63 31 2e 35 20 30 20 32 2e 37 32 20 31 2e 32 32 20 32 2e 37 32 20 32 2e 37 32 32 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 76 76 64 30 6f 22 20 64 3d 22 4d 32 35 32 2e 30 35 20 36 30 31 2e 31 35 31 48 32 35 30 76 2d 32 2e 33 38 31 68 32 2e 30 35 61 31 2e 31 39 20 31 2e 31 39 20 30 20 30 20 31 20 30 20 32 2e 33 38 31 22 2f 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 76 76 64 30 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 Data Ascii: ath id="vvd0n" d="M253.24 604.552c0 1.5-1.22 2.72-2.72 2.72H250v-2.38h.52a.34.34 0 0 0 0-.681H250v-2.381h.52c1.5 0 2.72 1.22 2.72 2.722"/><path id="vvd0o" d="M252.05 601.151H250v-2.381h2.05a1.19 1.19 0 0 1 0 2.381"/><clipPath id="vvd0f"><use xlink:href="#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49816	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	663	OUT	GET /i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:36 UTC	1105	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FZbPZhTV79jJFhKfQpIuG4N7lY6eripgOYaCTZfiZ3XsDP%2BaB%2BABmHnse21hQVI5TzlYKb2KM4RgVm%2FiU2Im2Eu3LuVKzEGi9xp%2FEGAo7iLQatq4Ah019FIjZCFQyeM1egtyyELekiBg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110160882cefa7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2252&min_rtt=2247&rtt_var=853&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1241&delivery_rate=1275109&cwnd=161&unsent_bytes=0&cid=bc3a9dca7d7368fa&ts=821&x=0"
2024-12-12 22:03:36 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49818	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	663	OUT	GET /i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:36 UTC	1103	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HlXrgm5yk0momOj5taslscbuwnhSDxEAU4%2BMBjfJPT5WruXB%2FZ47Dw301374NZibkHTF7uWG9fckVAsyeoScK4DVrCDhlLUj8Zfci%2BDJlGqfdeQSARWogBFmxq2e1c5bWpven2Kdv6WQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110160ad294328-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1649&rtt_var=647&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1241&delivery_rate=1770770&cwnd=220&unsent_bytes=0&cid=9548536fb19f4119&ts=818&x=0"
2024-12-12 22:03:36 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49817	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	465	OUT	GET /js/fingerprintjs2/1.5.0/fingerprint2.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1250	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 25 Oct 2023 20:20:19 GMT ETag: W/"870d-608902f2762e1-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4906 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1FuYpRFJIUoNEeHNGgyW4AqM3CnSrcJQBLHxJ0hz7No7p%2F%2F3RSAEQtBdyC77OFwGNF9YSknJeLBtnlrPDDWwVL4G1MOCjNsSJkjTBeLXALOF2vdi7ZqFGG%2BUYqDHzDVCAfmo4OVfbJvY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110160ae040cae-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1860&min_rtt=1742&rtt_var=737&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1043&delivery_rate=1676234&cwnd=252&unsent_bytes=0&cid=bfe61790b1ea4400&ts=466&x=0"
2024-12-12 22:03:36 UTC	119	IN	Data Raw: 37 62 39 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e Data Ascii: 7b96!function(e,t,i){"use strict";"function"==typeof define&&define.amd?define(i):"undefined"!=typeof module&&module.
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 29 3a 74 2e 65 78 70 6f 72 74 73 3f 74 2e 65 78 70 6f 72 74 73 3d 69 28 29 3a 74 5b 65 5d 3d 69 28 29 7d 28 22 46 69 6e 67 65 72 70 72 69 6e 74 32 22 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 27 74 68 69 73 27 20 69 73 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 74 68 Data Ascii: exports?module.exports=i():t.exports?t.exports=i():t[e]=i()}("Fingerprint2",this,function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(e,t){var i;if(null==this)throw new TypeError("'this' is null or undefined");var a=Object(th
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 29 2c 74 3d 74 68 69 73 2e 70 6c 75 67 69 6e 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 63 61 6e 76 61 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 77 65 62 67 6c 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 61 64 42 6c 6f 63 6b 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 4c 61 6e 67 75 61 67 65 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 52 65 73 6f 6c 75 74 69 6f 6e 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 4f 73 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 68 61 73 4c 69 65 64 42 72 6f 77 73 65 72 4b 65 79 28 74 29 2c 74 3d 74 68 69 73 2e 74 6f 75 63 68 53 75 70 70 6f 72 74 4b 65 79 28 74 29 3b 76 61 72 20 69 3d 74 68 69 73 3b 74 68 69 73 2e 66 6f 6e 74 73 4b 65 79 28 74 2c 66 75 6e 63 74 69 6f Data Ascii: ),t=this.pluginsKey(t),t=this.canvasKey(t),t=this.webglKey(t),t=this.adBlockKey(t),t=this.hasLiedLanguagesKey(t),t=this.hasLiedResolutionKey(t),t=this.hasLiedOsKey(t),t=this.hasLiedBrowserKey(t),t=this.touchSupportKey(t);var i=this;this.fontsKey(t,functio
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 5d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 26 26 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 74 7d 29 2c 65 7d 2c 61 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 3f 65 3a 74 68 69 73 2e 67 65 74 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 28 65 29 7d 2c 67 65 74 41 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 Data Ascii: height],"undefined"!=typeof t&&e.push({key:"resolution",value:t}),e},availableScreenResolutionKey:function(e){return this.options.excludeAvailableScreenResolution?e:this.getAvailableScreenResolution(e)},getAvailableScreenResolution:function(e){var t;retur
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 62 61 73 65 22 2c 76 61 6c 75 65 3a 31 7d 29 2c 65 7d 2c 63 70 75 43 6c 61 73 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 43 70 75 43 6c 61 73 73 7c 7c 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 63 70 75 5f 63 6c 61 73 73 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 67 65 74 4e 61 76 69 67 61 74 6f 72 43 70 75 43 6c 61 73 73 28 29 7d 29 2c 65 7d 2c 70 6c 61 74 66 6f 72 6d 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 50 6c 61 74 66 6f 72 6d 7c 7c 65 2e 70 75 73 68 28 7b 6b 65 79 3a 22 6e 61 76 69 67 61 74 6f 72 5f 70 6c 61 74 66 6f 72 6d 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 67 65 74 4e 61 76 69 Data Ascii: base",value:1}),e},cpuClassKey:function(e){return this.options.excludeCpuClass\|\|e.push({key:"cpu_class",value:this.getNavigatorCpuClass()}),e},platformKey:function(e){return this.options.excludePlatform\|\|e.push({key:"navigator_platform",value:this.getNavi
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 4a 73 46 6f 6e 74 73 3f 74 68 69 73 2e 66 6c 61 73 68 46 6f 6e 74 73 4b 65 79 28 65 2c 74 29 3a 74 68 69 73 2e 6a 73 46 6f 6e 74 73 4b 65 79 28 65 2c 74 29 7d 2c 66 6c 61 73 68 46 6f 6e 74 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 46 6c 61 73 68 46 6f 6e 74 73 3f 74 28 65 29 3a 74 68 69 73 2e 68 61 73 53 77 66 4f 62 6a 65 63 74 4c 6f 61 64 65 64 28 29 26 26 74 68 69 73 2e 68 61 73 4d 69 6e 46 6c 61 73 68 49 6e 73 74 61 6c 6c 65 64 28 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 77 66 50 61 74 68 3f 74 28 65 29 3a 76 6f 69 64 20 74 68 69 73 2e 6c Data Ascii: is.options.excludeJsFonts?this.flashFontsKey(e,t):this.jsFontsKey(e,t)},flashFontsKey:function(e,t){return this.options.excludeFlashFonts?t(e):this.hasSwfObjectLoaded()&&this.hasMinFlashInstalled()?"undefined"==typeof this.options.swfPath?t(e):void this.l
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 68 65 74 20 4d 53 22 2c 22 56 65 72 64 61 6e 61 22 2c 22 57 69 6e 67 64 69 6e 67 73 22 2c 22 57 69 6e 67 64 69 6e 67 73 20 32 22 2c 22 57 69 6e 67 64 69 6e 67 73 20 33 22 5d 2c 6e 3d 5b 22 41 62 61 64 69 20 4d 54 20 43 6f 6e 64 65 6e 73 65 64 20 4c 69 67 68 74 22 2c 22 41 63 61 64 65 6d 79 20 45 6e 67 72 61 76 65 64 20 4c 45 54 22 2c 22 41 44 4f 42 45 20 43 41 53 4c 4f 4e 20 50 52 4f 22 2c 22 41 64 6f 62 65 20 47 61 72 61 6d 6f 6e 64 22 2c 22 41 44 4f 42 45 20 47 41 52 41 4d 4f 4e 44 20 50 52 4f 22 2c 22 41 67 65 6e 63 79 20 46 42 22 2c 22 41 68 61 72 6f 6e 69 22 2c 22 41 6c 62 65 72 74 75 73 20 45 78 74 72 61 20 42 6f 6c 64 22 2c 22 41 6c 62 65 72 74 75 73 20 4d 65 64 69 75 6d 22 2c 22 41 6c 67 65 72 69 61 6e 22 2c 22 41 6d 61 7a 6f 6e 65 20 42 54 22 2c Data Ascii: het MS","Verdana","Wingdings","Wingdings 2","Wingdings 3"],n=["Abadi MT Condensed Light","Academy Engraved LET","ADOBE CASLON PRO","Adobe Garamond","ADOBE GARAMOND PRO","Agency FB","Aharoni","Albertus Extra Bold","Albertus Medium","Algerian","Amazone BT",
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 53 45 22 2c 22 43 68 61 6c 6b 64 75 73 74 65 72 22 2c 22 43 68 61 72 6c 65 73 77 6f 72 74 68 22 2c 22 43 68 61 72 74 65 72 20 42 64 20 42 54 22 2c 22 43 68 61 72 74 65 72 20 42 54 22 2c 22 43 68 61 75 63 65 72 22 2c 22 43 68 65 6c 74 68 6d 49 54 43 20 42 6b 20 42 54 22 2c 22 43 68 69 6c 6c 65 72 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 43 6c 6f 69 73 74 65 72 42 6c 61 63 6b 20 42 54 22 2c 22 43 6f 63 68 69 6e 22 2c 22 43 6f 6c 6f 6e 6e 61 20 4d 54 22 2c 22 43 6f 6e 73 74 61 6e 74 69 61 22 2c 22 43 6f 6f 70 65 72 20 42 6c 61 63 6b 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 Data Ascii: SE","Chalkduster","Charlesworth","Charter Bd BT","Charter BT","Chaucer","ChelthmITC Bk BT","Chiller","Clarendon","Clarendon Condensed","CloisterBlack BT","Cochin","Colonna MT","Constantia","Cooper Black","Copperplate","Copperplate Gothic","Copperplate Got
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 47 6c 6f 75 63 65 73 74 65 72 20 4d 54 20 45 78 74 72 61 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 47 4f 54 48 41 4d 22 2c 22 47 4f 54 48 41 4d 20 42 4f 4c 44 22 2c 22 47 6f 75 64 79 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 47 6f 75 64 79 20 53 74 6f 75 74 22 2c 22 47 6f 75 64 79 48 61 6e 64 74 6f 6f 6c 65 64 20 42 54 22 2c 22 47 6f 75 64 79 4f 4c 53 74 20 42 54 22 2c 22 47 75 6a 61 72 61 74 69 20 53 61 6e 67 61 6d 20 4d 4e 22 2c 22 47 75 6c 69 6d 22 2c 22 47 75 6c 69 6d 43 68 65 22 2c 22 47 75 6e 67 73 75 68 22 2c 22 47 75 6e 67 73 75 68 43 68 65 22 2c 22 47 75 72 6d 75 6b 68 69 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 22 2c 22 48 61 72 6c 6f 77 20 53 6f 6c 69 64 20 49 74 61 6c 69 63 22 2c 22 48 61 72 72 69 6e 67 74 6f 6e 22 2c 22 48 Data Ascii: Gloucester MT Extra Condensed","GOTHAM","GOTHAM BOLD","Goudy Old Style","Goudy Stout","GoudyHandtooled BT","GoudyOLSt BT","Gujarati Sangam MN","Gulim","GulimChe","Gungsuh","GungsuhChe","Gurmukhi MN","Haettenschweiler","Harlow Solid Italic","Harrington","H
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 55 5f 48 4b 53 43 53 22 2c 22 4d 69 6e 67 4c 69 55 5f 48 4b 53 43 53 2d 45 78 74 42 22 2c 22 4d 69 6e 67 4c 69 55 2d 45 78 74 42 22 2c 22 4d 69 6e 69 6f 6e 22 2c 22 4d 69 6e 69 6f 6e 20 50 72 6f 22 2c 22 4d 69 72 69 61 6d 22 2c 22 4d 69 72 69 61 6d 20 46 69 78 65 64 22 2c 22 4d 69 73 74 72 61 6c 22 2c 22 4d 6f 64 65 72 6e 22 2c 22 4d 6f 64 65 72 6e 20 4e 6f 2e 20 32 30 22 2c 22 4d 6f 6e 61 20 4c 69 73 61 20 53 6f 6c 69 64 20 49 54 43 20 54 54 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 4f 4e 4f 22 2c 22 4d 6f 6f 6c 42 6f 72 61 6e 22 2c 22 4d 72 73 20 45 61 76 65 73 22 2c 22 4d 53 20 4c 69 6e 65 44 72 61 77 22 2c 22 4d 53 20 4d 69 6e 63 68 6f 22 2c 22 4d 53 20 50 4d 69 6e 63 68 6f 22 2c 22 4d 53 20 52 65 66 65 72 65 6e 63 65 20 53 70 Data Ascii: U_HKSCS","MingLiU_HKSCS-ExtB","MingLiU-ExtB","Minion","Minion Pro","Miriam","Miriam Fixed","Mistral","Modern","Modern No. 20","Mona Lisa Solid ITC TT","Mongolian Baiti","MONO","MoolBoran","Mrs Eaves","MS LineDraw","MS Mincho","MS PMincho","MS Reference Sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49820	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	476	OUT	GET /assets/js/mobile-detect.js-master/mobile-detect.min.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1254	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 25 Oct 2023 20:20:04 GMT ETag: W/"92a8-608902e452135-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4906 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6087z%2FVX%2BZPCbMTqmQtS4ZsjhWq6uC4APedOItHOH4KNAIo3Rm6FyQoxU%2F%2FJq4FO9corsUQIwO04FlBjAyUYfzYOcgPeC1nnsxRIpW1rsVLTiDVkof4FYKX10qM%2FqcIyAsncfiH4Twit"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110160ec940f73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1770&min_rtt=1716&rtt_var=682&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1054&delivery_rate=1701631&cwnd=233&unsent_bytes=0&cid=e4d2320f8d553a82&ts=491&x=0"
2024-12-12 22:03:36 UTC	115	IN	Data Raw: 37 62 39 32 0d 0a 2f 2a 21 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 48 65 69 6e 72 69 63 68 20 47 6f 65 62 6c 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 68 67 6f 65 62 6c 2f 6d 6f 62 69 6c 65 2d 64 65 74 65 63 74 2e 6a 73 2a 2f 0a 21 66 Data Ascii: 7b92/!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/!f
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 6e 75 6c 6c 21 3d 62 26 26 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 21 65 7c 7c 21 62 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 63 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 3d 30 3b 64 3c 65 3b 2b 2b 64 29 69 66 28 63 3d 3d 3d 61 5b 64 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: unction(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;d<e;++d)if(c===a[d].toLowerCase())return!0;return!1}function
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 7c 4d 54 38 37 30 7c 4d 54 39 31 37 7c 4d 6f 74 6f 72 6f 6c 61 2e 2a 54 49 54 41 4e 49 55 4d 7c 57 58 34 33 35 7c 57 58 34 34 35 7c 58 54 33 30 30 7c 58 54 33 30 31 7c 58 54 33 31 31 7c 58 54 33 31 36 7c 58 54 33 31 37 7c 58 54 33 31 39 7c 58 54 33 32 30 7c 58 54 33 39 30 7c 58 54 35 30 32 7c 58 54 35 33 30 7c 58 54 35 33 31 7c 58 54 35 33 32 7c 58 54 35 33 35 7c 58 54 36 30 33 7c 58 54 36 31 30 7c 58 54 36 31 31 7c 58 54 36 31 35 7c 58 54 36 38 31 7c 58 54 37 30 31 7c 58 54 37 30 32 7c 58 54 37 31 31 7c 58 54 37 32 30 7c 58 54 38 30 30 7c 58 54 38 30 36 7c 58 54 38 36 30 7c 58 54 38 36 32 7c 58 54 38 37 35 7c 58 54 38 38 32 7c 58 54 38 38 33 7c 58 54 38 39 34 7c 58 54 39 30 31 7c 58 54 39 30 37 7c 58 54 39 30 39 7c 58 54 39 31 30 7c 58 54 39 31 32 7c 58 Data Ascii: \|MT870\|MT917\|Motorola.*TITANIUM\|WX435\|WX445\|XT300\|XT301\|XT311\|XT316\|XT317\|XT319\|XT320\|XT390\|XT502\|XT530\|XT531\|XT532\|XT535\|XT603\|XT610\|XT611\|XT615\|XT681\|XT701\|XT702\|XT711\|XT720\|XT800\|XT806\|XT860\|XT862\|XT875\|XT882\|XT883\|XT894\|XT901\|XT907\|XT909\|XT910\|XT912\|X
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 2d 49 39 31 30 30 7c 47 54 2d 49 39 31 30 33 7c 47 54 2d 49 39 32 32 30 7c 47 54 2d 49 39 32 35 30 7c 47 54 2d 49 39 33 30 30 7c 47 54 2d 49 39 33 30 35 7c 47 54 2d 49 39 35 30 30 7c 47 54 2d 49 39 35 30 35 7c 47 54 2d 4d 33 35 31 30 7c 47 54 2d 4d 35 36 35 30 7c 47 54 2d 4d 37 35 30 30 7c 47 54 2d 4d 37 36 30 30 7c 47 54 2d 4d 37 36 30 33 7c 47 54 2d 4d 38 38 30 30 7c 47 54 2d 4d 38 39 31 30 7c 47 54 2d 4e 37 30 30 30 7c 47 54 2d 53 33 31 31 30 7c 47 54 2d 53 33 33 31 30 7c 47 54 2d 53 33 33 35 30 7c 47 54 2d 53 33 33 35 33 7c 47 54 2d 53 33 33 37 30 7c 47 54 2d 53 33 36 35 30 7c 47 54 2d 53 33 36 35 33 7c 47 54 2d 53 33 37 37 30 7c 47 54 2d 53 33 38 35 30 7c 47 54 2d 53 35 32 31 30 7c 47 54 2d 53 35 32 32 30 7c 47 54 2d 53 35 32 32 39 7c 47 54 2d 53 35 Data Ascii: -I9100\|GT-I9103\|GT-I9220\|GT-I9250\|GT-I9300\|GT-I9305\|GT-I9500\|GT-I9505\|GT-M3510\|GT-M5650\|GT-M7500\|GT-M7600\|GT-M7603\|GT-M8800\|GT-M8910\|GT-N7000\|GT-S3110\|GT-S3310\|GT-S3350\|GT-S3353\|GT-S3370\|GT-S3650\|GT-S3653\|GT-S3770\|GT-S3850\|GT-S5210\|GT-S5220\|GT-S5229\|GT-S5
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 48 2d 41 32 35 37 7c 53 47 48 2d 41 34 33 37 7c 53 47 48 2d 41 35 31 37 7c 53 47 48 2d 41 35 39 37 7c 53 47 48 2d 41 36 33 37 7c 53 47 48 2d 41 36 35 37 7c 53 47 48 2d 41 36 36 37 7c 53 47 48 2d 41 36 38 37 7c 53 47 48 2d 41 36 39 37 7c 53 47 48 2d 41 37 30 37 7c 53 47 48 2d 41 37 31 37 7c 53 47 48 2d 41 37 32 37 7c 53 47 48 2d 41 37 33 37 7c 53 47 48 2d 41 37 34 37 7c 53 47 48 2d 41 37 36 37 7c 53 47 48 2d 41 37 37 37 7c 53 47 48 2d 41 37 39 37 7c 53 47 48 2d 41 38 31 37 7c 53 47 48 2d 41 38 32 37 7c 53 47 48 2d 41 38 33 37 7c 53 47 48 2d 41 38 34 37 7c 53 47 48 2d 41 38 36 37 7c 53 47 48 2d 41 38 37 37 7c 53 47 48 2d 41 38 38 37 7c 53 47 48 2d 41 38 39 37 7c 53 47 48 2d 41 39 32 37 7c 53 47 48 2d 42 31 30 30 7c 53 47 48 2d 42 31 33 30 7c 53 47 48 2d 42 Data Ascii: H-A257\|SGH-A437\|SGH-A517\|SGH-A597\|SGH-A637\|SGH-A657\|SGH-A667\|SGH-A687\|SGH-A697\|SGH-A707\|SGH-A717\|SGH-A727\|SGH-A737\|SGH-A747\|SGH-A767\|SGH-A777\|SGH-A797\|SGH-A817\|SGH-A827\|SGH-A837\|SGH-A847\|SGH-A867\|SGH-A877\|SGH-A887\|SGH-A897\|SGH-A927\|SGH-B100\|SGH-B130\|SGH-B
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 48 2d 54 36 33 39 7c 53 47 48 2d 54 36 35 39 7c 53 47 48 2d 54 36 36 39 7c 53 47 48 2d 54 36 37 39 7c 53 47 48 2d 54 37 30 39 7c 53 47 48 2d 54 37 31 39 7c 53 47 48 2d 54 37 32 39 7c 53 47 48 2d 54 37 33 39 7c 53 47 48 2d 54 37 34 36 7c 53 47 48 2d 54 37 34 39 7c 53 47 48 2d 54 37 35 39 7c 53 47 48 2d 54 37 36 39 7c 53 47 48 2d 54 38 30 39 7c 53 47 48 2d 54 38 31 39 7c 53 47 48 2d 54 38 33 39 7c 53 47 48 2d 54 39 31 39 7c 53 47 48 2d 54 39 32 39 7c 53 47 48 2d 54 39 33 39 7c 53 47 48 2d 54 39 35 39 7c 53 47 48 2d 54 39 38 39 7c 53 47 48 2d 55 31 30 30 7c 53 47 48 2d 55 32 30 30 7c 53 47 48 2d 55 38 30 30 7c 53 47 48 2d 56 32 30 35 7c 53 47 48 2d 56 32 30 36 7c 53 47 48 2d 58 31 30 30 7c 53 47 48 2d 58 31 30 35 7c 53 47 48 2d 58 31 32 30 7c 53 47 48 2d 58 Data Ascii: H-T639\|SGH-T659\|SGH-T669\|SGH-T679\|SGH-T709\|SGH-T719\|SGH-T729\|SGH-T739\|SGH-T746\|SGH-T749\|SGH-T759\|SGH-T769\|SGH-T809\|SGH-T819\|SGH-T839\|SGH-T919\|SGH-T929\|SGH-T939\|SGH-T959\|SGH-T989\|SGH-U100\|SGH-U200\|SGH-U800\|SGH-V205\|SGH-V206\|SGH-X100\|SGH-X105\|SGH-X120\|SGH-X
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 30 49 7c 53 4d 2d 47 39 30 30 4a 7c 53 4d 2d 47 39 30 30 4b 7c 53 4d 2d 47 39 30 30 4c 7c 53 4d 2d 47 39 30 30 4d 7c 53 4d 2d 47 39 30 30 50 7c 53 4d 2d 47 39 30 30 52 34 7c 53 4d 2d 47 39 30 30 53 7c 53 4d 2d 47 39 30 30 54 7c 53 4d 2d 47 39 30 30 56 7c 53 4d 2d 47 39 30 30 57 38 7c 53 48 56 2d 45 31 36 30 4b 7c 53 43 48 2d 50 37 30 39 7c 53 43 48 2d 50 37 32 39 7c 53 4d 2d 54 32 35 35 38 7c 47 54 2d 49 39 32 30 35 7c 53 4d 2d 47 39 33 35 30 7c 53 4d 2d 4a 31 32 30 46 22 2c 4c 47 3a 22 5c 5c 62 4c 47 5c 5c 62 3b 7c 4c 47 5b 2d 20 5d 3f 28 43 38 30 30 7c 43 39 30 30 7c 45 34 30 30 7c 45 36 31 30 7c 45 39 30 30 7c 45 2d 39 30 30 7c 46 31 36 30 7c 46 31 38 30 4b 7c 46 31 38 30 4c 7c 46 31 38 30 53 7c 37 33 30 7c 38 35 35 7c 4c 31 36 30 7c 4c 53 37 34 30 7c Data Ascii: 0I\|SM-G900J\|SM-G900K\|SM-G900L\|SM-G900M\|SM-G900P\|SM-G900R4\|SM-G900S\|SM-G900T\|SM-G900V\|SM-G900W8\|SHV-E160K\|SCH-P709\|SCH-P729\|SM-T2558\|GT-I9205\|SM-G9350\|SM-J120F",LG:"\\bLG\\b;\|LG[- ]?(C800\|C900\|E400\|E610\|E900\|E-900\|F160\|F180K\|F180L\|F180S\|730\|855\|L160\|LS740\|
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 4d 2d 41 36 33 30 4b 7c 49 4d 2d 41 36 30 30 53 7c 56 45 47 41 20 50 54 4c 32 31 7c 50 54 30 30 33 7c 50 38 30 31 30 7c 41 44 52 39 31 30 4c 7c 50 36 30 33 30 7c 50 36 30 32 30 7c 50 39 30 37 30 7c 50 34 31 30 30 7c 50 39 30 36 30 7c 50 35 30 30 30 7c 43 44 4d 38 39 39 32 7c 54 58 54 38 30 34 35 7c 41 44 52 38 39 39 35 7c 49 53 31 31 50 54 7c 50 32 30 33 30 7c 50 36 30 31 30 7c 50 38 30 30 30 7c 50 54 30 30 32 7c 49 53 30 36 7c 43 44 4d 38 39 39 39 7c 50 39 30 35 30 7c 50 54 30 30 31 7c 54 58 54 38 30 34 30 7c 50 32 30 32 30 7c 50 39 30 32 30 7c 50 32 30 30 30 7c 50 37 30 34 30 7c 50 37 30 30 30 7c 43 37 39 30 22 2c 46 6c 79 3a 22 49 51 32 33 30 7c 49 51 34 34 34 7c 49 51 34 35 30 7c 49 51 34 34 30 7c 49 51 34 34 32 7c 49 51 34 34 31 7c 49 51 32 34 35 7c Data Ascii: M-A630K\|IM-A600S\|VEGA PTL21\|PT003\|P8010\|ADR910L\|P6030\|P6020\|P9070\|P4100\|P9060\|P5000\|CDM8992\|TXT8045\|ADR8995\|IS11PT\|P2030\|P6010\|P8000\|PT002\|IS06\|CDM8999\|P9050\|PT001\|TXT8040\|P2020\|P9020\|P2000\|P7040\|P7000\|C790",Fly:"IQ230\|IQ444\|IQ450\|IQ440\|IQ442\|IQ441\|IQ245\|
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 39 7c 53 47 48 2d 54 38 35 39 7c 53 47 48 2d 54 38 36 39 7c 53 50 48 2d 50 31 30 30 7c 47 54 2d 50 33 31 30 30 7c 47 54 2d 50 33 31 30 38 7c 47 54 2d 50 33 31 31 30 7c 47 54 2d 50 35 31 30 30 7c 47 54 2d 50 35 31 31 30 7c 47 54 2d 50 36 32 30 30 7c 47 54 2d 50 37 33 32 30 7c 47 54 2d 50 37 35 31 31 7c 47 54 2d 4e 38 30 30 30 7c 47 54 2d 50 38 35 31 30 7c 53 47 48 2d 49 34 39 37 7c 53 50 48 2d 50 35 30 30 7c 53 47 48 2d 54 37 37 39 7c 53 43 48 2d 49 37 30 35 7c 53 43 48 2d 49 39 31 35 7c 47 54 2d 4e 38 30 31 33 7c 47 54 2d 50 33 31 31 33 7c 47 54 2d 50 35 31 31 33 7c 47 54 2d 50 38 31 31 30 7c 47 54 2d 4e 38 30 31 30 7c 47 54 2d 4e 38 30 30 35 7c 47 54 2d 4e 38 30 32 30 7c 47 54 2d 50 31 30 31 33 7c 47 54 2d 50 36 32 30 31 7c 47 54 2d 50 37 35 30 31 7c 47 Data Ascii: 9\|SGH-T859\|SGH-T869\|SPH-P100\|GT-P3100\|GT-P3108\|GT-P3110\|GT-P5100\|GT-P5110\|GT-P6200\|GT-P7320\|GT-P7511\|GT-N8000\|GT-P8510\|SGH-I497\|SPH-P500\|SGH-T779\|SCH-I705\|SCH-I915\|GT-N8013\|GT-P3113\|GT-P5113\|GT-P8110\|GT-N8010\|GT-N8005\|GT-N8020\|GT-P1013\|GT-P6201\|GT-P7501\|G
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 2d 54 35 36 37 7c 53 4d 2d 54 33 35 37 54 7c 53 4d 2d 54 35 35 35 7c 53 4d 2d 54 35 36 31 7c 53 4d 2d 54 37 31 33 7c 53 4d 2d 54 37 31 39 7c 53 4d 2d 54 38 31 33 7c 53 4d 2d 54 38 31 39 7c 53 4d 2d 54 35 38 30 7c 53 4d 2d 54 33 35 35 59 7c 53 4d 2d 54 32 38 30 22 2c 4b 69 6e 64 6c 65 3a 22 4b 69 6e 64 6c 65 7c 53 69 6c 6b 2e 2a 41 63 63 65 6c 65 72 61 74 65 64 7c 41 6e 64 72 6f 69 64 2e 2a 5c 5c 62 28 4b 46 4f 54 7c 4b 46 54 54 7c 4b 46 4a 57 49 7c 4b 46 4a 57 41 7c 4b 46 4f 54 45 7c 4b 46 53 4f 57 49 7c 4b 46 54 48 57 49 7c 4b 46 54 48 57 41 7c 4b 46 41 50 57 49 7c 4b 46 41 50 57 41 7c 57 46 4a 57 41 45 7c 4b 46 53 41 57 41 7c 4b 46 53 41 57 49 7c 4b 46 41 53 57 49 7c 4b 46 41 52 57 49 29 5c 5c 62 22 2c 53 75 72 66 61 63 65 54 61 62 6c 65 74 3a 22 57 69 Data Ascii: -T567\|SM-T357T\|SM-T555\|SM-T561\|SM-T713\|SM-T719\|SM-T813\|SM-T819\|SM-T580\|SM-T355Y\|SM-T280",Kindle:"Kindle\|Silk.Accelerated\|Android.\\b(KFOT\|KFTT\|KFJWI\|KFJWA\|KFOTE\|KFSOWI\|KFTHWI\|KFTHWA\|KFAPWI\|KFAPWA\|WFJWAE\|KFSAWA\|KFSAWI\|KFASWI\|KFARWI)\\b",SurfaceTablet:"Wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49819	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	1992	OUT	GET /fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:36 UTC	1196	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/png Content-Length: 2317 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4687 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HF2UGUBVXDZt6Ysslpb9f6X7ZlGTysiAtWuP23x1%2FLFQY9C%2BDbh7hOe1gMDMOH7MDuJCqTKZcGeam7hCOlNLWgRV6cvPkL0L7TWil2sDMe6ryoSV11tLkNY%2BrEk9jU2WLQ5vmXwmOFLZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110160ed134301-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2453&min_rtt=1788&rtt_var=1145&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2592&delivery_rate=1633109&cwnd=157&unsent_bytes=0&cid=2f4c7b8336a293f5&ts=468&x=0"
2024-12-12 22:03:36 UTC	173	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 11 08 06 00 00 00 8f 67 b1 f5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d Data Ascii: PNGIHDRGgtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x=
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 Data Ascii: "adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adob
2024-12-12 22:03:36 UTC	775	IN	Data Raw: 43 bb 85 03 81 31 70 bb 28 5f 22 93 b8 49 bc 4c 3f 49 bb 89 eb 24 2e ca 35 17 b3 ef 66 30 4a 9b c5 b1 c0 c8 58 ea d7 f9 fb 72 78 b5 6a 8c ca e1 45 f0 ed ee e1 45 78 e3 7c e9 3c 70 3e 93 aa 33 7c 93 76 cf 0e 04 c6 c0 d6 c5 f6 92 3d 65 6f e1 10 2e e1 14 6e 17 7d 10 5f c4 27 f1 ed d6 58 e5 fb 89 65 b7 0c 67 1a 74 44 2d 06 26 a8 20 1c 89 22 14 89 20 1a 8d e2 dc 9f 97 74 4d d7 96 49 60 06 bf 39 ab bd 7d 34 9e 8f df 5b aa d0 c3 1b 08 f0 16 fb 55 63 8e 52 4e d5 8b 7e 36 ed 6a 06 a5 f8 6a 2f 0f ca ee 54 db 76 14 cd 1e e3 f6 6f e1 a4 6a 2b 6a 45 bf 84 76 15 77 e0 18 68 65 26 ce 37 d7 c1 1f 96 c3 18 18 99 a3 d4 ff dc 28 fa a7 69 d7 70 57 59 c9 5e b2 a7 ec 2d 1c b7 7c 15 6e f1 41 7c 11 9f c4 b7 7f 8f 35 3d 87 f8 d6 6c 40 13 ab 40 11 1e 05 11 06 25 aa 69 a8 6f 6e 91 Data Ascii: C1p(_"IL?I$.5f0JXrxjEEx\|<p>3\|v=eo.n}_'XegtD-& " tMI`9}4[UcRN~6jj/Tvoj+jEvwhe&7(ipWY^-\|nA\|5=l@@%ion

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49822	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	644	OUT	GET /nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:36 UTC	1355	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/jpeg Content-Length: 16402 Connection: close x-goog-generation: 1683910272215621 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16402 x-goog-hash: crc32c=PEuVPg== x-goog-hash: md5=kJboOt6qSKk+dnNwgPgE4w== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY00AJoRSh-NdvcGH9On19Hzc8BLdez9y49IinWK3xCqFkG5xt6AgcdWiJt-BhauMTqJU7I Expires: Thu, 12 Dec 2024 22:14:14 GMT Cache-Control: public, max-age=14400 Last-Modified: Fri, 12 May 2023 16:51:12 GMT ETag: "9096e83adeaa48a93e76737080f804e3" Age: 2962 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X2zG%2BdeDv7S1BdwwgZwe2AWKhIYcvU9pl56focPMTdfgoowodpOpqbsxY4I%2Bm6%2Fv1AVLSt8TOuU7zKL%2Fuog3hRcG7pvNAQrjG%2FycUlnP%2FEpQ2Duc85vuajzcaCLkGjZdub2H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:36 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 36 31 36 63 37 38 34 32 38 33 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 30 33 26 6d 69 6e 5f 72 74 74 3d 31 37 37 38 26 72 74 74 5f 76 61 72 3d 36 38 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 32 32 39 34 26 63 77 6e 64 3d 32 34 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 38 32 36 66 64 38 37 38 32 61 Data Ascii: CF-RAY: 8f1101616c784283-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1803&min_rtt=1778&rtt_var=685&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1222&delivery_rate=1642294&cwnd=241&unsent_bytes=0&cid=9826fd8782a
2024-12-12 22:03:36 UTC	1107	IN	Data Raw: ff d8 ff db 00 84 00 1a 19 19 27 1c 27 3e 25 25 3e 42 2f 2f 2f 42 47 3d 3b 3b 3d 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 01 1c 27 27 33 26 33 3d 26 26 3d 47 3d 32 3d 47 47 47 44 44 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff dd 00 04 00 26 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 02 d0 02 58 03 00 22 00 01 11 01 02 11 01 ff c4 00 8f 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 10 00 02 01 03 02 05 02 05 02 05 04 02 02 03 00 00 00 01 02 03 04 11 12 31 05 Data Ascii: ''>%%>B///BG=;;=GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG''3&3=&&=G=2=GGGDDGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG&AdobedX"1
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: e0 00 00 00 00 00 00 00 06 a5 e5 d2 b6 86 af a9 fc a8 d8 a9 52 34 a2 e7 2d 91 e3 af 2e a5 71 37 27 b7 65 e1 01 8a a5 59 54 93 94 9e 5b 31 39 60 ab 66 19 cc 09 9d 42 b4 e9 4a a7 e0 cb 4a df 3e a9 ed e0 da cf 65 d1 01 8e 34 e3 4f 6e ac ac b2 cc 98 21 b0 30 e8 23 41 91 c8 8e ac 0a 68 23 49 97 49 2a 08 a3 0e 11 18 36 54 11 65 04 06 a6 06 93 79 45 78 2e a2 bc 01 cf d0 4f 2d 9d 1d 2b c1 7d 2b c1 07 33 92 cd 88 65 2c 4b 63 75 24 5b 08 0e 74 e1 8e a8 a9 bd 52 1d fb 1a 72 8e 18 04 cb a3 1a 2e 80 b9 25 51 60 00 00 00 90 04 02 40 10 09 23 20 09 23 28 6a 5e 40 90 57 52 f2 35 c7 c8 16 05 79 91 f2 47 32 20 5c 14 e6 c4 8e 6c 40 c8 5a 32 70 6a 51 78 68 c3 cd 5e 07 37 d9 94 7a 8b 2b f5 5f d3 3e 93 fe e7 40 f1 0a ab 5d 52 67 6a df 8c 62 38 ab 19 36 bb ae e4 1d d0 72 1f 18 Data Ascii: R4-.q7'eYT[19`fBJJ>e4On!0#Ah#II*6TeyEx.O-+}+3e,Kcu$[tRr.%Q`@# #(j^@WR5yG2 \l@Z2pjQxh^7z+_>@]Rgjb86r
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 75 40 77 21 35 38 a9 47 aa 7d 51 63 cf f0 3b a7 87 6d 3d e3 d6 3f 8e eb f4 dc f4 00 00 00 00 00 00 00 00 00 7f ff d6 f4 e0 00 00 00 0d e3 a9 e2 b8 95 c7 3a ab 7d 8f 4f c4 6b f2 68 b7 de 5d 11 e2 64 f2 f2 05 59 96 92 d2 9c df 7e 88 c3 8d 4f 0b b9 9e a3 c7 a5 6c 8a 31 b6 55 86 5e 0b b8 17 4b 4a c1 01 b2 00 00 00 92 4a 92 41 62 4a 4a 4a 1b 98 25 51 bf 60 36 72 96 e3 52 f2 69 13 82 8d e2 4d 48 4d a7 83 65 3c 90 58 9c 90 00 b1 bb 61 47 9b 3d 4f e5 89 a0 7a 2b 7a 4a 85 24 bb f7 02 97 55 74 a3 ce 54 96 a7 93 a7 7b 57 b1 c8 91 50 5b 9b 51 35 63 b9 b1 d8 2b 35 1d 9b 22 a3 2f 4f a4 51 86 b3 c2 20 e7 d4 79 66 32 59 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4a 7a 5e 51 ea ac 2b f3 20 9f 73 ca 1d 4e 19 5b 4c b4 81 b7 Data Ascii: u@w!58G}Qc;m=?:}Okh]dY~Ol1U^KJJAbJJJ%Q`6rRiMHMe<XaG=Oz+zJ$UtT{WP[Q5c+5"/OQ yf2YJz^Q+ sN[L
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 65 d4 da af 46 3c b7 a5 1c fb 79 e9 9a 67 62 4b 29 a3 17 cb df c5 26 58 59 ee cd c0 6a e6 32 a7 fa 99 b8 dd 2d 54 94 fe d6 72 78 4d 55 4a e7 0d e1 4b a1 e9 2f e2 a5 42 69 f8 38 65 e9 cf 6f 27 b6 9a 96 75 39 94 a2 fd 8e 0f 13 a7 a2 b3 7e 7a 9d 0e 11 55 38 3a 6f 74 cc 7c 65 2f 4b ee 63 0f 4f 25 8f 16 3e 9c f4 e1 80 0f 6b d2 00 00 cd 6f 2d 33 4c f5 d4 5e a8 fe 51 e3 22 f0 cf 59 65 3c c1 01 a1 6c f9 37 b1 ff 00 e5 8f dc f6 07 90 be 5c bb 88 cf dd 33 d7 27 95 90 24 00 00 00 00 00 07 ff d2 f4 e0 00 3c d7 1f ab 97 1a 7e 3a 9e 78 e8 71 4a bc cb 89 7b 74 34 31 d8 a3 27 cb 0f c9 88 c9 55 f5 c7 83 1a 02 f0 5d 4b 31 05 85 92 18 10 41 20 08 00 01 24 4d e9 5e e5 e2 b2 cc 15 5f a9 81 40 01 00 02 f1 8f 72 8b 44 ba 2a 8b 80 00 00 04 10 c8 3b 7c 1e 59 53 88 bb 46 bf 08 9e Data Ascii: eF<ygbK)&XYj2-TrxMUJK/Bi8eo'u9~zU8:ot\|e/KcO%>ko-3L^Q"Ye<l7\3'$<~:xqJ{t41'U]K1A $M^_@rD*;\|YSF
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 4c 65 df f4 c6 a4 1f 53 72 a5 2a 75 25 aa 32 48 d6 a9 05 07 84 f2 66 c6 e6 52 ff 00 2f 3d 77 1c 49 9a 0c de b9 79 93 34 59 d2 3c 7c 9e 50 74 ed e5 aa 07 30 dd b4 96 e8 e9 8f 97 4e 0b ac ff 00 96 7a f1 d5 06 72 ce cb 59 47 22 4b 0d 97 27 4f a9 9d e5 7a 4e 12 f9 d6 95 28 f8 39 7c 2a af 26 ea 39 ee f4 99 b8 25 ca a3 5b 4c ba 46 6b 06 d4 b8 35 65 73 aa 3f 26 ad 59 30 f1 32 cf 16 fc 4d 78 9f f9 39 bc 66 97 2a e5 bf bb a9 b7 c7 2a 28 5c 42 51 f9 a2 8d ea d6 f4 f8 bd 38 d4 84 94 66 ba 30 35 b8 8a e7 d9 53 aa b7 8e e7 9a 3d 57 10 8c 2c ec 95 be ad 52 3c cd 18 a9 4e 29 ec d8 1d fb 88 69 a3 6f 6e fe a7 99 1b 97 17 d4 e8 56 56 ae 9a e5 f4 4c e3 f1 7a ea 55 d7 2d f4 a6 92 46 f4 2e 6c ef 74 d4 b8 f4 54 86 fe f8 03 95 c4 ed 55 ad 67 18 fc af aa 39 e7 47 8a 5d c6 ea b6 Data Ascii: LeSru%2HfR/=wIy4Y<\|Pt0NzrYG"K'OzN(9\|&9%[LFk5es?&Y02Mx9f**(\BQ8f05S=W,R<N)ionVVLzU-F.ltTUg9G]
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: a6 e9 d4 94 65 ba 66 16 77 38 dd be 9a 8a aa da 5d 1f e4 e2 32 8a 32 90 66 43 1e cc 0c cb 71 26 56 2f a8 6c 80 41 00 a0 00 02 4e 87 0c c7 c4 47 27 38 cb 46 ab a5 35 35 f4 bc 81 ee 81 8e 95 58 d6 82 9c 7a a6 64 d8 83 15 7a 8a 95 39 4d f6 47 90 93 e8 db 3a fc 42 e9 56 7c b8 7c ab 77 e4 e1 d6 a8 9b c2 d8 0c 32 20 80 51 23 24 10 04 e4 10 40 12 25 b0 12 02 f9 e8 91 6a 5f 32 30 23 66 dd 66 59 03 d1 59 3d 54 71 e1 9a 17 51 ea 6d f0 e7 f3 44 c5 77 10 38 f2 31 33 3c d1 85 84 54 cd 03 09 92 9b 03 7a 83 e9 82 d3 5d 0c 74 5f 5c 19 a4 45 72 2b 2c 33 09 b5 70 8d 50 00 00 06 d5 b5 4d 2f 0f 66 6a 84 58 de 39 74 dd c7 68 d2 b9 a5 f5 23 2d 0a ba d6 1e e8 ce d6 77 3a 79 8f a7 64 e5 c5 c6 06 cd 7a 0e 0f 2b 63 58 e6 f9 79 63 71 ba a0 c8 04 65 75 2c 17 e6 18 40 6b 6b b9 64 a0 Data Ascii: efw8]22fCq&V/lANG'8F55Xzdz9MG:BV\|\|w2 Q#$@%j_20#ffYY=TqQmDw813<Tz]t_\Er+,3pPM/fjX9th#-w:ydz+cXycqeu,@kkd
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: f5 3d 85 bd 3e 5d 38 c7 d8 0c c7 3a aa c4 e4 bf 53 a2 69 5c 2c 4d 3f 28 0e 05 d4 7a 9c b9 9d bb b8 9c 69 a2 a3 5d 90 59 95 03 2c 19 b9 41 ee 8d 28 33 6a 8b c4 88 ad 89 ae 87 2e e1 75 3a b2 39 d7 31 03 48 00 00 00 00 00 00 00 00 00 00 9d 4c 80 04 ea 64 64 00 bb 00 01 00 00 00 00 00 00 00 00 03 bf 60 f5 db b8 ad fa 9c 03 76 c6 eb 91 2c 3f 95 9b c2 ea b1 9c dc 6a 49 38 b6 9e e7 4f 85 37 a9 ae d8 37 2b 59 53 b8 f5 a7 8c f7 46 5a 54 61 69 06 ff 00 76 74 98 59 77 ec e5 96 72 cd 7b b8 97 d1 51 ad 24 8d 43 2d 7a 9c c9 b9 79 31 1c 6f 97 79 e0 00 11 40 00 1d 3e 1b 3c 4b 07 7e bc 75 d2 68 f2 f6 72 d3 51 1e ae 1e a8 e3 d8 0c 7c 0e 7e 89 43 c1 dd 3c c7 0a 97 2e e2 50 f2 7a 70 00 00 3f ff d3 f4 e0 00 38 bc 75 7f 05 3f 73 cb a3 d5 f1 b5 9b 7f d4 f2 88 06 fd 3b a2 13 c9 Data Ascii: =>]8:Si\,M?(zi]Y,A(3j.u:91HLdd`v,?jI8O77+YSFZTaivtYwr{Q$C-zy1oy@><K~uhrQ\|~C<.Pzp?8u?s;
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 10 00 40 00 00 df e1 75 39 77 30 7e 5e 3f 73 40 b4 26 e1 25 25 ba 79 03 a7 c6 a9 72 ee 64 fe ef 51 d1 be 5c fb 08 54 5b c7 06 79 46 87 16 a7 16 e5 a2 a4 77 31 71 2a 94 ad 6d 55 b4 1e a6 c0 a5 fa f8 8b 1a 75 57 5d 3b 91 c0 7d 70 ab 4d ec d1 a9 c3 78 9c 68 45 d1 ac b5 53 97 f4 3a 13 e2 96 b6 d4 dc 6d 97 aa 40 63 e0 d2 4f 9b 6c fb e7 06 9d 8d 9d 6a 57 69 69 6b 4b df d8 e6 52 af 3a 55 39 91 78 96 4e df ff 00 90 d4 d3 f2 2d 5e 40 cb 72 97 fb 9c 7f 43 97 c5 de 6e a6 62 a5 7b 28 dc 2b 89 fa a5 9c 98 6e 6b fc 45 49 54 6b 1a 80 f4 36 9a 38 8d a7 c3 c9 e9 9c 36 36 6d ad 17 0c a1 52 55 64 b3 24 79 08 4e 50 79 8b c3 f6 2f 52 bd 4a bf 3c 9c bf 20 74 38 67 10 56 b5 1a 9f f2 e7 b9 db a7 2b 0b 69 3a f0 92 cf 83 c7 80 36 2e eb fc 45 59 54 fb 99 6b 39 69 a8 8d 52 f4 9e 24 Data Ascii: @u9w0~^?s@&%%yrdQ\T[yFw1q*mUuW];}pMxhES:m@cOljWiikKR:U9xN-^@rCnb{(+nkEITk6866mRUd$yNPy/RJ< t8gV+i:6.EYTk9iR$
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 72 80 e4 02 64 b0 c8 00 00 00 00 00 00 00 5a 9c dd 39 29 2d d3 c9 50 07 ae 6e db 8a c2 2e 72 d3 38 98 78 9d c5 1b 7b 75 6d 49 ea 7e c7 97 ce 00 1d 6e 1b c4 be 13 30 9a d5 4e 5d 8e a4 b8 b5 b5 08 3f 87 8f aa 47 95 00 64 e6 c9 4f 98 9e 25 9c e4 ec c7 fd 41 5d 47 0e 29 bf 27 08 01 9a bd 79 dc 4d d4 a8 f2 d9 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 6c ff 00 98 8f 59 4f 6f d0 f2 76 9f cc 47 ac a5 b0 1a 7c 26 5a 6e a7 1f 2b fc 9e 94 f2 b6 2f 4d f7 e7 28 f5 40 7f ff d1 f4 e0 00 07 1f 8e 43 55 be 7c 33 b0 68 f1 38 6a b7 92 03 c5 47 62 95 0b 44 8a 9b 14 4a 2b 22 63 d8 48 0a 92 41 20 09 20 90 00 12 04 10 fa 19 e8 5b d4 b9 78 82 e9 de 47 6e 8f 0e a5 47 ab f5 4b cb 20 f3 ea 12 96 c9 b2 dc 8a bf 6b 3d 3f 45 b2 25 4c 0f 27 28 ca 3b a6 88 3d 76 23 2e 92 Data Ascii: rdZ9)-Pn.r8x{umI~n0N]?GdO%A]G)'yM6lYOovG\|&Zn+/M(@CU\|3h8jGbDJ+"cHA [xGnGK k=?E%L'(;=v#.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49821	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	644	OUT	GET /nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:36 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/jpeg Content-Length: 90687 Connection: close x-goog-generation: 1684171825685442 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 90687 x-goog-hash: crc32c=WyHRBA== x-goog-hash: md5=xXWPD+aoFxTaOndMFLfUig== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC4Y8Gp9p27Py7MSdYbeZcNuRaBZE_-stPJQJA4n4jZ96EPbP_o-TXTY1mjvYEbBUX4M2wr9ZiwXdw Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2962 Last-Modified: Mon, 15 May 2023 17:30:25 GMT ETag: "c5758f0fe6a81714da3a774c14b7d48a" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EnVyL6HlxBgceYj8%2FEoYIsbaaP3%2Fc4JVJac9KKzS7OVERpYJfTuo8OV4Xw8uLjNyj2pZ1ttcOB7vFNDhhQlXSyUd1com9la2IUaQ3bnq9FMQqNFX9DY%2BzzUF9SqNAK65MXBs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:36 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 36 31 36 62 62 64 34 32 36 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 31 37 39 26 6d 69 6e 5f 72 74 74 3d 32 31 37 39 26 72 74 74 5f 76 61 72 3d 38 31 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 33 33 39 34 34 39 26 63 77 6e 64 3d 31 39 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 32 62 63 66 36 34 65 33 30 38 Data Ascii: CF-RAY: 8f1101616bbd4265-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2179&min_rtt=2179&rtt_var=817&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1222&delivery_rate=1339449&cwnd=195&unsent_bytes=0&cid=32bcf64e308
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4d 00 00 01 4e 08 06 00 00 00 02 64 4f 6a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 07 9c 65 47 75 ee 0d 57 c7 d3 b9 a7 7b 72 0e 0a a3 80 84 72 40 01 24 10 c1 80 09 26 19 63 b0 09 0e d8 ef b5 c1 9f 0d 36 26 39 e1 6c bf 7c b6 ef 35 60 1c ee c5 fe 01 06 1c f0 c5 48 32 41 08 23 24 24 94 d3 48 13 35 79 a6 73 3c 9d de e7 bf 6a af d3 d5 7b 4e f7 f4 68 f2 e8 3c 3d 35 7b 9f bd 6b 57 d5 ae 5a f5 d4 5a 95 76 d5 e4 e4 e4 54 a8 a0 82 0a 2a a8 60 5e a8 ce 8e 15 54 50 41 05 15 cc 03 15 d2 ac a0 82 0a 2a 38 02 54 48 b3 82 0a 2a a8 e0 08 50 21 cd 0a 2a a8 a0 82 23 40 85 34 Data Ascii: PNGIHDRMNdOjsRGBgAMAapHYsodIDATx^eGuW{rr@$&c6&9l\|5`H2A#$$H5ys<j{Nh<=5{kWZZvT`^TPA8THP!#@4
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 08 92 81 18 48 0d ad d1 89 0c 3f fb f7 ef 37 92 dc b1 63 9b 11 26 64 8b f6 59 1c 2b 86 d1 91 31 23 46 9e 83 04 79 c6 c9 00 b2 b5 7e c6 2c 2c 07 e7 38 ee 43 90 ae 25 62 ea 3b a9 8a 4a 8d f0 00 cf 83 3c 71 fa b9 13 a6 f7 4b 02 8f 6f 2e d2 6c 69 6e 89 f1 67 84 ee da 67 7d 9d b4 46 3d e7 61 f0 3c cf 7a fc 1e 1f 79 80 49 bf 76 ed da b0 61 c3 86 b0 7a f5 6a 23 53 48 98 7c 06 d6 9f 9a 90 33 7e 1a 9b 0a 56 26 f9 f4 e4 7e 56 50 c1 73 0a 27 9c 34 f3 15 10 2e 1c 1d 2d 1a 59 52 81 21 38 c8 72 ac 38 66 7d 8c 46 02 19 59 40 7a 10 40 5f df 40 d8 b7 6f 5f d8 ba 75 6b d8 7f 60 7f d8 be 6d bb f9 e5 99 48 68 f4 41 8a 08 e9 ef 14 91 41 b2 9c 3b 69 02 c2 c4 e9 cc b4 4e 23 48 65 c5 24 47 25 ca 7e 67 64 84 16 56 57 17 fb 0c d1 ce 18 a9 86 60 5c 73 ab a9 95 e9 4e 3c 59 df 65 be Data Ascii: H?7c&dY+1#Fy~,,8C%b;J<qKo.lingg}F=a<zyIvazj#SH\|3~V&~VPs'4.-YR!8r8f}FY@z@_@o_uk`mHhAA;iN#He$G%~gdVW`\sN<Ye
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 88 98 ee 7b f7 ed 93 c9 df 6d a3 e9 10 63 b1 38 52 8a 17 82 42 03 74 cd 8e b8 21 ed 12 a9 88 4c cc e9 f5 39 72 0d d2 70 82 f5 b8 b8 37 1b b8 9f 1e 8d e0 32 ad 10 c7 6f e0 44 e8 5a a4 0f c4 38 29 72 7d 3e 9a 66 75 16 1e f0 4d 46 26 33 42 24 fd fe 6e a9 79 ee f0 fb e4 01 5a 39 f9 84 b6 b9 74 e9 52 4b 03 8d 06 64 0a 39 72 be 7f ff 81 70 c1 05 e7 87 57 bc fc 15 3a 5e 60 da a7 23 7b dd 0a 2a 78 4e e2 b8 92 26 26 32 95 b4 eb 60 8f 5d e7 fc 3b 77 7e 27 3c f0 c0 c3 36 d8 82 a9 0e 21 d0 a7 e9 d3 7e da 5a db c2 79 e7 9f 67 84 41 1f 1c 66 35 fd 6a 5d 5d 5d 0a a7 cb cc 6b 48 96 f0 21 38 23 c5 12 a9 44 4d 8c fe c7 48 76 87 9a d6 90 27 5a 29 47 ae 43 30 76 14 51 00 c2 f5 eb 5c 4b 9f 75 f8 35 e2 f4 a3 6b 90 c0 d3 61 84 a8 6b 46 7c f2 e3 a4 8a 46 99 12 26 5a 1e ef 8a 66 Data Ascii: {mc8RBt!L9rp72oDZ8)r}>fuMF&3B$nyZ9tRKd9rpW:^`#{*xN&&2`];w~'<6!~ZygAf5j]]]kH!8#DMHv'Z)GC0vQ\Ku5kakF\|F&Zf
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: a0 90 16 e2 e6 9e a5 27 7b 1f f2 c9 9f c1 79 3c 87 90 a2 b4 cb 74 67 a6 72 da 26 d7 79 5f c0 0a 21 ca 81 4d 8b 89 97 f0 68 d4 5e fa d2 97 86 f7 bc fb 3d 61 e3 79 1b 2d 1e 96 be 56 50 41 05 33 71 cc fb 34 a9 9c 54 76 27 25 48 64 d3 53 4f 87 7f fb b7 7f b3 e5 8d 68 54 85 fa 82 99 81 df fb de f7 8c 38 a9 9c f4 2d fa f3 c0 89 22 7f 0e 20 1a ff 0d 01 51 f1 23 f9 f1 79 07 88 26 12 4e 34 bb 6b 95 96 38 0d e7 e9 a7 9f b6 41 29 06 9e 20 2d e2 a2 9b c0 48 5c 69 c5 e1 cf 88 27 21 19 ce fd 7a 44 ae df b3 74 7d 3a ad 25 27 b2 74 32 27 2f 88 8b 3c 80 9c e9 47 64 0e aa f5 61 ea 3d 48 2f f7 fd fd dc 01 d2 42 1e a1 91 93 16 fa 2b e3 2a ab 62 18 d3 75 ee 71 cd fb 3b 19 2c a3 61 f2 c9 ee a4 91 eb bc 2f 2b aa da 17 b4 87 8b 2e ba c8 e2 a4 df f2 82 f3 2f b0 b5 e6 f4 87 92 9e Data Ascii: '{y<tgr&y_!Mh^=ay-VPA3q4Tv'%HdSOhT8-" Q#y&N4k8A) -H\i'!zDt}:%'t2'/<Gda=H/B+*buq;,a/+./
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: e6 34 95 be 0f a0 ae 30 07 3b cd 6f 07 fb f8 92 3f 51 e9 9a e9 c7 65 9c 60 f2 71 1d 0e 27 85 34 01 09 e5 25 f6 ee d9 6f 9b 10 f3 91 b4 ef df fd fd b0 6d eb 36 d3 e4 bc 60 71 4e 9a c0 0b 73 36 d2 24 f3 29 f4 b4 bf f0 e0 c1 ee f0 5f b7 ff 97 09 12 05 74 fe 05 17 84 73 53 4d 13 41 c0 c4 55 69 21 9c 79 4d b3 bb eb a0 cd 2f 45 98 ed ba ee d3 37 3a 9d c6 69 8d 01 a4 ef 9f 92 a5 6b 9b a4 9f c2 e6 08 71 ba d0 71 c4 3f 64 4b 9a 52 b8 76 e9 47 27 4b 8f cb f3 ca 5a d7 ec 59 7e 13 37 71 f1 09 8b 9f ff b9 9f cf 88 ba 42 9a c7 0b 5e 31 c9 43 d7 80 00 c4 63 e5 27 f9 62 53 16 2c 2a e4 1c 99 e2 73 2e c8 15 1f c4 e3 98 ef 47 a7 1c 29 6f 2f 7f 87 37 ce a5 fa 25 b9 01 d1 ff b4 bc 50 e6 b1 b1 8d 8d ee d4 e4 cc 8d 6f a4 f7 65 67 11 cc ae a0 fb aa 16 52 93 cc 4e e4 e4 8c 3d b7 Data Ascii: 40;o?Qe`q'4%om6`qNs6$)_tsSMAUi!yM/E7:ikqq?dKRvG'KZY~7qB^1Cc'bS,*s.G)o/7%PoegRN=
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: db 77 9a 70 92 69 1b d6 6f 08 af 7d ed eb 4b 44 e3 c2 94 82 82 87 10 9d 38 f7 ed db 63 ad 77 d7 41 69 9a bd bd 22 f6 f8 35 4b 1f 1c 4a bf 54 99 3a 37 53 4c a8 33 ad 92 34 5b ff a6 ae e1 80 13 68 7a 2d 05 f7 53 20 0c 84 0f ec 1d b2 e7 fd 5d 30 af 18 e1 fc c4 27 3e 11 56 ac 58 26 ff 76 59 ef 35 b3 7f c7 51 e6 d2 73 1a e4 13 32 47 d9 52 51 f9 8c b4 5b 1a 10 23 04 67 fe 32 2d 06 a2 a4 4c b8 8e ec 20 37 a9 b6 c3 6f 23 c9 ac 11 66 57 af f4 37 70 d2 24 3c ca c8 ad 11 ca d6 8e 72 4e 32 a9 66 88 95 e4 9a a7 3c 64 57 23 4c 96 e4 20 46 2f f7 6a 84 21 91 d7 78 22 1a cd 1e 8d cb 71 23 b9 f8 33 31 7e 64 53 47 3d 52 95 50 86 6b be 71 44 3e 0a 5a 29 5c fd 9e 3e 0f 92 fd 48 48 84 91 86 9f 07 79 47 bd 86 0c 39 52 8f 5d 3b a4 7b 83 c5 32 e4 6b 5b 6b 9b 9d 53 af 21 c6 54 21 Data Ascii: wpio}KD8cwAi"5KJT:7SL34[hz-S ]0'>VX&vY5Qs2GRQ[#g2-L 7o#fW7p$<rN2f<dW#L F/j!x"q#31~dSG=RPkqD>Z)\>HHyG9R];{2k[kS!T!
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: f2 9a fe 50 fc 90 bf 90 23 5a 69 73 4b b3 91 2b 47 fa 30 6d 86 4d 36 60 e5 fb 53 f8 68 bb 7f e7 3f 8b ee 10 9c 72 a4 49 a3 e3 49 a2 e2 93 9f 64 c8 9d df bd 33 fc fd df fd bd a9 d4 08 06 f0 cc 22 e3 78 49 cc 73 04 67 c1 82 4e cb 84 6d db b6 85 c7 1e 7b 4c 85 d4 60 fe 50 e5 5f f5 ca 57 85 8e 4e 5a 92 a8 99 92 b9 35 d5 d3 9f 8c 60 2d 3a 83 3d 73 91 26 da e6 0c 4d 33 13 92 68 96 78 6b 1d 1d 61 3a 59 72 8c ce bc 97 c0 35 8f df c9 d3 35 cd d2 bd 84 3c 71 80 f7 c6 0f ef 8d 20 fc c1 1f 7e 22 6c d8 b0 4e e9 66 f7 77 2a bd 79 3b 04 a4 eb a8 70 9a 93 26 0d dd 63 8f 3f 66 83 0a 90 0e a0 b2 43 96 e4 8d 13 25 9a 27 83 32 c8 1c 1a 0a 48 35 1e 2b 63 c9 aa 13 6e 9a af f4 bf 51 79 7d 70 c2 81 1f e2 a1 2f 8d 23 fd 77 c8 92 83 f2 26 0e fc 11 2e e1 57 4b 4e 69 dc bd ec b9 47 Data Ascii: P#ZisK+G0mM6`Sh?rIId3"xIsgNm{L`P_WNZ5`-:=s&M3hxka:Yr55<q ~"lNfw*y;p&c?fC%'2H5+cnQy}p/#w&.WKNiG
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: ec ac 9f 59 65 06 47 a0 fd 33 10 84 99 cd 58 06 8d 10 f9 45 19 61 49 50 5e 94 35 75 0c 99 f0 06 92 06 10 ad 96 7a 96 cb da 12 4e 59 d2 cc 03 92 70 f2 6c 6f 6f b1 11 e2 f3 cf 3b cf 5e ce 5b 1b 48 92 97 df f9 cc 33 a6 35 90 09 66 ae 28 13 10 7c 5a 72 32 97 c9 e9 4c 1b da bf 7f 6f d8 b7 97 91 f1 7d d6 0f 33 32 3a a4 e7 71 4c 35 d1 b1 f4 7b c4 1c 13 c3 39 62 86 8c cb c5 01 a0 d8 a2 d1 17 9a d7 30 e7 03 9e e5 bd 78 bf d2 3b 42 8e 09 51 a6 d7 28 e4 ba fa 1a 35 18 6d e1 96 5b 5e 1c de f8 c6 1f cb 34 cc 2c 40 81 70 2a 98 89 cd 5b 36 9b 95 b2 65 f3 96 f0 f8 e3 8f db 86 31 94 3d 66 3a 56 04 53 85 68 c4 20 08 e4 85 4f 4b b3 93 3d 3b da a3 79 52 31 dd c2 a0 d2 11 16 15 d4 2b 1b b2 47 59 9a 49 f9 2c e4 a0 1c 08 cf 5c ae 71 1e 9f 40 53 1c 31 4d 6e 26 81 c5 f9 96 58 12 Data Ascii: YeG3XEaIP^5uzNYploo;^[H35f(\|Zr2Lo}32:qL5{9b0x;BQ(5m[^4,@p*[6e1=f:VSh OK=;yR1+GYI,\q@S1Mn&X
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 5a 70 84 e1 e7 80 ec 19 82 c4 86 e3 3c d2 89 89 6c cf ce 84 34 e9 ff 27 1f 63 bc 31 2e ee 71 6d 4c 65 e3 e9 29 47 9a c0 b5 51 88 0c 4d 91 fa 48 79 99 a5 a5 fc 4a 41 1e 41 96 d4 19 8e a4 9d 23 0a 08 a4 c9 7d f2 94 7c e7 59 ff 7d f9 15 97 87 17 de f8 42 1b 41 e7 b7 c7 ed f0 f7 3d 2d 49 73 74 54 6a b9 5e 14 d4 d5 55 85 7d 7b bb c2 e7 3e f7 39 db 8f 13 8d 0c 52 23 43 ad 85 69 8c da d9 a0 ae ed db b7 b7 b4 53 8a 77 fe 02 b4 bb 14 be 0f 27 9b 05 a0 7d e0 d7 d7 ae 46 82 9d 4e 70 5a b8 2e 48 d1 d1 ff 18 fd f9 c0 8d bb 9a 9a e9 73 27 4c 8e fc 06 a4 9f 78 b8 8e 50 ac 5d b7 3a bc f4 96 97 86 b7 be f5 ad d9 88 df cc f4 46 1c 26 d3 12 3c 17 49 13 19 63 b7 9f ff f9 bf fe a7 91 26 32 81 29 86 f6 4e d9 51 c9 6d 86 04 83 44 4f 3c 69 f2 83 63 5e a0 57 58 af d0 0e 9e 2b b9 Data Ascii: Zp<l4'c1.qmLe)GQMHyJAA#}\|Y}BA=-IstTj^U}{>9R#CiSw'}FNpZ.Hs'LxP]:F&<Ic&2)NQmDO<ic^WX+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49823	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:36 UTC	617	OUT	GET /nas-prod/c_undefined_1661551019.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:36 UTC	1344	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:36 GMT Content-Type: image/jpeg Content-Length: 16435 Connection: close x-goog-generation: 1661551021527118 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16435 x-goog-hash: crc32c=sWX7YA== x-goog-hash: md5=XSSa4xywkwq5tkSgI+XO3g== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY3LLXvehr0Ci2vp6DnjJRQHoaHRRq3o4cYJoDLy1CrJ2BgPYp2f_OwjphGIS44h43Swy54 Expires: Thu, 12 Dec 2024 22:46:13 GMT Cache-Control: public, max-age=14400 Last-Modified: Fri, 26 Aug 2022 21:57:01 GMT ETag: "5d249ae31cb0930ab9b644a023e5cede" Age: 383 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rV1fxaNZQ7wnG8lavaadYDT2ss9Q717qmM44ShbsuS8nhyPFea2hCf%2BmY4DrZVeeweWZGDgDW6NkYQZbn1miNV95vHMqfhc7stJYv1gBUddSM9vJMRDMAfFLOU7XVXRUog6u"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:36 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 36 31 39 66 30 65 34 32 66 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 36 30 26 6d 69 6e 5f 72 74 74 3d 31 37 35 34 26 72 74 74 5f 76 61 72 3d 36 36 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 32 30 34 32 31 26 63 77 6e 64 3d 32 33 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 66 38 63 34 66 34 61 63 33 33 Data Ascii: CF-RAY: 8f1101619f0e42f4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1754&rtt_var=669&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1195&delivery_rate=1620421&cwnd=231&unsent_bytes=0&cid=0f8c4f4ac33
2024-12-12 22:03:36 UTC	1118	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 58 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 09 02 01 0a ff c4 00 5c 10 00 01 03 01 04 03 09 08 0e 05 09 06 05 05 00 00 00 03 04 05 06 01 02 07 13 14 23 33 08 11 12 15 22 32 42 43 53 16 24 34 52 Data Ascii: JFIFHHCCXX"\#3"2BCS$4R
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: e2 fc cb 87 25 e2 56 e9 8c 4b c5 ec f6 8e e5 6d a3 a0 d5 fe 8b 80 e4 5f 52 ef 9c 71 cf 03 b4 71 6f 75 86 1c e0 ff 00 7a 48 4a f1 9c e7 57 0b 0b df 4e be 97 88 72 5e 23 6e ca c4 fc 48 b5 76 b4 fe 45 01 06 af 63 af 90 53 eb 3a 06 95 8a 83 63 0f e0 88 64 76 8a 97 85 c5 93 78 24 b4 e5 e4 1d ae bc 9c 8a bb 49 07 8b e7 ae a7 d2 bc 5e 80 74 6e 4d c9 b1 7a 7e e8 1a 42 de c5 55 16 f5 50 be 0c d7 70 74 27 1b 63 0b d9 5b 2d d5 46 c7 29 eb 5f bf c1 04 bb f9 1e 82 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 9f 61 1b 08 27 d2 b9 fa a4 b6 40 57 7b 2b d5 35 fb 52 1c aa 00 00 00 00 00 00 52 02 a9 48 a4 fa 55 ac 3b 15 9d bb 5d 06 4c da a3 9a a3 a5 b9 Data Ascii: %VKm_RqqouzHJWNr^#nHvEcS:cdvx$I^tnMz~BUPpt'c[-F)_a'@W{+5RRHU;]L
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: b9 37 9d 79 4b d9 d1 bb fa 80 d5 f8 0d b9 7a a3 c7 25 ee 3a bd bf 0d 49 5d b7 79 49 55 6e ef e9 1e 4a 17 7a 47 a3 98 5b 84 14 b6 0f 40 59 13 4d 47 5d 66 95 ed ba f6 f2 97 71 7b c6 bf 7f df b4 cb 18 30 6d 16 c1 26 ad 50 49 b3 54 ac e0 26 92 5c 9b b7 2e fe a2 f4 ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 2f e4 d2 61 ee ed 2d 02 bb e7 a9 b0 43 35 52 01 e3 c5 1e ab 65 8a 59 c1 b2 c2 92 eb 28 ba f9 aa 80 29 15 40 00 01 70 00 02 dc 01 48 11 95 1c e4 65 2d 06 f6 56 55 f2 11 91 cc 51 cd 70 e9 ee ae e2 77 40 ae f9 c2 4d d0 5d 55 57 c8 49 2d 6a 8a ad cc 4e e1 c2 9b a3 37 57 b9 c4 8d 36 95 a1 5f 2e c6 92 d9 3c 9a 47 90 bc 9f 9b 6f e2 23 e5 Data Ascii: 7yKz%:I]yIUnJzG[@YMG]fq{0m&PIT&\./a-C5ReY()@pHe-VUQpw@M]UWI-jN7W6_.<Go#
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: ef 16 fd ce 51 20 00 d5 58 2d b9 aa 87 c0 97 d2 ae a9 54 25 92 77 27 aa 70 ab e9 55 dd 7e 2e 49 b5 40 00 00 00 00 00 00 00 00 03 55 63 f6 03 c4 63 c5 1e 84 7c 82 08 21 2f 18 b6 9f 0c ff 00 e4 8e 7f 25 ee 91 e2 9c 64 74 95 31 51 e2 f3 89 a6 aa b4 95 63 a4 b6 51 b2 dc f4 d6 b6 fd fe 49 fd 00 38 3c ed fe 54 4c 10 4a 1e 85 99 c4 b8 06 36 69 6f ad 6c d2 7b 2b dc f1 12 73 fe 97 a8 07 16 60 5b 0b 1b 50 4c d4 b3 6a e5 75 55 fd d3 db fd cf 38 75 73 0b b0 86 9a 80 bc 8d 97 1d a4 d6 c5 5d fe b7 0a 72 d5 ff 00 8d a7 96 3b 8b b0 d3 bb 0a e3 0e a0 16 47 39 a2 79 4e dc a5 6f 8b 73 5b 7c f6 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 3b 54 56 71 74 b3 Data Ascii: Q X-T%w'pU~.I@Ucc\|!/%dt1QcQI8<TLJ6iol{+s`[PLjuU8us]r;G9yNos[\|`;TVqt
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 8c ec 73 69 49 c6 eb bc 4b c2 22 96 e4 3d 6f e9 26 6c 84 1c 11 16 79 0a a1 b2 d9 76 4b 7e 63 1b ae 28 08 3c 48 8a 5e 3e 55 8e 7f f9 e9 99 a9 66 f9 b8 1c 0b 8c 5b 99 67 30 f9 05 dd c4 a0 e2 a0 a7 95 cc 49 c2 48 f2 17 4d 1b dc e3 46 2e c6 9e c3 7a 39 69 58 44 17 79 ae ca 51 d7 4d c5 ff 00 3b d8 9e b1 e7 e9 1a a5 4e 5c dd 27 b9 d1 cc 7b e5 eb 0a 29 8b 7e f9 47 db 58 5e 47 01 c5 cf 44 d1 09 34 fe e5 7d d2 75 7e 1b a0 ba 55 03 1d 32 9c 7c b6 6b 78 fd 82 ed fc 6b f7 0f 45 29 ca 8d 8d 53 06 ca 56 29 7d 36 39 f2 39 ad d5 44 f2 2e b8 6f 39 58 2e c2 3e 2b 50 92 b9 89 3d d3 39 0b e7 5d f9 47 f1 cb 37 2e e7 bd d0 a9 ee 76 95 83 a6 66 a5 57 5a 9e 74 b6 52 89 2d f0 7c cf 84 79 b3 cd 8a bd 1c 07 e2 0e 12 90 41 07 6d 17 cf 49 5d 6a 6a a3 d6 5c 3f 48 80 00 00 00 00 2b 14 Data Ascii: siIK"=o&lyvK~c(<H^>Uf[g0IHMF.z9iXDyQM;N\'{)~GX^GD4}u~U2\|kxkE)SV)}699D.o9X.>+P=9]G7.vfWZtR-\|yAmI]jj\?H+
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 ae ba 6d 92 be aa b7 ac 4d 3b 96 6f df bf 68 15 8d 57 88 58 9e 9c 7b 45 5a 46 2d c1 ea 94 7a 8f 8d d9 a5 f1 df fc 24 46 21 e2 6a 6e 1a ab 63 75 f2 22 ec f7 ac bf c1 55 df e4 4f f1 1c eb 5c 57 fa fc af b3 6b d9 dc 03 e6 b8 a8 b8 c5 7c d7 6b ea 92 f0 76 bd 0f fa ef 79 67 3b 62 a6 34 ab 0e 87 17 c7 af 90 ed 52 f3 13 6b f5 61 e2 97 76 a9 ca 0f a7 1c d4 12 ab aa ae bd 55 4d 09 32 47 d3 aa c8 2f 9a aa f9 ea 93 14 75 2b 2f 58 2e be 52 ed e3 23 9b 6b 5e ca bd e4 20 ce e1 6b 49 52 49 bb 8b 42 6a 6d c2 ec a9 e5 56 ca 67 a1 f2 de 4b de bb ce 49 8d cb df 7d c5 ed 52 7f 74 d9 b5 1c e4 1e 1f 31 60 ad 6a 86 87 95 ad 8a c3 a8 b5 ef f7 bf 0b ae 76 a7 3f 95 db 5e d6 a9 d0 cb b8 15 49 a1 2a ac 3d 0e f6 2a 12 55 fd 35 40 24 b6 54 Data Ascii: (mM;ohWX{EZF-z$F!jncu"UO\Wk\|kvyg;b4RkavUM2G/u+/X.R#k^ kIRIBjmVgKI}Rt1`jv?^I=U5@$T
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 7a d4 8c 59 0c d8 75 f5 bb 23 7f be 83 35 e5 55 4a f5 a9 12 55 98 61 95 55 9e 87 17 bb fa b3 30 a8 e9 c5 64 10 cd 4b 50 ed ae cf f2 9a 0a 0d c2 91 cf b2 be cc e8 2a 3a a3 4a a0 83 fd ad 2d a0 18 de 7e a1 09 b6 9a 87 8d 56 d6 64 f5 77 ee 9e af 6e 57 c7 14 b1 9f 0c 99 4a aa bf b7 8c 7b d2 55 2f 3d da 7d 33 ca d9 c4 38 9e 73 37 e0 8f b5 4a 7a 66 d6 dc 5b 8c 3f cd 3e 38 21 15 20 be 44 1d 43 ed 7b 8f 11 3b f7 b6 17 fd 70 3d 66 2c d7 d4 2e 18 b8 3e 9f 6c 4c e2 32 b1 a7 1b 56 14 ac ac 23 bd 7b 37 c8 a8 92 9f 48 f3 0b 11 9e b9 a3 d8 f8 0e 99 39 9d c5 6a 25 fb 4b 7e 47 2b d2 4b 2c f5 11 07 c7 10 6e a1 83 4a 8f ae 2a a9 04 90 cf 4b bd a6 93 49 1e b3 e0 eb 7e 32 f5 a4 cf 3f 93 f2 a3 97 6f 07 39 4d 54 0b e7 bc fd 20 9f e1 bd 70 eb 4c e3 ce bd c5 af aa 56 d8 c4 84 84 Data Ascii: zYu#5UJUaU0dKP:J-~VdwnWJ{U/=}38s7Jzf[?>8! DC{;p=f,.>lL2V#{7H9j%K~G+K,nJKI~2?o9MT pLV
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 41 5f 8c ea d5 7c 22 69 6e 5e 89 e4 a0 6c a9 ca a9 cc 86 77 83 a0 aa ba ac d4 7c 4f 16 ef 88 6b 99 cc 3a 62 fd 7c d4 bb cd 5f 32 68 1a 89 77 0a bb 5d 55 55 53 39 65 79 6a 2a af be 52 33 e9 5c 2b 7c df c1 57 41 73 09 95 8a 7b 0e b6 53 b4 6d 46 d3 38 a2 b3 cb 6d f7 02 eb a6 b9 43 24 aa 07 d6 8e 34 70 8a 3e cd bd aa 64 8a 0d f4 85 d0 4b 6e aa bd 50 14 10 43 eb 8d cf 86 58 3a aa f9 12 13 68 6a ba b6 1f 9c c9 30 cb 07 93 87 5d 09 59 54 73 e4 7a b6 7f 27 37 3b 18 b3 40 8c 63 04 4f b1 89 24 58 c5 93 08 32 02 39 06 25 5f 07 2b ae e3 47 20 1f 3d 2a 0f 9c 18 54 e3 d2 f2 56 74 c3 65 5e e7 84 98 8d 63 af 41 73 46 4e 6a 1f 1b ce 71 05 17 35 ab ea 35 59 15 ff 00 d5 24 aa f3 07 57 f6 f3 44 ed 4d dd 2b 04 93 74 10 77 b7 55 25 bf 11 ac 28 ea 71 4a 7d f2 0e cd e7 38 82 5c Data Ascii: A_\|"in^lw\|Ok:b\|_2hw]UUS9eyjR3\+\|WAs{SmF8mC$4p>dKnPCX:hj0]YTsz'7;@cO$X29%_+G =TVte^cAsFNjq55Y$WDM+twU%(qJ}8\
2024-12-12 22:03:36 UTC	1369	IN	Data Raw: 5f 4a 15 5f 2f 9f ad 20 97 cd 5d 72 a9 28 2e be 90 57 63 06 ac 82 e4 b4 55 39 d6 aa 64 a8 37 49 ba 04 84 6b 18 a4 a3 d0 27 e0 e0 a4 ea 89 54 22 a1 58 b8 78 ed 5e a9 12 46 8e a2 1f 57 0f 97 ca d1 d9 c7 36 d6 bd 95 7b e0 ad 2e 79 66 61 2b 39 07 01 4a ae d2 3d 77 f0 d4 63 ad a4 87 f4 9d 4d c1 e8 a1 73 a0 8f dc f4 ef 05 51 d1 51 49 52 da 6a 54 d4 aa 08 48 b6 47 db 9a d5 6e 43 56 08 de ea 9a de fd fd a5 fe 81 a9 2a ac 4c 63 1d 14 bd 3f 42 69 0c a2 15 d5 3d 9a 5b 90 f6 4f fe 52 3e 47 ae 59 d7 f5 fb ea c3 26 3d 14 38 b2 0d af 81 42 b2 d8 27 e5 df ed 15 f2 c8 08 a8 35 17 d6 aa 05 2a 72 11 57 0b a1 9b b2 48 dd 88 31 d4 32 68 97 d6 18 a5 39 07 d6 ec 12 ed 4c f1 06 f9 fa ae a9 5e a8 0c 9a 87 6f c5 c8 66 a5 b5 57 68 af a4 6c 6a 3e 97 97 ad a5 11 61 16 8e 6a b6 7b b6 Data Ascii: _J_/ ]r(.WcU9d7Ik'T"Xx^FW6{.yfa+9J=wcMsQQIRjTHGnCVLc?Bi=[OR>GY&=8B'5rWH12h9L^ofWhlj>aj{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49845	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	622	OUT	GET /fdx-pkgmsn/3d3d7b74bbea64757b235e7c5eb0d08b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1Y0c1bklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:39 UTC	1201	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/png Content-Length: 2181 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4690 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7bm3E5au7b%2BSd3FOLsms93tRiKRCQJ0LjmSiowVGp8LROpxVy%2BC01gdABSbaC5qozhicDtIGgrE66pMvK%2FS8CAvpuVfEr8GQOBUxBv%2F3DZs%2B5nern7fyHVK%2FSttVpwBlv3Sp9u4Lqzq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110173aec343b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1603&min_rtt=1600&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1200&delivery_rate=1793611&cwnd=192&unsent_bytes=0&cid=841c00d86c81ea6e&ts=469&x=0"
2024-12-12 22:03:39 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 11 08 06 00 00 00 8f 67 b1 f5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: PNGIHDRGgtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xml
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 Data Ascii: ns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns
2024-12-12 22:03:39 UTC	644	IN	Data Raw: 7f b1 17 c5 4c b0 82 ef ee 39 3e 08 bf a9 67 a7 e1 72 2e aa 99 d8 24 c7 ed 59 2a 8c c1 0e aa b9 64 4e 99 5b 34 44 4b 34 45 db cd 1c 24 17 c9 49 72 5b e6 7c bc 7e 55 79 10 2f e2 49 b4 c4 a3 78 15 cf e2 3d 90 b8 c2 71 ad 2b df 39 07 fd f7 11 d1 5e c1 b5 db 3d 98 e3 13 08 f3 29 86 74 a3 8d 33 2e dd 94 fe 9d 1c d7 bf 62 a9 1e f4 d3 28 bf 4e 03 f7 be 87 77 da 78 fa 0f 38 d9 b5 5d 03 d2 bf 9f e3 ba 56 71 2c b4 b6 03 dd de 41 04 63 62 c6 60 a4 8d b3 ff ca b0 f4 bf c0 71 43 6b b6 95 cc 25 73 ca dc a2 f1 20 57 d1 96 1c 24 17 c9 49 72 5b c9 f5 f1 fe 2e e5 25 ae af f4 e8 a7 67 f1 1e d1 5e 56 b5 58 f3 42 6e 99 95 95 71 12 23 5c 62 b9 14 b5 12 b2 b2 0d 04 24 e9 cb ec ff 35 e9 cb ad 65 56 56 c6 e7 b8 41 ce 66 72 9a 24 bb 20 9c 97 fd df a4 e0 64 65 9c c5 e8 24 39 7d 59 Data Ascii: L9>gr.$Y*dN[4DK4E$Ir[\|~Uy/Ix=q+9^=)t3.b(Nwx8]Vq,Acb`qCk%s W$Ir[.%g^VXBnq#\b$5eVVAfr$ de$9}Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49846	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	630	OUT	GET /fdx-pkgmsn/db5d6fed44eaf1afbdfdf6a52d8c02a6.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMMlpsWkhobVlYWXlMbkJ1WnlJc0luUjVjR1VpT2lKcGJXRm5aU0lzSW5ZaU9pSXlJbjA9aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:39 UTC	1193	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/png Content-Length: 2888 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4690 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fsvElhHLPyAb7u9kgwyPxGSFjiaNQSachGgFWXc3KG%2FFPW3CwnI2zXvrNFD64RSzcGdxjCS3lp470Yfa5IDkjK1XQ4NN52ZLO9TBdS5EZ60PfF%2BiH9dLx4m861tjQVpNkj4MgRXGCy9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110173a8ff7280-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1832&min_rtt=1818&rtt_var=711&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1208&delivery_rate=1508264&cwnd=247&unsent_bytes=0&cid=9c99af2f799d8805&ts=463&x=0"
2024-12-12 22:03:39 UTC	176	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 a8 08 03 00 00 00 6d f5 23 3d 00 00 01 23 50 4c 54 45 ff ff ff 40 2b 8f f2 7a 21 3f 2c 8f 35 1b 8c a8 9d c7 f5 7b 1c 37 26 8a cf 6f 49 f9 f5 ed f1 e9 fd e8 72 0e 3d 23 8f fc df c1 f3 79 1f 3b 24 8d f0 73 04 fe f3 e1 6f 62 9c f0 ee f3 30 15 85 c0 bc d3 cf ca df 30 12 8a f5 73 00 bf ba cd e8 d2 c0 d7 d0 ec ed c5 a7 ab a4 c2 ef 9f 5f d6 cd ef fa cc a0 e6 e2 ee f2 9a 55 29 00 80 72 63 ac 63 55 9c ff ff fa cd c4 e5 db d5 ec 66 54 a8 2e 0e 87 28 00 82 f9 f5 ff Data Ascii: PNGIHDR,m#=#PLTE@+z!?,5{7&oIr=#y;$sob00s_U)rccUfT.(
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: ee 9b 56 97 8a c2 f3 76 14 33 10 8d ef 8e 46 ef de ce ba b0 d8 8e 7d be f8 f3 ff 5c 48 a3 b5 a9 d8 81 71 b7 4d 37 9a de d9 ea fa e4 ca 5a 4a 95 ac a0 d3 53 3f 9c e4 ab 7c fc c2 90 e2 9f 6d c3 b9 e1 e2 94 58 fd d8 af f2 af 7d e3 84 3a f4 c1 96 e6 7a 22 ff f0 da f5 89 32 e8 cd b3 e5 c1 a3 69 5c 9f 43 2e 88 85 7b ab 93 8b b3 75 69 a2 e2 8a 46 e8 e5 eb 4b 39 8a f1 a5 6c 81 75 ab f3 ea de 60 51 9c 9c 90 c5 aa a2 c6 ed b1 7f e3 b4 8f e0 86 40 e3 7c 2b 77 6c 9f 62 54 91 15 32 a0 a0 00 00 09 d6 49 44 41 54 78 9c ed 9d f1 5f da 46 14 c0 03 9c 52 34 e6 52 8d 84 ce e9 a4 8a 60 a4 50 ab a2 a6 b5 ed 5c 9d 5a 27 da 49 6b 75 9b ed ff ff 57 2c 44 d0 90 7b 2f e4 2e c1 76 dd fb fe b0 f9 91 5c 38 be cd 1d 2f ef de 45 4d 23 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 Data Ascii: Vv3F}\HqM7ZJS?\|mX}:z"2i\C.{uiFK9lu`Q@\|+wlbT2IDATx_FR4R`P\Z'IkuW,D{/.v\8/EM#
2024-12-12 22:03:39 UTC	1343	IN	Data Raw: 34 5c f7 16 f3 56 5b 0f e7 6f 7c 8a 60 88 01 c9 1a 97 5b b0 78 13 cb 96 11 0e 46 d5 64 35 a0 b9 b7 7f 82 5c ae fb 23 98 8d 47 b1 e0 b4 73 27 6e 3e 4b 52 d6 ca af 58 b8 15 04 cc 39 cb cb 02 a7 9d 24 b4 e1 f7 39 83 c6 61 0a b2 22 42 f9 80 ab bf b0 d6 72 b2 5e ab e7 0c 40 f4 33 f8 7d 66 a1 88 2c 0d 59 78 9e f9 de 95 18 8c 2a c9 aa 27 8f f6 07 c8 89 71 c3 2d ae 0d bc 53 2a b2 b4 cb 9b e8 69 ab f9 0c 59 53 94 95 35 21 93 4d 8e 03 18 a3 79 6c 8d 6a 18 6a 11 79 e6 5b 57 50 30 aa 26 2b 41 36 0a 64 09 79 fa 48 3d 17 73 75 47 41 96 f6 53 44 70 0a 07 a3 4a b2 5c f5 9c 30 8c 85 2d f0 bf 1e a1 2c 2f 94 c7 5c 19 47 91 8f 64 f9 c6 b2 b0 ea a4 16 f0 4d 92 9a 2c ed 29 36 10 9b f8 e4 2e 2d 2b f5 61 e8 7c 93 2b eb 2d 96 ad c9 66 91 22 08 25 59 69 4f f0 4b 70 4c aa d5 a1 83 Data Ascii: 4\V[o\|`[xFd5\#Gs'n>KRX9$9a"Br^@3}f,Yx'q-SiYS5!Myljjy[WP0&+A6dyH=suGASDpJ\0-,/\GdM,)6.-+a\|+-f"%YiOKpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49848	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	644	OUT	GET /nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:39 UTC	1353	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/jpeg Content-Length: 50012 Connection: close x-goog-generation: 1670250185532789 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 50012 x-goog-hash: crc32c=yyvPhw== x-goog-hash: md5=E0VVt6Zzf2SsjCrMZvbB9w== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY20rBaeClbDVd5B5D1J_5BgSE5_P_6Uo1pBJHdGlgrA4Lj0nVTcsvB_whXUHx-_lt3QG_o Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2965 Last-Modified: Mon, 05 Dec 2022 14:23:05 GMT ETag: "134555b7a6737f64ac8c2acc66f6c1f7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9AF%2F8%2Fux0PQNTBLBzhMgokePjJ0N5tsr2rUyHHzWS31NQzL0Q477sNHjB3YMfECO%2Bld9V3Oj5lsT9vQkUKOMy0MgpdFoIgQKNbyu5YMyVZOdYILQPPuzN%2FiG9Ig3Z2ICCz%2BG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:39 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 33 61 39 61 37 33 32 64 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 30 32 26 6d 69 6e 5f 72 74 74 3d 31 37 39 36 26 72 74 74 5f 76 61 72 3d 36 38 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 38 33 35 31 34 26 63 77 6e 64 3d 31 36 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 33 62 36 38 66 37 37 31 65 32 Data Ascii: CF-RAY: 8f110173a9a732d0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1802&min_rtt=1796&rtt_var=685&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1222&delivery_rate=1583514&cwnd=169&unsent_bytes=0&cid=03b68f771e2
2024-12-12 22:03:39 UTC	1109	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 01 b7 08 06 00 00 00 37 97 1b eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 ea 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 62 34 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 38 3a 32 35 3a 35 Data Ascii: PNGIHDR7tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:5
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: e7 79 48 77 27 24 e9 4c 86 ce d0 49 08 19 20 8f 03 12 83 28 28 0e 88 80 f8 a8 1f 82 22 20 8f fa 91 1f d0 ff 17 7d 18 3f f4 57 50 44 8c 51 d1 04 41 34 10 20 21 03 09 81 ce d4 e9 f4 3c 77 df 7b fb ce f3 50 f5 ed 77 57 ad ea 75 f7 dd a7 ea 54 dd 9a 6b ad 7e 4e df aa 53 67 3e 7b af 77 cd 2b 12 8f c7 49 49 49 49 49 49 a9 9a 28 aa 8f 40 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 Data Ascii: yHw'$LI ((" }?WPDQA4 !<w{PwWuTk~NSg>{w+IIIIII(@IIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIII
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 1b 6c cf a6 49 b3 df 9c 01 dc c7 cd 65 1c 30 cb bf 99 e5 3b 66 19 53 76 a2 a4 a4 9a 5b ce e4 9a bb 98 d9 9a fb 78 d0 7c fc 49 a9 41 b0 d4 5e 0e c0 c6 d7 e3 5e 0b fb 80 a0 89 81 99 42 4b 01 53 c6 76 00 ac 23 47 8e 58 46 0d 06 7b e8 d0 21 cb 64 c1 84 01 58 38 26 98 76 57 57 57 0a 94 d8 5f c4 c0 00 66 8c 73 60 3d 03 85 cf 44 cb fe 24 df 75 67 02 37 d7 94 e8 db 46 fa ed e4 3b 91 92 a7 6b fe e4 6d 00 7c a0 a4 96 65 b7 05 28 f5 f4 f4 a4 8e 01 4d 10 cf 05 f7 89 67 85 e7 02 41 e0 fc f9 f3 f6 59 b1 39 54 5e 03 be 63 3f ec 83 7d a1 f1 e2 33 d6 33 00 4a 62 ad 98 85 02 3c af e4 bb 3a 65 3e 3f 60 8e fd 49 73 dc 7d aa b9 a9 e6 a6 9a 9b 82 5b be c0 ed ff 33 f7 f1 9e 20 0d 49 fa dc 4a 79 dd 60 86 00 1e be 36 7c 1f 1e 1e b6 c0 06 b3 23 98 29 26 ca 73 cf 3d 47 2f be f8 22 Data Ascii: lIe0;fSv[x\|IA^^BKSv#GXF{!dX8&vWWW_fs`=D$ug7F;km\|e(MgAY9T^c?}33Jb<:e>?`Is}[3 IJy`6\|#)&s=G/"
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: da a4 f9 92 f3 f0 10 70 f2 0f ff f0 0f b4 66 cd 1a 1b 7d 09 01 01 11 af e6 7a ad 06 17 06 38 95 54 73 53 cd 2d 77 aa b8 24 ee e4 0b fd 49 5c bb 7c b9 e5 16 3c 82 01 2f 23 e8 3e f4 a1 0f d1 5f ff f5 5f d3 b7 bf fd 6d ab b5 01 d8 f0 97 23 27 11 21 c9 55 47 a4 f6 20 eb 42 32 c3 0d 33 88 dd 2a 22 b2 5a 8b 34 39 b2 f9 cf 07 80 2e c0 b9 eb 64 ed 46 f7 d8 41 c7 09 a3 39 41 e3 e5 e0 0f 80 17 00 0d 9a 1b 4c 90 0c 6c b2 02 49 be 05 b4 6c 8e 87 77 06 cd 2d 59 dd 24 65 56 fe e6 37 bf 69 01 ee 73 9f fb 1c dd 74 d3 4d 36 57 f1 dc b9 73 10 74 3e 83 1a 98 66 d7 fb 95 fd 28 29 15 8e 2a d2 2c 69 18 da eb 25 53 2d 87 04 6d 09 00 60 72 08 47 07 f3 5d b1 62 05 fd d1 1f fd 11 7d e2 13 9f b0 c1 23 00 b1 c3 87 0f d3 a6 4d 9b ac 5f 06 db 22 48 02 0c 11 db 73 ce 17 33 7a 06 20 a7 Data Ascii: pf}z8TsS-w$I\\|</#>__m#'!UG B23"Z49.dFA9ALlIlw-Y$eV7istM6Wst>f(),i%S-m`rG]b}#M_"Hs3z
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: cd 67 83 26 c2 52 3b 27 69 33 18 72 44 20 df 07 7e 63 7f 52 a6 64 62 59 e4 d8 ad 85 98 6d 6e 59 a6 67 b1 d4 09 1f f6 5c 20 3c 47 68 b9 78 6e 78 7e 88 28 64 60 03 c1 f4 5b ce fe 36 19 c4 e4 46 f4 b2 7f 15 7f 59 80 f9 d8 c7 3e 66 f7 41 82 37 a2 68 cd f3 fe 43 d5 00 2a 93 b4 f4 95 6a 6e 79 91 88 5d 4d aa 90 5a 88 64 d0 cc 94 b8 3b 34 83 1b b4 36 10 02 48 50 14 19 e6 47 19 f5 28 c1 98 bb 4a f3 3a 9f 16 5a 4e 1a 57 b1 ce 25 1b 93 e2 19 21 64 1e 40 c7 bd da 00 78 9c 16 b0 14 d0 2d f5 33 e3 1a 80 48 e0 47 05 13 94 e9 ba e3 8e 3b ac a6 6f f6 bb ae a1 a1 e1 26 33 36 1e 55 0d a0 f2 f8 92 be 33 d5 dc f2 c2 3c 18 e0 a4 e4 9f 8b 76 92 69 71 8f 25 7b a8 81 00 64 08 55 07 a3 42 72 ee 2b 5f f9 4a 5b 7d 04 65 b7 64 1f 31 a9 95 49 9f 61 2e 25 9f 7c d7 58 68 d3 5a 18 8d 25 Data Ascii: g&R;'i3rD ~cRdbYmnYg\ <Ghxnx~(d`[6FY>fA7hC*jny]MZd;46HPG(J:ZNW%!d@x-3HG;o&36U3<viq%{dUBr+_J[}ed1Ia.%\|XhZ%
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 8a 3f 33 22 68 66 38 2f b4 0b 44 4d 21 ca 0d 84 f5 58 38 d2 0f d7 e8 32 28 f7 7a 7d 81 31 ee 36 61 c2 fc 73 ed 80 50 4c 13 8f 2b f9 b2 d9 07 4c 1e 92 31 2a 91 a0 32 09 ee 17 a6 c9 6a 27 7e 1e 18 27 18 2f d0 dc 64 71 6d d5 dc 4a 33 4e 19 d8 34 78 44 c1 ad 24 52 15 27 47 17 83 01 70 0d 48 59 3c 59 26 78 43 cb b8 f4 d2 4b 6d 40 09 98 32 98 35 6b 95 61 40 49 6a 70 be 7b 65 f3 67 58 0d b3 52 98 08 03 32 fe 22 2f 10 5a 1b b4 60 98 79 f1 97 43 e5 ab 55 7b 63 8d 0d 01 35 60 a6 c8 ef e3 14 00 05 b7 d2 6a 6c 0a 6c 0a 6e 25 21 d6 50 8a 11 45 27 cd 84 b2 aa 04 33 5e d0 e0 e0 a0 9d 10 30 5f c0 e7 06 13 9b cc 97 93 0c 3d c8 2c 19 44 dc 03 2c 1d b3 93 b5 2b 2b 65 22 ca 08 54 94 9b 02 b8 a1 c2 0b 98 3b 9b e7 38 82 d2 ad f2 52 2d 24 3b 4c 80 30 86 e0 5f e4 20 1b 05 b7 e2 Data Ascii: ?3"hf8/DM!X82(z}16asPL+L1*2j'~'/dqmJ3N4xD$R'GpHY<Y&xCKm@25ka@Ijp{egXR2"/Z`yCU{c5`jlln%!PE'3^0_=,D,++e"T;8R-$;L0_
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 0e b7 08 82 6f 12 7f 21 0c bc f4 d2 4b f6 39 71 63 52 08 0b aa ad 24 fc 6e 78 4e 6a 96 cc cd ca 00 8d 6d cf 9e 3d 74 cd 35 d7 28 b0 29 b8 55 16 c9 e0 0d 5f ce 9b fb 3d 1d 10 ba 61 fd 99 c0 91 fd 6d 5c 3d 83 b5 11 f8 dc b8 d1 a4 6c 52 5a 0d 0c 2a 97 7b f0 bd 13 6e 04 89 e4 59 80 d8 99 33 67 ec 3a 74 04 60 00 ac 55 cd 4d a6 95 80 10 29 c9 fd 02 95 b2 03 b6 eb ae bb 4e 81 4d a9 72 c1 0d e0 c2 60 13 56 73 08 d2 cc 32 55 ed 97 20 c5 e7 93 ad 6f 18 e0 18 d4 dc aa f6 b5 48 ee fd cb 64 78 e4 b7 c1 df 86 5c 2e 80 1c 18 12 fb 49 aa b5 31 69 58 e2 56 4a 68 96 a9 b5 25 c3 8f 35 8e 8a bc f9 e6 9b e9 15 af 78 85 02 9b 52 65 82 9b 9b 30 9d 49 6b c8 b4 3e 17 2d 86 01 4f 96 e7 92 8c 99 35 4a 0d 3b 4e 10 80 0b 02 09 b4 11 74 dd 7e fa e9 a7 6d 7e 1b 57 e4 e0 52 53 5c 30 b9 Data Ascii: o!K9qcR$nxNjm=t5()U_=am\=lRZ*{nY3g:t`UM)NMr`Vs2U oHdx\.I1iXVJh%5xRe0Ik>-O5J;Nt~m~WRS\0
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 2a ee 0d 9a db 45 17 5d 44 0f 3c f0 00 3d fc ad 87 e9 5c ef 59 5a b5 6a 25 ad 5c b9 8a 1e 7b ec 09 9b ac 8d b6 36 c8 7f 5b d6 b9 cc ec 13 33 9a 76 9c 1a 1b eb 2c e0 e1 15 d6 1b 90 84 16 07 7f 1d d6 53 6c 8e e6 62 51 fa e6 37 ff 87 76 ed ba 82 6e bd f5 56 03 96 0f d1 9c 61 f8 6b d7 ac a7 fe f3 7d 06 e0 e6 92 5a 71 75 46 51 72 ea c8 53 4f 3d 55 f3 9a 1b b4 33 0e 1e 81 20 a5 c0 a6 54 0b e0 56 36 12 a4 8c 92 b4 2a a5 c8 73 f3 75 05 28 37 4d 2e cc b5 c8 ea 23 b8 3f 34 80 bc e9 a6 9b 2c b0 7d f2 93 9f a4 e5 cb 57 50 6b 5b b3 0d 08 79 ea fb 4f d1 b2 0e 04 8d cc 52 5b 67 27 f5 2c 5f 65 4d 8a c3 c3 43 34 3a d2 67 c0 2b 66 cd 91 08 f1 8f a1 62 49 73 0b ad 5b bf 96 d6 ae 5f 4d 7d 7d 67 68 68 60 8a b6 6c ba 88 9e 7b ee 59 1a 18 18 a4 3b 5f 73 27 3d fc f0 c3 d4 d0 d4 Data Ascii: E]D<=\YZj%\{6[3v,SlbQ7vnVak}ZquFQrSO=U3 TV6su(7M.#?4,}WPk[yOR[g',_eMC4:g+fbIs[_M}}ghh`l{Y;_s'=
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: b9 95 81 59 32 9d 86 23 b5 29 06 ad 20 b0 0a eb 5b e1 a0 8e 74 db 85 c9 a9 cb e5 be c1 64 b9 e2 0a 72 db 10 11 09 b3 e4 8e 1d 3b ec f9 f0 af 0e 2d 88 cc f9 11 5c d2 dd dd 63 7d 6e b7 dc 74 1d bd f8 d2 3e fa f1 bb 6f a6 df ff 5f 3f 4b 87 0f bf 4c 91 f6 06 da b9 e3 52 ea 39 70 9e 36 cd 45 a8 69 d9 0a 3a 70 e0 00 b5 35 b6 50 5d 6c 98 3a 1a a7 e8 92 4b 76 d2 89 d3 47 a9 bb 6d 99 4d 39 98 98 9c b0 65 b7 e2 d1 3a 1b 39 79 f1 e6 ed 06 40 97 51 c3 6c 13 9d 39 7d 26 15 ec 52 4a bf 64 21 4c 93 c8 21 74 83 8f aa 91 f0 de 50 89 66 fd fa f5 0a 6c 4a 0a 6e e5 00 74 3c 09 7d d1 91 be df 5c 8d 2d 9b 76 38 d8 96 7b d8 65 ba b6 7c 6b 31 b8 17 94 3e 5a b9 72 a5 d5 da 1e 79 e4 11 da b8 71 a3 d5 da e0 23 99 9b 9f a3 7a c3 84 a7 d1 97 cd 5c e7 f8 d8 b8 d1 e4 ba e9 6c df 39 ba Data Ascii: Y2#) [tdr;-\c}nt>o_?KLR9p6Ei:p5P]l:KvGmM9e:9y@Ql9}&RJd!L!tPflJnt<}\-v8{e\|k1>Zryq#z\l9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49844	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	663	OUT	GET /i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:39 UTC	1105	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MzHtWO3dyF1T7hsg2u1Uz1XlNSh6WcqfJL43jihQarnd8%2FSZGJ3jCPjg1ca0uJCwlOqjRJMyDy7Y7VbsxySggYVaPj1Ta%2FBHpmWHIn1eY4NX0V9VucdMmZfiuhnn1MjMJS4TSa%2Bkpl%2Fn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110173ab8a41a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1645&min_rtt=1596&rtt_var=633&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1241&delivery_rate=1829573&cwnd=152&unsent_bytes=0&cid=fc606ba10777d61c&ts=821&x=0"
2024-12-12 22:03:39 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49847	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	622	OUT	GET /fdx-pkgmsn/9d65c0ba0bfe0d0d359e9ecda3d1d78b.png?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF0TlM1d2JtY2lMQ0owZVhCbElqb2lhVzFoWjJVaUxDSjJJam9pTWlKOQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:39 UTC	1199	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/png Content-Length: 2317 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4690 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KnGvsdmWO2QmEU6cd3P8twc9WF8gPEgG6fMa7p%2FPmnBjFrj0VQNYvIx%2FY7Yf1PmiMBKLt8CRcEhu1JURpmZP%2BOMrsB9qYahl1WMNMgwy01g%2Bbt37%2BC6VU9qZUheMkM612r9sFacrkRWl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110173aa4c41a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1730&rtt_var=675&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1200&delivery_rate=1687861&cwnd=209&unsent_bytes=0&cid=151deed11598f626&ts=466&x=0"
2024-12-12 22:03:39 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 11 08 06 00 00 00 8f 67 b1 f5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 Data Ascii: PNGIHDRGgtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 Data Ascii: :x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.a
2024-12-12 22:03:39 UTC	778	IN	Data Raw: bc 27 d4 43 bb 85 03 81 31 70 bb 28 5f 22 93 b8 49 bc 4c 3f 49 bb 89 eb 24 2e ca 35 17 b3 ef 66 30 4a 9b c5 b1 c0 c8 58 ea d7 f9 fb 72 78 b5 6a 8c ca e1 45 f0 ed ee e1 45 78 e3 7c e9 3c 70 3e 93 aa 33 7c 93 76 cf 0e 04 c6 c0 d6 c5 f6 92 3d 65 6f e1 10 2e e1 14 6e 17 7d 10 5f c4 27 f1 ed d6 58 e5 fb 89 65 b7 0c 67 1a 74 44 2d 06 26 a8 20 1c 89 22 14 89 20 1a 8d e2 dc 9f 97 74 4d d7 96 49 60 06 bf 39 ab bd 7d 34 9e 8f df 5b aa d0 c3 1b 08 f0 16 fb 55 63 8e 52 4e d5 8b 7e 36 ed 6a 06 a5 f8 6a 2f 0f ca ee 54 db 76 14 cd 1e e3 f6 6f e1 a4 6a 2b 6a 45 bf 84 76 15 77 e0 18 68 65 26 ce 37 d7 c1 1f 96 c3 18 18 99 a3 d4 ff dc 28 fa a7 69 d7 70 57 59 c9 5e b2 a7 ec 2d 1c b7 7c 15 6e f1 41 7c 11 9f c4 b7 7f 8f 35 3d 87 f8 d6 6c 40 13 ab 40 11 1e 05 11 06 25 aa 69 a8 Data Ascii: 'C1p(_"IL?I$.5f0JXrxjEEx\|<p>3\|v=eo.n}_'XegtD-& " tMI`9}4[UcRN~6jj/Tvoj+jEvwhe&7(ipWY^-\|nA\|5=l@@%i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49849	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	663	OUT	GET /i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:39 UTC	1105	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jLkeiH8ZA%2FIR1gtTSOHeMoQBmse51UkyVK8%2BwU8Ps4s8lpRvwFNiSCLSMdb5NXTug%2Bpk1fatJeoWUIoKLdHzsaeHLGI5ObCFOtmVvf6d4Nn76t3ysepLMgcMwgTmYCHETK8i3Im0nJX%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110173ab6fde97-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1728&min_rtt=1688&rtt_var=661&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1241&delivery_rate=1729857&cwnd=228&unsent_bytes=0&cid=586d8925b910a0ae&ts=829&x=0"
2024-12-12 22:03:39 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49850	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	644	OUT	GET /nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:39 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/jpeg Content-Length: 24581 Connection: close x-goog-generation: 1684171716534608 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 24581 x-goog-hash: crc32c=Kx/S4g== x-goog-hash: md5=SIiI8MqS4Xttt7C9D4BTmw== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC66eMIU8btsxTKLJR25jlFHBt53Jlg5InEE5nN4Lypwa3kYg402Z89TEiKwCmKxBprez4QV9xR8VQ Expires: Thu, 12 Dec 2024 21:57:44 GMT Cache-Control: public, max-age=14400 Age: 2965 Last-Modified: Mon, 15 May 2023 17:28:36 GMT ETag: "488888f0ca92e17b6db7b0bd0f80539b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2XvMIXHBUEd8CQsyemspX1UloXY8QsgudwEFvBrCQLfTOVQknW1dWpP1E%2FzwCi3jvTKMstFG8pHceMTJgb4E5Xg2gGDLi5PsUE1jOU5xQFYJ4%2BmDz1oDViIS9ziS5zoM%2Bv1c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:39 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 35 31 63 31 61 63 33 34 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 32 39 26 6d 69 6e 5f 72 74 74 3d 31 35 32 39 26 72 74 74 5f 76 61 72 3d 37 36 34 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 6e 74 5f 62 79 74 65 73 3d 34 32 31 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 36 34 37 33 32 26 63 77 6e 64 3d 31 37 38 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 31 33 63 31 30 31 37 63 62 37 66 30 Data Ascii: CF-RAY: 8f1101751c1ac345-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1529&min_rtt=1529&rtt_var=764&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4218&recv_bytes=1222&delivery_rate=264732&cwnd=178&unsent_bytes=0&cid=13c1017cb7f0
2024-12-12 22:03:39 UTC	1107	IN	Data Raw: ff d8 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 04 04 04 04 04 04 06 04 05 05 05 05 04 06 06 07 07 07 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 03 03 05 04 05 09 06 06 09 0d 0a 08 0a 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 2c ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 e0 01 60 03 00 11 00 01 11 01 02 11 01 ff c4 00 aa 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 10 00 01 03 02 03 04 06 06 07 06 05 02 06 00 07 00 01 00 02 11 03 04 05 Data Ascii: ,Adobed`
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 1c 32 2a e5 0d 2b 6c b6 1e e9 df c3 d8 e9 d4 3d 8d 3d b9 82 0a 8a 48 6c ed 0b 7f ba af 5a cc 7e 29 bc 03 2e d7 0e ce 28 15 16 b8 dd 0f bb c7 ee 9a e1 a9 bc f5 4c f1 cb 81 94 1a f5 78 ed 4c bd 2a d2 ea 60 4c 4c 49 e5 a9 f3 e0 42 5d 7e 36 f1 ff 00 69 b2 de 70 c8 3a f1 84 02 79 98 41 b7 d7 17 d6 9f 77 85 62 3b a7 d9 16 77 8d 61 ec 04 e5 05 27 91 b1 db 66 d2 9b 7a d7 98 d5 a8 39 18 b3 6b 49 9c b2 68 d2 51 4f 07 48 b4 08 73 bf c4 54 e3 74 9d eb 9b 36 9e dc 80 39 ae 36 89 eb 7d b2 de 2e 0c ab 85 5d 44 cc 5e 17 34 19 8d 46 a1 5c 7d c4 b0 da ea 8d 9d ec 3d ed 8e 0f bb 2d 3d a0 c8 ee 58 6c 81 21 fe 30 b5 a6 48 af 4e e9 a7 38 05 bb a4 e7 ca 32 94 d9 01 dd 3d ac c2 2a c9 6d e0 77 6b 7b 39 44 ae 76 09 06 63 58 55 4d 6e 6d a0 03 2e 8c a1 49 a2 a4 d9 77 4d f9 1a 4f 69 Data Ascii: 2+l==HlZ~).(LxL`LLIB]~6ip:yAwb;wa'fz9kIhQOHsTt696}.]D^4F\}=-=Xl!0HN82=*mwk{9DvcXUMnm.IwMOi
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 8d b4 04 1d 41 04 64 39 a0 6e 6c b1 9b 5f 56 df 17 17 6e 7e b6 f8 d8 17 c6 5d f8 9c d3 99 3c d0 2c cd a2 b5 75 43 4f 68 b0 ab 8c 2e a1 f5 cd c5 52 2f ad 63 88 33 a9 1c 56 79 17 7c 27 12 bb c2 1b 6d 4e 9b cd f6 0e 64 34 16 c6 f4 65 94 8c d3 19 1d 06 c2 fa db 13 a4 f0 c6 cd 79 8b eb 48 31 9f 03 c1 79 6c ee 52 12 4c 3a 67 39 de 56 b0 41 1a 6f 65 11 90 0c 81 c8 08 59 63 22 59 8f de 9c a2 14 98 c0 dd 40 20 10 08 3f ff d4 fb f8 80 40 20 10 63 82 e6 ca a9 ed 6e 24 6c f0 8a d4 68 06 ba eb 13 9b 6b 20 73 69 7b 84 7a dd 99 ae b4 e7 32 8f 17 fd 24 7a 47 b7 d8 5d 84 ad 83 e1 d5 9a 36 93 6f 99 7d 86 5b 1a a0 1b 8b 6c 26 80 25 ec 70 76 44 34 6a 38 71 5f 57 18 66 94 e8 43 62 07 47 7b 0b 80 60 a2 83 5f b6 18 cb 86 d3 ed 3d 9e f0 6d c3 5d 4a 5b 87 5a b1 b3 1c 32 30 ae 33 Data Ascii: Ad9nl_Vn~]<,uCOh.R/c3Vy\|'mNd4eyH1ylRL:g9VAoeYc"Y@ ?@ cn$lhk si{z2$zG]6o}[l&%pvD4j8q_WfCbG{`_=m]J[Z203
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 2a 16 2c 70 24 6e 9c bb 17 0a dc 07 03 20 15 50 88 a6 04 76 20 4e b5 bb 83 d9 99 90 41 12 78 ca 0a 3e 29 84 52 a8 cb 1c 46 81 6d ad e5 83 37 70 dc 41 d0 77 04 6a c2 74 f0 5a a2 47 06 c6 1f 88 54 7d 0d d6 db e3 f8 66 77 96 2d 00 f5 c4 e5 e9 96 7c 01 9d 14 57 63 c2 71 57 62 96 cf 7b 47 ed d6 8f dd bc 00 18 0e 99 85 e7 c4 42 9e 65 10 34 e0 b4 42 d4 6e 1b 4a a3 a0 03 03 3f 23 cf e6 b0 bd 1d a6 97 97 a1 95 40 83 ff d6 fb f8 80 40 20 10 68 ec e0 44 e9 f1 52 27 23 98 58 6c ef 59 7f 77 8e 63 ac fd a8 d5 ba ba b4 c1 fb 0b 7d 61 3c 67 45 e9 89 c0 ba bc 97 17 ef b8 be dc 98 73 9d 9c 80 7b 78 4a ee 29 fb 70 d4 92 41 de 33 cc 1d 17 53 38 1b b8 4c f8 ae 30 d2 4e 9d 54 1d e9 ed f3 a2 cb 6a 1e 35 e3 8a c6 24 2c a8 10 35 ac 60 8c f2 9f 9a d6 82 bf 77 4f 26 e7 98 89 cf cf Data Ascii: *,p$n Pv NAx>)RFm7pAwjtZGT}fw-\|WcqWb{GBe4BnJ?#@@ hDR'#XlYwc}a<gEs{xJ)pA3S8L0NTj5$,5`wO&
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 4c 79 f7 ad f5 38 84 63 7f b1 7a 06 5d 50 67 a7 9f 04 c4 a9 c3 aa 7b 5c f3 f3 a2 e3 d8 39 35 23 78 9e ff 00 39 2c 65 24 b1 04 1c c2 8d 4b d3 ca 57 13 08 71 07 92 c6 c1 3c a1 5a 86 17 8e cc 67 a1 25 7a b4 d9 aa f8 81 ea 20 13 ba 5a 3b be 3f 35 ad 95 5b bc 07 7a e1 b1 30 74 f7 ae 85 47 13 9a ac ad 43 32 01 1a 4f 3e 5e 7f 40 f3 0f 49 56 ae 9c 33 11 2e 9b 8b 20 2d 58 0e 81 d1 da b4 47 35 63 63 26 8f 54 4c 77 4a 05 f3 19 8d 78 20 e9 9d 0f 61 ed bd db eb 5b 86 98 a3 80 da 0b 9d d9 13 b9 dd ac 7e 48 3d 44 db 80 5a c1 ed 17 01 0d e6 b3 54 9e 1b 67 4e f5 ef bc ae 5a fb 6a a0 87 11 07 d2 c1 e6 78 ab 10 3a 05 bd 1a b7 bb ff 00 68 0b 9e 49 26 46 64 f1 f7 f9 e7 e5 ad f8 16 da 74 99 4d 84 36 77 4c e5 3d ba 64 bc b7 be 14 be 8b 3a d7 0e da 0a 80 f0 5a 4c 61 09 75 83 b1 Data Ascii: Ly8cz]Pg{\95#x9,e$KWq<Zg%z Z;?5[z0tGC2O>^@IV3. -XG5cc&TLwJx a[~H=DZTgNZjx:hI&FdtM6wL=d:ZLau
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 49 9d 56 53 c4 92 91 24 49 3c d7 9e bc c3 b6 f2 a4 8c aa 85 17 23 75 ca 84 02 04 8c 45 5e ec fd c8 15 40 20 65 59 b4 85 36 d2 a8 d1 52 8d 5f 54 53 fe 22 78 76 ca ee b3 2e 1e 29 e9 e6 cf 65 76 e3 09 c4 f6 f7 65 f1 6b 6b ed a9 e8 d2 83 1d 8e 52 b7 73 7f cd 30 ba 80 7d 90 33 00 3d c7 28 c8 99 0b d7 49 c7 03 cb 4f 86 3d cc 2f df 0d 71 68 26 7d 68 3d bc d7 ab 70 6a da 40 40 92 01 86 bb b4 26 e1 dd 7e 8e 0d 67 f8 a7 a4 0b ad c6 fa 41 c0 2d 1a fb 88 1b e4 06 97 41 76 ba 2c c7 74 c6 c8 b4 c5 b6 7f 12 03 78 d8 e2 be 8e c1 c8 b3 97 68 8f 04 1d 33 61 1e 29 63 77 f4 37 64 d4 b6 6f af c8 35 d1 e1 98 85 e4 d5 8c 79 f8 57 45 c4 be e6 3b 34 57 4b 99 73 25 30 a0 05 b6 42 33 cd 79 f5 38 6a 93 59 57 91 ff d3 fb f8 80 40 20 10 54 af 8c 5d 55 83 03 74 4f b9 7b b4 3a 66 8a ad Data Ascii: IVS$I<#uE^@ eY6R_TS"xv.)evekkRs0}3=(IO=/qh&}h=pj@@&~gA-Av,txh3a)cw7do5yWE;4WKs%0B3y8jYW@ T]UtO{:f
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 87 4d bf 7e e8 75 28 88 1e b4 0f cf 45 c4 4a 4a 66 c6 98 a7 6d 45 a0 e8 32 e4 b0 b7 6d 4e d6 50 8f ff d5 fb f8 80 40 20 10 55 36 85 ee b7 65 0b c7 db 36 bd b3 0c dd 97 91 14 00 03 d6 93 cd 7a 34 ac 2b 4f 3b e4 53 a2 d9 b7 39 06 c6 be 1d ab d3 31 16 85 47 36 a1 20 38 02 44 4c c7 f4 5d b3 36 b9 ad d4 e4 59 ba 07 07 01 f3 41 bd bd db 9b 24 30 88 1c 07 2f 02 82 65 9b e0 10 29 ba 46 42 1a 78 1c b8 1f 3f 90 48 5b d4 12 43 20 1e 11 f9 73 5c 76 16 ae c3 5a 97 5f 41 d9 1f 64 8e de e4 f4 fd 82 98 7d 40 41 2d 00 07 69 97 bb 4f 3d ea 6d c0 95 70 eb 69 3f 74 40 df 00 1f f7 76 2e 77 62 42 5b 39 15 70 0c 2a 1a 03 1f 49 a4 00 04 41 1f 05 e5 9e 15 07 b6 d4 5b 53 66 b1 a6 88 0d 2c 35 dc 38 19 11 9f 7a ee b1 13 8c a3 97 62 2e 9b 4d d2 dc bd 1e 37 63 81 77 70 5e fb a3 c2 3f Data Ascii: M~u(EJJfmE2mNP@ U6e6z4+O;S91G6 8DL]6YA$0/e)FBx?H[C s\vZ_Ad}@A-iO=mpi?t@v.wbB[9p*IA[Sf,58zb.M7cwp^?
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: ca dc cc 0e 8b 83 b3 ac b9 7b da e0 29 5a 82 d8 19 67 da 9a dc 10 b5 2f 0b b0 83 ff d7 fb f8 80 40 20 10 08 13 7b 37 88 70 c9 c3 42 83 95 ed 0e c4 d5 69 ab 79 b3 91 bc 43 5b 71 84 12 37 4c 00 00 32 7e 3c 17 a2 35 33 d8 e3 18 96 21 e8 ac 6d 9d 07 b6 b5 47 01 bb 67 74 43 84 11 a9 8f 3f 2f 65 67 2b 0a fd 4d a7 df 3f 6d 6a 5d bc 65 cd 31 39 f3 5c 7a 71 0c a1 03 7f 8f d7 aa 01 7d 73 6d 6a 0e a4 12 3b 7d eb b8 e1 51 36 1b 4f e8 57 54 f7 6a 87 bb ab 76 e5 d8 6e b0 d3 d8 b3 a4 70 3d 69 b2 b8 dd 43 7c cb 6a f5 ba db 2c 4a dc be ce e1 c3 75 db 84 e4 e8 81 91 e0 52 f0 27 40 ea ef ee 28 40 2e 03 36 f2 8c bb 55 a4 f0 27 6c eb 00 64 18 93 c0 ae 6f d0 82 da 2d 9b 18 bd 5b 6c 52 da fa be 11 8e db 34 d3 b4 c6 2d 9a d7 43 5c 37 48 1b c0 e4 47 0d 3b f4 58 44 63 81 46 c4 70 Data Ascii: {)Zg/@ {7pBiyC[q7L2~<53!mGgtC?/eg+M?mj]e19\zq}smj;}Q6OWTjvnp=iC\|j,JuR'@(@.6U'ldo-[lR4-C\7HG;XDcFp
2024-12-12 22:03:39 UTC	1369	IN	Data Raw: 5b a1 67 78 30 8c 55 f8 b9 6d dd 1c 6e b3 e8 db 61 77 50 59 7b 55 cf 24 9c b2 97 1e 3d ab d9 4e a1 0a 32 a8 ba a7 6e c3 5e a5 d5 bb ce f6 fd 47 39 e5 d3 9c fa dc 4a 8a dd 95 9d 4d c0 c9 2f 04 66 26 46 7e 7c c2 0e 69 b5 37 f5 31 3a f6 9b 11 86 d5 6b 2f 31 fb 7a 97 18 d5 d9 2d dd c2 70 07 9d c2 f1 97 ac dc 51 c0 8c b2 e7 a2 82 e9 85 d8 d0 bb b9 b4 b4 a7 36 58 7b 43 8b 6c 0e a2 c9 d9 c0 e6 04 aa 8e c7 83 da 1a ae 38 85 6a 9b d4 aa 12 fb 67 ef 4f b5 24 99 95 e5 d6 9c 70 d1 6a 0b c3 59 ca b2 b4 40 83 ff d1 fb f8 80 40 20 10 08 04 02 0c 2e 30 ad 06 7a 2d 11 cf f6 bf a2 ed 86 db d2 ca db 4d 80 51 bd bb 60 68 66 20 d0 ea 55 c0 6f 0d e1 9c 70 cd 49 b7 b0 f2 6f 48 3f 43 7a d7 16 37 b5 ba 38 db 1b a6 e2 45 ad 0f c1 b6 82 6a da dc 98 82 6a 5c b1 bb fd b9 02 be 84 ff Data Ascii: [gx0UmnawPY{U$=N2n^G9JM/f&F~\|i71:k/1z-pQ6X{Cl8jgO$pjY@@ .0z-MQ`hf UopIoH?Cz78Ejj\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49852	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	663	OUT	GET /i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1100	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tO2q48PE2suYxbU%2FCKIHf9IrDPOyjPSvC%2BzEnNrDcGldDquXkuxKXqk8nQWP2XDqN4kY7f3NxthKEyep96pHjahWESPvVSoHu6OfpOgfiP85pEEIiI6uyYVzdP4XXh1eoJaC8m718odx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101752a0f420d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1583&rtt_var=791&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4254&recv_bytes=1241&delivery_rate=142529&cwnd=244&unsent_bytes=0&cid=7e6f77fb622e4c9a&ts=855&x=0"
2024-12-12 22:03:40 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49851	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	663	OUT	GET /i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rqWkeGpJ5qQLcIIbMiGggGqJ6kK%2FoFuX19xwu0TOil9HCxdAGPFeKaHli6r0U%2FANhGUzxDdfFm5BuCnlJOT9bRzeVoA0BuvJDswedXwb8e5v6oIpeo9iT2X4UxxVXXrAc4KyXWoXQUl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11017528d842be-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2359&min_rtt=2359&rtt_var=1179&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4254&recv_bytes=1241&delivery_rate=140283&cwnd=213&unsent_bytes=0&cid=c875b98b25d787d1&ts=926&x=0"
2024-12-12 22:03:40 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49853	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	644	OUT	GET /nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1355	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:39 GMT Content-Type: image/jpeg Content-Length: 169729 Connection: close x-goog-generation: 1684174072373379 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 169729 x-goog-hash: crc32c=LyrGOg== x-goog-hash: md5=/qgRLXg6hx3egO7zkt7Jww== x-goog-storage-class: STANDARD X-GUploader-UploadID: ABPtcPoxdFiSbUC0cCw7njqqbLKudkvgq--ch_Wj5ljUGZ4b2grQzw39ZPEeaNqVt5O5zeIdFzE Expires: Thu, 12 Dec 2024 21:38:08 GMT Cache-Control: public, max-age=14400 Age: 3369 Last-Modified: Mon, 15 May 2023 18:07:52 GMT ETag: "fea8112d783a871dde80eef392dec9c3" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dzDYL9RkMOjcZ%2BD%2FjdFi45XC454RB9NUSglz8%2BIWQNUcJgeQntrSiZByBZmgtqNLwOd2SxKL5%2FhvSdVZi4ExdgL0FVga9whZS7WbhNFhLRry4Jq3LINw4xJYv7yOg0S5j%2FC1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:40 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 36 61 63 64 35 34 32 37 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 39 39 34 26 6d 69 6e 5f 72 74 74 3d 31 37 30 32 26 72 74 74 5f 76 61 72 3d 38 34 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 31 35 36 32 38 26 63 77 6e 64 3d 32 33 38 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 32 66 39 61 31 63 63 30 38 31 Data Ascii: CF-RAY: 8f110176acd5427f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1994&min_rtt=1702&rtt_var=847&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1222&delivery_rate=1715628&cwnd=238&unsent_bytes=0&cid=92f9a1cc081
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 06 00 00 00 db 70 06 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 Data Ascii: PNGIHDR phtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:2
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 Data Ascii: 00000# 0000000002000200000# 000# 000000000200000000# 000# 0000002000200000000# 000# 0000
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 7f fe f3 07 ef bc f3 ce ed ba b6 f7 de 7b ef c1 9b 6f be 79 bb ee a9 a7 9e 7a f0 ca 2b af 3c 78 f9 e5 97 6f 75 bf f5 d6 5b 0f de 7d f7 dd 07 4f 3e f9 e4 83 e7 9f 7f fe 56 be 76 bb b6 fd 13 4f 3c 71 ab ef c7 3f fe f1 ad 9e 8f 7c e4 23 b7 ad eb 2b d7 f9 d0 f5 7d af 8e ea 0e 3f fd e9 4f 1f fc ec 67 3f bb b5 53 bd cf 3d f7 dc ad 3f d5 5b 5d ed a1 7a ea 5b c7 2a 53 9b b5 f1 e2 8b 2f de 8e 57 77 e3 ad 8e ea ef b8 b1 d5 76 5b a8 fd ae e9 da eb b1 da af 8e c6 db dc 54 77 f3 da b5 f5 4f fd f5 a3 6b 6b d3 bc 5d e7 a7 eb bb a6 63 d5 5f 19 a8 4c e7 2b 5f 59 e3 a8 fe 8e 7f e8 43 1f ba d5 71 45 e7 aa a3 71 d7 46 75 98 d3 ea 68 d3 46 c7 cd 93 ed 57 3d 33 5d 5f bd b6 ca a8 bb bd eb aa bb 71 5c af 69 eb bb 73 5d f7 ec b3 cf de e6 aa f9 0e e6 d6 7c 5d eb ac ec 05 b7 81 9c Data Ascii: {oyz+<xou[}O>VvO<q?\|#+}?Og?S=?[]z[*S/Wwv[TwOkk]c_L+_YCqEqFuhFW=3]_q\is]\|]
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 32 12 39 b9 6c 91 8f 88 c9 8d 9c 74 fe 54 ff ce fd fb 5b 1d 43 44 22 36 e7 7c 04 e7 9d d3 c7 77 ce d8 6e 64 e6 f4 f5 bd 08 d1 9d 98 bc 87 a4 d4 a7 fb f6 48 a3 d2 24 d2 98 3c fe 8c fd 17 9e b9 61 18 86 11 90 61 18 86 df 54 b0 f9 27 0f 3e f8 40 4b f1 f4 83 7f d4 56 bc 70 df 9e bf 13 83 f6 2f 1c 81 f5 85 b7 df 7e 3b 63 fc 17 8e 10 fc 62 db f9 fc d2 11 54 23 1b 34 1b cf 9f eb 9e af 4c 9f 23 26 d5 7b 8e b5 21 19 b4 25 4f df fd 34 9e bc 13 9c 1b b9 38 32 74 be 1d 37 ed ca 11 ea 9f 38 db 8d 40 44 2a ee fd a5 b9 b8 69 32 ce f5 4f 64 7b 9e 1d 7f 7b 76 ec d9 82 f3 b7 89 87 b0 67 cf 0e be cf d9 98 47 3e f8 04 b1 c7 0f 95 b9 fa ea 54 ef 5f fe e5 5f 3e f8 c3 3f fc c3 1b 09 a9 be 7c 0a be fa d5 af de da ca ae fd ea 87 70 f5 a9 a8 de fc 28 fe e6 6f fe e6 41 24 a6 36 b2 Data Ascii: 29ltT[CD"6\|wndH$<aaT'>@KVp/~;cbT#4L#&{!%O482t78@D*i2Od{{vgG>T__>?\|p(oA$6
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: e6 51 1c ef 5f 15 c1 cb 73 31 0c c3 30 02 32 0c c3 f0 5f 21 1d ff f9 a1 27 32 6b 8a 20 a4 a5 88 34 dc 34 15 91 89 f3 f9 95 23 6c 7d 28 72 71 8e bd 72 b6 0f 47 3e 8e c0 d7 f6 f2 11 2c 6f 5a 90 fc 38 ce b5 2f 9c 63 cf d1 6e d0 6a dc 4d b3 22 1a f2 65 3c ca 21 73 15 e8 ae be 0d 09 bd 09 b7 09 e0 09 ef 09 d9 69 09 3e f5 a9 4f dd 04 5c 21 5c 85 71 4d 58 ee ba ca b5 4f 38 4e d8 97 57 a2 ba 13 dc 2b 7b cd 03 d0 0a 7e 5a 00 44 27 e1 5d 4e 1b 79 61 22 06 fc 3a 12 f0 d3 3e 74 6d a6 59 95 8f 44 44 3a 22 2f f2 d4 b4 4f 58 4f 63 81 dc 24 e0 47 02 aa 2b 02 52 fb 11 84 fa 9e c0 de f8 ba be 3e 98 13 ed 5e 73 ac 44 68 12 de ab 97 99 56 04 44 ae 9e c6 58 df bb e6 8f ff f8 8f 6f 66 56 21 cd 09 b3 b1 ea a4 51 a9 de c6 ab cf f5 a5 fe fd d1 1f fd d1 cd 2f a5 39 ed 5c e4 a5 31 Data Ascii: Q_s102_!'2k 44#l}(rqrG>,oZ8/cnjM"e<!si>O\!\qMXO8NW+{~ZD']Nya":>tmYDD:"/OXOc$G+R>^sDhVDXofV!Q/9\1
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: d7 4c e3 3c 3f 8d bd be 45 02 ab bb ad 71 d4 b7 9e 8f ee 43 d7 44 fe ee 24 e2 36 86 ea ac 1f cd 69 65 6a ab e3 cd 5f e7 ea 1b 92 47 2b 76 08 e8 13 67 0e 6e c1 0d 22 e4 a7 4c 39 54 1e 42 21 87 cf f6 8b bb c6 a4 5c 26 fc 43 de 4a 73 72 b6 34 21 3f 3b e7 7e 72 9e 85 37 4e 7b 3f e9 f3 a9 e7 1f da 9f 73 37 8d 49 26 5d 77 47 f9 b4 29 6f 5e 9c e9 df b9 e7 38 79 78 27 26 bf 92 8d 2c 1a d7 30 0c 23 20 c3 30 fc b3 83 15 ee bb a0 f2 c4 9d 64 dc f2 67 1c a1 eb a6 dd 38 e7 32 a3 6a 1f a9 88 64 44 38 3e 76 04 a1 8f 1c a1 28 53 2b be 1c f9 79 bc 70 8e 97 63 e3 b9 92 01 26 a0 26 1c f2 a1 88 38 24 7c 33 f1 49 c8 4e e8 ec 1c 33 a0 84 be 8e f3 9d 48 f8 25 1c 13 1c 39 8f 57 1f 41 39 ed 44 65 ad 9c 27 f0 26 ec 26 50 56 ae 36 39 93 d7 87 ea 48 40 ad 2c 92 d0 3c 24 a0 27 00 57 Data Ascii: L<?EqCD$6iej_G+vgn"L9TB!\&CJsr4!?;~r7N{?s7I&]wG)o^8yx'&,0# 0dg82jdD8>v(S+ypc&&8$\|3IN3H%9WA9De'&&PV69H@,<$'W
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: a8 31 95 09 09 9a c2 9e 22 1d 84 da f6 56 9f ab e3 6e 9e 72 13 cc 38 66 27 84 75 be 8d bf 85 24 76 22 1e 21 10 95 15 75 89 59 4c 75 11 0c 13 00 eb e7 d5 fc 8a 59 53 65 eb 93 90 b2 d5 c1 77 22 e2 93 76 a2 f2 8d 57 5e 0d 04 cb ea 7f 42 ab 84 7c 84 d4 fa 45 f3 c3 01 fb cb 5f fe f2 4d 90 15 32 58 02 c1 84 d6 f6 84 ef fa d5 9c 56 2e 01 99 4f 42 e7 e4 dd 68 3e 3a 2f 32 95 d0 c2 08 9f 9c 1c 5d 17 ea 63 fd 16 be b7 6b 12 f0 d3 1c d4 56 c7 9a 83 2b 81 6c be fb fc a5 2f 7d e9 d6 6f 66 65 f2 8d 54 3e 21 bf 36 3a 97 56 8a 5f 45 70 cf ae e6 54 f5 0b e1 e1 7f d2 5c 37 b6 ee 0b b3 39 e4 a2 7b d0 bd eb fa c6 ca 84 ac 76 82 88 58 b5 ef f9 eb 3c ad 85 a8 62 88 69 73 7c 35 4f 43 f2 22 49 4c a7 38 f7 0b af 5c 7d 5f fd ea 57 1f 11 5f fe 48 cd 41 f7 37 02 23 6f 89 ec f4 08 65 Data Ascii: 1"Vnr8f'u$v"!uYLuYSew"vW^B\|E_M2XV.OBh>:/2]ckV+l/}ofeT>!6:V_EpT\79{vX<bis\|5OC"IL8\}_W_HA7#oe
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 44 d6 90 c0 da b8 3a 9e 0b 4b dc 3c 06 66 4d 1c c1 dd c7 8e f7 4c d4 ae c8 51 da 69 6c cc b3 08 f7 f5 5f 4e 17 a1 96 99 3e 21 2c 3d 37 1d a7 19 e3 58 7e cd 1a 2f 39 23 53 2e 4e fd a1 b1 86 e6 ae ed 9a 84 b1 b6 6a 43 70 01 cf 72 ed 37 86 ee 93 d0 d0 c8 5f f7 9a 6f 4d 73 c4 9c 31 f0 fb a8 6f 1c db 23 49 f5 39 62 c4 cc 0c c1 e9 19 8a c0 54 46 c8 e3 7b 34 b2 9c dd 33 99 7c fa 3e df 1f ba 6b 51 1e 96 b3 e4 9e 8d 3d 72 11 43 cc 7f 24 5f 11 e6 5a 3f 3c df ff f6 6c 3f ec fb a9 fb 47 77 3f 92 88 cb cf ef 79 49 62 c5 ef ef 1f 79 18 46 40 86 61 f8 97 85 1c 57 5f ba 47 a5 fa f8 11 0e 3e 76 04 96 d7 8e 30 f5 fa f9 fc d9 c8 c7 11 14 d3 74 14 26 b7 c8 56 2f 9c 2d a7 f3 88 ca b3 4c ab 98 9d 58 c9 25 5c 26 80 25 3c 7d e7 3b df b9 09 38 5d 97 20 97 f0 23 33 78 02 52 82 58 Data Ascii: D:K<fMLQil_N>!,=7X~/9#S.NjCpr7_oMs1o#I9bTF{43\|>kQ=rC$_Z?<l?Gw?yIbyF@aW_G>v0t&V/-LX%\&%<};8] #3xRX
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 57 3b b5 41 c3 42 8b 22 27 8e 73 b5 d9 31 7e 29 d7 e7 42 90 04 89 23 99 e0 09 af dc 26 38 84 85 86 2b 61 bd 13 87 a7 0b 5a 71 f6 69 48 f2 9c ff f4 b9 fe ad 7b 46 f6 c8 46 37 2f f2 51 64 ad bf 3e fb a2 24 fc 55 04 e5 7e ac f3 69 47 de da df f7 30 8c 80 0c c3 f0 6b a0 f5 08 45 b8 39 02 46 9a 8b 97 98 50 45 32 22 1b e7 74 e4 e3 0b e7 d8 e7 ce f7 34 1e b7 90 b9 69 3a ce b5 e5 e5 78 a2 55 d5 36 be 08 4c 3d 08 71 56 78 13 a4 38 c8 26 9c c9 e7 40 b3 c1 21 9c f9 91 15 7e ab bf d7 ec dd 56 c6 45 eb 91 15 9c e9 94 8c e7 da 4c c8 4b 40 ea 58 75 4b fa c7 67 44 4e 09 d9 a8 d9 bd 27 b4 25 94 95 78 ae cf 9d 6b b3 62 cd 86 9e c9 17 e1 56 df 6b 37 c1 b1 b2 f5 5b f2 bc fa 8a a4 71 a8 46 a6 12 de ea 87 15 fc ea e0 97 52 fd cc ca 3a d6 35 cd 37 61 d3 ea 77 7d 6b bc ec fb db Data Ascii: W;AB"'s1~)B#&8+aZqiH{FF7/Qd>$U~iG0kE9FPE2"t4i:xU6L=qVx8&@!~VELK@XuKgDN'%xkbVk7[qFR:57aw}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49854	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	644	OUT	GET /nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: image/jpeg Content-Length: 310725 Connection: close x-goog-generation: 1684171782141629 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 310725 x-goog-hash: crc32c=hskkhA== x-goog-hash: md5=Lwb79ox3VDxpNJLMPDsbtg== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC5Pz7E-v8nZqyDD65RwbGpVYe5YQC5T_3wmrCeAUwng_HKMJJCghwDYUays5b8zfEvLU5gfsyf8DQ Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2966 Last-Modified: Mon, 15 May 2023 17:29:42 GMT ETag: "2f06fbf68c77543c693492cc3c3b1bb6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJ64Ou0L8IFMOBud4fK2%2BHblLrF9KpyCw879fRek1hu4U9QCkrL9l0jnLlt60mLc8p5Rfxhxdgx2wODfIRwBPG8ICjt4t9ebRL7EgyuwHZgmlBgS9MZECyPaCVReAgSyY8Y%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:40 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 36 66 66 65 66 30 66 37 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 32 36 26 6d 69 6e 5f 72 74 74 3d 31 35 31 39 26 72 74 74 5f 76 61 72 3d 37 31 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 32 32 33 31 37 26 63 77 6e 64 3d 31 39 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 33 63 66 32 31 65 37 62 38 65 Data Ascii: CF-RAY: 8f110176ffef0f70-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1726&min_rtt=1519&rtt_var=717&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1222&delivery_rate=1922317&cwnd=197&unsent_bytes=0&cid=43cf21e7b8e
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 06 00 00 00 db 70 06 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 Data Ascii: PNGIHDR phtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: e7 f6 f6 76 78 3c 1e f9 da d6 d6 86 a4 a4 24 d4 d4 d4 60 c9 92 25 70 bb dd c8 c8 c8 80 aa aa c8 cb cb 93 9f ab aa aa e4 77 e9 e9 e9 c8 cf cf 97 ed 7c f5 d5 57 f0 fb fd 38 ec b0 c3 e4 fe 3b 76 ec 40 45 45 05 32 33 33 91 9a 9a 8a d6 d6 56 78 bd 5e f9 5a 57 5b 87 e2 c2 42 d4 8a df c6 e7 f3 21 3b 3b 5b f6 a3 a5 a5 45 6e 4b af 1d 1d 1d f2 b7 4b 4c 4c 94 ed c6 8b e3 7a c5 b6 3e 9f 17 59 59 59 72 3f 5a 4f db d1 2b f5 9d fa a2 eb 3a 1a 1a 1a e4 39 d2 be 3e f1 5d ab 68 cf 61 b3 a3 b9 b9 19 69 69 69 f2 5c 4b 4b 4b e1 74 3a e5 be 71 71 71 48 48 48 90 fb 56 88 73 8b 77 c7 43 11 fb db 1d 0e b9 8e ce bd b6 b6 56 6e 6f b7 db e5 18 04 c6 ac b8 b8 58 9e eb f6 ed db 31 2c 37 57 f6 a7 b5 a5 15 c9 62 0c 1c 62 7b ea 07 8d c1 ca 95 2b e5 39 d2 98 ad 5f bf 3e 38 76 c3 87 0f c7 Data Ascii: vx<$`%pw\|W8;v@EE233Vx^ZW[B!;;[EnKKLLz>YYYr?ZO+:9>]haiii\KKKt:qqqHHHVswCVnoX1,7Wbb{+9_>8v
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 64 bf 6c 96 a0 51 4d c9 a0 06 b6 31 fb 15 2a ba 54 45 09 db 0e a1 22 a7 cb eb 20 84 67 1b 7a b8 a0 30 42 d6 e9 9a b5 5a 87 4e 5f 50 d1 58 7a a7 19 72 7b e9 15 a3 cf ba 2e b7 33 34 0d 8e f8 78 d4 ee 28 c5 b6 ea 2a 38 ed 31 cc 6c 8e 42 67 01 c2 30 0c c3 0c 45 11 a2 c2 89 56 68 86 07 5f d4 1c 85 c3 d3 3e c6 f0 84 5a 34 72 4c 08 d3 3f 12 24 c6 85 a8 c8 e9 34 8e 38 17 ec ce 38 d3 a8 8e 21 24 4c e3 3c fa 67 d3 f0 36 c5 0b 2c 43 3d e0 f1 e8 3a 1b c9 34 6e 69 f6 8e a2 1a d2 c0 95 97 bc ae 58 be 03 43 de 03 f4 14 5d 11 db 99 82 41 37 fb 25 d6 e9 52 30 58 c7 d7 d4 4e e1 60 09 10 3a 27 7a 35 0f 1f 2a 50 02 b1 30 96 00 91 db 2b e6 71 02 9f 55 a5 73 7b 84 08 10 5b b8 48 91 af 06 c2 3f 07 85 86 22 c5 95 f9 51 b1 bc 26 21 9f 07 fc 8f 8d 11 32 d5 cc 08 11 1c e6 6b e0 b3 Data Ascii: dlQM1TE" gz0BZN_PXzr{.34x(81lBg0EVh_>Z4rL?$488!$L<g6,C=:4niXC]A7%R0XN`:'z5*P0+qUs{[H?"Q&!2k
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 01 c2 02 84 61 18 86 d9 b3 44 08 65 c7 52 da a0 eb c9 58 8b d3 30 d9 fe 2e 5c de 0d f0 d9 d2 58 84 30 3f f4 a2 8a 61 23 b2 a1 c8 fc 30 54 04 bc 67 d1 e3 8b 58 80 30 0c c3 30 cc 1e 67 2f aa e2 1f b0 16 e8 48 46 75 e6 65 c8 ad 7f 1c ce d6 35 f0 db 32 58 84 30 bb 7e 3d c5 0c 42 57 bb 9a 8f 6c 3c 32 dd 5e 4c 56 86 30 99 7a d9 16 75 13 be 82 58 80 30 0c c3 30 7b 2c 0a 6c 5a 13 6c 8e 42 94 78 ce 45 5a db 63 48 31 b6 c3 a7 b2 27 84 d9 65 45 cb 86 62 4f 77 9b 12 9a b9 8b d9 cd 3f 5d 2c 40 78 08 18 86 61 98 3d f7 1f 72 15 aa 10 21 3e 4d 15 22 e4 37 70 e9 af c3 e1 dd 02 5d 71 f1 d8 30 bb 64 5c 77 15 25 56 41 3e 55 e9 2a 50 fa d1 80 b4 d9 cc a7 e6 9a a6 41 d7 f5 e0 3a aa 1e 4e 9f fd 3e 3f 6c 76 bb fc ec f7 6b 62 3b bf 8c 41 50 45 5f 69 3b 9f df 2f 85 82 c3 e1 80 a6 Data Ascii: aDeRX0.\X0?a#0TgX00g/HFue52X0~=BWl<2^LV0zuX00{,lZlBxEZcH1'eEbOw?],@xa=r!>M"7p]q0d\w%VA>U*PA:N>?lvkb;APE_i;/
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 7f e5 ef a5 87 27 39 25 09 7f 9c 3d 1b 07 89 71 79 ea 99 a7 e5 f7 4f 3d f1 24 4a 4b 4a 31 5e 88 39 c3 9a da d6 6f d7 52 a0 82 bd aa c4 7c 60 c2 02 84 61 18 86 61 f6 0a 14 28 86 0f f0 d6 c0 56 f4 3b d8 9c 1e f8 b6 bf 24 d6 db ac 7a 0e 0c 13 cb 66 8c 91 05 4b 19 98 92 71 66 3c 86 19 e3 51 5d 5d 83 ac ac 2c 54 54 54 a2 b6 b6 46 da b2 e4 99 20 1a 1b 1b 65 9f 5a 5a 5b e4 e7 aa aa 2a 39 d5 ea a1 87 1e c0 98 31 63 a4 57 e3 09 61 68 d3 76 bf fd cd 6f a4 d7 e2 f9 17 9e c3 a8 11 a3 a5 e7 83 a8 ab ab 43 65 65 95 8c cf a8 ac ac 0c f6 81 e2 23 64 bc 85 80 a6 43 5d 71 c5 15 41 f1 f1 f2 cb 2f 63 c9 e2 25 38 56 88 1a 12 21 37 ff e5 66 94 96 96 4a 21 53 23 fa 98 99 91 29 3d 10 e4 fd 20 31 d2 d4 d4 24 f7 a3 75 36 9b 5d f6 f3 b0 c3 0f 0f 8a 0f e2 8c 33 ce c4 bf fe f9 80 f4 Data Ascii: '9%=qyO=$JKJ1^9oR\|`aa(V;$zfKqf<Q]],TTTF eZZ[*91cWahvoCee#dC]qA/c%8V!7fJ!S#)= 1$u6]3
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 58 8a a7 01 7c fe 61 06 a0 c7 ba ae 86 fa fd 30 00 b0 07 84 61 18 86 d9 8b 11 22 c4 de 8c f2 d6 02 7c dc 74 20 66 16 2f 43 bc cd 87 0e 3d 8e 9f 41 32 9d 62 55 89 9e 05 8b 8a fd c5 2c e5 d0 5f 57 ac 95 30 21 31 31 49 7a 0d e8 01 3f c5 34 98 df a9 66 dd 0b ab 58 21 79 3b 1e 7c e0 41 7c b3 f4 1b 4c 9d 36 15 77 de 79 07 26 ec 37 41 a6 e6 3d e5 94 53 a4 e7 64 d3 a6 4d 78 e3 cd b7 70 fb 6d b7 c9 7d e2 5d 2e d1 6e 96 0c 42 27 41 11 66 c4 8b b6 e9 58 6b 56 7f 2f 04 d0 fd b8 43 b4 77 e2 89 27 88 fd df c0 c2 85 0b 71 d2 c9 27 61 bf fd f6 93 22 e3 f1 c7 1e c7 ce b2 9d 58 be 7c b9 34 f0 af bc f2 4a 19 27 52 58 58 88 51 a3 46 c9 f6 5e 9c fb 22 32 d3 33 71 e4 51 47 ca cf 15 e5 e5 88 8b 73 ca 98 0d 0a 4e a7 14 bc a7 9e 7e 1a 9e 7e 76 8e f4 9c 10 47 1e 79 14 da db da 65 Data Ascii: X\|a0a"\|t f/C=A2bU,_W0!11Iz?4fX!y;\|A\|L6wy&7A=SdMxpm}].nB'AfXkV/Cw'q'a"X\|4J'RXXQF^"23qQGsN~~vGye
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 94 71 1f 34 d5 8b f6 a7 fd e8 3d 65 c3 a2 ec 5d 14 6c ae cb e3 7a 83 75 4c 48 34 50 55 72 82 aa b2 d3 14 b1 5c 19 bc 6e 58 ff 33 64 df 0b 12 12 65 5c 0c a5 e1 0d 8c 07 1d 7f d2 e4 49 72 3c 68 3d b5 1d f8 95 68 7c 68 ac a8 22 3b 1d c7 e7 f3 0f c2 bd dd 83 07 44 e5 bf 35 2c 40 18 86 61 98 7d 0c 05 71 4a 3d 1a 51 88 2d b6 5f a0 50 7f 0d 36 b4 c1 0f 0f 4f c7 da 67 af 08 44 15 20 c1 39 fc 9d 59 78 e5 53 ed fe bc 4a 64 9c 83 35 5d 28 70 7c 32 a4 e5 13 7e 98 c2 82 de 6b 9a 99 92 56 1a fc 46 c8 be b2 9f 86 d5 dd ce 76 a8 0d af 57 33 eb 54 58 ed d2 71 a4 18 31 10 6c 3b d4 58 a7 4f 74 2c c3 12 05 14 87 41 59 ba 68 1f aa ff 41 b1 28 14 a7 42 1e 0b 99 65 ca da 35 b4 ff b2 ef 5e 2d 98 e2 37 b0 3e 70 ec 00 f2 38 86 16 26 40 3a cf c9 08 db df 6c d3 1b b5 9e 47 f0 5c 35 Data Ascii: q4=e]lzuLH4PUr\nX3de\Ir<h=h\|h";D5,@a}qJ=Q-_P6OgD 9YxSJd5](p\|2~kVFvW3TXq1l;XOt,AYhA(Be5^-7>p8&@:lG\5
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 4f 2f f7 19 55 62 4e 95 89 50 1e 6c 54 32 dd 3f c1 30 af 1d 55 35 8b 11 32 2c 40 18 86 61 18 a6 f7 76 84 e9 09 69 f3 3a b0 68 c7 54 1c 51 b0 1c 99 ae 2a ab 4e 08 8b 90 bd cf 6a 8c d0 1f 83 a0 36 76 27 36 80 f6 35 34 ad e7 2b 53 41 37 d1 09 bd 15 e8 46 8f 7d a1 45 a7 29 61 86 11 8c 69 91 77 55 a0 c0 23 7d af eb dd b6 d5 1f b1 12 a1 de 91 41 54 b7 2c 40 f8 8f 0e c3 30 0c c3 c4 32 b4 4c 11 e2 35 dc f8 b2 fc 10 1c 92 f3 15 b2 dc d6 74 2c f6 84 ec 35 44 33 c8 83 86 72 c4 77 81 35 7d fd eb db 6c 36 d4 d4 d4 a0 a5 a5 25 68 78 f7 58 07 c4 0a cc b6 a9 36 38 9d 4e 24 25 25 c2 21 5e 7d 5e 6f 74 a3 cf 6e 47 43 63 23 6a c5 71 54 71 bc 98 53 b0 f4 f0 29 58 ba b5 82 04 05 9d 7d 66 56 26 e2 e2 e2 a0 05 82 5a 42 a0 7e b4 b4 b6 a0 ae a6 56 be 6a 9a 6e 16 60 0c 1e c3 90 6d Data Ascii: O/UbNPlT2?0U52,@avi:hTQ*Nj6v'654+SA7F}E)aiwU#}AT,@02L5t,5D3rw5}l6%hxX68N$%%!^}^otnGCc#jqTqS)X}fV&ZB~Vjn`m
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 27 c1 83 59 d7 5c dd 6d ab 4b 97 2c c5 e6 cd 9b 71 d8 e1 87 23 2f 6f 58 cc ed ae b9 f6 6a bc fd d6 9b a8 ac a8 34 85 42 44 65 78 ab 17 d0 35 4d 06 df c7 32 e4 69 7b 12 30 9d 99 be 06 d6 ee 57 02 ff c5 9a 82 35 04 82 d0 c9 f3 a1 8a 7b 30 2e de 83 2d df 7e 8d 0d df 7c 09 97 db 03 d5 ee 1c 90 e3 b3 00 61 18 86 61 18 66 40 0c 68 f8 fd f0 a4 64 48 e3 a7 b9 a1 da 0c 4c 1f a2 31 21 ca 10 2a 65 dd de de 8e eb ae bb 01 65 3b cb 90 92 92 2c d3 c9 52 aa 5d b7 c7 83 4b 2e be 08 53 a6 4c 89 ba 1f a5 b8 1d 35 6a 14 3e fd f4 53 99 f2 b6 27 ee b8 fd 4e 7c fc c9 c7 c8 cd c9 b5 72 63 19 e1 95 db 15 7a b0 af a0 bc a2 1c d9 d9 d9 28 2b 2b c3 b4 e9 d3 30 6c 58 74 51 41 22 e0 ef b7 dc 82 47 1e 7e 04 aa 62 43 62 62 02 fe 38 fb 4f b8 e4 d2 4b a2 6e 4f a9 7d 7f f4 a3 1f e1 f1 7f Data Ascii: 'Y\mK,q#/oXj4BDex5M2i{0W5{0.-~\|aaf@hdHL1!*ee;,R]K.SL5j>S'N\|rcz(++0lXtQA"G~bCbb8OKnO}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49856	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	402	OUT	GET /nas-prod/c_af72a9ef-05a9-4b58-a805-3ffd753c9153_1683910271.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1349	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: image/jpeg Content-Length: 16402 Connection: close x-goog-generation: 1683910272215621 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16402 x-goog-hash: crc32c=PEuVPg== x-goog-hash: md5=kJboOt6qSKk+dnNwgPgE4w== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY00AJoRSh-NdvcGH9On19Hzc8BLdez9y49IinWK3xCqFkG5xt6AgcdWiJt-BhauMTqJU7I Expires: Thu, 12 Dec 2024 22:14:14 GMT Cache-Control: public, max-age=14400 Last-Modified: Fri, 12 May 2023 16:51:12 GMT ETag: "9096e83adeaa48a93e76737080f804e3" Age: 2966 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bko0DewWyzCMBIKh86YfzRD8NxuZFtHCCIjdpyETHQrCPPLu1oIfCBkeXVIra2zqO3BXyIgTPm3CriINvHu2Huk5R0bHjF8%2B6JAoOikL%2B1mMO2Eb2G1wcsEaxTvv4qLEDh2X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:40 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 38 32 62 33 62 35 65 36 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 33 34 36 26 6d 69 6e 5f 72 74 74 3d 32 33 33 37 26 72 74 74 5f 76 61 72 3d 38 39 34 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 32 31 31 36 31 38 26 63 77 6e 64 3d 32 34 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 66 66 39 33 37 61 34 30 38 34 32 Data Ascii: CF-RAY: 8f1101782b3b5e65-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2346&min_rtt=2337&rtt_var=894&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=980&delivery_rate=1211618&cwnd=242&unsent_bytes=0&cid=6ff937a40842
2024-12-12 22:03:40 UTC	1114	IN	Data Raw: ff d8 ff db 00 84 00 1a 19 19 27 1c 27 3e 25 25 3e 42 2f 2f 2f 42 47 3d 3b 3b 3d 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 01 1c 27 27 33 26 33 3d 26 26 3d 47 3d 32 3d 47 47 47 44 44 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 47 ff dd 00 04 00 26 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 02 d0 02 58 03 00 22 00 01 11 01 02 11 01 ff c4 00 8f 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 10 00 02 01 03 02 05 02 05 02 05 04 02 02 03 00 00 00 01 02 03 04 11 12 31 05 Data Ascii: ''>%%>B///BG=;;=GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG''3&3=&&=G=2=GGGDDGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG&AdobedX"1
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 00 06 a5 e5 d2 b6 86 af a9 fc a8 d8 a9 52 34 a2 e7 2d 91 e3 af 2e a5 71 37 27 b7 65 e1 01 8a a5 59 54 93 94 9e 5b 31 39 60 ab 66 19 cc 09 9d 42 b4 e9 4a a7 e0 cb 4a df 3e a9 ed e0 da cf 65 d1 01 8e 34 e3 4f 6e ac ac b2 cc 98 21 b0 30 e8 23 41 91 c8 8e ac 0a 68 23 49 97 49 2a 08 a3 0e 11 18 36 54 11 65 04 06 a6 06 93 79 45 78 2e a2 bc 01 cf d0 4f 2d 9d 1d 2b c1 7d 2b c1 07 33 92 cd 88 65 2c 4b 63 75 24 5b 08 0e 74 e1 8e a8 a9 bd 52 1d fb 1a 72 8e 18 04 cb a3 1a 2e 80 b9 25 51 60 00 00 00 90 04 02 40 10 09 23 20 09 23 28 6a 5e 40 90 57 52 f2 35 c7 c8 16 05 79 91 f2 47 32 20 5c 14 e6 c4 8e 6c 40 c8 5a 32 70 6a 51 78 68 c3 cd 5e 07 37 d9 94 7a 8b 2b f5 5f d3 3e 93 fe e7 40 f1 0a ab 5d 52 67 6a df 8c 62 38 ab 19 36 bb ae e4 1d d0 72 1f 18 87 68 48 8f f7 85 da Data Ascii: R4-.q7'eYT[19`fBJJ>e4On!0#Ah#II*6TeyEx.O-+}+3e,Kcu$[tRr.%Q`@# #(j^@WR5yG2 \l@Z2pjQxh^7z+_>@]Rgjb86rhH
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 47 aa 7d 51 63 cf f0 3b a7 87 6d 3d e3 d6 3f 8e eb f4 dc f4 00 00 00 00 00 00 00 00 00 7f ff d6 f4 e0 00 00 00 0d e3 a9 e2 b8 95 c7 3a ab 7d 8f 4f c4 6b f2 68 b7 de 5d 11 e2 64 f2 f2 05 59 96 92 d2 9c df 7e 88 c3 8d 4f 0b b9 9e a3 c7 a5 6c 8a 31 b6 55 86 5e 0b b8 17 4b 4a c1 01 b2 00 00 00 92 4a 92 41 62 4a 4a 4a 1b 98 25 51 bf 60 36 72 96 e3 52 f2 69 13 82 8d e2 4d 48 4d a7 83 65 3c 90 58 9c 90 00 b1 bb 61 47 9b 3d 4f e5 89 a0 7a 2b 7a 4a 85 24 bb f7 02 97 55 74 a3 ce 54 96 a7 93 a7 7b 57 b1 c8 91 50 5b 9b 51 35 63 b9 b1 d8 2b 35 1d 9b 22 a3 2f 4f a4 51 86 b3 c2 20 e7 d4 79 66 32 59 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4a 7a 5e 51 ea ac 2b f3 20 9f 73 ca 1d 4e 19 5b 4c b4 81 b7 78 9d ad c4 6b c3 ce Data Ascii: G}Qc;m=?:}Okh]dY~Ol1U^KJJAbJJJ%Q`6rRiMHMe<XaG=Oz+zJ$UtT{WP[Q5c+5"/OQ yf2YJz^Q+ sN[Lxk
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: a5 1c fb 79 e9 9a 67 62 4b 29 a3 17 cb df c5 26 58 59 ee cd c0 6a e6 32 a7 fa 99 b8 dd 2d 54 94 fe d6 72 78 4d 55 4a e7 0d e1 4b a1 e9 2f e2 a5 42 69 f8 38 65 e9 cf 6f 27 b6 9a 96 75 39 94 a2 fd 8e 0f 13 a7 a2 b3 7e 7a 9d 0e 11 55 38 3a 6f 74 cc 7c 65 2f 4b ee 63 0f 4f 25 8f 16 3e 9c f4 e1 80 0f 6b d2 00 00 cd 6f 2d 33 4c f5 d4 5e a8 fe 51 e3 22 f0 cf 59 65 3c c1 01 a1 6c f9 37 b1 ff 00 e5 8f dc f6 07 90 be 5c bb 88 cf dd 33 d7 27 95 90 24 00 00 00 00 00 07 ff d2 f4 e0 00 3c d7 1f ab 97 1a 7e 3a 9e 78 e8 71 4a bc cb 89 7b 74 34 31 d8 a3 27 cb 0f c9 88 c9 55 f5 c7 83 1a 02 f0 5d 4b 31 05 85 92 18 10 41 20 08 00 01 24 4d e9 5e e5 e2 b2 cc 15 5f a9 81 40 01 00 02 f1 8f 72 8b 44 ba 2a 8b 80 00 00 04 10 c8 3b 7c 1e 59 53 88 bb 46 bf 08 9e 2a b8 f9 46 f5 dc 4a Data Ascii: ygbK)&XYj2-TrxMUJK/Bi8eo'u9~zU8:ot\|e/KcO%>ko-3L^Q"Ye<l7\3'$<~:xqJ{t41'U]K1A $M^_@rD;\|YSFFJ
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 53 72 a5 2a 75 25 aa 32 48 d6 a9 05 07 84 f2 66 c6 e6 52 ff 00 2f 3d 77 1c 49 9a 0c de b9 79 93 34 59 d2 3c 7c 9e 50 74 ed e5 aa 07 30 dd b4 96 e8 e9 8f 97 4e 0b ac ff 00 96 7a f1 d5 06 72 ce cb 59 47 22 4b 0d 97 27 4f a9 9d e5 7a 4e 12 f9 d6 95 28 f8 39 7c 2a af 26 ea 39 ee f4 99 b8 25 ca a3 5b 4c ba 46 6b 06 d4 b8 35 65 73 aa 3f 26 ad 59 30 f1 32 cf 16 fc 4d 78 9f f9 39 bc 66 97 2a e5 bf bb a9 b7 c7 2a 28 5c 42 51 f9 a2 8d ea d6 f4 f8 bd 38 d4 84 94 66 ba 30 35 b8 8a e7 d9 53 aa b7 8e e7 9a 3d 57 10 8c 2c ec 95 be ad 52 3c cd 18 a9 4e 29 ec d8 1d fb 88 69 a3 6f 6e fe a7 99 1b 97 17 d4 e8 56 56 ae 9a e5 f4 4c e3 f1 7a ea 55 d7 2d f4 a6 92 46 f4 2e 6c ef 74 d4 b8 f4 54 86 fe f8 03 95 c4 ed 55 ad 67 18 fc af aa 39 e7 47 8a 5d c6 ea b6 a8 7c b1 58 47 38 01 Data Ascii: Sru%2HfR/=wIy4Y<\|Pt0NzrYG"K'OzN(9\|&9%[LFk5es?&Y02Mx9f**(\BQ8f05S=W,R<N)ionVVLzU-F.ltTUg9G]\|XG8
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 16 77 38 dd be 9a 8a aa da 5d 1f e4 e2 32 8a 32 90 66 43 1e cc 0c cb 71 26 56 2f a8 6c 80 41 00 a0 00 02 4e 87 0c c7 c4 47 27 38 cb 46 ab a5 35 35 f4 bc 81 ee 81 8e 95 58 d6 82 9c 7a a6 64 d8 83 15 7a 8a 95 39 4d f6 47 90 93 e8 db 3a fc 42 e9 56 7c b8 7c ab 77 e4 e1 d6 a8 9b c2 d8 0c 32 20 80 51 23 24 10 04 e4 10 40 12 25 b0 12 02 f9 e8 91 6a 5f 32 30 23 66 dd 66 59 03 d1 59 3d 54 71 e1 9a 17 51 ea 6d f0 e7 f3 44 c5 77 10 38 f2 31 33 3c d1 85 84 54 cd 03 09 92 9b 03 7a 83 e9 82 d3 5d 0c 74 5f 5c 19 a4 45 72 2b 2c 33 09 b5 70 8d 50 00 00 06 d5 b5 4d 2f 0f 66 6a 84 58 de 39 74 dd c7 68 d2 b9 a5 f5 23 2d 0a ba d6 1e e8 ce d6 77 3a 79 8f a7 64 e5 c5 c6 06 cd 7a 0e 0f 2b 63 58 e6 f9 79 63 71 ba a0 c8 04 65 75 2c 17 e6 18 40 6b 6b b9 64 a0 01 00 00 44 a5 97 83 Data Ascii: w8]22fCq&V/lANG'8F55Xzdz9MG:BV\|\|w2 Q#$@%j_20#ffYY=TqQmDw813<Tz]t_\Er+,3pPM/fjX9th#-w:ydz+cXycqeu,@kkdD
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: c7 d8 0c c7 3a aa c4 e4 bf 53 a2 69 5c 2c 4d 3f 28 0e 05 d4 7a 9c b9 9d bb b8 9c 69 a2 a3 5d 90 59 95 03 2c 19 b9 41 ee 8d 28 33 6a 8b c4 88 ad 89 ae 87 2e e1 75 3a b2 39 d7 31 03 48 00 00 00 00 00 00 00 00 00 00 9d 4c 80 04 ea 64 64 00 bb 00 01 00 00 00 00 00 00 00 00 03 bf 60 f5 db b8 ad fa 9c 03 76 c6 eb 91 2c 3f 95 9b c2 ea b1 9c dc 6a 49 38 b6 9e e7 4f 85 37 a9 ae d8 37 2b 59 53 b8 f5 a7 8c f7 46 5a 54 61 69 06 ff 00 76 74 98 59 77 ec e5 96 72 cd 7b b8 97 d1 51 ad 24 8d 43 2d 7a 9c c9 b9 79 31 1c 6f 97 79 e0 00 11 40 00 1d 3e 1b 3c 4b 07 7e bc 75 d2 68 f2 f6 72 d3 51 1e ae 1e a8 e3 d8 0c 7c 0e 7e 89 43 c1 dd 3c c7 0a 97 2e e2 50 f2 7a 70 00 00 3f ff d3 f4 e0 00 38 bc 75 7f 05 3f 73 cb a3 d5 f1 b5 9b 7f d4 f2 88 06 fd 3b a2 13 c9 56 f1 24 cb 2d ca 0c Data Ascii: :Si\,M?(zi]Y,A(3j.u:91HLdd`v,?jI8O77+YSFZTaivtYwr{Q$C-zy1oy@><K~uhrQ\|~C<.Pzp?8u?s;V$-
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 75 39 77 30 7e 5e 3f 73 40 b4 26 e1 25 25 ba 79 03 a7 c6 a9 72 ee 64 fe ef 51 d1 be 5c fb 08 54 5b c7 06 79 46 87 16 a7 16 e5 a2 a4 77 31 71 2a 94 ad 6d 55 b4 1e a6 c0 a5 fa f8 8b 1a 75 57 5d 3b 91 c0 7d 70 ab 4d ec d1 a9 c3 78 9c 68 45 d1 ac b5 53 97 f4 3a 13 e2 96 b6 d4 dc 6d 97 aa 40 63 e0 d2 4f 9b 6c fb e7 06 9d 8d 9d 6a 57 69 69 6b 4b df d8 e6 52 af 3a 55 39 91 78 96 4e df ff 00 90 d4 d3 f2 2d 5e 40 cb 72 97 fb 9c 7f 43 97 c5 de 6e a6 62 a5 7b 28 dc 2b 89 fa a5 9c 98 6e 6b fc 45 49 54 6b 1a 80 f4 36 9a 38 8d a7 c3 c9 e9 9c 36 36 6d ad 17 0c a1 52 55 64 b3 24 79 08 4e 50 79 8b c3 f6 2f 52 bd 4a bf 3c 9c bf 20 74 38 67 10 56 b5 1a 9f f2 e7 b9 db a7 2b 0b 69 3a f0 92 cf 83 c7 80 36 2e eb fc 45 59 54 fb 99 6b 39 69 a8 8d 52 f4 9e 24 98 1e ca 1e a8 e3 ca Data Ascii: u9w0~^?s@&%%yrdQ\T[yFw1q*mUuW];}pMxhES:m@cOljWiikKR:U9xN-^@rCnb{(+nkEITk6866mRUd$yNPy/RJ< t8gV+i:6.EYTk9iR$
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 5a 9c dd 39 29 2d d3 c9 50 07 ae 6e db 8a c2 2e 72 d3 38 98 78 9d c5 1b 7b 75 6d 49 ea 7e c7 97 ce 00 1d 6e 1b c4 be 13 30 9a d5 4e 5d 8e a4 b8 b5 b5 08 3f 87 8f aa 47 95 00 64 e6 c9 4f 98 9e 25 9c e4 ec c7 fd 41 5d 47 0e 29 bf 27 08 01 9a bd 79 dc 4d d4 a8 f2 d9 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 6c ff 00 98 8f 59 4f 6f d0 f2 76 9f cc 47 ac a5 b0 1a 7c 26 5a 6e a7 1f 2b fc 9e 94 f2 b6 2f 4d f7 e7 28 f5 40 7f ff d1 f4 e0 00 07 1f 8e 43 55 be 7c 33 b0 68 f1 38 6a b7 92 03 c5 47 62 95 0b 44 8a 9b 14 4a 2b 22 63 d8 48 0a 92 41 20 09 20 90 00 12 04 10 fa 19 e8 5b d4 b9 78 82 e9 de 47 6e 8f 0e a5 47 ab f5 4b cb 20 f3 ea 12 96 c9 b2 dc 8a bf 6b 3d 3f 45 b2 25 4c 0f 27 28 ca 3b a6 88 3d 76 23 2e 92 49 9a 95 b8 5d 2a bd Data Ascii: Z9)-Pn.r8x{umI~n0N]?GdO%A]G)'yM6lYOovG\|&Zn+/M(@CU\|3h8jGbDJ+"cHA [xGnGK k=?E%L'(;=v#.I]*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49855	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	421	OUT	GET /i/af72a9ef-05a9-4b58-a805-3ffd753c9153/2d061fa2-c623-4919-9bb4-bb7c90e9c8f7 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1100	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ktDYTtK5gpgyvELGj8HiVgN9EEApLGl%2FToSz7B4u8wKIeP6b1jbFe3WvOJnYOkvU4VGewcGG3OKF3g2r0pF5ds7IPO1KOoFhWz7Hh7OhuOhzt6thvGkqxHOvNs66ZZg%2F21HBRc6lsPCl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110178484543d4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1745&min_rtt=1745&rtt_var=655&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=999&delivery_rate=1669525&cwnd=221&unsent_bytes=0&cid=2b84e2c6c54167fd&ts=819&x=0"
2024-12-12 22:03:40 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49859	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	375	OUT	GET /nas-prod/c_undefined_1661551019.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1350	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: image/jpeg Content-Length: 16435 Connection: close x-goog-generation: 1661551021527118 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16435 x-goog-hash: crc32c=sWX7YA== x-goog-hash: md5=XSSa4xywkwq5tkSgI+XO3g== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY3LLXvehr0Ci2vp6DnjJRQHoaHRRq3o4cYJoDLy1CrJ2BgPYp2f_OwjphGIS44h43Swy54 Expires: Thu, 12 Dec 2024 22:46:13 GMT Cache-Control: public, max-age=14400 Last-Modified: Fri, 26 Aug 2022 21:57:01 GMT ETag: "5d249ae31cb0930ab9b644a023e5cede" Age: 387 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lhf%2FI3Jqp95kuS3TSfy6mFMA%2FB4bFgPvTk8YqQH6gMFZQJpDUKsxRbPxa1aE4BlRP9ghRtV4XnAOfEVtivKGV%2B5o3Oz9iiNYb%2FnfpePJjGiOP15gJk03iubYzmAFhN81SrXb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:40 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 38 34 62 62 61 34 33 30 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 34 32 26 6d 69 6e 5f 72 74 74 3d 31 36 35 31 26 72 74 74 5f 76 61 72 3d 38 30 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 35 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 32 32 35 38 36 30 26 63 77 6e 64 3d 32 31 34 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 35 31 35 37 34 34 66 37 35 32 39 Data Ascii: CF-RAY: 8f1101784bba430f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1742&min_rtt=1651&rtt_var=802&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=953&delivery_rate=1225860&cwnd=214&unsent_bytes=0&cid=9515744f7529
2024-12-12 22:03:40 UTC	1113	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 58 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 09 02 01 0a ff c4 00 5c 10 00 01 03 01 04 03 09 08 0e 05 09 06 05 05 00 00 00 03 04 05 06 01 02 07 13 14 23 33 08 11 12 15 22 32 42 43 53 16 24 34 52 Data Ascii: JFIFHHCCXX"\#3"2BCS$4R
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: f0 bc bb 89 fc e2 fc cb 87 25 e2 56 e9 8c 4b c5 ec f6 8e e5 6d a3 a0 d5 fe 8b 80 e4 5f 52 ef 9c 71 cf 03 b4 71 6f 75 86 1c e0 ff 00 7a 48 4a f1 9c e7 57 0b 0b df 4e be 97 88 72 5e 23 6e ca c4 fc 48 b5 76 b4 fe 45 01 06 af 63 af 90 53 eb 3a 06 95 8a 83 63 0f e0 88 64 76 8a 97 85 c5 93 78 24 b4 e5 e4 1d ae bc 9c 8a bb 49 07 8b e7 ae a7 d2 bc 5e 80 74 6e 4d c9 b1 7a 7e e8 1a 42 de c5 55 16 f5 50 be 0c d7 70 74 27 1b 63 0b d9 5b 2d d5 46 c7 29 eb 5f bf c1 04 bb f9 1e 82 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 9f 61 1b 08 27 d2 b9 fa a4 b6 40 57 7b 2b d5 35 fb 52 1c aa 00 00 00 00 00 00 52 02 a9 48 a4 fa 55 ac 3b 15 9d bb 5d 06 4c da Data Ascii: %VKm_RqqouzHJWNr^#nHvEcS:cdvx$I^tnMz~BUPpt'c[-F)_a'@W{+5RRHU;]L
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 35 dd 6b 58 05 b9 37 9d 79 4b d9 d1 bb fa 80 d5 f8 0d b9 7a a3 c7 25 ee 3a bd bf 0d 49 5d b7 79 49 55 6e ef e9 1e 4a 17 7a 47 a3 98 5b 84 14 b6 0f 40 59 13 4d 47 5d 66 95 ed ba f6 f2 97 71 7b c6 bf 7f df b4 cb 18 30 6d 16 c1 26 ad 50 49 b3 54 ac e0 26 92 5c 9b b7 2e fe a2 f4 ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 2f e4 d2 61 ee ed 2d 02 bb e7 a9 b0 43 35 52 01 e3 c5 1e ab 65 8a 59 c1 b2 c2 92 eb 28 ba f9 aa 80 29 15 40 00 01 70 00 02 dc 01 48 11 95 1c e4 65 2d 06 f6 56 55 f2 11 91 cc 51 cd 70 e9 ee ae e2 77 40 ae f9 c2 4d d0 5d 55 57 c8 49 2d 6a 8a ad cc 4e e1 c2 9b a3 37 57 b9 c4 8d 36 95 a1 5f 2e c6 92 d9 3c 9a 47 90 bc 9f Data Ascii: 5kX7yKz%:I]yIUnJzG[@YMG]fq{0m&PIT&\./a-C5ReY()@pHe-VUQpw@M]UWI-jN7W6_.<G
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 57 be 85 fe 0d ef 16 fd ce 51 20 00 d5 58 2d b9 aa 87 c0 97 d2 ae a9 54 25 92 77 27 aa 70 ab e9 55 dd 7e 2e 49 b5 40 00 00 00 00 00 00 00 00 03 55 63 f6 03 c4 63 c5 1e 84 7c 82 08 21 2f 18 b6 9f 0c ff 00 e4 8e 7f 25 ee 91 e2 9c 64 74 95 31 51 e2 f3 89 a6 aa b4 95 63 a4 b6 51 b2 dc f4 d6 b6 fd fe 49 fd 00 38 3c ed fe 54 4c 10 4a 1e 85 99 c4 b8 06 36 69 6f ad 6c d2 7b 2b dc f1 12 73 fe 97 a8 07 16 60 5b 0b 1b 50 4c d4 b3 6a e5 75 55 fd d3 db fd cf 38 75 73 0b b0 86 9a 80 bc 8d 97 1d a4 d6 c5 5d fe b7 0a 72 d5 ff 00 8d a7 96 3b 8b b0 d3 bb 0a e3 0e a0 16 47 39 a2 79 4e dc a5 6f 8b 73 5b 7c f6 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 3b Data Ascii: WQ X-T%w'pU~.I@Ucc\|!/%dt1QcQI8<TLJ6iol{+s`[PLjuU8us]r;G9yNos[\|`;
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 30 93 74 35 0f 8c ec 73 69 49 c6 eb bc 4b c2 22 96 e4 3d 6f e9 26 6c 84 1c 11 16 79 0a a1 b2 d9 76 4b 7e 63 1b ae 28 08 3c 48 8a 5e 3e 55 8e 7f f9 e9 99 a9 66 f9 b8 1c 0b 8c 5b 99 67 30 f9 05 dd c4 a0 e2 a0 a7 95 cc 49 c2 48 f2 17 4d 1b dc e3 46 2e c6 9e c3 7a 39 69 58 44 17 79 ae ca 51 d7 4d c5 ff 00 3b d8 9e b1 e7 e9 1a a5 4e 5c dd 27 b9 d1 cc 7b e5 eb 0a 29 8b 7e f9 47 db 58 5e 47 01 c5 cf 44 d1 09 34 fe e5 7d d2 75 7e 1b a0 ba 55 03 1d 32 9c 7c b6 6b 78 fd 82 ed fc 6b f7 0f 45 29 ca 8d 8d 53 06 ca 56 29 7d 36 39 f2 39 ad d5 44 f2 2e b8 6f 39 58 2e c2 3e 2b 50 92 b9 89 3d d3 39 0b e7 5d f9 47 f1 cb 37 2e e7 bd d0 a9 ee 76 95 83 a6 66 a5 57 5a 9e 74 b6 52 89 2d f0 7c cf 84 79 b3 cd 8a bd 1c 07 e2 0e 12 90 41 07 6d 17 cf 49 5d 6a 6a a3 d6 5c 3f 48 80 00 Data Ascii: 0t5siIK"=o&lyvK~c(<H^>Uf[g0IHMF.z9iXDyQM;N\'{)~GX^GD4}u~U2\|kxkE)SV)}699D.o9X.>+P=9]G7.vfWZtR-\|yAmI]jj\?H
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 ae ba 6d 92 be aa b7 ac 4d 3b 96 6f df bf 68 15 8d 57 88 58 9e 9c 7b 45 5a 46 2d c1 ea 94 7a 8f 8d d9 a5 f1 df fc 24 46 21 e2 6a 6e 1a ab 63 75 f2 22 ec f7 ac bf c1 55 df e4 4f f1 1c eb 5c 57 fa fc af b3 6b d9 dc 03 e6 b8 a8 b8 c5 7c d7 6b ea 92 f0 76 bd 0f fa ef 79 67 3b 62 a6 34 ab 0e 87 17 c7 af 90 ed 52 f3 13 6b f5 61 e2 97 76 a9 ca 0f a7 1c d4 12 ab aa ae bd 55 4d 09 32 47 d3 aa c8 2f 9a aa f9 ea 93 14 75 2b 2f 58 2e be 52 ed e3 23 9b 6b 5e ca bd e4 20 ce e1 6b 49 52 49 bb 8b 42 6a 6d c2 ec a9 e5 56 ca 67 a1 f2 de 4b de bb ce 49 8d cb df 7d c5 ed 52 7f 74 d9 b5 1c e4 1e 1f 31 60 ad 6a 86 87 95 ad 8a c3 a8 b5 ef f7 bf 0b ae 76 a7 3f 95 db 5e d6 a9 d0 cb b8 15 49 a1 2a ac 3d 0e f6 2a 12 55 fd Data Ascii: (mM;ohWX{EZF-z$F!jncu"UO\Wk\|kvyg;b4RkavUM2G/u+/X.R#k^ kIRIBjmVgKI}Rt1`jv?^I=U
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 64 9a 76 a3 a3 7a d4 8c 59 0c d8 75 f5 bb 23 7f be 83 35 e5 55 4a f5 a9 12 55 98 61 95 55 9e 87 17 bb fa b3 30 a8 e9 c5 64 10 cd 4b 50 ed ae cf f2 9a 0a 0d c2 91 cf b2 be cc e8 2a 3a a3 4a a0 83 fd ad 2d a0 18 de 7e a1 09 b6 9a 87 8d 56 d6 64 f5 77 ee 9e af 6e 57 c7 14 b1 9f 0c 99 4a aa bf b7 8c 7b d2 55 2f 3d da 7d 33 ca d9 c4 38 9e 73 37 e0 8f b5 4a 7a 66 d6 dc 5b 8c 3f cd 3e 38 21 15 20 be 44 1d 43 ed 7b 8f 11 3b f7 b6 17 fd 70 3d 66 2c d7 d4 2e 18 b8 3e 9f 6c 4c e2 32 b1 a7 1b 56 14 ac ac 23 bd 7b 37 c8 a8 92 9f 48 f3 0b 11 9e b9 a3 d8 f8 0e 99 39 9d c5 6a 25 fb 4b 7e 47 2b d2 4b 2c f5 11 07 c7 10 6e a1 83 4a 8f ae 2a a9 04 90 cf 4b bd a6 93 49 1e b3 e0 eb 7e 32 f5 a4 cf 3f 93 f2 a3 97 6f 07 39 4d 54 0b e7 bc fd 20 9f e1 bd 70 eb 4c e3 ce bd c5 af aa Data Ascii: dvzYu#5UJUaU0dKP:J-~VdwnWJ{U/=}38s7Jzf[?>8! DC{;p=f,.>lL2V#{7H9j%K~G+K,nJKI~2?o9MT pL
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: bf bb 47 b9 5b 41 5f 8c ea d5 7c 22 69 6e 5e 89 e4 a0 6c a9 ca a9 cc 86 77 83 a0 aa ba ac d4 7c 4f 16 ef 88 6b 99 cc 3a 62 fd 7c d4 bb cd 5f 32 68 1a 89 77 0a bb 5d 55 55 53 39 65 79 6a 2a af be 52 33 e9 5c 2b 7c df c1 57 41 73 09 95 8a 7b 0e b6 53 b4 6d 46 d3 38 a2 b3 cb 6d f7 02 eb a6 b9 43 24 aa 07 d6 8e 34 70 8a 3e cd bd aa 64 8a 0d f4 85 d0 4b 6e aa bd 50 14 10 43 eb 8d cf 86 58 3a aa f9 12 13 68 6a ba b6 1f 9c c9 30 cb 07 93 87 5d 09 59 54 73 e4 7a b6 7f 27 37 3b 18 b3 40 8c 63 04 4f b1 89 24 58 c5 93 08 32 02 39 06 25 5f 07 2b ae e3 47 20 1f 3d 2a 0f 9c 18 54 e3 d2 f2 56 74 c3 65 5e e7 84 98 8d 63 af 41 73 46 4e 6a 1f 1b ce 71 05 17 35 ab ea 35 59 15 ff 00 d5 24 aa f3 07 57 f6 f3 44 ed 4d dd 2b 04 93 74 10 77 b7 55 25 bf 11 ac 28 ea 71 4a 7d f2 0e Data Ascii: G[A_\|"in^lw\|Ok:b\|_2hw]UUS9eyjR3\+\|WAs{SmF8mC$4p>dKnPCX:hj0]YTsz'7;@cO$X29%_+G =TVte^cAsFNjq55Y$WDM+twU%(qJ}
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 32 e9 ca 88 c1 5f 4a 15 5f 2f 9f ad 20 97 cd 5d 72 a9 28 2e be 90 57 63 06 ac 82 e4 b4 55 39 d6 aa 64 a8 37 49 ba 04 84 6b 18 a4 a3 d0 27 e0 e0 a4 ea 89 54 22 a1 58 b8 78 ed 5e a9 12 46 8e a2 1f 57 0f 97 ca d1 d9 c7 36 d6 bd 95 7b e0 ad 2e 79 66 61 2b 39 07 01 4a ae d2 3d 77 f0 d4 63 ad a4 87 f4 9d 4d c1 e8 a1 73 a0 8f dc f4 ef 05 51 d1 51 49 52 da 6a 54 d4 aa 08 48 b6 47 db 9a d5 6e 43 56 08 de ea 9a de fd fd a5 fe 81 a9 2a ac 4c 63 1d 14 bd 3f 42 69 0c a2 15 d5 3d 9a 5b 90 f6 4f fe 52 3e 47 ae 59 d7 f5 fb ea c3 26 3d 14 38 b2 0d af 81 42 b2 d8 27 e5 df ed 15 f2 c8 08 a8 35 17 d6 aa 05 2a 72 11 57 0b a1 9b b2 48 dd 88 31 d4 32 68 97 d6 18 a5 39 07 d6 ec 12 ed 4c f1 06 f9 fa ae a9 5e a8 0c 9a 87 6f c5 c8 66 a5 b5 57 68 af a4 6c 6a 3e 97 97 ad a5 11 61 16 Data Ascii: 2_J_/ ]r(.WcU9d7Ik'T"Xx^FW6{.yfa+9J=wcMsQQIRjTHGnCVLc?Bi=[OR>GY&=8B'5rWH12h9L^ofWhlj>a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49858	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	402	OUT	GET /nas-prod/c_8cfd103b-74fa-4fad-a1d2-ff4d0036298c_1684171824.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1350	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: image/jpeg Content-Length: 90687 Connection: close x-goog-generation: 1684171825685442 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 90687 x-goog-hash: crc32c=WyHRBA== x-goog-hash: md5=xXWPD+aoFxTaOndMFLfUig== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC4Y8Gp9p27Py7MSdYbeZcNuRaBZE_-stPJQJA4n4jZ96EPbP_o-TXTY1mjvYEbBUX4M2wr9ZiwXdw Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2966 Last-Modified: Mon, 15 May 2023 17:30:25 GMT ETag: "c5758f0fe6a81714da3a774c14b7d48a" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmQf%2By6bPmR3mj4B8404BJs2N%2B7TzvU1z9zJbYN9Na3uS79JXtXWIfbf6COu%2Fd%2FCm9%2B2toPzR4e3EsI%2Fga%2Fj%2B5c97rDwebLiK%2BnKqoPQlitlrEHhCkZlOwn1dZTg5tSS9%2BNt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2024-12-12 22:03:40 UTC	295	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 37 38 34 66 61 39 30 66 36 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 31 33 26 6d 69 6e 5f 72 74 74 3d 31 35 39 35 26 72 74 74 5f 76 61 72 3d 31 30 33 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 38 37 32 39 34 34 26 63 77 6e 64 3d 32 31 30 26 75 6e 73 65 6e 74 5f 62 79 74 65 Data Ascii: Server: cloudflareCF-RAY: 8f1101784fa90f6b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1813&min_rtt=1595&rtt_var=1035&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=980&delivery_rate=872944&cwnd=210&unsent_byte
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4d 00 00 01 4e 08 06 00 00 00 02 64 4f 6a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 07 9c 65 47 75 ee 0d 57 c7 d3 b9 a7 7b 72 0e 0a a3 80 84 72 40 01 24 10 c1 80 09 26 19 63 b0 09 0e d8 ef b5 c1 9f 0d 36 26 39 e1 6c bf 7c b6 ef 35 60 1c ee c5 fe 01 06 1c f0 c5 48 32 41 08 23 24 24 94 d3 48 13 35 79 a6 73 3c 9d de e7 bf 6a af d3 d5 7b 4e f7 f4 68 f2 e8 3c 3d 35 7b 9f bd 6b 57 d5 ae 5a f5 d4 5a 95 76 d5 e4 e4 e4 54 a8 a0 82 0a 2a a8 60 5e a8 ce 8e 15 54 50 41 05 15 cc 03 15 d2 ac a0 82 0a 2a 38 02 54 48 b3 82 0a 2a a8 e0 08 50 21 cd 0a 2a a8 a0 82 23 40 85 34 Data Ascii: PNGIHDRMNdOjsRGBgAMAapHYsodIDATx^eGuW{rr@$&c6&9l\|5`H2A#$$H5ys<j{Nh<=5{kWZZvT`^TPA8THP!#@4
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 08 92 81 18 48 0d ad d1 89 0c 3f fb f7 ef 37 92 dc b1 63 9b 11 26 64 8b f6 59 1c 2b 86 d1 91 31 23 46 9e 83 04 79 c6 c9 00 b2 b5 7e c6 2c 2c 07 e7 38 ee 43 90 ae 25 62 ea 3b a9 8a 4a 8d f0 00 cf 83 3c 71 fa b9 13 a6 f7 4b 02 8f 6f 2e d2 6c 69 6e 89 f1 67 84 ee da 67 7d 9d b4 46 3d e7 61 f0 3c cf 7a fc 1e 1f 79 80 49 bf 76 ed da b0 61 c3 86 b0 7a f5 6a 23 53 48 98 7c 06 d6 9f 9a 90 33 7e 1a 9b 0a 56 26 f9 f4 e4 7e 56 50 c1 73 0a 27 9c 34 f3 15 10 2e 1c 1d 2d 1a 59 52 81 21 38 c8 72 ac 38 66 7d 8c 46 02 19 59 40 7a 10 40 5f df 40 d8 b7 6f 5f d8 ba 75 6b d8 7f 60 7f d8 be 6d bb f9 e5 99 48 68 f4 41 8a 08 e9 ef 14 91 41 b2 9c 3b 69 02 c2 c4 e9 cc b4 4e 23 48 65 c5 24 47 25 ca 7e 67 64 84 16 56 57 17 fb 0c d1 ce 18 a9 86 60 5c 73 ab a9 95 e9 4e 3c 59 df 65 be Data Ascii: H?7c&dY+1#Fy~,,8C%b;J<qKo.lingg}F=a<zyIvazj#SH\|3~V&~VPs'4.-YR!8r8f}FY@z@_@o_uk`mHhAA;iN#He$G%~gdVW`\sN<Ye
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 88 98 ee 7b f7 ed 93 c9 df 6d a3 e9 10 63 b1 38 52 8a 17 82 42 03 74 cd 8e b8 21 ed 12 a9 88 4c cc e9 f5 39 72 0d d2 70 82 f5 b8 b8 37 1b b8 9f 1e 8d e0 32 ad 10 c7 6f e0 44 e8 5a a4 0f c4 38 29 72 7d 3e 9a 66 75 16 1e f0 4d 46 26 33 42 24 fd fe 6e a9 79 ee f0 fb e4 01 5a 39 f9 84 b6 b9 74 e9 52 4b 03 8d 06 64 0a 39 72 be 7f ff 81 70 c1 05 e7 87 57 bc fc 15 3a 5e 60 da a7 23 7b dd 0a 2a 78 4e e2 b8 92 26 26 32 95 b4 eb 60 8f 5d e7 fc 3b 77 7e 27 3c f0 c0 c3 36 d8 82 a9 0e 21 d0 a7 e9 d3 7e da 5a db c2 79 e7 9f 67 84 41 1f 1c 66 35 fd 6a 5d 5d 5d 0a a7 cb cc 6b 48 96 f0 21 38 23 c5 12 a9 44 4d 8c fe c7 48 76 87 9a d6 90 27 5a 29 47 ae 43 30 76 14 51 00 c2 f5 eb 5c 4b 9f 75 f8 35 e2 f4 a3 6b 90 c0 d3 61 84 a8 6b 46 7c f2 e3 a4 8a 46 99 12 26 5a 1e ef 8a 66 Data Ascii: {mc8RBt!L9rp72oDZ8)r}>fuMF&3B$nyZ9tRKd9rpW:^`#{*xN&&2`];w~'<6!~ZygAf5j]]]kH!8#DMHv'Z)GC0vQ\Ku5kakF\|F&Zf
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: a0 90 16 e2 e6 9e a5 27 7b 1f f2 c9 9f c1 79 3c 87 90 a2 b4 cb 74 67 a6 72 da 26 d7 79 5f c0 0a 21 ca 81 4d 8b 89 97 f0 68 d4 5e fa d2 97 86 f7 bc fb 3d 61 e3 79 1b 2d 1e 96 be 56 50 41 05 33 71 cc fb 34 a9 9c 54 76 27 25 48 64 d3 53 4f 87 7f fb b7 7f b3 e5 8d 68 54 85 fa 82 99 81 df fb de f7 8c 38 a9 9c f4 2d fa f3 c0 89 22 7f 0e 20 1a ff 0d 01 51 f1 23 f9 f1 79 07 88 26 12 4e 34 bb 6b 95 96 38 0d e7 e9 a7 9f b6 41 29 06 9e 20 2d e2 a2 9b c0 48 5c 69 c5 e1 cf 88 27 21 19 ce fd 7a 44 ae df b3 74 7d 3a ad 25 27 b2 74 32 27 2f 88 8b 3c 80 9c e9 47 64 0e aa f5 61 ea 3d 48 2f f7 fd fd dc 01 d2 42 1e a1 91 93 16 fa 2b e3 2a ab 62 18 d3 75 ee 71 cd fb 3b 19 2c a3 61 f2 c9 ee a4 91 eb bc 2f 2b aa da 17 b4 87 8b 2e ba c8 e2 a4 df f2 82 f3 2f b0 b5 e6 f4 87 92 9e Data Ascii: '{y<tgr&y_!Mh^=ay-VPA3q4Tv'%HdSOhT8-" Q#y&N4k8A) -H\i'!zDt}:%'t2'/<Gda=H/B+*buq;,a/+./
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: e6 34 95 be 0f a0 ae 30 07 3b cd 6f 07 fb f8 92 3f 51 e9 9a e9 c7 65 9c 60 f2 71 1d 0e 27 85 34 01 09 e5 25 f6 ee d9 6f 9b 10 f3 91 b4 ef df fd fd b0 6d eb 36 d3 e4 bc 60 71 4e 9a c0 0b 73 36 d2 24 f3 29 f4 b4 bf f0 e0 c1 ee f0 5f b7 ff 97 09 12 05 74 fe 05 17 84 73 53 4d 13 41 c0 c4 55 69 21 9c 79 4d b3 bb eb a0 cd 2f 45 98 ed ba ee d3 37 3a 9d c6 69 8d 01 a4 ef 9f 92 a5 6b 9b a4 9f c2 e6 08 71 ba d0 71 c4 3f 64 4b 9a 52 b8 76 e9 47 27 4b 8f cb f3 ca 5a d7 ec 59 7e 13 37 71 f1 09 8b 9f ff b9 9f cf 88 ba 42 9a c7 0b 5e 31 c9 43 d7 80 00 c4 63 e5 27 f9 62 53 16 2c 2a e4 1c 99 e2 73 2e c8 15 1f c4 e3 98 ef 47 a7 1c 29 6f 2f 7f 87 37 ce a5 fa 25 b9 01 d1 ff b4 bc 50 e6 b1 b1 8d 8d ee d4 e4 cc 8d 6f a4 f7 65 67 11 cc ae a0 fb aa 16 52 93 cc 4e e4 e4 8c 3d b7 Data Ascii: 40;o?Qe`q'4%om6`qNs6$)_tsSMAUi!yM/E7:ikqq?dKRvG'KZY~7qB^1Cc'bS,*s.G)o/7%PoegRN=
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: db 77 9a 70 92 69 1b d6 6f 08 af 7d ed eb 4b 44 e3 c2 94 82 82 87 10 9d 38 f7 ed db 63 ad 77 d7 41 69 9a bd bd 22 f6 f8 35 4b 1f 1c 4a bf 54 99 3a 37 53 4c a8 33 ad 92 34 5b ff a6 ae e1 80 13 68 7a 2d 05 f7 53 20 0c 84 0f ec 1d b2 e7 fd 5d 30 af 18 e1 fc c4 27 3e 11 56 ac 58 26 ff 76 59 ef 35 b3 7f c7 51 e6 d2 73 1a e4 13 32 47 d9 52 51 f9 8c b4 5b 1a 10 23 04 67 fe 32 2d 06 a2 a4 4c b8 8e ec 20 37 a9 b6 c3 6f 23 c9 ac 11 66 57 af f4 37 70 d2 24 3c ca c8 ad 11 ca d6 8e 72 4e 32 a9 66 88 95 e4 9a a7 3c 64 57 23 4c 96 e4 20 46 2f f7 6a 84 21 91 d7 78 22 1a cd 1e 8d cb 71 23 b9 f8 33 31 7e 64 53 47 3d 52 95 50 86 6b be 71 44 3e 0a 5a 29 5c fd 9e 3e 0f 92 fd 48 48 84 91 86 9f 07 79 47 bd 86 0c 39 52 8f 5d 3b a4 7b 83 c5 32 e4 6b 5b 6b 9b 9d 53 af 21 c6 54 21 Data Ascii: wpio}KD8cwAi"5KJT:7SL34[hz-S ]0'>VX&vY5Qs2GRQ[#g2-L 7o#fW7p$<rN2f<dW#L F/j!x"q#31~dSG=RPkqD>Z)\>HHyG9R];{2k[kS!T!
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: f2 9a fe 50 fc 90 bf 90 23 5a 69 73 4b b3 91 2b 47 fa 30 6d 86 4d 36 60 e5 fb 53 f8 68 bb 7f e7 3f 8b ee 10 9c 72 a4 49 a3 e3 49 a2 e2 93 9f 64 c8 9d df bd 33 fc fd df fd bd a9 d4 08 06 f0 cc 22 e3 78 49 cc 73 04 67 c1 82 4e cb 84 6d db b6 85 c7 1e 7b 4c 85 d4 60 fe 50 e5 5f f5 ca 57 85 8e 4e 5a 92 a8 99 92 b9 35 d5 d3 9f 8c 60 2d 3a 83 3d 73 91 26 da e6 0c 4d 33 13 92 68 96 78 6b 1d 1d 61 3a 59 72 8c ce bc 97 c0 35 8f df c9 d3 35 cd d2 bd 84 3c 71 80 f7 c6 0f ef 8d 20 fc c1 1f 7e 22 6c d8 b0 4e e9 66 f7 77 2a bd 79 3b 04 a4 eb a8 70 9a 93 26 0d dd 63 8f 3f 66 83 0a 90 0e a0 b2 43 96 e4 8d 13 25 9a 27 83 32 c8 1c 1a 0a 48 35 1e 2b 63 c9 aa 13 6e 9a af f4 bf 51 79 7d 70 c2 81 1f e2 a1 2f 8d 23 fd 77 c8 92 83 f2 26 0e fc 11 2e e1 57 4b 4e 69 dc bd ec b9 47 Data Ascii: P#ZisK+G0mM6`Sh?rIId3"xIsgNm{L`P_WNZ5`-:=s&M3hxka:Yr55<q ~"lNfw*y;p&c?fC%'2H5+cnQy}p/#w&.WKNiG
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: ec ac 9f 59 65 06 47 a0 fd 33 10 84 99 cd 58 06 8d 10 f9 45 19 61 49 50 5e 94 35 75 0c 99 f0 06 92 06 10 ad 96 7a 96 cb da 12 4e 59 d2 cc 03 92 70 f2 6c 6f 6f b1 11 e2 f3 cf 3b cf 5e ce 5b 1b 48 92 97 df f9 cc 33 a6 35 90 09 66 ae 28 13 10 7c 5a 72 32 97 c9 e9 4c 1b da bf 7f 6f d8 b7 97 91 f1 7d d6 0f 33 32 3a a4 e7 71 4c 35 d1 b1 f4 7b c4 1c 13 c3 39 62 86 8c cb c5 01 a0 d8 a2 d1 17 9a d7 30 e7 03 9e e5 bd 78 bf d2 3b 42 8e 09 51 a6 d7 28 e4 ba fa 1a 35 18 6d e1 96 5b 5e 1c de f8 c6 1f cb 34 cc 2c 40 81 70 2a 98 89 cd 5b 36 9b 95 b2 65 f3 96 f0 f8 e3 8f db 86 31 94 3d 66 3a 56 04 53 85 68 c4 20 08 e4 85 4f 4b b3 93 3d 3b da a3 79 52 31 dd c2 a0 d2 11 16 15 d4 2b 1b b2 47 59 9a 49 f9 2c e4 a0 1c 08 cf 5c ae 71 1e 9f 40 53 1c 31 4d 6e 26 81 c5 f9 96 58 12 Data Ascii: YeG3XEaIP^5uzNYploo;^[H35f(\|Zr2Lo}32:qL5{9b0x;BQ(5m[^4,@p*[6e1=f:VSh OK=;yR1+GYI,\q@S1Mn&X
2024-12-12 22:03:40 UTC	1369	IN	Data Raw: 5a 70 84 e1 e7 80 ec 19 82 c4 86 e3 3c d2 89 89 6c cf ce 84 34 e9 ff 27 1f 63 bc 31 2e ee 71 6d 4c 65 e3 e9 29 47 9a c0 b5 51 88 0c 4d 91 fa 48 79 99 a5 a5 fc 4a 41 1e 41 96 d4 19 8e a4 9d 23 0a 08 a4 c9 7d f2 94 7c e7 59 ff 7d f9 15 97 87 17 de f8 42 1b 41 e7 b7 c7 ed f0 f7 3d 2d 49 73 74 54 6a b9 5e 14 d4 d5 55 85 7d 7b bb c2 e7 3e f7 39 db 8f 13 8d 0c 52 23 43 ad 85 69 8c da d9 a0 ae ed db b7 b7 b4 53 8a 77 fe 02 b4 bb 14 be 0f 27 9b 05 a0 7d e0 d7 d7 ae 46 82 9d 4e 70 5a b8 2e 48 d1 d1 ff 18 fd f9 c0 8d bb 9a 9a e9 73 27 4c 8e fc 06 a4 9f 78 b8 8e 50 ac 5d b7 3a bc f4 96 97 86 b7 be f5 ad d9 88 df cc f4 46 1c 26 d3 12 3c 17 49 13 19 63 b7 9f ff f9 bf fe a7 91 26 32 81 29 86 f6 4e d9 51 c9 6d 86 04 83 44 4f 3c 69 f2 83 63 5e a0 57 58 af d0 0e 9e 2b b9 Data Ascii: Zp<l4'c1.qmLe)GQMHyJAA#}\|Y}BA=-IstTj^U}{>9R#CiSw'}FNpZ.Hs'LxP]:F&<Ic&2)NQmDO<ic^WX+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49857	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:39 UTC	421	OUT	GET /i/8cfd103b-74fa-4fad-a1d2-ff4d0036298c/ef6f2360-de39-475e-a60a-3c562e5d6b24 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:40 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X4uttU57J6UtWhoo7XwtM5cOm0Qbw6HEi8eNDOJZRSy2F5rzbYlPBPeUwGSuYwUs9jWl24hc8Sbl%2BsCEI%2FbkGo9YHMO9ac9yHwYAHuNTueBRY2m6g696MG5iGRO62r76zlrawvp5%2BQXC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101784ba7f799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1988&min_rtt=1691&rtt_var=1228&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=999&delivery_rate=717973&cwnd=92&unsent_bytes=0&cid=7c626e6777064c9e&ts=835&x=0"
2024-12-12 22:03:40 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49879	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	663	OUT	GET /i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1103	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zxw0S2s4ZwQuVFE2HNXUeI7v1QdqEMsRHznGvMdb1osmh9h2v6nO9qMAZZ1URN5Ir59J%2FQQHAg%2FlYKohI4jAS0Cs5s2JLA9ov7uICIh0j6Lio1KbHYanUb7q5One00EEBVXa%2BPoO9k1z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11018848a25e67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2222&min_rtt=1570&rtt_var=1894&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1241&delivery_rate=429917&cwnd=243&unsent_bytes=0&cid=ad4b2f494cec3064&ts=835&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49878	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	421	OUT	GET /i/1a60f7c6-a62c-4f4f-bf3c-6260f681b77d/96c24456-46b1-4cf0-b11e-fc5efb91e613 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1100	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:42 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNiSUYXvNwQeIi3BE4r2ia6C3jvNVaBOuibFyhvQmbpyLHZtdPvndqx%2FuCG3ZhP9dtDrIhYx7TQaPIBfhWtPboG5tnJ7HEQxaV1x7JP95Y%2FAyEKTuxDQnoTHy%2FXBc4vHO1WnJhVsIZu6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101885b9ff78d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1598&rtt_var=799&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4256&recv_bytes=999&delivery_rate=308114&cwnd=55&unsent_bytes=0&cid=d9ea52d3329e6fbc&ts=650&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49881	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	402	OUT	GET /nas-prod/c_6067824c-691b-457e-9383-c156cce806fa_1670250183.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:42 UTC	1345	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:42 GMT Content-Type: image/jpeg Content-Length: 50012 Connection: close x-goog-generation: 1670250185532789 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 50012 x-goog-hash: crc32c=yyvPhw== x-goog-hash: md5=E0VVt6Zzf2SsjCrMZvbB9w== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY20rBaeClbDVd5B5D1J_5BgSE5_P_6Uo1pBJHdGlgrA4Lj0nVTcsvB_whXUHx-_lt3QG_o Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2968 Last-Modified: Mon, 05 Dec 2022 14:23:05 GMT ETag: "134555b7a6737f64ac8c2acc66f6c1f7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EdkqKX6X4jQvWRdFNA0C0R8ZdQefLgKL9hEWuaAWhrj8gtgGwIQOvl0kJ%2FlAsphthGToYKPPDgBCX5pVTA8Uz8eRFxqQYPmslloh1xAAQga0V4CovxBZmzfOHvJjqNRW2R12"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:42 UTC	274	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 38 35 63 37 35 37 63 39 33 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 32 30 35 26 6d 69 6e 5f 72 74 74 3d 32 31 30 32 26 72 74 74 5f 76 61 72 3d 39 39 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 39 39 36 35 38 37 26 63 77 6e 64 3d 32 31 30 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 35 63 61 38 34 66 66 61 65 64 38 31 63 Data Ascii: CF-RAY: 8f1101885c757c93-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2205&min_rtt=2102&rtt_var=995&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=980&delivery_rate=996587&cwnd=210&unsent_bytes=0&cid=5ca84ffaed81c
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 01 b7 08 06 00 00 00 37 97 1b eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 ea 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 62 34 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 38 3a 32 35 3a 35 Data Ascii: PNGIHDR7tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:5
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 c1 4d 49 49 49 49 49 49 Data Ascii: IIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIIMIIIIIIMIIIIIIMIIIIIIMIIIIII
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: e2 aa 55 ab ac 06 86 c9 03 20 03 00 b2 af 8d 99 36 07 92 f0 40 97 1a ab 0b 2e d9 4c a8 5c df 89 bb ce 77 6c a9 9d b9 40 2a 7d 82 0c d2 b8 67 fc c5 33 01 f8 40 6b c3 b3 c0 73 c0 c4 c6 ef 4f 3f fd 34 9d 3d 7b d6 6a 5c 10 0e f0 19 0b 80 89 b5 2f 00 1a 16 ec 83 e3 f0 b1 f9 9d 60 7b 6c 8b 05 c7 bf f1 c6 1b e9 e6 9b 6f a6 6b af bd 36 c5 c0 70 5d 00 58 68 c8 2c 6c 24 03 78 fe c6 1c e7 4f cd b1 0f 48 a1 46 19 8f 82 9b 82 9b 82 5b b6 8c f4 27 cc f2 d5 a0 01 52 8e 3e 36 f6 39 81 01 83 b9 42 fa 1f 18 18 a0 af 7f fd eb 56 53 03 a3 84 39 ed 92 4b 2e b1 60 c6 1a 19 07 52 e0 19 80 19 83 f1 82 19 83 71 f3 c0 96 1a 83 0b ee c5 7c d7 52 0b f4 bd 07 69 8a 95 81 1b d2 c4 c9 9f 59 4b e2 60 1a 80 c9 86 0d 1b 2c 90 3d f0 c0 03 b4 7f ff 7e 7a f9 e5 97 2d 08 62 81 f9 f6 f4 e9 d3 Data Ascii: U 6@.L\wl@*}g3@ksO?4={j\/`{lok6p]Xh,l$xOHF['R>69BVS9K.`Rq\|RiYK`,=~z-b
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 58 2e 78 b9 09 ee 92 a1 cb fd a4 b9 8f 7d 76 6e 30 89 34 5b 4a 10 73 cd 9b 2e 48 bb 0b df 33 40 0d da 10 c0 02 40 01 cd ed c9 27 9f b4 91 88 cf 3c f3 cc 02 09 96 cd ac f9 a2 5c 80 12 db 43 38 61 a0 e7 84 73 00 34 7c 84 d0 d0 a1 ad 23 dd 03 f7 83 dc bb e1 e1 e1 7f 36 d7 bd 43 d9 8f 92 92 82 9b 34 1d e1 9a 6f 0f 52 dd 4b 45 0c 16 60 72 90 d2 51 4d 03 61 eb f7 de 7b af 35 47 22 31 1b db 40 7a 87 c6 06 73 25 40 4d 86 ef bb 60 ed fa 94 ca 01 c0 a5 26 e6 16 5c 66 70 62 30 ce 66 91 cf 0f a0 8f ef f0 b5 41 d3 3d 76 ec 98 fd 0d 01 24 ae 36 58 8e a6 3d 7e 1e ec 8b 7b eb 5b df 4a ff fc cf ff 6c c7 03 9e 17 fc 70 06 04 ff db dc 63 bb b2 20 25 a5 c2 50 25 b6 bc b9 d8 30 b4 35 41 be 9d 52 11 9b 0a d9 06 8f e0 91 fb ef bf df 46 cf 3d f5 d4 53 96 e1 71 c9 28 48 fa 00 3f Data Ascii: X.x}vn04[Js.H3@@'<\C8as4\|#6C4oRKE`rQMa{5G"1@zs%@M`&\fpb0fA=v$6X=~{[Jlpc %P%05ARF=Sq(H?
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 38 1f 82 6f f0 4c 11 2e 0f 1f 1b d7 92 c4 e7 b0 c7 2a 77 92 56 00 94 e6 02 71 d0 91 59 ff 27 e6 39 68 54 49 85 01 9b 92 6a 6e 79 19 48 be 08 46 29 cd cb 28 c7 a5 32 7e 66 dc 52 bb 62 13 a2 6c 6a 09 93 24 2a 50 6c df be dd 32 64 0e 6d 67 6d 84 9b 57 72 62 36 fb 96 d2 e5 87 85 ed 23 16 66 82 15 52 aa 0c 7b ec 74 d7 88 df 58 0b 86 70 90 d4 64 6c 6e 18 37 2e ad 04 ad 2d ec f3 e0 67 81 f6 3d 5c 38 1b 49 eb 46 50 ba cd 00 f9 4a 73 af e7 94 3d 95 bf 80 ad c0 a6 e0 96 77 f3 95 9b a0 ed 16 0b e6 c1 97 4d 80 46 50 d7 69 b7 fc 95 ac 07 c9 b6 76 94 89 ba fc f2 cb 53 66 35 99 c4 1b 04 90 6e 87 68 f7 3a dc 80 99 20 13 ac 3c 7e 26 a1 20 5b ca 56 53 f2 75 11 08 0b ce d8 06 e0 06 93 24 b4 37 30 7d 26 36 05 57 8b f9 07 26 57 dc 0b cc ae ff f6 6f ff 66 a3 27 11 49 8b 7b 36 Data Ascii: 8oL.wVqY'9hTIjnyHF)(2~fRblj$Pl2dmgmWrb6#fR{tXpdln7.-g=\8IFPJs=wMFPivSf5nh: <~& [VSu$70}&6W&Wof'I{6
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 55 01 6e 0a 6c 0a 6e 25 19 84 cc 1c 8a 3d f8 18 ec c0 78 61 96 84 74 07 2d 03 4c 89 fb 74 81 39 41 fb c8 47 77 5e 06 ae 30 fe 97 4a 9a 88 5c 55 05 0b 6a 49 22 25 00 d1 82 00 3c f6 b7 55 12 58 e7 0a f0 f2 bd c1 bc dd db db 4b 17 5d 74 91 82 5b 91 df 83 04 36 24 69 2b b0 29 b8 95 8c 31 ca da 91 c5 06 36 0e 82 60 b3 24 cc 49 58 07 7f 1b 57 af 07 01 e4 64 40 09 5f 7b 2e e7 5d 6a 47 80 72 7c 87 78 3e 10 08 60 96 83 80 80 e7 88 e7 ca f9 6d 9c e7 55 cd 4c 46 5a 06 20 20 c1 0a c0 39 80 5a a1 a4 78 c4 95 47 14 d8 14 dc 4a 2e 69 15 5b aa 97 55 f7 65 e1 64 50 b2 8a 7b 4a da e6 8e 00 dc 79 39 9b b6 35 41 52 65 3e 00 b0 dc 98 3a 9e 0d 82 48 50 95 83 bb 00 e0 3b 9b 9d 8b 91 fb 57 4a 62 5f a2 bc bf 5a c8 ed 2b b7 71 08 60 83 05 46 7d 6c 0a 6e 65 01 6e a5 ac 5a c1 12 35 Data Ascii: Unln%=xat-Lt9AGw^0J\UjI"%<UXK]t[6$i+)16`$IXWd@_{.]jGr\|x>`mULFZ 9ZxGJ.i[UedP{Jy95ARe>:HP;WJb_Z+q`F}lnenZ5
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 57 bc 51 0a f7 bc 00 6c 08 1c 51 60 53 aa 68 70 2b 87 09 25 19 0f fb 48 38 61 db 57 8b b2 56 34 35 b7 c0 b4 11 03 f0 29 05 f6 f0 53 42 33 41 e8 3f 7c 6c 30 4d 5e 60 52 78 6e 73 35 3d b6 58 bb 55 e6 1c 6e cc 61 ee 21 20 09 c0 76 f9 e5 97 2b b0 29 d5 26 b8 e5 cb 54 e8 cb a9 93 85 94 6b 41 6b 5b a8 31 e3 5e a3 a9 fb ae af af 4b 69 b1 17 7c 94 51 23 00 cc d0 b2 65 9d 34 34 34 4c 47 8f 1e b5 fb 1d 3e 7c 28 a5 8d 37 35 d6 d1 d8 f8 c4 22 0d b9 96 88 81 4d b5 fe 70 82 00 03 db 15 57 5c a1 c0 a6 54 f9 e0 c6 05 65 7d 11 89 3e 10 92 a6 c3 6c 83 23 64 24 a5 34 3d f2 b1 99 19 c1 ac c6 bf 4b a6 5c 8d 6d 5b 16 33 5e 48 d0 53 a9 a0 1a 98 d4 66 66 66 ad 6f 6d d9 b2 1e ab a1 b5 b6 b6 98 7d 62 d6 24 f9 c4 13 4f 98 5d a2 74 fa f4 59 9a 9a 4a 98 20 61 8a 9c 9d 45 d4 69 a3 78 Data Ascii: WQlQ`Shp+%H8aWV45)SB3A?\|l0M^`Rxns5=XUna! v+)&TkAk[1^Ki\|Q#e444LG>\|(75"MpW\Te}>l#d$4=K\m[3^HSfffom}b$O]tYJ aEix
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: f7 f5 1a ed a6 ba 93 e3 b1 f4 f7 f7 d7 ac e9 8d 23 8d 91 a0 0d 1f db 8a 15 2b 14 d8 94 6a 03 dc 4a 31 c8 25 90 c1 d7 e7 06 ab 70 09 2e f6 b5 b1 5f 4e 76 2d c0 f6 6e 52 b7 2f e8 24 d7 56 39 f9 36 63 b1 df 52 82 37 42 f6 61 8a 44 bb 9a 07 1f 7c d0 7c de 4a 3f 78 e6 07 b4 69 e3 7a da bb 77 2f b5 77 f6 10 35 d6 d3 96 ad db 68 78 60 88 0e 1e 3a 80 03 51 24 1e a3 6d 9b 37 51 5d 43 1b d5 cf 2f 33 c0 16 a5 a9 d9 11 1a 1a 3f 43 47 8f 1e a3 03 2f 1f a6 ad 5b 2f a6 95 6b 56 52 df 70 3f ad 5c bb 9e 4e 9d 3a 41 c7 8e 1e a5 57 ed 79 15 fd f7 ff 7c c3 56 37 e9 68 eb a4 d1 f1 11 8a 44 23 29 fd 9d 99 61 35 10 d7 d6 ac d5 96 37 b2 d1 28 2a fb 6b 49 2d 25 d5 dc 8a 48 ae b9 88 41 cc 2d 9b e4 f3 f9 31 f8 85 05 24 d9 1d 3c 93 09 a7 10 4d 2e 39 49 1d 80 ce 11 92 70 ec bf f7 bd Data Ascii: #+jJ1%p._Nv-nR/$V96cR7BaD\|\|J?xizw/w5hx`:Q$m7Q]C/3?CG/[/kVRp?\N:AWy\|V7hD#)a57(*kI-%HA-1$<M.9Ip
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 3f 7a 17 2d 6b 8f d1 c8 44 94 86 e6 c7 e8 91 1f ec a5 83 a7 ce d0 78 ac 93 b6 ac 59 49 3b da 9a e9 d0 f3 2f d9 f0 ff 68 a4 9d b6 af eb a6 55 dd 2b a8 6e 7a 92 7a 8f 0f d2 d0 d0 10 b5 77 77 51 93 39 de d9 33 67 69 f7 95 3f 46 9d cb 3a 68 76 68 2e 25 44 54 93 f6 86 fb 31 cc 3e b2 6a d5 aa 48 ad cd 2b cd 63 53 52 b3 64 09 29 48 d3 92 da 98 5c e7 a6 07 f8 f6 95 80 e7 5b c2 9a 1c 0b 15 4c 02 0d 02 3e 20 80 19 cc 91 00 37 e4 21 41 83 83 49 b2 bb ab 9b 4e 9e 38 45 cb 7b 7a 2c e8 ad 5c b1 ce 68 5f 67 e9 fa 1b ae a2 c6 a6 28 1d 3b fe 02 fd e3 3f fd 15 75 af 6c a5 89 98 d1 c4 3a 0c d0 cd 8d d1 b3 07 5f a4 86 ee 66 5a b5 6d 35 cd c4 67 69 d6 3c 9a b9 a9 31 5a d5 d5 4e cb da 3a a8 3e d2 48 03 83 c3 d4 da b1 cc 96 dd 1a 9f 9c a4 b9 d9 38 ad 5d b3 ce 36 3f 65 c0 af 26 Data Ascii: ?z-kDxYI;/hU+nzzwwQ93gi?F:hvh.%DT1>jH+cSRd)H\[L> 7!AIN8E{z,\h_g(;?ul:_fZm5gi<1ZN:>H8]6?e&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49877	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	421	OUT	GET /i/6067824c-691b-457e-9383-c156cce806fa/beca2ce8-23d8-4a9a-9f19-b6c3823031ab HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1099	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b8tjxTRjygl4GKzb%2BVXueTUWy5sU4hMHqzYk%2BzZWUAXrxlHpTLxK6woJjH8MI4ndcOfnqZ0Q7Qy1x09Ouvf1hyMHfHslLNzdEuWtZa8DwmuBySz7OMgGzcQBzGDZz3WdsgUs7wdhAs1c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101885fb542dd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1736&min_rtt=1736&rtt_var=868&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4254&recv_bytes=999&delivery_rate=410515&cwnd=186&unsent_bytes=0&cid=3033fac6fc59f21b&ts=826&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49876	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	663	OUT	GET /i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1108	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vsC1jzPfwu7ZrCzNIz1wPrNWTwpfcsYyKqHBBodr5bNb6NoT%2FeDOgWgoD%2FErL53%2B%2B7JeMibe7XluEaQrbmPvXynrEPUrn5rwB39p2bq9%2BQCHRJqdjxGtnv1V9db%2BwAnl3INSNpfHAFfj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101885e3b7d18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1764&min_rtt=1764&rtt_var=882&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4256&recv_bytes=1241&delivery_rate=365960&cwnd=220&unsent_bytes=0&cid=88e85a6a38daf8d0&ts=818&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49880	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	617	OUT	GET /nas-prod/c_undefined_1696444090.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:42 UTC	1351	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:42 GMT Content-Type: image/jpeg Content-Length: 68441 Connection: close x-goog-generation: 1696444093455616 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 68441 x-goog-hash: crc32c=WG2dCw== x-goog-hash: md5=ZvPF/9LQvpMg4Gf0GXxaBA== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC6zn5IzL0c1vFmn4tFFwoveAkxYpOlf4vvmm-6X9p_4_6f5Sb6Xel6xhcVzZCiHnKVSHLU Expires: Thu, 12 Dec 2024 21:40:29 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 04 Oct 2023 18:28:13 GMT ETag: "66f3c5ffd2d0be9320e067f4197c5a04" Age: 2156 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2FAFCEQcFrAl8MMDCDnHZSVS%2Fr8w5KxMEEQ5eYly%2B4GE9f5WPWmxZTXkoh4c8sjCEZPxAxtusS7HdP3a1QkTpwA6wz1nkKmEf0hA4khU7mk%2FUZMbKKMnd3OfZKZ9QF0Zf7fI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:42 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 38 35 66 36 39 38 63 62 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 39 37 38 26 6d 69 6e 5f 72 74 74 3d 31 38 30 34 26 72 74 74 5f 76 61 72 3d 31 30 32 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 39 31 32 37 38 35 26 63 77 6e 64 3d 31 38 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 61 65 38 63 35 38 34 34 62 62 Data Ascii: CF-RAY: 8f1101885f698cb4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1978&min_rtt=1804&rtt_var=1025&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1195&delivery_rate=912785&cwnd=189&unsent_bytes=0&cid=9ae8c5844bb
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 e8 08 03 00 00 00 7a 7d 24 d6 00 00 00 8d 50 4c 54 45 4c 69 71 6a 69 69 46 46 46 13 13 13 97 96 96 af ae ae 5a 5a 5a 79 78 78 87 86 86 ac ac ac 17 18 18 00 00 00 0e 0e 0e 03 03 03 09 09 09 1c 1c 1c 5b 5c 5c 48 48 49 06 06 06 62 63 63 3f 40 40 4f 4f 4f 55 55 56 37 37 37 2f 30 30 21 21 21 6b 6b 6b 29 2a 2a 25 25 25 75 75 75 7f 7f 7f 89 89 89 ab ab ab ea ea ea ec 0d 08 93 93 93 b3 b3 b3 9d 9d 9d a4 a4 a4 5f 08 08 c6 0c 0a 92 0a 08 d7 d7 d7 34 06 06 c3 c3 c3 fc 3b 2c d5 30 29 db f5 2a 14 00 00 00 0a 74 52 4e 53 00 bc df ff 63 18 d4 a7 8d 36 7a 9d b2 62 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 89 76 1d 47 8e b5 fb d3 41 89 64 9c cc 8c Data Ascii: PNGIHDRz}$PLTELiqjiiFFFZZZyxx[\\HHIbcc?@@OOOUUV777/00!!!kkk)*%%%uuu_4;,0)tRNSc6zbpHYs IDATxvGAd
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 40 e7 8b 04 e5 24 f4 51 64 2c 42 97 23 fa 21 f3 4b 59 c9 19 1e 47 74 3b c3 9b dc 2d 7b c7 29 7d d2 5f 3d 6c ac c7 11 92 25 6f bb 08 b9 f0 3b 02 ba 88 bc 5b e5 88 3e 22 5a 87 e0 5a 48 3c 0a 1d 37 69 9b bc 09 77 e6 a2 74 2d d8 f5 3d 6c e5 9c db 77 3c 01 e4 31 d1 6c 6c 9b 21 24 47 5e 44 ca a5 83 52 55 e7 38 a3 8f 03 2e d0 16 5f 94 47 44 2f 25 a2 2f db b6 f5 0d 1e 03 23 84 8e b0 de cf 3b e6 5f 6c ba 65 90 5f ba 30 a4 13 92 21 6f fd 05 37 e8 10 ea 28 d1 1c 52 1f ad 16 27 c7 ef 43 e8 b8 48 77 b8 7e 43 17 dc 80 f6 98 51 95 de 4f 93 ce bf d8 c4 aa e4 fd fd c4 53 3a 21 f9 f1 5c 94 65 eb 71 b3 36 d6 22 74 d1 79 27 a9 79 3f eb 11 fd 56 e8 85 f5 cd e1 2c 8e 3b 38 5c c1 59 cd 0e 73 6e cb ae 5f 41 72 02 c7 c2 3b 21 d9 f1 e9 09 01 7d 9f 4d e8 1d e2 79 5d 0f 7a b9 e6 8b Data Ascii: @$Qd,B#!KYGt;-{)}_=l%o;[>"ZZH<7iwt-=lw<1ll!$G^DRU8._GD/%/#;_le_0!o7(R'CHw~CQOS:!\eq6"ty'y?V,;8\Ysn_Ar;!}My]z
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: c9 34 8e 42 27 24 37 8e 88 3e 1e a9 fb 68 f7 e8 1b 22 7a 79 dd a6 8a 8e 19 e7 7d 5c 84 6e 2b 5d d4 63 c6 e6 d1 e5 8c 0e c3 e7 5e ce e8 2b 85 4e 48 5e 5c af d7 46 0d e8 87 dd b3 f6 ba df da 3d 63 3f 7a 51 b8 dd ec a2 ea 18 fb 71 44 b7 5e f7 42 8d 27 50 a9 63 31 8e 90 cc d0 86 19 49 dd a1 73 0b e9 36 62 3e ef 0f bb 54 d1 30 e3 61 30 a3 de 12 7a 89 7e 54 dd 21 74 91 b9 dd a3 8f bc 5e 23 24 37 92 d0 75 35 3a 3e b4 92 de 60 c5 e2 e3 f5 5a 59 55 95 99 c8 58 e6 8e 02 bd cd af a9 d0 9d 67 44 27 24 53 52 0b ac 7a b5 77 75 0a e8 72 ec 0e 8f d7 6b 71 7c 6d 52 87 19 1d 54 1d 30 b0 aa e6 90 0b aa ee 95 db 29 74 42 72 e4 05 1d 6f cb 8e a1 96 75 7d 7f ff f2 e5 cb fb bb 9c d3 07 39 a4 7b 49 dd cb d8 14 07 50 56 d7 41 54 34 d6 c8 7b 85 2f ef 5a a7 37 8b 99 a2 08 3a d8 3e Data Ascii: 4B'$7>h"zy}\n+]c^+NH^\F=c?zQqD^B'Pc1Is6b>T0a0z~T!t^#$7u5:>`ZYUXgD'$SRzwurkq\|mRT0)tBrou}9{IPVAT4{/Z7:>
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: bc 8c 8c e8 84 e4 46 dc 8f 2e 19 b7 f6 bf 76 c9 4a 4a 87 5a 7e 14 d1 e3 98 ea 68 85 f7 7a d4 ce f8 39 04 34 bb eb f4 9a 7c 9a 0d 33 84 e4 45 8a e8 b6 05 d5 32 f7 58 8c fb d0 02 6b c6 13 da 02 9b bc a4 24 7c 9b 67 9c 2e 48 8f 11 7d a5 d0 09 c9 8b 28 74 44 f4 3a 79 43 ea da e4 fd b1 05 56 8b 71 3e c0 4a ca 4a f4 87 d0 9b 69 d2 56 77 b4 d3 d8 19 80 42 27 24 2b ae a9 bb 64 dc ea eb 6a c5 38 74 c6 3d 08 bd 2c 30 9f 66 57 e5 c9 18 3a 4d af ef ae b2 be 39 a4 06 3c a3 13 92 19 d7 16 d8 31 15 dd 3b 4b dd 25 48 57 77 63 aa 25 ae d7 74 e4 5c 87 d7 d5 4a 0a 1d 33 4d ea 75 b7 d4 bd 66 44 27 24 37 a2 d0 fb be b6 16 d8 f5 68 81 7d 1c 53 85 d0 cd 61 c6 3a e3 ac d5 bd ee 86 66 d0 7b 74 ef 9c 0a 9d a9 3b 21 d9 11 53 f7 63 fb 0a 84 6e 4e ed 37 2e b0 49 e8 92 9c 2f 3a bd 36 Data Ascii: F.vJJZ~hz94\|3E2Xk$\|g.H}(tD:yCVq>JJiVwB'$+dj8t=,0fW:M9<1;K%HWwc%t\J3MufD'$7h}Sa:f{t;!ScnN7.I/:6
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 8d b3 fd 0d b6 ab 05 7b 93 fb 6d 83 ef 84 8e a9 0e 70 98 a1 d0 09 c9 0a 13 3a a6 4b d5 78 c2 dc 21 35 a2 6f 0f 0d 33 98 5e f3 0e 0e 33 bd 2d 59 ec e2 9e c5 a6 99 d4 ee d9 66 58 e5 0b b1 61 86 90 cc 78 c1 ae 25 8d d2 9d b6 c6 d9 f4 da 0f 7d dd 75 a8 c5 a7 aa bb f9 ba cb e3 61 ec 75 25 13 9c 27 c2 36 41 e8 2c c6 11 92 19 26 74 cc a3 9b db b3 f5 ba f7 bd 56 dd 1f ed 9e 2b 17 74 6e c5 52 77 db b1 18 7d dd d5 d6 1d 42 6f 28 74 42 b2 23 9e d1 ad cf 25 1d d1 63 67 dc 43 c3 8c 0d b5 58 d5 dd 02 fa 38 1e 55 77 ef 83 56 ea b4 d7 9d 63 aa 84 e4 c5 21 f4 51 a7 54 cd 20 aa 81 d0 b1 64 e9 41 e8 a2 f3 78 8f 1e 4f e8 da 47 07 73 48 54 dd 0b 7a c6 11 92 29 71 53 4b af 2b 99 b4 db 3d 0e 9e ce 1f 84 8e e9 b5 b8 36 d9 8c 27 52 f8 d7 d5 ab be a8 f4 1e 5d cd e7 28 74 42 b2 22 Data Ascii: {mp:Kx!5o3^3-YfXax%}uau%'6A,&tV+tnRw}Bo(tB#%cgCX8UwVc!QT dAxOGsHTz)qSK+=6'R](tB"
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 71 f7 5a 7a 2a 34 c3 b4 e9 98 6a 15 b6 78 21 4f a1 13 92 15 37 0d 33 36 a7 d2 25 a7 f6 c5 3f dc a3 5f 2a 58 b7 eb dc 8a 5d a3 d7 26 74 89 ff 93 9c d1 e5 29 e0 f7 d9 c6 54 29 74 42 b2 22 36 cc 4c b6 1e 1d 75 f7 e4 d4 be 7f d8 d4 52 14 c1 2f 69 25 93 55 dd 63 8d 7e c2 a2 b6 62 59 42 5c c9 44 a1 13 92 15 c7 92 c5 b1 bb f6 ba db 3c da a3 d0 f5 1a 7d d9 10 d1 87 c3 49 6a a8 07 39 96 cf c1 7b ec 5e d3 16 58 79 89 42 27 24 2b ee 77 af a9 d0 2d 46 2f 12 a4 8b c7 86 19 44 74 73 98 e9 2c 71 d7 37 a3 61 06 96 71 f2 18 98 26 6e 6a 21 24 3f ae 9b 5a d4 60 46 95 0e 5b f7 69 7b 58 9b 5c 96 2d a4 8c 4d 2d ba a8 cd aa ee 75 f4 8c dd 43 21 af 2e b6 f2 85 a9 3b 21 99 61 42 df 30 79 6a d7 6b b6 1f fd 47 db 54 5b e4 ee 3b 7a 62 9a 63 3f 7a f2 75 87 dd b3 d7 c5 6c 18 6a e1 3c Data Ascii: qZz4jx!O736%?_X]&t)T)tB"6LuR/i%Uc~bYB\D<}Ij9{^XyB'$+w-F/Dts,q7aq&nj!$?Z`F[i{X\-M-uC!.;!aB0yjkGT[;zbc?zulj<
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: 76 32 7d f0 75 f7 21 6c d3 b1 a9 45 75 de 8d 7a a2 0f de 17 6e 59 60 55 c3 aa 3b 21 b9 a1 0d 33 8b 2d 70 58 a3 67 dc a8 c6 13 7b 08 d5 a3 d0 e3 02 87 e1 d8 c9 34 a6 dd 6b 10 7a 81 61 75 1a 4f 10 92 1f ba 7b 2d 15 e3 56 5b 9c 3c 46 17 d8 8f 42 d7 2e 57 8d e8 96 b9 ab ce 6d 53 8b f3 85 8e b6 71 a8 85 90 fc 48 c5 38 9d 5e 33 2b 29 ed 75 53 bb e7 c7 dd 6b 58 be 16 5d 60 c7 2e ed 6f c0 50 2b 66 5a 3c 96 2c c6 d4 9d 42 27 24 2b 8e d4 3d 36 cc e0 2e dd c6 54 17 ff b8 1f bd 88 5d ae 71 f7 9a fc 33 5a 31 4e 37 b5 b8 ca 1a 66 58 8c 23 24 3b ae 0e 33 22 dc d5 5c 60 6b 24 e3 3f 6a 81 75 3e a8 0b 6c 93 3a e3 f0 de 51 5b 60 bd 93 80 8f 4b 76 0a 9d 90 b3 40 ad 45 00 00 20 00 49 44 41 54 fc 48 6b 93 87 b8 a9 65 b5 b5 89 92 ba ef bb ff 38 d4 12 96 2d 0a 3d 8d af 0d b1 33 Data Ascii: v2}u!lEuznY`U;!3-pXg{4kzauO{-V[<FB.WmSqH8^3+)uSkX]`.oP+fZ<,B'$+=6.T]q3Z1N7fX#$;3"\`k$?ju>l:Q[`Kv@E IDATHke8-=3
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: aa cb d4 bd 4f 9e 71 8c e8 84 64 c6 51 75 4f e3 6b 5d 37 40 e9 d3 b6 3d 58 49 5d 60 f7 bc ed ba 47 d1 86 5a d4 49 6a 8c db 54 dd d5 1c 92 42 27 24 33 92 d0 07 8b e8 29 77 d7 fa da 83 d0 2b 78 c8 38 5d e0 30 a8 65 ec 78 18 4f cc b6 64 71 d9 e2 6e 27 0a 9d 90 ac b0 31 d5 63 53 8b 7a c6 a5 62 dc 07 17 58 e7 17 6c 46 d6 31 d5 da 1a e3 46 eb 75 87 d0 bd ee 5e a3 dd 33 21 f9 91 ac a4 ec 8c 0e c6 fa b0 7b 7e a8 ba b7 36 a6 aa 6d 74 5a 73 1f c7 24 f4 3d 09 5d 1e 02 14 3a 21 b9 71 d8 3d 0f 57 83 19 9d 53 d9 97 0f 42 af 60 0b b7 cc b3 75 c6 c5 0e d8 14 d1 75 c9 e2 1e f7 2f 53 e8 84 64 c5 b5 18 a7 e1 dc cc 21 21 f4 f9 31 a2 a3 16 67 46 af fd 70 2c 70 90 f4 3d 7a c6 e1 90 6e c5 38 0a 9d 90 dc b8 dd a6 1a f7 a3 d7 4d 03 a1 6f 0f 2b 99 ca c2 e6 56 a6 23 75 ef cc 77 42 Data Ascii: OqdQuOk]7@=XI]`GZIjTB'$3)w+x8]0exOdqn'1cSzbXlF1Fu^3!{~6mtZs$=]:!q=WSB`uu/Sd!!1gFp,p=zn8Mo+V#uwB
2024-12-12 22:03:42 UTC	1369	IN	Data Raw: c7 16 58 5b d6 a2 ef b6 25 cb b1 61 a6 1e 57 9e d1 09 c9 8b db e9 b5 64 f7 6c cd 6e cb 72 67 3c 11 23 7a f4 75 b7 13 7a 74 82 d5 b5 c9 30 76 0f 36 c2 ca aa 3b 21 99 01 a1 17 8b ed 47 af e3 36 d5 71 ec 7f 10 d1 d5 d8 3d 44 2b a9 31 2e 6a d1 88 3e 60 1e dd 27 73 48 da 3d 13 92 1d 5a 75 47 af 7b 1a 47 97 6c bc d1 39 95 6d b9 3f a3 63 9d aa 0a dd ec 9e eb eb 4a 26 75 98 09 3e 78 1f 87 63 28 74 42 f2 22 5e af 41 a0 eb d5 ee 59 8b 71 4b f1 50 75 87 d0 fd cd 50 8b 26 ee 98 47 47 d5 1d 9e 71 21 ee 5e 63 0b 2c 21 79 61 0d 33 da 02 6b 7d 71 dd 38 a4 fd e8 f7 0d 33 72 44 2f f4 8c 8e 63 b8 6e 59 d4 a2 7b 9c 47 0f 45 9c 5e e3 19 9d 90 fc b0 88 be f5 69 c9 e2 da 25 e9 4a 90 fe c1 98 aa 5f a2 98 31 02 53 ab d2 b5 bb 46 43 3a 5c 60 47 9e d1 09 c9 8e 6b af 7b 7d 78 43 c6 Data Ascii: X[%aWdlnrg<#zuzt0v6;!G6q=D+1.j>`'sH=ZuG{Gl9m?cJ&u>xc(tB"^AYqKPuP&GGq!^c,!ya3k}q83rD/cnY{GE^i%J_1SFC:\`Gk{}xC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49883	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	402	OUT	GET /nas-prod/c_a78835b2-4bd3-4bec-9da9-a5999639500b_1684171715.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1358	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:42 GMT Content-Type: image/jpeg Content-Length: 24581 Connection: close x-goog-generation: 1684171716534608 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 24581 x-goog-hash: crc32c=Kx/S4g== x-goog-hash: md5=SIiI8MqS4Xttt7C9D4BTmw== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC66eMIU8btsxTKLJR25jlFHBt53Jlg5InEE5nN4Lypwa3kYg402Z89TEiKwCmKxBprez4QV9xR8VQ Expires: Thu, 12 Dec 2024 21:57:44 GMT Cache-Control: public, max-age=14400 Age: 2968 Last-Modified: Mon, 15 May 2023 17:28:36 GMT ETag: "488888f0ca92e17b6db7b0bd0f80539b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WDht1skgrgDRJVn%2FZalI2Hr2K1ZSpJY98SKXiUrwEmof29xgjaF2jiBWuzbXQbdgBMTrJHAhmmDtA4mrFKH9rVqp%2BYciuLq9W9WJE%2BCnvqilRXHIeI7DGHS5J%2Bknq4L5WjPl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:43 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 38 63 64 64 62 34 31 62 32 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 30 30 26 6d 69 6e 5f 72 74 74 3d 31 35 39 38 26 72 74 74 5f 76 61 72 3d 36 30 33 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 30 39 31 36 39 26 63 77 6e 64 3d 32 31 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 35 64 34 33 63 39 63 38 32 33 31 66 Data Ascii: CF-RAY: 8f110188cddb41b2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1598&rtt_var=603&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=980&delivery_rate=1809169&cwnd=217&unsent_bytes=0&cid=5d43c9c8231f
2024-12-12 22:03:43 UTC	1105	IN	Data Raw: ff d8 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 04 04 04 04 04 04 06 04 05 05 05 05 04 06 06 07 07 07 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 03 03 05 04 05 09 06 06 09 0d 0a 08 0a 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 2c ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 e0 01 60 03 00 11 00 01 11 01 02 11 01 ff c4 00 aa 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 10 00 01 03 02 03 04 06 06 07 06 05 02 06 00 07 00 01 00 02 11 03 04 05 Data Ascii: ,Adobed`
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 99 68 1c 32 2a e5 0d 2b 6c b6 1e e9 df c3 d8 e9 d4 3d 8d 3d b9 82 0a 8a 48 6c ed 0b 7f ba af 5a cc 7e 29 bc 03 2e d7 0e ce 28 15 16 b8 dd 0f bb c7 ee 9a e1 a9 bc f5 4c f1 cb 81 94 1a f5 78 ed 4c bd 2a d2 ea 60 4c 4c 49 e5 a9 f3 e0 42 5d 7e 36 f1 ff 00 69 b2 de 70 c8 3a f1 84 02 79 98 41 b7 d7 17 d6 9f 77 85 62 3b a7 d9 16 77 8d 61 ec 04 e5 05 27 91 b1 db 66 d2 9b 7a d7 98 d5 a8 39 18 b3 6b 49 9c b2 68 d2 51 4f 07 48 b4 08 73 bf c4 54 e3 74 9d eb 9b 36 9e dc 80 39 ae 36 89 eb 7d b2 de 2e 0c ab 85 5d 44 cc 5e 17 34 19 8d 46 a1 5c 7d c4 b0 da ea 8d 9d ec 3d ed 8e 0f bb 2d 3d a0 c8 ee 58 6c 81 21 fe 30 b5 a6 48 af 4e e9 a7 38 05 bb a4 e7 ca 32 94 d9 01 dd 3d ac c2 2a c9 6d e0 77 6b 7b 39 44 ae 76 09 06 63 58 55 4d 6e 6d a0 03 2e 8c a1 49 a2 a4 d9 77 4d f9 1a Data Ascii: h2+l==HlZ~).(LxL`LLIB]~6ip:yAwb;wa'fz9kIhQOHsTt696}.]D^4F\}=-=Xl!0HN82=*mwk{9DvcXUMnm.IwM
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 99 55 8d b4 04 1d 41 04 64 39 a0 6e 6c b1 9b 5f 56 df 17 17 6e 7e b6 f8 d8 17 c6 5d f8 9c d3 99 3c d0 2c cd a2 b5 75 43 4f 68 b0 ab 8c 2e a1 f5 cd c5 52 2f ad 63 88 33 a9 1c 56 79 17 7c 27 12 bb c2 1b 6d 4e 9b cd f6 0e 64 34 16 c6 f4 65 94 8c d3 19 1d 06 c2 fa db 13 a4 f0 c6 cd 79 8b eb 48 31 9f 03 c1 79 6c ee 52 12 4c 3a 67 39 de 56 b0 41 1a 6f 65 11 90 0c 81 c8 08 59 63 22 59 8f de 9c a2 14 98 c0 dd 40 20 10 08 3f ff d4 fb f8 80 40 20 10 63 82 e6 ca a9 ed 6e 24 6c f0 8a d4 68 06 ba eb 13 9b 6b 20 73 69 7b 84 7a dd 99 ae b4 e7 32 8f 17 fd 24 7a 47 b7 d8 5d 84 ad 83 e1 d5 9a 36 93 6f 99 7d 86 5b 1a a0 1b 8b 6c 26 80 25 ec 70 76 44 34 6a 38 71 5f 57 18 66 94 e8 43 62 07 47 7b 0b 80 60 a2 83 5f b6 18 cb 86 d3 ed 3d 9e f0 6d c3 5d 4a 5b 87 5a b1 b3 1c 32 30 Data Ascii: UAd9nl_Vn~]<,uCOh.R/c3Vy\|'mNd4eyH1ylRL:g9VAoeYc"Y@ ?@ cn$lhk si{z2$zG]6o}[l&%pvD4j8q_WfCbG{`_=m]J[Z20
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 8c 92 2a 16 2c 70 24 6e 9c bb 17 0a dc 07 03 20 15 50 88 a6 04 76 20 4e b5 bb 83 d9 99 90 41 12 78 ca 0a 3e 29 84 52 a8 cb 1c 46 81 6d ad e5 83 37 70 dc 41 d0 77 04 6a c2 74 f0 5a a2 47 06 c6 1f 88 54 7d 0d d6 db e3 f8 66 77 96 2d 00 f5 c4 e5 e9 96 7c 01 9d 14 57 63 c2 71 57 62 96 cf 7b 47 ed d6 8f dd bc 00 18 0e 99 85 e7 c4 42 9e 65 10 34 e0 b4 42 d4 6e 1b 4a a3 a0 03 03 3f 23 cf e6 b0 bd 1d a6 97 97 a1 95 40 83 ff d6 fb f8 80 40 20 10 68 ec e0 44 e9 f1 52 27 23 98 58 6c ef 59 7f 77 8e 63 ac fd a8 d5 ba ba b4 c1 fb 0b 7d 61 3c 67 45 e9 89 c0 ba bc 97 17 ef b8 be dc 98 73 9d 9c 80 7b 78 4a ee 29 fb 70 d4 92 41 de 33 cc 1d 17 53 38 1b b8 4c f8 ae 30 d2 4e 9d 54 1d e9 ed f3 a2 cb 6a 1e 35 e3 8a c6 24 2c a8 10 35 ac 60 8c f2 9f 9a d6 82 bf 77 4f 26 e7 98 89 Data Ascii: *,p$n Pv NAx>)RFm7pAwjtZGT}fw-\|WcqWb{GBe4BnJ?#@@ hDR'#XlYwc}a<gEs{xJ)pA3S8L0NTj5$,5`wO&
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: d6 66 4c 79 f7 ad f5 38 84 63 7f b1 7a 06 5d 50 67 a7 9f 04 c4 a9 c3 aa 7b 5c f3 f3 a2 e3 d8 39 35 23 78 9e ff 00 39 2c 65 24 b1 04 1c c2 8d 4b d3 ca 57 13 08 71 07 92 c6 c1 3c a1 5a 86 17 8e cc 67 a1 25 7a b4 d9 aa f8 81 ea 20 13 ba 5a 3b be 3f 35 ad 95 5b bc 07 7a e1 b1 30 74 f7 ae 85 47 13 9a ac ad 43 32 01 1a 4f 3e 5e 7f 40 f3 0f 49 56 ae 9c 33 11 2e 9b 8b 20 2d 58 0e 81 d1 da b4 47 35 63 63 26 8f 54 4c 77 4a 05 f3 19 8d 78 20 e9 9d 0f 61 ed bd db eb 5b 86 98 a3 80 da 0b 9d d9 13 b9 dd ac 7e 48 3d 44 db 80 5a c1 ed 17 01 0d e6 b3 54 9e 1b 67 4e f5 ef bc ae 5a fb 6a a0 87 11 07 d2 c1 e6 78 ab 10 3a 05 bd 1a b7 bb ff 00 68 0b 9e 49 26 46 64 f1 f7 f9 e7 e5 ad f8 16 da 74 99 4d 84 36 77 4c e5 3d ba 64 bc b7 be 14 be 8b 3a d7 0e da 0a 80 f0 5a 4c 61 09 75 Data Ascii: fLy8cz]Pg{\95#x9,e$KWq<Zg%z Z;?5[z0tGC2O>^@IV3. -XG5cc&TLwJx a[~H=DZTgNZjx:hI&FdtM6wL=d:ZLau
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 5d 26 49 9d 56 53 c4 92 91 24 49 3c d7 9e bc c3 b6 f2 a4 8c aa 85 17 23 75 ca 84 02 04 8c 45 5e ec fd c8 15 40 20 65 59 b4 85 36 d2 a8 d1 52 8d 5f 54 53 fe 22 78 76 ca ee b3 2e 1e 29 e9 e6 cf 65 76 e3 09 c4 f6 f7 65 f1 6b 6b ed a9 e8 d2 83 1d 8e 52 b7 73 7f cd 30 ba 80 7d 90 33 00 3d c7 28 c8 99 0b d7 49 c7 03 cb 4f 86 3d cc 2f df 0d 71 68 26 7d 68 3d bc d7 ab 70 6a da 40 40 92 01 86 bb b4 26 e1 dd 7e 8e 0d 67 f8 a7 a4 0b ad c6 fa 41 c0 2d 1a fb 88 1b e4 06 97 41 76 ba 2c c7 74 c6 c8 b4 c5 b6 7f 12 03 78 d8 e2 be 8e c1 c8 b3 97 68 8f 04 1d 33 61 1e 29 63 77 f4 37 64 d4 b6 6f af c8 35 d1 e1 98 85 e4 d5 8c 79 f8 57 45 c4 be e6 3b 34 57 4b 99 73 25 30 a0 05 b6 42 33 cd 79 f5 38 6a 93 59 57 91 ff d3 fb f8 80 40 20 10 54 af 8c 5d 55 83 03 74 4f b9 7b b4 3a 66 Data Ascii: ]&IVS$I<#uE^@ eY6R_TS"xv.)evekkRs0}3=(IO=/qh&}h=pj@@&~gA-Av,txh3a)cw7do5yWE;4WKs%0B3y8jYW@ T]UtO{:f
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 5e 7d 87 4d bf 7e e8 75 28 88 1e b4 0f cf 45 c4 4a 4a 66 c6 98 a7 6d 45 a0 e8 32 e4 b0 b7 6d 4e d6 50 8f ff d5 fb f8 80 40 20 10 55 36 85 ee b7 65 0b c7 db 36 bd b3 0c dd 97 91 14 00 03 d6 93 cd 7a 34 ac 2b 4f 3b e4 53 a2 d9 b7 39 06 c6 be 1d ab d3 31 16 85 47 36 a1 20 38 02 44 4c c7 f4 5d b3 36 b9 ad d4 e4 59 ba 07 07 01 f3 41 bd bd db 9b 24 30 88 1c 07 2f 02 82 65 9b e0 10 29 ba 46 42 1a 78 1c b8 1f 3f 90 48 5b d4 12 43 20 1e 11 f9 73 5c 76 16 ae c3 5a 97 5f 41 d9 1f 64 8e de e4 f4 fd 82 98 7d 40 41 2d 00 07 69 97 bb 4f 3d ea 6d c0 95 70 eb 69 3f 74 40 df 00 1f f7 76 2e 77 62 42 5b 39 15 70 0c 2a 1a 03 1f 49 a4 00 04 41 1f 05 e5 9e 15 07 b6 d4 5b 53 66 b1 a6 88 0d 2c 35 dc 38 19 11 9f 7a ee b1 13 8c a3 97 62 2e 9b 4d d2 dc bd 1e 37 63 81 77 70 5e fb a3 Data Ascii: ^}M~u(EJJfmE2mNP@ U6e6z4+O;S91G6 8DL]6YA$0/e)FBx?H[C s\vZ_Ad}@A-iO=mpi?t@v.wbB[9p*IA[Sf,58zb.M7cwp^
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 7f 72 ca dc cc 0e 8b 83 b3 ac b9 7b da e0 29 5a 82 d8 19 67 da 9a dc 10 b5 2f 0b b0 83 ff d7 fb f8 80 40 20 10 08 13 7b 37 88 70 c9 c3 42 83 95 ed 0e c4 d5 69 ab 79 b3 91 bc 43 5b 71 84 12 37 4c 00 00 32 7e 3c 17 a2 35 33 d8 e3 18 96 21 e8 ac 6d 9d 07 b6 b5 47 01 bb 67 74 43 84 11 a9 8f 3f 2f 65 67 2b 0a fd 4d a7 df 3f 6d 6a 5d bc 65 cd 31 39 f3 5c 7a 71 0c a1 03 7f 8f d7 aa 01 7d 73 6d 6a 0e a4 12 3b 7d eb b8 e1 51 36 1b 4f e8 57 54 f7 6a 87 bb ab 76 e5 d8 6e b0 d3 d8 b3 a4 70 3d 69 b2 b8 dd 43 7c cb 6a f5 ba db 2c 4a dc be ce e1 c3 75 db 84 e4 e8 81 91 e0 52 f0 27 40 ea ef ee 28 40 2e 03 36 f2 8c bb 55 a4 f0 27 6c eb 00 64 18 93 c0 ae 6f d0 82 da 2d 9b 18 bd 5b 6c 52 da fa be 11 8e db 34 d3 b4 c6 2d 9a d7 43 5c 37 48 1b c0 e4 47 0d 3b f4 58 44 63 81 46 Data Ascii: r{)Zg/@ {7pBiyC[q7L2~<53!mGgtC?/eg+M?mj]e19\zq}smj;}Q6OWTjvnp=iC\|j,JuR'@(@.6U'ldo-[lR4-C\7HG;XDcF
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: fc 87 5b a1 67 78 30 8c 55 f8 b9 6d dd 1c 6e b3 e8 db 61 77 50 59 7b 55 cf 24 9c b2 97 1e 3d ab d9 4e a1 0a 32 a8 ba a7 6e c3 5e a5 d5 bb ce f6 fd 47 39 e5 d3 9c fa dc 4a 8a dd 95 9d 4d c0 c9 2f 04 66 26 46 7e 7c c2 0e 69 b5 37 f5 31 3a f6 9b 11 86 d5 6b 2f 31 fb 7a 97 18 d5 d9 2d dd c2 70 07 9d c2 f1 97 ac dc 51 c0 8c b2 e7 a2 82 e9 85 d8 d0 bb b9 b4 b4 a7 36 58 7b 43 8b 6c 0e a2 c9 d9 c0 e6 04 aa 8e c7 83 da 1a ae 38 85 6a 9b d4 aa 12 fb 67 ef 4f b5 24 99 95 e5 d6 9c 70 d1 6a 0b c3 59 ca b2 b4 40 83 ff d1 fb f8 80 40 20 10 08 04 02 0c 2e 30 ad 06 7a 2d 11 cf f6 bf a2 ed 86 db d2 ca db 4d 80 51 bd bb 60 68 66 20 d0 ea 55 c0 6f 0d e1 9c 70 cd 49 b7 b0 f2 6f 48 3f 43 7a d7 16 37 b5 ba 38 db 1b a6 e2 45 ad 0f c1 b6 82 6a da dc 98 82 6a 5c b1 bb fd b9 02 be Data Ascii: [gx0UmnawPY{U$=N2n^G9JM/f&F~\|i71:k/1z-pQ6X{Cl8jgO$pjY@@ .0z-MQ`hf UopIoH?Cz78Ejj\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49882	104.21.31.175	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	644	OUT	GET /nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1347	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:42 GMT Content-Type: image/jpeg Content-Length: 20636 Connection: close x-goog-generation: 1684173964427305 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 20636 x-goog-hash: crc32c=xGJ93Q== x-goog-hash: md5=G4tsP9NG1EkqZZbGBAiiDQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY2MRGU4RUzlhUxyfK1aeIcZOoDnz5s9RTJN9uMvuehxouzLtz1cZlpIJIxqgrz0MRkgPKQ Expires: Thu, 12 Dec 2024 21:35:54 GMT Cache-Control: public, max-age=14400 Age: 3305 Last-Modified: Mon, 15 May 2023 18:06:04 GMT ETag: "1b8b6c3fd346d4492a6596c60408a20d" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJN0AUKK7sBiUp42Xyldc0Fn9HW7ei5t8w%2B6NrcT%2BzAs6EhdPC6q5uegkwbzqFVfH5wL1RpiMYJ6J6VWKkEOe5ga1xunl01BKZZkPU2bUaEbeLae0mnn85e6pERIYivWIyNA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:43 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 38 63 63 33 31 34 33 64 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 31 35 26 6d 69 6e 5f 72 74 74 3d 31 37 31 31 26 72 74 74 5f 76 61 72 3d 36 35 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 32 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 37 32 33 39 34 26 63 77 6e 64 3d 31 37 33 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 63 38 30 63 38 65 33 32 34 34 Data Ascii: CF-RAY: 8f110188cc3143d0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1715&min_rtt=1711&rtt_var=650&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1222&delivery_rate=1672394&cwnd=173&unsent_bytes=0&cid=dc80c8e3244
2024-12-12 22:03:43 UTC	1115	IN	Data Raw: ff d8 ff db 00 84 00 0e 0a 0a 0a 0b 0a 0e 0b 0b 0e 15 0e 0c 0e 15 18 12 0e 0e 12 18 1c 17 17 17 17 17 1c 1b 15 18 17 17 18 15 1b 1b 20 21 23 21 20 1b 2b 2b 2e 2e 2b 2b 3e 3d 3d 3d 3e 40 40 40 40 40 40 40 40 40 40 01 0f 0e 0e 0f 11 0f 13 10 10 13 14 0f 11 0f 14 17 12 14 14 12 17 22 17 17 19 17 17 22 2c 1f 1b 1b 1b 1b 1f 2c 26 29 23 23 23 29 26 2f 2f 2c 2c 2f 2f 3b 3b 39 3b 3b 40 40 40 40 40 40 40 40 40 40 ff dd 00 04 00 18 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 7b 01 79 03 00 22 00 01 11 01 02 11 01 ff c4 00 8f 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 01 08 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 10 00 02 01 03 02 02 06 06 07 05 04 09 04 02 03 00 01 02 03 00 04 11 05 21 12 31 06 Data Ascii: !#! ++..++>===>@@@@@@@@@@"",,&)###)&//,,//;;9;;@@@@@@@@@@Adobed{y"!1
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 9b b9 b8 b2 b6 61 15 a6 9d 23 67 fe 20 98 c5 18 f4 96 f6 e2 c6 c5 9e db 85 58 8c 16 22 b3 7b 0b 9b 6b cd 66 26 d6 64 e2 b5 24 99 38 b2 07 87 2f 1a 09 72 ea 92 87 e0 3a 5c 18 07 19 12 e4 1a 7e 2b 9b 19 10 f5 96 6c 93 7d 85 8e 60 a2 86 75 36 b6 4d 46 74 b2 19 80 4b f5 45 7b 57 c2 a7 da 5b c8 cb d7 32 14 8b b5 c9 03 e1 9d e8 27 5e 45 2d d2 11 1e 9d 2b 00 32 1b ae 0d ff 00 4d 0f cd 6b 73 1e cf 19 07 b8 6e 68 8b 4f 79 d2 f6 34 8f 8d 6d cc 0f c6 1c 1c 95 e2 d8 8d bb e8 7a fe 77 4b bc 8c 8e 1c 63 bf 6a 08 4c 48 24 1d b1 ce ba 47 15 dd e8 c4 ed e2 73 f1 02 a3 83 bd 01 7d b4 36 b1 f4 65 e5 66 55 92 66 dc 1c 16 6d f0 02 f7 62 87 b5 04 02 38 5c 77 e0 d3 49 33 70 70 e7 61 c8 54 8b c0 4d 8c 4f d9 c5 40 fa a8 31 0a 97 a6 39 5b 94 3e 35 0e 16 cc 43 ca a4 59 ed 3a f9 d0 Data Ascii: a#g X"{kf&d$8/r:\~+l}`u6MFtKE{W[2'^E-+2MksnhOy4mzwKcjLH$Gs}6efUfmb8\wI3ppaTMO@19[>5CY:
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: d8 29 9f a4 6f 7f bd f9 0f d2 bb 5d 5a f1 79 95 6f 35 fd 28 08 b4 bd 23 55 92 35 4f 43 91 40 1b b3 00 07 e3 57 96 9d 1a d5 12 45 7e 14 db 73 eb 8a 0a 8f 5e c6 d2 c6 7c d4 fe b5 63 06 af 6e d1 48 d1 4c 55 95 09 2b b8 6d bb a8 35 8b 15 68 6d a3 8e 42 38 94 60 e0 d4 8e 34 fb c3 e3 59 e1 d1 2f 2e ac 95 fe 92 58 6e 64 8b ad 48 5d 8e 78 4e c3 7c 8a 14 b1 9b 51 8b 50 96 d2 ea 59 38 91 99 5d 19 89 dc 50 6d dd 62 7d e1 f1 a4 1d 4f 22 2b 29 e3 71 f6 8f c6 9c 8e 79 e3 60 c9 23 2b 0e d0 4d 06 a7 5e d0 26 9d d2 9b eb 66 0b 73 f5 f0 f6 e7 da 03 c0 d1 9d 9d ec 17 b0 2c f0 37 12 37 77 61 ee 34 12 29 52 a5 41 ff d2 d2 2a bb 55 bd ea 63 31 23 70 bb 0d db ee 83 f9 d5 84 8c 11 0b 1e 40 64 fb a8 72 58 24 bd 99 55 f3 c3 2e 64 76 ee 1c 94 7c 28 2a ec b4 83 aa dc 99 67 04 58 a1 Data Ascii: )o]Zyo5(#U5OC@WE~s^\|cnHLU+m5hmB8`4Y/.XndH]xN\|QPY8]Pmb}O"+)qy`#+M^&fs,77wa4)RAUc1#p@drX$U.dv\|(gX
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 07 b4 1b e4 28 33 7b 9d 5a 48 6e 27 55 df 38 f7 9c 73 f9 d3 56 9d 20 bf 8a 60 d1 db c6 fd 99 91 4e 31 51 2f 2f 6e 85 d4 8c 1c a8 60 36 1e 54 d2 dc ce c0 93 23 1c f3 df c2 80 b8 74 a6 26 8d 73 a5 30 9b ed 18 c9 51 ee 3b 1a 5f e9 36 a1 8e 18 6c 02 67 b5 e4 63 b7 bc d0 b2 c9 33 28 43 23 1c 0e 59 35 e0 3b fa c7 73 b6 fd c4 d0 1d 68 9a c5 cd e5 cc 50 5e a2 a3 97 3d 59 53 90 70 33 be e6 8a 9a 34 6e 7d b5 9b f4 49 11 75 68 18 38 f6 88 e1 f7 1a d2 e8 07 fa 47 7c da 74 10 a4 2a 0f 5d 20 4c 9e 43 6c d0 1e b9 71 70 d7 1d 64 ae 5d 8f 69 e4 3c 87 65 1a 74 d8 7f 65 b4 7f bb 3a fc c1 a0 9d 74 fd 60 a0 6e 29 89 41 91 4e 75 83 b8 54 58 4e 50 53 c0 50 38 24 1d c2 ba eb 3c 05 35 5e d0 3a 24 1f 74 57 bd 68 fb a3 e1 4c d7 b4 0e f5 83 b8 7c 2b 93 22 fd d1 f0 a6 c9 ae 77 a0 73 Data Ascii: (3{ZHn'U8sV `N1Q//n`6T#t&s0Q;_6lgc3(C#Y5;shP^=YSp34n}Iuh8G\|t*] LClqpd]i<ete:t`n)ANuTXNPSP8$<5^:$tWhL\|+"ws
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: d7 82 54 c0 2a 76 a7 d8 55 9f 48 ed 96 3e 92 cc ca aa 8e d0 23 4e a9 ec 89 1b da aa f2 b9 a0 e2 28 83 37 13 72 1d 9d f5 6d 0f a3 da 28 9a e0 e6 5e 69 18 fb 3e 27 c6 a1 ab 08 13 ad 23 24 6d 18 ef 3d fe ea 8c cc ce c5 98 e4 9e 64 d0 58 cb ad 4c 4e 22 50 a3 bc ef 51 ce a5 7c c7 f7 84 77 00 05 47 8e 27 95 82 a0 df b4 d4 80 63 84 f0 40 bd 64 dd af cc 0a 07 a2 b8 d5 0e fd 67 08 ef 70 b8 fc 2a 52 6a 52 26 d3 3c 4f 8e ec 83 f2 aa e6 82 e2 53 c5 23 fb b9 d7 2d 66 38 1b d7 ec 3d 94 16 29 a9 db 39 df 63 e0 41 15 25 1d 24 19 8d 83 0f 0a 17 6b 27 1e c9 07 c3 95 78 97 17 36 cf cc 82 3b 0d 01 ad 85 fc f6 52 f1 46 c4 2f 6a f6 51 0a 75 7a 92 75 b1 b2 89 71 eb 27 7d 01 d8 ea c9 3f a9 36 cf d8 6a f2 c2 f1 ed e5 52 a7 03 b3 c6 81 ed 57 4a eb 72 ea bc 33 af 2f e2 f0 34 17 ab Data Ascii: TvUH>#N(7rm(^i>'#$m=dXLN"PQ\|wG'c@dgpRjR&<OS#-f8=)9cA%$k'x6;RF/jQuzuq'}?6jRWJr3/4
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: ca 9f 57 ec b5 5d 69 5a 87 5c bd 4c 87 d6 1e c9 a8 11 ba dc 46 55 86 ff 00 68 7e 75 10 17 b6 9f 20 ee a7 e5 41 a5 e8 77 e6 36 e0 6d d5 b6 23 c6 a5 ea 16 e2 50 cd d5 95 49 01 ca 9e 7e 3f 1a 19 d2 ae f8 c4 72 83 bb 73 f3 1b d1 b1 c5 cd 80 91 06 5d 40 65 f3 03 6a 0c cb 53 b2 e2 49 ad 5b 76 4d e3 3e 23 71 f1 a1 22 08 24 1e 63 9d 68 da f4 01 26 49 d4 6c de a9 fc 56 81 f5 68 3a 9b c7 e1 d9 24 f5 d7 df ce 82 1c 53 49 09 25 0e cd b3 03 c8 8f 1a b8 d3 75 9b 99 67 8a da 42 02 7d 82 3b 08 dc 73 cd 52 57 51 39 8a 54 91 76 2a 41 a0 dd 3a 37 a8 4d a8 69 e2 49 f0 64 56 28 48 db 38 ab 8a 18 e8 44 9c 7a 7c a4 72 32 64 7b c0 a2 7a 0f ff d6 d1 a4 f6 4d 0b ea d2 0b bb f0 a7 d6 8a 01 85 5e c2 fd a7 dd ca 89 ae 5f ab b7 92 4f ba a4 fc 05 09 5a 02 e4 3b 7b 4c 4b 1f e6 de 82 c2 Data Ascii: W]iZ\LFUh~u Aw6m#PI~?rs]@ejSI[vM>#q"$ch&IlVh:$SI%ugB};sRWQ9Tv*A:7MiIdV(H8Dz\|r2d{zM^_OZ;{LK
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: c0 92 0f bc bf 83 2d 6b bd 22 b9 78 34 fb 77 8c 02 4e 06 e3 23 95 64 7a 62 2b 24 a0 8c 9e ad ce 33 8e 45 6b 61 d4 a0 37 3a 45 bf 00 24 80 ac 07 ba 80 73 4c bb 96 eb 4e d6 56 50 30 62 e2 c8 18 df 18 aa 3b 9f 5b 4b 88 ff 00 08 a2 bd 2a df 16 1a a0 2a 46 63 e1 c1 18 df 06 84 e4 19 d2 23 3e 14 14 48 dc 39 ab 5d 45 fa ee 89 5b b8 ff 00 e3 dc c8 8d fc e0 62 aa 00 e7 56 5a 77 15 d6 9f a8 69 98 c9 91 04 f0 8f e3 8b d6 23 de 28 2b 34 8b b3 69 7b 05 c0 38 ea a4 57 cf c8 fe 34 57 a8 74 95 ad a6 99 d9 12 e5 e5 91 94 49 26 72 a9 81 ea 8c 50 32 12 1b 07 df 44 96 d6 5f 4a 69 c7 a9 39 9d 46 1d 7f 8d 07 ab fd 42 82 7e a9 a8 db 45 a7 45 77 65 6f 11 33 11 1d c1 01 bd 5c 1e 35 ed 1b e4 55 7c 53 9b f3 78 af 85 37 ea 43 60 61 44 e9 eb 47 fd 55 de 9b 66 2e f4 ab cb 66 c8 99 7e Data Ascii: -k"x4wN#dzb+$3Eka7:E$sLNVP0b;[K**Fc#>H9]E[bVZwi#(+4i{8W4WtI&rP2D_Ji9FB~EEweo3\5U\|Sx7C`aDGUf.f~
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 73 33 4a 86 38 c3 73 45 07 00 f6 9a 0b 5f a7 61 b5 51 8e 09 5b b9 1f 23 f0 a6 2f fa 49 79 75 09 8a 22 61 8d 87 ac 06 c4 8f 13 dd 54 cb 66 ee e1 55 f2 4f 20 a3 3f 8d 3a f6 c9 13 70 f1 99 58 7b 4d d9 9e e1 41 02 e2 67 48 dd 54 ef da 47 66 6a 14 67 eb 54 8f bb 8f 95 4b bd 5c 34 98 e5 8c fc 6a 02 fb 4b 41 2b 48 6e 1b e4 ff 00 0b 8f f2 9a 27 8e 6b 1f a1 e1 40 33 7c 92 b6 47 7c 6d de 7e 14 31 a4 a1 7d 42 34 1c cf 17 e0 6a fa 0b 57 56 6c 8c 00 30 33 b7 88 a0 19 c6 2e 48 ee 7c 7c e8 af 42 6e 2b 59 63 ed 8e 4c e3 c0 8a 19 99 42 ea 2e bd 82 52 3f cd 57 da 2b f5 7a 84 d0 1e 52 71 28 f3 07 88 50 5b b0 aa cb a4 c4 b3 a7 de 0b 2a fe 06 ad 99 4e f5 06 fd 38 44 73 81 ec 1e 17 ff 00 0b 6d 41 56 6a 65 9b f1 23 46 79 af ac bf 9d 45 75 e0 62 bc c0 e4 7b c5 7b 1b 98 dc 38 e6 Data Ascii: s3J8sE_aQ[#/Iyu"aTfUO ?:pX{MAgHTGfjgTK\4jKA+Hn'k@3\|G\|m~1}B4jWVl03.H\|\|Bn+YcLB.R?W+zRq(P[*N8DsmAVje#FyEub{{8
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: b3 b4 c3 1e 20 d5 9c f3 40 dc 38 63 0b 73 38 dd 4d 71 89 cf b3 2c 6e 3c 76 a0 8b 0e 95 14 44 16 6e 26 ef c6 d5 2f ea 6d d7 27 6c fb c9 ae 4a 5c 91 83 2a 27 91 14 ed be 96 66 6e 26 25 c7 6b 1d 97 e7 41 13 eb af 1f 0a 30 83 e0 3c ea f6 c2 c9 6d d0 33 0d f9 a8 3c f3 f7 8d 3b 6f 6b 14 00 60 02 c3 b7 18 03 c8 54 b8 20 9a e2 51 1c 2b c6 e7 97 70 f1 34 12 f4 ab 23 79 74 a8 47 d5 46 78 e6 3f 82 d3 da cd e4 2b 2b f5 58 58 a2 05 41 1d a7 ed b7 e4 3d f4 f4 b2 0d 2e 13 67 13 86 91 86 64 70 7b 4f 3d e8 5a fe ef ae 90 a2 6c 80 ef 8e 5b 72 1e 42 82 25 d5 c6 16 49 db da 3e c8 f1 3c aa 84 ee 49 3c ce e6 a6 5e cd d6 3f 02 fb 0b f3 35 13 14 0a 24 c9 63 da aa cc 01 ef 02 8f 21 b4 e8 f5 81 b1 b2 ba 56 9a 6b 98 c3 4f 36 5b 2a cc 03 2f 08 1b 76 d0 22 37 56 fc 58 c8 c1 0c 3b c1 Data Ascii: @8cs8Mq,n<vDn&/m'lJ\'fn&%kA0<m3<;ok`T Q+p4#ytGFx?++XXA=.gdp{O=Zl[rB%I><I<^?5$c!VkO6[/v"7VX;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49884	104.21.3.108	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	663	OUT	GET /i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1110	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6E%2F0NVp2zDgPNq2IdFRCNZUYB0B%2Bg2f62%2Fma%2FA85VptI%2BEaLJMNsl1nZb8Cj4MkEw0s3uOuFiszAtNIqSX642B1jaR41eRRh%2FwsHOLy65zXmKXNpQFLjjtzTGSDgwytCQKQCKVwCzn7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110189999aef9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1869&min_rtt=1869&rtt_var=702&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1241&delivery_rate=1558164&cwnd=106&unsent_bytes=0&cid=dbef64e159148e61&ts=1111&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49885	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	421	OUT	GET /i/a78835b2-4bd3-4bec-9da9-a5999639500b/e604d595-84f4-4e84-8639-9b5fafe343cb HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1106	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GvK%2Bg%2FWVnHPhFvxSoQdJh7UW%2BRlQvPUOBcUcVvC9ooQn0brq2TJbHouwYvgq58CU9S4f%2BDdHpfLyI21kwLetswGQlN%2BuQBtVVnkGiKEYI2ebvR9o2Gofh68Ziqv43Fe2Lth6bd1JE3x0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f110189ab3378e1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1963&min_rtt=1953&rtt_var=740&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=999&delivery_rate=1495135&cwnd=203&unsent_bytes=0&cid=03ce4c3d6b564539&ts=730&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49886	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:42 UTC	1992	OUT	GET /fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:43 UTC	1193	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: image/png Content-Length: 1260 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4694 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OPmFHGTFg11JsQEXl%2Fhg6ddazzdX2T454LKa85QdIH5hqXnXw24XdT0j8iOuJ5ZHcDMx5X8wLeJgaYxHWKfy3bEhdj5M4CnMF7k%2Fkt9SOXovhwGtJFxP4FVRDJdgkkPtvkA07YI3Cvxn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11018a2f81ef9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1961&min_rtt=1949&rtt_var=755&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2592&delivery_rate=1425781&cwnd=207&unsent_bytes=0&cid=3b58e246e5d78ef2&ts=455&x=0"
2024-12-12 22:03:43 UTC	176	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b 2e 27 27 27 2e 2b Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+.'''.+
2024-12-12 22:03:43 UTC	1084	IN	Data Raw: 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8b 00 00 03 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 05 06 04 03 01 02 07 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 10 00 02 01 03 02 03 03 08 08 05 05 00 00 00 00 00 01 02 03 00 11 04 31 05 21 12 32 41 51 13 71 81 22 42 52 33 14 06 f0 61 91 b1 d1 62 23 15 a1 c1 72 54 35 92 43 53 83 34 11 00 02 02 02 01 02 07 00 00 00 00 00 00 00 00 00 00 01 11 02 21 41 31 61 12 51 71 c1 72 03 33 43 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 65 f2 ce 42 41 93 9b 3c cf 64 97 d2 5b 0b 2b 12 c4 d6 b3 f3 3b 34 97 f0 39 70 db 82 cb d4 df 51 2b dd 52 39 b9 13 4f 97 8b 81 86 6c d2 2f 88 c5 bb 65 70 dc 58 f9 0d ab 5e 3c 86 59 Data Ascii: 550055@@?@@@@@@@@@@@@22"1!2AQq"BR3ab#rT5CS4!A1aQqr3C?eBA<d[+;49pQ+R9Ol/epX^<Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49887	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:43 UTC	421	OUT	GET /i/fe7b1b16-c348-4c5c-89b9-9ed131788a40/c13b9ca3-623d-49d2-b0df-70f88c62e40d HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1116	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uqgXyUQVoLz22m7fSZFfHa%2BuMZHP%2FXb9kXNqzkCNPjI%2FcLZmf2RwWmtjK%2FzTHIemBaYh%2BkbM0GeKr8mx1IAh5x1PSW2xjdx%2BjPwZ5%2FGCpAIBpkhJ1b%2F%2FILqrkA0mFbZ25M%2F06s7aX54P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11018bac1343ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2472&min_rtt=2460&rtt_var=948&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=999&delivery_rate=1139734&cwnd=223&unsent_bytes=0&cid=f4717d6c799d062b&ts=804&x=0"
2024-12-12 22:03:43 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49888	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:43 UTC	1992	OUT	GET /fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:43 UTC	1200	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: image/png Content-Length: 945 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4694 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=InN3H1F8wqj%2BkuTP5d8uJJuGdlgqNWZe1xEYF0ZrOb8JUVUSJbfzKKFSnSq7cSe5ni8ckRHPeYV9eOZChQrV%2Fvd%2B%2FBidYTMgORMg5uAecy%2FOrHAYRWaclrVQTvpMKsl%2Fy53OdKUE121O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11018cad634378-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1703&min_rtt=1661&rtt_var=653&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2592&delivery_rate=1757977&cwnd=235&unsent_bytes=0&cid=e2612557e87ee4c5&ts=456&x=0"
2024-12-12 22:03:43 UTC	169	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0
2024-12-12 22:03:43 UTC	776	IN	Data Raw: 2b 2e 27 27 27 2e 2b 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 83 00 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 02 04 01 05 10 00 01 03 03 02 02 06 07 09 01 00 00 00 00 00 00 01 00 02 03 11 21 04 31 12 41 05 51 71 91 32 13 33 61 a1 c1 d1 22 42 14 81 52 62 72 b2 23 43 53 34 15 11 00 02 02 01 03 05 01 00 00 00 00 00 00 00 00 00 00 01 11 02 12 31 41 03 21 71 22 33 04 61 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 65 a2 38 db e2 ca 68 da d1 ad 17 73 88 5b 37 9e 49 0c 3e 14 2c 6b 5b c0 ba ee a9 55 f0 59 2c 74 79 e3 62 38 2a 1c 7c 5c 02 f6 64 4a c7 e4 ba 84 1f 91 ac 22 d7 3c 4a f3 f8 a2 1b aa 9b Data Ascii: +.'''.+550055@@?@@@@@@@@@@@@22"!1AQq23a"BRbr#CS41A!q"3a?e8hs[7I>,k[UY,tyb8*\|\dJ"<J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49889	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:43 UTC	402	OUT	GET /nas-prod/c_fe7b1b16-c348-4c5c-89b9-9ed131788a40_1684174071.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1353	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: image/jpeg Content-Length: 169729 Connection: close x-goog-generation: 1684174072373379 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 169729 x-goog-hash: crc32c=LyrGOg== x-goog-hash: md5=/qgRLXg6hx3egO7zkt7Jww== x-goog-storage-class: STANDARD X-GUploader-UploadID: ABPtcPoxdFiSbUC0cCw7njqqbLKudkvgq--ch_Wj5ljUGZ4b2grQzw39ZPEeaNqVt5O5zeIdFzE Expires: Thu, 12 Dec 2024 21:38:08 GMT Cache-Control: public, max-age=14400 Age: 3373 Last-Modified: Mon, 15 May 2023 18:07:52 GMT ETag: "fea8112d783a871dde80eef392dec9c3" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b7rWNoaJuCjfN9svSAH%2FRjmXC6Yo0jSixHc1B7OKq3G7ejoedBnT6o6sAE%2BK3zESo9XvVXKLMs0HzITq2FfYNnUAVHqDqGYVu7fRqePWmQPSAQmGxbxNIvMOrhv9dNOFsv%2F%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:43 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 63 62 61 36 35 63 33 34 61 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 37 37 26 6d 69 6e 5f 72 74 74 3d 31 35 37 34 26 72 74 74 5f 76 61 72 3d 35 39 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 32 30 34 34 38 26 63 77 6e 64 3d 31 35 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 63 61 61 31 37 39 39 39 30 61 34 61 Data Ascii: CF-RAY: 8f11018cba65c34a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1577&min_rtt=1574&rtt_var=597&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=980&delivery_rate=1820448&cwnd=155&unsent_bytes=0&cid=caa179990a4a
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 06 00 00 00 db 70 06 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 Data Ascii: PNGIHDR phtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:2
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 30 02 32 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c c3 08 c8 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 0c 23 20 c3 30 0c c3 30 0c c3 30 8c 80 0c c3 30 Data Ascii: 00000# 0000000002000200000# 000# 000000000200000000# 000# 0000002000200000000# 000# 0000
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 7f fe f3 07 ef bc f3 ce ed ba b6 f7 de 7b ef c1 9b 6f be 79 bb ee a9 a7 9e 7a f0 ca 2b af 3c 78 f9 e5 97 6f 75 bf f5 d6 5b 0f de 7d f7 dd 07 4f 3e f9 e4 83 e7 9f 7f fe 56 be 76 bb b6 fd 13 4f 3c 71 ab ef c7 3f fe f1 ad 9e 8f 7c e4 23 b7 ad eb 2b d7 f9 d0 f5 7d af 8e ea 0e 3f fd e9 4f 1f fc ec 67 3f bb b5 53 bd cf 3d f7 dc ad 3f d5 5b 5d ed a1 7a ea 5b c7 2a 53 9b b5 f1 e2 8b 2f de 8e 57 77 e3 ad 8e ea ef b8 b1 d5 76 5b a8 fd ae e9 da eb b1 da af 8e c6 db dc 54 77 f3 da b5 f5 4f fd f5 a3 6b 6b d3 bc 5d e7 a7 eb bb a6 63 d5 5f 19 a8 4c e7 2b 5f 59 e3 a8 fe 8e 7f e8 43 1f ba d5 71 45 e7 aa a3 71 d7 46 75 98 d3 ea 68 d3 46 c7 cd 93 ed 57 3d 33 5d 5f bd b6 ca a8 bb bd eb aa bb 71 5c af 69 eb bb 73 5d f7 ec b3 cf de e6 aa f9 0e e6 d6 7c 5d eb ac ec 05 b7 81 9c Data Ascii: {oyz+<xou[}O>VvO<q?\|#+}?Og?S=?[]z[*S/Wwv[TwOkk]c_L+_YCqEqFuhFW=3]_q\is]\|]
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 32 12 39 b9 6c 91 8f 88 c9 8d 9c 74 fe 54 ff ce fd fb 5b 1d 43 44 22 36 e7 7c 04 e7 9d d3 c7 77 ce d8 6e 64 e6 f4 f5 bd 08 d1 9d 98 bc 87 a4 d4 a7 fb f6 48 a3 d2 24 d2 98 3c fe 8c fd 17 9e b9 61 18 86 11 90 61 18 86 df 54 b0 f9 27 0f 3e f8 40 4b f1 f4 83 7f d4 56 bc 70 df 9e bf 13 83 f6 2f 1c 81 f5 85 b7 df 7e 3b 63 fc 17 8e 10 fc 62 db f9 fc d2 11 54 23 1b 34 1b cf 9f eb 9e af 4c 9f 23 26 d5 7b 8e b5 21 19 b4 25 4f df fd 34 9e bc 13 9c 1b b9 38 32 74 be 1d 37 ed ca 11 ea 9f 38 db 8d 40 44 2a ee fd a5 b9 b8 69 32 ce f5 4f 64 7b 9e 1d 7f 7b 76 ec d9 82 f3 b7 89 87 b0 67 cf 0e be cf d9 98 47 3e f8 04 b1 c7 0f 95 b9 fa ea 54 ef 5f fe e5 5f 3e f8 c3 3f fc c3 1b 09 a9 be 7c 0a be fa d5 af de da ca ae fd ea 87 70 f5 a9 a8 de fc 28 fe e6 6f fe e6 41 24 a6 36 b2 Data Ascii: 29ltT[CD"6\|wndH$<aaT'>@KVp/~;cbT#4L#&{!%O482t78@D*i2Od{{vgG>T__>?\|p(oA$6
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: e6 51 1c ef 5f 15 c1 cb 73 31 0c c3 30 02 32 0c c3 f0 5f 21 1d ff f9 a1 27 32 6b 8a 20 a4 a5 88 34 dc 34 15 91 89 f3 f9 95 23 6c 7d 28 72 71 8e bd 72 b6 0f 47 3e 8e c0 d7 f6 f2 11 2c 6f 5a 90 fc 38 ce b5 2f 9c 63 cf d1 6e d0 6a dc 4d b3 22 1a f2 65 3c ca 21 73 15 e8 ae be 0d 09 bd 09 b7 09 e0 09 ef 09 d9 69 09 3e f5 a9 4f dd 04 5c 21 5c 85 71 4d 58 ee ba ca b5 4f 38 4e d8 97 57 a2 ba 13 dc 2b 7b cd 03 d0 0a 7e 5a 00 44 27 e1 5d 4e 1b 79 61 22 06 fc 3a 12 f0 d3 3e 74 6d a6 59 95 8f 44 44 3a 22 2f f2 d4 b4 4f 58 4f 63 81 dc 24 e0 47 02 aa 2b 02 52 fb 11 84 fa 9e c0 de f8 ba be 3e 98 13 ed 5e 73 ac 44 68 12 de ab 97 99 56 04 44 ae 9e c6 58 df bb e6 8f ff f8 8f 6f 66 56 21 cd 09 b3 b1 ea a4 51 a9 de c6 ab cf f5 a5 fe fd d1 1f fd d1 cd 2f a5 39 ed 5c e4 a5 31 Data Ascii: Q_s102_!'2k 44#l}(rqrG>,oZ8/cnjM"e<!si>O\!\qMXO8NW+{~ZD']Nya":>tmYDD:"/OXOc$G+R>^sDhVDXofV!Q/9\1
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: d7 4c e3 3c 3f 8d bd be 45 02 ab bb ad 71 d4 b7 9e 8f ee 43 d7 44 fe ee 24 e2 36 86 ea ac 1f cd 69 65 6a ab e3 cd 5f e7 ea 1b 92 47 2b 76 08 e8 13 67 0e 6e c1 0d 22 e4 a7 4c 39 54 1e 42 21 87 cf f6 8b bb c6 a4 5c 26 fc 43 de 4a 73 72 b6 34 21 3f 3b e7 7e 72 9e 85 37 4e 7b 3f e9 f3 a9 e7 1f da 9f 73 37 8d 49 26 5d 77 47 f9 b4 29 6f 5e 9c e9 df b9 e7 38 79 78 27 26 bf 92 8d 2c 1a d7 30 0c 23 20 c3 30 fc b3 83 15 ee bb a0 f2 c4 9d 64 dc f2 67 1c a1 eb a6 dd 38 e7 32 a3 6a 1f a9 88 64 44 38 3e 76 04 a1 8f 1c a1 28 53 2b be 1c f9 79 bc 70 8e 97 63 e3 b9 92 01 26 a0 26 1c f2 a1 88 38 24 7c 33 f1 49 c8 4e e8 ec 1c 33 a0 84 be 8e f3 9d 48 f8 25 1c 13 1c 39 8f 57 1f 41 39 ed 44 65 ad 9c 27 f0 26 ec 26 50 56 ae 36 39 93 d7 87 ea 48 40 ad 2c 92 d0 3c 24 a0 27 00 57 Data Ascii: L<?EqCD$6iej_G+vgn"L9TB!\&CJsr4!?;~r7N{?s7I&]wG)o^8yx'&,0# 0dg82jdD8>v(S+ypc&&8$\|3IN3H%9WA9De'&&PV69H@,<$'W
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: a8 31 95 09 09 9a c2 9e 22 1d 84 da f6 56 9f ab e3 6e 9e 72 13 cc 38 66 27 84 75 be 8d bf 85 24 76 22 1e 21 10 95 15 75 89 59 4c 75 11 0c 13 00 eb e7 d5 fc 8a 59 53 65 eb 93 90 b2 d5 c1 77 22 e2 93 76 a2 f2 8d 57 5e 0d 04 cb ea 7f 42 ab 84 7c 84 d4 fa 45 f3 c3 01 fb cb 5f fe f2 4d 90 15 32 58 02 c1 84 d6 f6 84 ef fa d5 9c 56 2e 01 99 4f 42 e7 e4 dd 68 3e 3a 2f 32 95 d0 c2 08 9f 9c 1c 5d 17 ea 63 fd 16 be b7 6b 12 f0 d3 1c d4 56 c7 9a 83 2b 81 6c be fb fc a5 2f 7d e9 d6 6f 66 65 f2 8d 54 3e 21 bf 36 3a 97 56 8a 5f 45 70 cf ae e6 54 f5 0b e1 e1 7f d2 5c 37 b6 ee 0b b3 39 e4 a2 7b d0 bd eb fa c6 ca 84 ac 76 82 88 58 b5 ef f9 eb 3c ad 85 a8 62 88 69 73 7c 35 4f 43 f2 22 49 4c a7 38 f7 0b af 5c 7d 5f fd ea 57 1f 11 5f fe 48 cd 41 f7 37 02 23 6f 89 ec f4 08 65 Data Ascii: 1"Vnr8f'u$v"!uYLuYSew"vW^B\|E_M2XV.OBh>:/2]ckV+l/}ofeT>!6:V_EpT\79{vX<bis\|5OC"IL8\}_W_HA7#oe
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 44 d6 90 c0 da b8 3a 9e 0b 4b dc 3c 06 66 4d 1c c1 dd c7 8e f7 4c d4 ae c8 51 da 69 6c cc b3 08 f7 f5 5f 4e 17 a1 96 99 3e 21 2c 3d 37 1d a7 19 e3 58 7e cd 1a 2f 39 23 53 2e 4e fd a1 b1 86 e6 ae ed 9a 84 b1 b6 6a 43 70 01 cf 72 ed 37 86 ee 93 d0 d0 c8 5f f7 9a 6f 4d 73 c4 9c 31 f0 fb a8 6f 1c db 23 49 f5 39 62 c4 cc 0c c1 e9 19 8a c0 54 46 c8 e3 7b 34 b2 9c dd 33 99 7c fa 3e df 1f ba 6b 51 1e 96 b3 e4 9e 8d 3d 72 11 43 cc 7f 24 5f 11 e6 5a 3f 3c df ff f6 6c 3f ec fb a9 fb 47 77 3f 92 88 cb cf ef 79 49 62 c5 ef ef 1f 79 18 46 40 86 61 f8 97 85 1c 57 5f ba 47 a5 fa f8 11 0e 3e 76 04 96 d7 8e 30 f5 fa f9 fc d9 c8 c7 11 14 d3 74 14 26 b7 c8 56 2f 9c 2d a7 f3 88 ca b3 4c ab 98 9d 58 c9 25 5c 26 80 25 3c 7d e7 3b df b9 09 38 5d 97 20 97 f0 23 33 78 02 52 82 58 Data Ascii: D:K<fMLQil_N>!,=7X~/9#S.NjCpr7_oMs1o#I9bTF{43\|>kQ=rC$_Z?<l?Gw?yIbyF@aW_G>v0t&V/-LX%\&%<};8] #3xRX
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 57 3b b5 41 c3 42 8b 22 27 8e 73 b5 d9 31 7e 29 d7 e7 42 90 04 89 23 99 e0 09 af dc 26 38 84 85 86 2b 61 bd 13 87 a7 0b 5a 71 f6 69 48 f2 9c ff f4 b9 fe ad 7b 46 f6 c8 46 37 2f f2 51 64 ad bf 3e fb a2 24 fc 55 04 e5 7e ac f3 69 47 de da df f7 30 8c 80 0c c3 f0 6b a0 f5 08 45 b8 39 02 46 9a 8b 97 98 50 45 32 22 1b e7 74 e4 e3 0b e7 d8 e7 ce f7 34 1e b7 90 b9 69 3a ce b5 e5 e5 78 a2 55 d5 36 be 08 4c 3d 08 71 56 78 13 a4 38 c8 26 9c c9 e7 40 b3 c1 21 9c f9 91 15 7e ab bf d7 ec dd 56 c6 45 eb 91 15 9c e9 94 8c e7 da 4c c8 4b 40 ea 58 75 4b fa c7 67 44 4e 09 d9 a8 d9 bd 27 b4 25 94 95 78 ae cf 9d 6b b3 62 cd 86 9e c9 17 e1 56 df 6b 37 c1 b1 b2 f5 5b f2 bc fa 8a a4 71 a8 46 a6 12 de ea 87 15 fc ea e0 97 52 fd cc ca 3a d6 35 cd 37 61 d3 ea 77 7d 6b bc ec fb db Data Ascii: W;AB"'s1~)B#&8+aZqiH{FF7/Qd>$U~iG0kE9FPE2"t4i:xU6L=qVx8&@!~VELK@XuKgDN'%xkbVk7[qFR:57aw}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49890	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:43 UTC	1992	OUT	GET /fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:43 UTC	1194	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: image/png Content-Length: 1013 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4694 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TULMABSSPlCkSBsbMujH1st5qea3vp5Zdn6jFmyOL4Q1oNFHVLJYqe8J8z4Xwuso6UOjCukBiNSdTx1Ejn3a3C5b1dMV52XhFV%2Bn2ETRw8bQO9lESzQJViaZ9OBq8ELwsHLNTzpspxQP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11018ebae543bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=40666&min_rtt=2069&rtt_var=23746&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2592&delivery_rate=1411309&cwnd=228&unsent_bytes=0&cid=7cb688690b82c6a8&ts=462&x=0"
2024-12-12 22:03:43 UTC	175	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b 2e 27 27 27 2e Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+.'''.
2024-12-12 22:03:43 UTC	838	IN	Data Raw: 2b 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8d 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 05 03 00 01 10 00 01 03 01 04 06 06 07 09 00 00 00 00 00 00 00 01 00 02 03 11 21 31 12 04 41 51 61 22 32 05 71 d1 52 13 33 06 b1 42 62 82 14 34 15 81 91 c1 e1 72 53 93 44 54 11 00 02 01 01 06 05 05 00 00 00 00 00 00 00 00 00 00 01 02 11 21 31 51 61 12 03 41 71 32 72 13 22 52 23 33 04 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 61 d9 82 65 00 58 da db 5b 56 89 ae 11 e5 63 de ab 9c 2b a9 65 e3 0e 93 32 d6 0f 59 c0 15 6f 3e 5f 0b 43 5a 4b 5c db c5 6d bf 42 91 36 e9 42 bc a2 9b 5c 09 ad cc c4 e3 84 Data Ascii: +550055@@?@@@@@@@@@@@@22"!1AQa"2qR3Bb4rSDT!1QaAq2r"R#3?aeX[Vc+e2Yo>_CZK\mB6B\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49891	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:43 UTC	402	OUT	GET /nas-prod/c_22cb510a-0d9d-4d11-a06b-1f40abd2a729_1684171780.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:43 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:43 GMT Content-Type: image/jpeg Content-Length: 310725 Connection: close x-goog-generation: 1684171782141629 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 310725 x-goog-hash: crc32c=hskkhA== x-goog-hash: md5=Lwb79ox3VDxpNJLMPDsbtg== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC5Pz7E-v8nZqyDD65RwbGpVYe5YQC5T_3wmrCeAUwng_HKMJJCghwDYUays5b8zfEvLU5gfsyf8DQ Expires: Thu, 12 Dec 2024 21:44:07 GMT Cache-Control: public, max-age=14400 Age: 2969 Last-Modified: Mon, 15 May 2023 17:29:42 GMT ETag: "2f06fbf68c77543c693492cc3c3b1bb6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdEPwWD5JUfGjY3PQQAAbiPGdtXhG7o4sfPyMPEkR62zHkC7QSwu7YPiip2Z%2BMwcxOxJymUftDwztRm8uMkultSkFOz6S0VKy9W54eXQKgJMfIIIoZkebgiZtCaWlOs%2FRPaF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:43 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 38 65 63 38 30 65 34 33 65 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 33 39 34 26 6d 69 6e 5f 72 74 74 3d 31 38 33 33 26 72 74 74 5f 76 61 72 3d 34 37 35 34 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 39 33 30 31 36 26 63 77 6e 64 3d 32 32 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 36 34 34 66 38 32 65 37 31 61 Data Ascii: CF-RAY: 8f11018ec80e43ec-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8394&min_rtt=1833&rtt_var=4754&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=980&delivery_rate=1593016&cwnd=229&unsent_bytes=0&cid=d644f82e71a
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 06 00 00 00 db 70 06 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 Data Ascii: PNGIHDR phtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: e7 f6 f6 76 78 3c 1e f9 da d6 d6 86 a4 a4 24 d4 d4 d4 60 c9 92 25 70 bb dd c8 c8 c8 80 aa aa c8 cb cb 93 9f ab aa aa e4 77 e9 e9 e9 c8 cf cf 97 ed 7c f5 d5 57 f0 fb fd 38 ec b0 c3 e4 fe 3b 76 ec 40 45 45 05 32 33 33 91 9a 9a 8a d6 d6 56 78 bd 5e f9 5a 57 5b 87 e2 c2 42 d4 8a df c6 e7 f3 21 3b 3b 5b f6 a3 a5 a5 45 6e 4b af 1d 1d 1d f2 b7 4b 4c 4c 94 ed c6 8b e3 7a c5 b6 3e 9f 17 59 59 59 72 3f 5a 4f db d1 2b f5 9d fa a2 eb 3a 1a 1a 1a e4 39 d2 be 3e f1 5d ab 68 cf 61 b3 a3 b9 b9 19 69 69 69 f2 5c 4b 4b 4b e1 74 3a e5 be 71 71 71 48 48 48 90 fb 56 88 73 8b 77 c7 43 11 fb db 1d 0e b9 8e ce bd b6 b6 56 6e 6f b7 db e5 18 04 c6 ac b8 b8 58 9e eb f6 ed db 31 2c 37 57 f6 a7 b5 a5 15 c9 62 0c 1c 62 7b ea 07 8d c1 ca 95 2b e5 39 d2 98 ad 5f bf 3e 38 76 c3 87 0f c7 Data Ascii: vx<$`%pw\|W8;v@EE233Vx^ZW[B!;;[EnKKLLz>YYYr?ZO+:9>]haiii\KKKt:qqqHHHVswCVnoX1,7Wbb{+9_>8v
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 64 bf 6c 96 a0 51 4d c9 a0 06 b6 31 fb 15 2a ba 54 45 09 db 0e a1 22 a7 cb eb 20 84 67 1b 7a b8 a0 30 42 d6 e9 9a b5 5a 87 4e 5f 50 d1 58 7a a7 19 72 7b e9 15 a3 cf ba 2e b7 33 34 0d 8e f8 78 d4 ee 28 c5 b6 ea 2a 38 ed 31 cc 6c 8e 42 67 01 c2 30 0c c3 0c 45 11 a2 c2 89 56 68 86 07 5f d4 1c 85 c3 d3 3e c6 f0 84 5a 34 72 4c 08 d3 3f 12 24 c6 85 a8 c8 e9 34 8e 38 17 ec ce 38 d3 a8 8e 21 24 4c e3 3c fa 67 d3 f0 36 c5 0b 2c 43 3d e0 f1 e8 3a 1b c9 34 6e 69 f6 8e a2 1a d2 c0 95 97 bc ae 58 be 03 43 de 03 f4 14 5d 11 db 99 82 41 37 fb 25 d6 e9 52 30 58 c7 d7 d4 4e e1 60 09 10 3a 27 7a 35 0f 1f 2a 50 02 b1 30 96 00 91 db 2b e6 71 02 9f 55 a5 73 7b 84 08 10 5b b8 48 91 af 06 c2 3f 07 85 86 22 c5 95 f9 51 b1 bc 26 21 9f 07 fc 8f 8d 11 32 d5 cc 08 11 1c e6 6b e0 b3 Data Ascii: dlQM1TE" gz0BZN_PXzr{.34x(81lBg0EVh_>Z4rL?$488!$L<g6,C=:4niXC]A7%R0XN`:'z5*P0+qUs{[H?"Q&!2k
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 01 c2 02 84 61 18 86 d9 b3 44 08 65 c7 52 da a0 eb c9 58 8b d3 30 d9 fe 2e 5c de 0d f0 d9 d2 58 84 30 3f f4 a2 8a 61 23 b2 a1 c8 fc 30 54 04 bc 67 d1 e3 8b 58 80 30 0c c3 30 cc 1e 67 2f aa e2 1f b0 16 e8 48 46 75 e6 65 c8 ad 7f 1c ce d6 35 f0 db 32 58 84 30 bb 7e 3d c5 0c 42 57 bb 9a 8f 6c 3c 32 dd 5e 4c 56 86 30 99 7a d9 16 75 13 be 82 58 80 30 0c c3 30 7b 2c 0a 6c 5a 13 6c 8e 42 94 78 ce 45 5a db 63 48 31 b6 c3 a7 b2 27 84 d9 65 45 cb 86 62 4f 77 9b 12 9a b9 8b d9 cd 3f 5d 2c 40 78 08 18 86 61 98 3d f7 1f 72 15 aa 10 21 3e 4d 15 22 e4 37 70 e9 af c3 e1 dd 02 5d 71 f1 d8 30 bb 64 5c 77 15 25 56 41 3e 55 e9 2a 50 fa d1 80 b4 d9 cc a7 e6 9a a6 41 d7 f5 e0 3a aa 1e 4e 9f fd 3e 3f 6c 76 bb fc ec f7 6b 62 3b bf 8c 41 50 45 5f 69 3b 9f df 2f 85 82 c3 e1 80 a6 Data Ascii: aDeRX0.\X0?a#0TgX00g/HFue52X0~=BWl<2^LV0zuX00{,lZlBxEZcH1'eEbOw?],@xa=r!>M"7p]q0d\w%VA>U*PA:N>?lvkb;APE_i;/
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 7f e5 ef a5 87 27 39 25 09 7f 9c 3d 1b 07 89 71 79 ea 99 a7 e5 f7 4f 3d f1 24 4a 4b 4a 31 5e 88 39 c3 9a da d6 6f d7 52 a0 82 bd aa c4 7c 60 c2 02 84 61 18 86 61 f6 0a 14 28 86 0f f0 d6 c0 56 f4 3b d8 9c 1e f8 b6 bf 24 d6 db ac 7a 0e 0c 13 cb 66 8c 91 05 4b 19 98 92 71 66 3c 86 19 e3 51 5d 5d 83 ac ac 2c 54 54 54 a2 b6 b6 46 da b2 e4 99 20 1a 1b 1b 65 9f 5a 5a 5b e4 e7 aa aa 2a 39 d5 ea a1 87 1e c0 98 31 63 a4 57 e3 09 61 68 d3 76 bf fd cd 6f a4 d7 e2 f9 17 9e c3 a8 11 a3 a5 e7 83 a8 ab ab 43 65 65 95 8c cf a8 ac ac 0c f6 81 e2 23 64 bc 85 80 a6 43 5d 71 c5 15 41 f1 f1 f2 cb 2f 63 c9 e2 25 38 56 88 1a 12 21 37 ff e5 66 94 96 96 4a 21 53 23 fa 98 99 91 29 3d 10 e4 fd 20 31 d2 d4 d4 24 f7 a3 75 36 9b 5d f6 f3 b0 c3 0f 0f 8a 0f e2 8c 33 ce c4 bf fe f9 80 f4 Data Ascii: '9%=qyO=$JKJ1^9oR\|`aa(V;$zfKqf<Q]],TTTF eZZ[*91cWahvoCee#dC]qA/c%8V!7fJ!S#)= 1$u6]3
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 58 8a a7 01 7c fe 61 06 a0 c7 ba ae 86 fa fd 30 00 b0 07 84 61 18 86 d9 8b 11 22 c4 de 8c f2 d6 02 7c dc 74 20 66 16 2f 43 bc cd 87 0e 3d 8e 9f 41 32 9d 62 55 89 9e 05 8b 8a fd c5 2c e5 d0 5f 57 ac 95 30 21 31 31 49 7a 0d e8 01 3f c5 34 98 df a9 66 dd 0b ab 58 21 79 3b 1e 7c e0 41 7c b3 f4 1b 4c 9d 36 15 77 de 79 07 26 ec 37 41 a6 e6 3d e5 94 53 a4 e7 64 d3 a6 4d 78 e3 cd b7 70 fb 6d b7 c9 7d e2 5d 2e d1 6e 96 0c 42 27 41 11 66 c4 8b b6 e9 58 6b 56 7f 2f 04 d0 fd b8 43 b4 77 e2 89 27 88 fd df c0 c2 85 0b 71 d2 c9 27 61 bf fd f6 93 22 e3 f1 c7 1e c7 ce b2 9d 58 be 7c b9 34 f0 af bc f2 4a 19 27 52 58 58 88 51 a3 46 c9 f6 5e 9c fb 22 32 d3 33 71 e4 51 47 ca cf 15 e5 e5 88 8b 73 ca 98 0d 0a 4e a7 14 bc a7 9e 7e 1a 9e 7e 76 8e f4 9c 10 47 1e 79 14 da db da 65 Data Ascii: X\|a0a"\|t f/C=A2bU,_W0!11Iz?4fX!y;\|A\|L6wy&7A=SdMxpm}].nB'AfXkV/Cw'q'a"X\|4J'RXXQF^"23qQGsN~~vGye
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 94 71 1f 34 d5 8b f6 a7 fd e8 3d 65 c3 a2 ec 5d 14 6c ae cb e3 7a 83 75 4c 48 34 50 55 72 82 aa b2 d3 14 b1 5c 19 bc 6e 58 ff 33 64 df 0b 12 12 65 5c 0c a5 e1 0d 8c 07 1d 7f d2 e4 49 72 3c 68 3d b5 1d f8 95 68 7c 68 ac a8 22 3b 1d c7 e7 f3 0f c2 bd dd 83 07 44 e5 bf 35 2c 40 18 86 61 98 7d 0c 05 71 4a 3d 1a 51 88 2d b6 5f a0 50 7f 0d 36 b4 c1 0f 0f 4f c7 da 67 af 08 44 15 20 c1 39 fc 9d 59 78 e5 53 ed fe bc 4a 64 9c 83 35 5d 28 70 7c 32 a4 e5 13 7e 98 c2 82 de 6b 9a 99 92 56 1a fc 46 c8 be b2 9f 86 d5 dd ce 76 a8 0d af 57 33 eb 54 58 ed d2 71 a4 18 31 10 6c 3b d4 58 a7 4f 74 2c c3 12 05 14 87 41 59 ba 68 1f aa ff 41 b1 28 14 a7 42 1e 0b 99 65 ca da 35 b4 ff b2 ef 5e 2d 98 e2 37 b0 3e 70 ec 00 f2 38 86 16 26 40 3a cf c9 08 db df 6c d3 1b b5 9e 47 f0 5c 35 Data Ascii: q4=e]lzuLH4PUr\nX3de\Ir<h=h\|h";D5,@a}qJ=Q-_P6OgD 9YxSJd5](p\|2~kVFvW3TXq1l;XOt,AYhA(Be5^-7>p8&@:lG\5
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 4f 2f f7 19 55 62 4e 95 89 50 1e 6c 54 32 dd 3f c1 30 af 1d 55 35 8b 11 32 2c 40 18 86 61 18 a6 f7 76 84 e9 09 69 f3 3a b0 68 c7 54 1c 51 b0 1c 99 ae 2a ab 4e 08 8b 90 bd cf 6a 8c d0 1f 83 a0 36 76 27 36 80 f6 35 34 ad e7 2b 53 41 37 d1 09 bd 15 e8 46 8f 7d a1 45 a7 29 61 86 11 8c 69 91 77 55 a0 c0 23 7d af eb dd b6 d5 1f b1 12 a1 de 91 41 54 b7 2c 40 f8 8f 0e c3 30 0c c3 c4 32 b4 4c 11 e2 35 dc f8 b2 fc 10 1c 92 f3 15 b2 dc d6 74 2c f6 84 ec 35 44 33 c8 83 86 72 c4 77 81 35 7d fd eb db 6c 36 d4 d4 d4 a0 a5 a5 25 68 78 f7 58 07 c4 0a cc b6 a9 36 38 9d 4e 24 25 25 c2 21 5e 7d 5e 6f 74 a3 cf 6e 47 43 63 23 6a c5 71 54 71 bc 98 53 b0 f4 f0 29 58 ba b5 82 04 05 9d 7d 66 56 26 e2 e2 e2 a0 05 82 5a 42 a0 7e b4 b4 b6 a0 ae a6 56 be 6a 9a 6e 16 60 0c 1e c3 90 6d Data Ascii: O/UbNPlT2?0U52,@avi:hTQ*Nj6v'654+SA7F}E)aiwU#}AT,@02L5t,5D3rw5}l6%hxX68N$%%!^}^otnGCc#jqTqS)X}fV&ZB~Vjn`m
2024-12-12 22:03:43 UTC	1369	IN	Data Raw: 27 c1 83 59 d7 5c dd 6d ab 4b 97 2c c5 e6 cd 9b 71 d8 e1 87 23 2f 6f 58 cc ed ae b9 f6 6a bc fd d6 9b a8 ac a8 34 85 42 44 65 78 ab 17 d0 35 4d 06 df c7 32 e4 69 7b 12 30 9d 99 be 06 d6 ee 57 02 ff c5 9a 82 35 04 82 d0 c9 f3 a1 8a 7b 30 2e de 83 2d df 7e 8d 0d df 7c 09 97 db 03 d5 ee 1c 90 e3 b3 00 61 18 86 61 18 66 40 0c 68 f8 fd f0 a4 64 48 e3 a7 b9 a1 da 0c 4c 1f a2 31 21 ca 10 2a 65 dd de de 8e eb ae bb 01 65 3b cb 90 92 92 2c d3 c9 52 aa 5d b7 c7 83 4b 2e be 08 53 a6 4c 89 ba 1f a5 b8 1d 35 6a 14 3e fd f4 53 99 f2 b6 27 ee b8 fd 4e 7c fc c9 c7 c8 cd c9 b5 72 63 19 e1 95 db 15 7a b0 af a0 bc a2 1c d9 d9 d9 28 2b 2b c3 b4 e9 d3 30 6c 58 74 51 41 22 e0 ef b7 dc 82 47 1e 7e 04 aa 62 43 62 62 02 fe 38 fb 4f b8 e4 d2 4b a2 6e 4f a9 7d 7f f4 a3 1f e1 f1 7f Data Ascii: 'Y\mK,q#/oXj4BDex5M2i{0W5{0.-~\|aaf@hdHL1!*ee;,R]K.SL5j>S'N\|rcz(++0lXtQA"G~bCbb8OKnO}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49909	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	1992	OUT	GET /fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1199	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/png Content-Length: 1223 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4697 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7jo2G2RSOQVcSkZr9nIUlFOtf7msChqzm%2FY%2BDdbzeYjAFPBcDSlhpccr%2BTbWxzvCXTyX6rS2uUzqC41qnYYhl9V3kMz2rqSo8qR7F5rG0MGr%2Bidk7VzCq3S8aGadrVsk1VngLN8%2BIzsp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019d8f71c34b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1496&min_rtt=1494&rtt_var=565&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2592&delivery_rate=1926121&cwnd=163&unsent_bytes=0&cid=9576a9b6663a87ac&ts=456&x=0"
2024-12-12 22:03:46 UTC	170	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+
2024-12-12 22:03:46 UTC	1053	IN	Data Raw: 2e 27 27 27 2e 2b 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8a 00 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 05 06 04 02 07 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 03 02 01 00 10 00 02 01 02 05 01 05 05 05 09 00 00 00 00 00 00 01 02 03 00 04 11 21 31 12 05 41 51 61 22 32 13 71 82 33 14 06 81 a1 42 72 15 91 b1 c1 52 43 53 34 44 35 11 00 02 02 00 05 02 05 05 00 00 00 00 00 00 00 00 00 01 11 02 21 31 51 12 03 41 81 71 b1 22 32 42 52 72 13 33 04 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 57 d4 16 f7 10 dd 34 1b 98 c0 0f 82 32 30 19 67 a8 c8 d4 99 ad 43 44 4e 07 31 d7 51 5b 9e 4e 18 6f a7 54 70 c5 47 c4 23 20 3d ea ca 73 96 c6 2b d6 b5 85 8a c7 1a 82 Data Ascii: .'''.+550055@@?@@@@@@@@@@@@22"!1AQa"2q3BrRCS4D5!1QAq"2BRr3?W420gCDN1Q[NoTpG# =s+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49908	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	402	OUT	GET /nas-prod/c_630b8e4a-5e24-47cb-b22c-55c52b7964c7_1684173963.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:46 UTC	1351	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/jpeg Content-Length: 20636 Connection: close x-goog-generation: 1684173964427305 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 20636 x-goog-hash: crc32c=xGJ93Q== x-goog-hash: md5=G4tsP9NG1EkqZZbGBAiiDQ== x-goog-storage-class: STANDARD X-GUploader-UploadID: AHmUCY2MRGU4RUzlhUxyfK1aeIcZOoDnz5s9RTJN9uMvuehxouzLtz1cZlpIJIxqgrz0MRkgPKQ Expires: Thu, 12 Dec 2024 21:35:54 GMT Cache-Control: public, max-age=14400 Age: 3309 Last-Modified: Mon, 15 May 2023 18:06:04 GMT ETag: "1b8b6c3fd346d4492a6596c60408a20d" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cKwza5o8EqDc5byRfWJtRgNnWbRv4mty3U35ihBt7H%2FHoXNiyMw%2FufAn6%2BYmcJ%2FcCfQrfVo0Vv3KN5bqEXcIfcCLNgGCVw9LDTDlQrdMW2IsWwcqOOZTxOU0czImIO2DOKTp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:46 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 39 64 39 66 30 39 38 30 64 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 35 38 26 6d 69 6e 5f 72 74 74 3d 31 36 32 37 26 72 74 74 5f 76 61 72 3d 36 33 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 39 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 39 34 37 31 34 26 63 77 6e 64 3d 31 39 33 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 37 66 64 39 31 33 65 33 39 38 38 Data Ascii: CF-RAY: 8f11019d9f0980d6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1658&min_rtt=1627&rtt_var=632&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=980&delivery_rate=1794714&cwnd=193&unsent_bytes=0&cid=47fd913e3988
2024-12-12 22:03:46 UTC	1112	IN	Data Raw: ff d8 ff db 00 84 00 0e 0a 0a 0a 0b 0a 0e 0b 0b 0e 15 0e 0c 0e 15 18 12 0e 0e 12 18 1c 17 17 17 17 17 1c 1b 15 18 17 17 18 15 1b 1b 20 21 23 21 20 1b 2b 2b 2e 2e 2b 2b 3e 3d 3d 3d 3e 40 40 40 40 40 40 40 40 40 40 01 0f 0e 0e 0f 11 0f 13 10 10 13 14 0f 11 0f 14 17 12 14 14 12 17 22 17 17 19 17 17 22 2c 1f 1b 1b 1b 1b 1f 2c 26 29 23 23 23 29 26 2f 2f 2c 2c 2f 2f 3b 3b 39 3b 3b 40 40 40 40 40 40 40 40 40 40 ff dd 00 04 00 18 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 7b 01 79 03 00 22 00 01 11 01 02 11 01 ff c4 00 8f 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 01 08 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 10 00 02 01 03 02 02 06 06 07 05 04 09 04 02 03 00 01 02 03 00 04 11 05 21 12 31 06 Data Ascii: !#! ++..++>===>@@@@@@@@@@"",,&)###)&//,,//;;9;;@@@@@@@@@@Adobed{y"!1
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 10 1f c6 9b b9 b8 b2 b6 61 15 a6 9d 23 67 fe 20 98 c5 18 f4 96 f6 e2 c6 c5 9e db 85 58 8c 16 22 b3 7b 0b 9b 6b cd 66 26 d6 64 e2 b5 24 99 38 b2 07 87 2f 1a 09 72 ea 92 87 e0 3a 5c 18 07 19 12 e4 1a 7e 2b 9b 19 10 f5 96 6c 93 7d 85 8e 60 a2 86 75 36 b6 4d 46 74 b2 19 80 4b f5 45 7b 57 c2 a7 da 5b c8 cb d7 32 14 8b b5 c9 03 e1 9d e8 27 5e 45 2d d2 11 1e 9d 2b 00 32 1b ae 0d ff 00 4d 0f cd 6b 73 1e cf 19 07 b8 6e 68 8b 4f 79 d2 f6 34 8f 8d 6d cc 0f c6 1c 1c 95 e2 d8 8d bb e8 7a fe 77 4b bc 8c 8e 1c 63 bf 6a 08 4c 48 24 1d b1 ce ba 47 15 dd e8 c4 ed e2 73 f1 02 a3 83 bd 01 7d b4 36 b1 f4 65 e5 66 55 92 66 dc 1c 16 6d f0 02 f7 62 87 b5 04 02 38 5c 77 e0 d3 49 33 70 70 e7 61 c8 54 8b c0 4d 8c 4f d9 c5 40 fa a8 31 0a 97 a6 39 5b 94 3e 35 0e 16 cc 43 ca a4 59 ed Data Ascii: a#g X"{kf&d$8/r:\~+l}`u6MFtKE{W[2'^E-+2MksnhOy4mzwKcjLH$Gs}6efUfmb8\wI3ppaTMO@19[>5CY
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 72 72 73 d8 29 9f a4 6f 7f bd f9 0f d2 bb 5d 5a f1 79 95 6f 35 fd 28 08 b4 bd 23 55 92 35 4f 43 91 40 1b b3 00 07 e3 57 96 9d 1a d5 12 45 7e 14 db 73 eb 8a 0a 8f 5e c6 d2 c6 7c d4 fe b5 63 06 af 6e d1 48 d1 4c 55 95 09 2b b8 6d bb a8 35 8b 15 68 6d a3 8e 42 38 94 60 e0 d4 8e 34 fb c3 e3 59 e1 d1 2f 2e ac 95 fe 92 58 6e 64 8b ad 48 5d 8e 78 4e c3 7c 8a 14 b1 9b 51 8b 50 96 d2 ea 59 38 91 99 5d 19 89 dc 50 6d dd 62 7d e1 f1 a4 1d 4f 22 2b 29 e3 71 f6 8f c6 9c 8e 79 e3 60 c9 23 2b 0e d0 4d 06 a7 5e d0 26 9d d2 9b eb 66 0b 73 f5 f0 f6 e7 da 03 c0 d1 9d 9d ec 17 b0 2c f0 37 12 37 77 61 ee 34 12 29 52 a5 41 ff d2 d2 2a bb 55 bd ea 63 31 23 70 bb 0d db ee 83 f9 d5 84 8c 11 0b 1e 40 64 fb a8 72 58 24 bd 99 55 f3 c3 2e 64 76 ee 1c 94 7c 28 2a ec b4 83 aa dc 99 67 Data Ascii: rrs)o]Zyo5(#U5OC@WE~s^\|cnHLU+m5hmB8`4Y/.XndH]xN\|QPY8]Pmb}O"+)qy`#+M^&fs,77wa4)RAUc1#p@drX$U.dv\|(g
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 0f 82 8a 07 b4 1b e4 28 33 7b 9d 5a 48 6e 27 55 df 38 f7 9c 73 f9 d3 56 9d 20 bf 8a 60 d1 db c6 fd 99 91 4e 31 51 2f 2f 6e 85 d4 8c 1c a8 60 36 1e 54 d2 dc ce c0 93 23 1c f3 df c2 80 b8 74 a6 26 8d 73 a5 30 9b ed 18 c9 51 ee 3b 1a 5f e9 36 a1 8e 18 6c 02 67 b5 e4 63 b7 bc d0 b2 c9 33 28 43 23 1c 0e 59 35 e0 3b fa c7 73 b6 fd c4 d0 1d 68 9a c5 cd e5 cc 50 5e a2 a3 97 3d 59 53 90 70 33 be e6 8a 9a 34 6e 7d b5 9b f4 49 11 75 68 18 38 f6 88 e1 f7 1a d2 e8 07 fa 47 7c da 74 10 a4 2a 0f 5d 20 4c 9e 43 6c d0 1e b9 71 70 d7 1d 64 ae 5d 8f 69 e4 3c 87 65 1a 74 d8 7f 65 b4 7f bb 3a fc c1 a0 9d 74 fd 60 a0 6e 29 89 41 91 4e 75 83 b8 54 58 4e 50 53 c0 50 38 24 1d c2 ba eb 3c 05 35 5e d0 3a 24 1f 74 57 bd 68 fb a3 e1 4c d7 b4 0e f5 83 b8 7c 2b 93 22 fd d1 f0 a6 c9 ae Data Ascii: (3{ZHn'U8sV `N1Q//n`6T#t&s0Q;_6lgc3(C#Y5;shP^=YSp34n}Iuh8G\|t*] LClqpd]i<ete:t`n)ANuTXNPSP8$<5^:$tWhL\|+"
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: ad eb 15 d7 82 54 c0 2a 76 a7 d8 55 9f 48 ed 96 3e 92 cc ca aa 8e d0 23 4e a9 ec 89 1b da aa f2 b9 a0 e2 28 83 37 13 72 1d 9d f5 6d 0f a3 da 28 9a e0 e6 5e 69 18 fb 3e 27 c6 a1 ab 08 13 ad 23 24 6d 18 ef 3d fe ea 8c cc ce c5 98 e4 9e 64 d0 58 cb ad 4c 4e 22 50 a3 bc ef 51 ce a5 7c c7 f7 84 77 00 05 47 8e 27 95 82 a0 df b4 d4 80 63 84 f0 40 bd 64 dd af cc 0a 07 a2 b8 d5 0e fd 67 08 ef 70 b8 fc 2a 52 6a 52 26 d3 3c 4f 8e ec 83 f2 aa e6 82 e2 53 c5 23 fb b9 d7 2d 66 38 1b d7 ec 3d 94 16 29 a9 db 39 df 63 e0 41 15 25 1d 24 19 8d 83 0f 0a 17 6b 27 1e c9 07 c3 95 78 97 17 36 cf cc 82 3b 0d 01 ad 85 fc f6 52 f1 46 c4 2f 6a f6 51 0a 75 7a 92 75 b1 b2 89 71 eb 27 7d 01 d8 ea c9 3f a9 36 cf d8 6a f2 c2 f1 ed e5 52 a7 03 b3 c6 81 ed 57 4a eb 72 ea bc 33 af 2f e2 f0 Data Ascii: TvUH>#N(7rm(^i>'#$m=dXLN"PQ\|wG'c@dgpRjR&<OS#-f8=)9cA%$k'x6;RF/jQuzuq'}?6jRWJr3/
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 58 5e 06 ca 9f 57 ec b5 5d 69 5a 87 5c bd 4c 87 d6 1e c9 a8 11 ba dc 46 55 86 ff 00 68 7e 75 10 17 b6 9f 20 ee a7 e5 41 a5 e8 77 e6 36 e0 6d d5 b6 23 c6 a5 ea 16 e2 50 cd d5 95 49 01 ca 9e 7e 3f 1a 19 d2 ae f8 c4 72 83 bb 73 f3 1b d1 b1 c5 cd 80 91 06 5d 40 65 f3 03 6a 0c cb 53 b2 e2 49 ad 5b 76 4d e3 3e 23 71 f1 a1 22 08 24 1e 63 9d 68 da f4 01 26 49 d4 6c de a9 fc 56 81 f5 68 3a 9b c7 e1 d9 24 f5 d7 df ce 82 1c 53 49 09 25 0e cd b3 03 c8 8f 1a b8 d3 75 9b 99 67 8a da 42 02 7d 82 3b 08 dc 73 cd 52 57 51 39 8a 54 91 76 2a 41 a0 dd 3a 37 a8 4d a8 69 e2 49 f0 64 56 28 48 db 38 ab 8a 18 e8 44 9c 7a 7c a4 72 32 64 7b c0 a2 7a 0f ff d6 d1 a4 f6 4d 0b ea d2 0b bb f0 a7 d6 8a 01 85 5e c2 fd a7 dd ca 89 ae 5f ab b7 92 4f ba a4 fc 05 09 5a 02 e4 3b 7b 4c 4b 1f e6 Data Ascii: X^W]iZ\LFUh~u Aw6m#PI~?rs]@ejSI[vM>#q"$ch&IlVh:$SI%ugB};sRWQ9Tv*A:7MiIdV(H8Dz\|r2d{zM^_OZ;{LK
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 9d a5 c9 c0 92 0f bc bf 83 2d 6b bd 22 b9 78 34 fb 77 8c 02 4e 06 e3 23 95 64 7a 62 2b 24 a0 8c 9e ad ce 33 8e 45 6b 61 d4 a0 37 3a 45 bf 00 24 80 ac 07 ba 80 73 4c bb 96 eb 4e d6 56 50 30 62 e2 c8 18 df 18 aa 3b 9f 5b 4b 88 ff 00 08 a2 bd 2a df 16 1a a0 2a 46 63 e1 c1 18 df 06 84 e4 19 d2 23 3e 14 14 48 dc 39 ab 5d 45 fa ee 89 5b b8 ff 00 e3 dc c8 8d fc e0 62 aa 00 e7 56 5a 77 15 d6 9f a8 69 98 c9 91 04 f0 8f e3 8b d6 23 de 28 2b 34 8b b3 69 7b 05 c0 38 ea a4 57 cf c8 fe 34 57 a8 74 95 ad a6 99 d9 12 e5 e5 91 94 49 26 72 a9 81 ea 8c 50 32 12 1b 07 df 44 96 d6 5f 4a 69 c7 a9 39 9d 46 1d 7f 8d 07 ab fd 42 82 7e a9 a8 db 45 a7 45 77 65 6f 11 33 11 1d c1 01 bd 5c 1e 35 ed 1b e4 55 7c 53 9b f3 78 af 85 37 ea 43 60 61 44 e9 eb 47 fd 55 de 9b 66 2e f4 ab cb 66 Data Ascii: -k"x4wN#dzb+$3Eka7:E$sLNVP0b;[K**Fc#>H9]E[bVZwi#(+4i{8W4WtI&rP2D_Ji9FB~EEweo3\5U\|Sx7C`aDGUf.f
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 8d 7a a9 73 33 4a 86 38 c3 73 45 07 00 f6 9a 0b 5f a7 61 b5 51 8e 09 5b b9 1f 23 f0 a6 2f fa 49 79 75 09 8a 22 61 8d 87 ac 06 c4 8f 13 dd 54 cb 66 ee e1 55 f2 4f 20 a3 3f 8d 3a f6 c9 13 70 f1 99 58 7b 4d d9 9e e1 41 02 e2 67 48 dd 54 ef da 47 66 6a 14 67 eb 54 8f bb 8f 95 4b bd 5c 34 98 e5 8c fc 6a 02 fb 4b 41 2b 48 6e 1b e4 ff 00 0b 8f f2 9a 27 8e 6b 1f a1 e1 40 33 7c 92 b6 47 7c 6d de 7e 14 31 a4 a1 7d 42 34 1c cf 17 e0 6a fa 0b 57 56 6c 8c 00 30 33 b7 88 a0 19 c6 2e 48 ee 7c 7c e8 af 42 6e 2b 59 63 ed 8e 4c e3 c0 8a 19 99 42 ea 2e bd 82 52 3f cd 57 da 2b f5 7a 84 d0 1e 52 71 28 f3 07 88 50 5b b0 aa cb a4 c4 b3 a7 de 0b 2a fe 06 ad 99 4e f5 06 fd 38 44 73 81 ec 1e 17 ff 00 0b 6d 41 56 6a 65 9b f1 23 46 79 af ac bf 9d 45 75 e0 62 bc c0 e4 7b c5 7b 1b 98 Data Ascii: zs3J8sE_aQ[#/Iyu"aTfUO ?:pX{MAgHTGfjgTK\4jKA+Hn'k@3\|G\|m~1}B4jWVl03.H\|\|Bn+YcLB.R?W+zRq(P[*N8DsmAVje#FyEub{{
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 56 9d 15 b3 b4 c3 1e 20 d5 9c f3 40 dc 38 63 0b 73 38 dd 4d 71 89 cf b3 2c 6e 3c 76 a0 8b 0e 95 14 44 16 6e 26 ef c6 d5 2f ea 6d d7 27 6c fb c9 ae 4a 5c 91 83 2a 27 91 14 ed be 96 66 6e 26 25 c7 6b 1d 97 e7 41 13 eb af 1f 0a 30 83 e0 3c ea f6 c2 c9 6d d0 33 0d f9 a8 3c f3 f7 8d 3b 6f 6b 14 00 60 02 c3 b7 18 03 c8 54 b8 20 9a e2 51 1c 2b c6 e7 97 70 f1 34 12 f4 ab 23 79 74 a8 47 d5 46 78 e6 3f 82 d3 da cd e4 2b 2b f5 58 58 a2 05 41 1d a7 ed b7 e4 3d f4 f4 b2 0d 2e 13 67 13 86 91 86 64 70 7b 4f 3d e8 5a fe ef ae 90 a2 6c 80 ef 8e 5b 72 1e 42 82 25 d5 c6 16 49 db da 3e c8 f1 3c aa 84 ee 49 3c ce e6 a6 5e cd d6 3f 02 fb 0b f3 35 13 14 0a 24 c9 63 da aa cc 01 ef 02 8f 21 b4 e8 f5 81 b1 b2 ba 56 9a 6b 98 c3 4f 36 5b 2a cc 03 2f 08 1b 76 d0 22 37 56 fc 58 c8 c1 Data Ascii: V @8cs8Mq,n<vDn&/m'lJ\'fn&%kA0<m3<;ok`T Q+p4#ytGFx?++XXA=.gdp{O=Zl[rB%I><I<^?5$c!VkO6[/v"7VX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49907	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	622	OUT	GET /fdx-pkgmsn/8030324c3fd98695dde5eed6d98c11dc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1197	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/png Content-Length: 1260 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4697 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mVbkoDHxo2ytlCa2UCi3IRXDyXtlCoOhtFF4MhCAxqul%2Fx79dDS9dellS8Ejm2%2BBhWGCY7XVRP3xbEXiuZDGOQ2SwR%2FpoD8hbmN4QVwexC1oQezAOLPLx5wQ52g5hUg4djMn338P4V%2BM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019d9e1342c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2519&min_rtt=2502&rtt_var=950&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1200&delivery_rate=1167066&cwnd=240&unsent_bytes=0&cid=36ac7e31638136e8&ts=465&x=0"
2024-12-12 22:03:46 UTC	172	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b 2e 27 Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+.'
2024-12-12 22:03:46 UTC	1088	IN	Data Raw: 27 27 2e 2b 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8b 00 00 03 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 05 06 04 03 01 02 07 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 10 00 02 01 03 02 03 03 08 08 05 05 00 00 00 00 00 01 02 03 00 11 04 31 05 21 12 32 41 51 13 71 81 22 42 52 33 14 06 f0 61 91 b1 d1 62 23 15 a1 c1 72 54 35 92 43 53 83 34 11 00 02 02 02 01 02 07 00 00 00 00 00 00 00 00 00 00 01 11 02 21 41 31 61 12 51 71 c1 72 03 33 43 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 65 f2 ce 42 41 93 9b 3c cf 64 97 d2 5b 0b 2b 12 c4 d6 b3 f3 3b 34 97 f0 39 70 db 82 cb d4 df 51 2b dd 52 39 b9 13 4f 97 8b 81 86 6c d2 2f 88 c5 bb 65 70 dc 58 f9 0d ab Data Ascii: ''.+550055@@?@@@@@@@@@@@@22"1!2AQq"BR3ab#rT5CS4!A1aQqr3C?eBA<d[+;49pQ+R9Ol/epX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49910	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	1992	OUT	GET /fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1197	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/png Content-Length: 1941 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4697 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t7A0X4N%2FmzfgpfPCiANM0MQ6bzliMo8mMvE%2Fl279QqTMmfnIBnJenZTCqwR4uH9XpMBv5k0lu0UCw9O%2Fjo8SXzKr1lR7JidZJjqz1vaGvcvpV%2B45EBfikuxUDTgGxUZsNWLdI4BvTIMv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019d994d5e78-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1588&min_rtt=1584&rtt_var=602&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2592&delivery_rate=1804697&cwnd=252&unsent_bytes=0&cid=a3362c79acea638a&ts=462&x=0"
2024-12-12 22:03:46 UTC	172	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f Data Ascii: ExifII*Ducky<Adobed
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 32 03 01 11 00 02 11 01 03 11 01 ff c4 00 99 00 00 03 01 00 03 00 00 00 00 00 00 00 00 00 00 00 05 06 07 04 00 03 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 02 01 00 10 00 02 01 02 04 03 04 05 08 05 0d 00 00 00 00 00 01 02 03 11 04 00 21 12 05 31 32 06 41 22 33 34 51 61 71 13 14 52 62 82 53 63 15 35 07 81 54 55 16 36 f0 91 a1 c1 d1 42 72 c2 23 24 44 17 37 11 00 01 03 03 03 02 06 03 01 01 00 00 00 00 00 00 01 00 02 03 11 21 31 51 12 04 41 13 61 71 81 22 32 14 a1 b1 52 91 d2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 7c dc 3a 98 7d e1 0e e8 f3 34 f7 76 c8 d0 c4 28 a2 26 0f 42 4b aa 73 76 52 87 db 96 26 8e 43 89 aa ac f8 9a 45 00 a0 53 ff 00 Data Ascii: 22!12A"34QaqRbSc5TU6Br#$D7!1QAaq"2R?\|:}4v(&BKsvR&CES
2024-12-12 22:03:46 UTC	400	IN	Data Raw: 49 2d 23 bd 66 a2 cc ba e3 08 48 a2 b0 ca b4 e2 70 ca 55 2d 75 7e d9 d2 9b f5 dc 1b 25 f4 5a f7 29 17 5d 9b 49 0e b5 47 70 da 14 4e 41 11 c9 20 8d ca 29 3d ed 27 1c 5d 05 4e 3a 83 a1 ec cd 8a 5a d9 db 9b 0b ed ba 37 76 9a 69 42 da dd 40 a7 fd 48 e3 73 46 8e 60 41 2d 1b fd 12 45 30 9c f0 0c 84 dc 33 1c 15 36 de 76 e8 cc 06 44 8b 4b e9 33 22 b5 41 08 73 01 47 cd 14 24 76 61 68 5d 74 79 5b 64 c3 f9 63 d1 7b 97 50 af c3 6c 92 c3 69 a6 0f 88 bd bb ba 46 92 20 d2 65 0a 80 84 1a b6 64 7a 38 e0 c6 2e e3 88 28 7d d0 c6 82 15 36 0f ca 6b 28 76 d7 8e 5b a9 df 7d 80 9f f7 ad a0 32 39 fa b8 e8 63 a1 e2 85 81 20 e3 47 86 d0 2d 95 86 72 ce eb e1 28 7f d3 dd 37 fb 73 7b e6 f8 8f 37 ff 00 2f eb f9 7c 5f 56 17 ef bf f9 6e 98 fc 27 7e b3 3f a3 ae 7f 2a e1 b2 fe 0f 63 c3 94 Data Ascii: I-#fHpU-u~%Z)]IGpNA )=']N:Z7viB@HsF`A-E036vDK3"AsG$vah]ty[dc{PliF edz8.(}6k(v[}29c G-r(7s{7/\|_Vn'~?*c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49912	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	421	OUT	GET /i/1d6e7f38-adbf-444d-a08e-ddf433d457b1/e91fd598-8861-4b0b-bfb0-d0a360890523 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:46 UTC	1108	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q8zrltD2WKDS5qIdeRKslecYX7qynKh1gbwfv60F%2B0EHM%2Bfhl7kG%2FOwvA9HqZtzrJUFae0v%2Fv3fQ8tMKwVYrIdP3AmmXEhadwtcBMU5PpN5TM46wphBf%2FdBBnrVCdUzkH0M%2F46fkwneD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019d98b04234-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1862&min_rtt=1862&rtt_var=699&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=999&delivery_rate=1563169&cwnd=171&unsent_bytes=0&cid=c24c03e647b19fcd&ts=760&x=0"
2024-12-12 22:03:46 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49911	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	421	OUT	GET /i/22cb510a-0d9d-4d11-a06b-1f40abd2a729/2780b8ff-5681-483e-b93a-a23751755b6a HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:46 UTC	1104	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3FnWMFssa7EDo1YQn9dOmvVXgg%2BhogIQ7v5ymRXAu1NdsmBIIdD0b2qMGUvz37mF4cf%2F2ZMGM1yz3638PpGUvNaQs9B7B2xgFIpFldaHMDc7Yy4dE%2FkPvJNO%2FKQ6InYAr6UPFHPw1ajG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019d9be2335a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2022&min_rtt=1992&rtt_var=769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2858&recv_bytes=999&delivery_rate=1465863&cwnd=232&unsent_bytes=0&cid=bce476f40c5a41a6&ts=812&x=0"
2024-12-12 22:03:46 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49913	172.67.178.237	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:45 UTC	375	OUT	GET /nas-prod/c_undefined_1696444090.jpg HTTP/1.1 Host: clipresource.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:46 UTC	1345	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/jpeg Content-Length: 68441 Connection: close x-goog-generation: 1696444093455616 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 68441 x-goog-hash: crc32c=WG2dCw== x-goog-hash: md5=ZvPF/9LQvpMg4Gf0GXxaBA== x-goog-storage-class: STANDARD X-GUploader-UploadID: AFiumC6zn5IzL0c1vFmn4tFFwoveAkxYpOlf4vvmm-6X9p_4_6f5Sb6Xel6xhcVzZCiHnKVSHLU Expires: Thu, 12 Dec 2024 21:40:29 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 04 Oct 2023 18:28:13 GMT ETag: "66f3c5ffd2d0be9320e067f4197c5a04" Age: 2160 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UZYn0FrctcJ83oYBwddr2wspgiDgPlyO6HpUnRV7Tx5piJ7Dk3rgMstJ59HKA1RIgOZeFwhjk28wWcE2WxjdrUIhadVHEYSVT2h51QZU%2BfxqjbwCZ6Vu6EhIfkHoHZ3leZhT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-12 22:03:46 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 31 31 30 31 39 64 63 63 36 34 37 64 31 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 31 32 26 6d 69 6e 5f 72 74 74 3d 31 38 30 38 26 72 74 74 5f 76 61 72 3d 36 38 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 39 35 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 38 32 36 35 35 26 63 77 6e 64 3d 32 31 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 32 63 36 31 32 66 31 32 63 35 66 33 Data Ascii: CF-RAY: 8f11019dcc647d16-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1812&min_rtt=1808&rtt_var=687&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=953&delivery_rate=1582655&cwnd=217&unsent_bytes=0&cid=2c612f12c5f3
2024-12-12 22:03:46 UTC	1118	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 e8 08 03 00 00 00 7a 7d 24 d6 00 00 00 8d 50 4c 54 45 4c 69 71 6a 69 69 46 46 46 13 13 13 97 96 96 af ae ae 5a 5a 5a 79 78 78 87 86 86 ac ac ac 17 18 18 00 00 00 0e 0e 0e 03 03 03 09 09 09 1c 1c 1c 5b 5c 5c 48 48 49 06 06 06 62 63 63 3f 40 40 4f 4f 4f 55 55 56 37 37 37 2f 30 30 21 21 21 6b 6b 6b 29 2a 2a 25 25 25 75 75 75 7f 7f 7f 89 89 89 ab ab ab ea ea ea ec 0d 08 93 93 93 b3 b3 b3 9d 9d 9d a4 a4 a4 5f 08 08 c6 0c 0a 92 0a 08 d7 d7 d7 34 06 06 c3 c3 c3 fc 3b 2c d5 30 29 db f5 2a 14 00 00 00 0a 74 52 4e 53 00 bc df ff 63 18 d4 a7 8d 36 7a 9d b2 62 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 89 76 1d 47 8e b5 fb d3 41 89 64 9c cc 8c Data Ascii: PNGIHDRz}$PLTELiqjiiFFFZZZyxx[\\HHIbcc?@@OOOUUV777/00!!!kkk)*%%%uuu_4;,0)tRNSc6zbpHYs IDATxvGAd
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 3d 41 ce 97 4a 0e e7 10 39 1a 5b fb 1e d3 a9 a2 e4 4a 5e 10 5a c9 db 35 ab c7 13 00 fd 70 f3 8c a9 36 39 b5 2f b3 7c b2 1f eb 7a f0 4f 3f fb 0f 42 08 f9 73 9e 97 4b 7b 69 0b bf cc da 01 23 34 22 74 39 a5 3b 49 e7 2f 0a 9a 65 bc e4 f5 93 b9 50 a0 27 6e 5b 34 a8 7b 91 fa 2c c9 7b 57 f7 8e 7d ef 84 64 cb a7 a7 e2 52 96 95 db 4c e6 63 3d 8e 4d d3 23 73 f7 45 69 01 dd 84 ae b7 69 4d 93 a4 3e a3 2b 5e 42 3a ae d3 e5 17 8e dd 36 31 79 27 24 57 5e 3d 72 f3 62 99 1a 39 6b d7 02 5c e2 e4 20 2e 42 77 51 e7 17 3d c0 e3 32 0d a9 bd ce ad 35 12 d3 f5 a0 0e 37 8a 59 3e 59 77 c3 f2 f2 b3 ff 2c 84 90 1f f3 36 54 d0 71 40 fe 2d d1 bc 16 c1 c2 55 62 de 77 5f c4 c4 1d 21 bd 70 a8 d4 41 e6 22 f2 7e 18 7a 79 0f b2 fb c2 2d 98 4f 97 90 5e 77 fd cc ca 3b 21 79 f2 52 40 e7 8b 04 Data Ascii: =AJ9[J^Z5p69/\|zO?BsK{i#4"t9;I/eP'n[4{,{W}dRLc=M#sEiiM>+^B:61y'$W^=rb9k\ .BwQ=257Y>Yw,6Tq@-Ubw_!pA"~zy-O^w;!yR@
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 7d 59 1e 84 de ea 35 3a d6 a9 5a ea 1e 6f d7 e2 3d 3a c6 d7 f4 ee 0d 8f 0c 0a 9d 90 ac b0 62 dc 66 19 f7 da ad b7 c5 b8 0f 11 5d 95 8e 1b 34 9b 6a c1 21 3d ce ba 6d 9a ba fb 68 1d 49 a1 13 92 17 f7 f7 e8 3a d4 d2 c5 11 f3 07 a1 9b 69 dc 82 63 78 13 bb 65 6a cb dd ad 33 ae d0 4d e9 76 bd 46 a1 13 92 15 26 74 f3 7a ab d3 f4 da a0 67 f4 87 86 19 eb 75 d7 1b 34 74 b8 8f ea 39 55 5b e9 0e 3e b0 45 55 98 6b 5c 4d a1 13 92 19 d7 86 99 5a fb 65 ba ce ba d7 a7 69 71 3f 12 7a 88 6b 16 e5 78 de e9 41 7d b0 35 6d bb 2b 8a ca 63 79 f2 d0 31 75 27 24 33 6e 84 de 99 67 5c 67 7e 8f 92 ba bb 0f 55 77 d1 f2 82 fb b5 d1 2c 66 92 6b 9c ad 69 93 c7 c0 16 a7 63 28 74 42 b2 22 9d d1 cd 60 66 d5 7c 5c 07 4f 45 ba fe c1 78 02 f3 e8 fb a2 5a 8e ce 13 ba d3 25 da c0 56 c9 34 8e 42 Data Ascii: }Y5:Zo=:bf]4j!=mhI:icxej3MvF&tzgu4t9U[>EUk\MZeiq?zkxA}5m+cy1u'$3ng\g~Uw,fkic(tB"`f\|\OExZ%V4B
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: ea 8e d5 6b 0e 42 9f fa 61 8c 1e f0 b5 ad 65 c2 a2 b6 80 fe 58 eb bc a1 d0 09 c9 0c 15 fa 82 95 e7 b7 4b 16 75 e3 f9 f2 71 3f ba 73 4b ba 5e 83 c6 ad bd e6 ba 36 d9 16 38 70 25 13 21 b9 91 84 ae db 8e 57 5b d5 a2 17 66 f3 fe b0 36 39 36 bb eb c2 d4 94 ba cb f7 c3 30 36 d0 b9 c3 06 c6 cd 3a e3 28 74 42 f2 e2 25 f6 ba 6b af 9b f6 cb 74 b1 61 66 5b dc 7d ea 5e b6 68 76 d7 c2 fa f1 de 31 b6 c0 62 a8 b5 68 fd 8c 92 3c 85 4e 48 6e c4 7b f4 3e b6 c0 ae d7 fd e8 8f 2d b0 a5 6e 53 0d 9a 9d 0f d7 31 55 54 dd 7b ed 8c d3 61 f5 9e 11 9d 90 fc 30 a1 c7 29 55 35 93 48 63 aa fb c3 36 55 1d 47 c7 fd 9a 9c e7 bb 71 40 96 df 1d 42 47 67 5c a1 79 7d c3 b5 c9 84 64 87 a5 ee 3a 5d 8a 13 ba cd a9 8a 74 a7 fd 07 11 dd e9 19 7d d2 c6 f8 3a a6 ee 9d bd 5b 97 39 05 4c bc 8c 8c e8 Data Ascii: kBaeXKuq?sK^68p%!W[f69606:(tB%ktaf[}^hv1bh<NHn{>-nS1UT{a0)U5Hc6UGq@BGg\y}d:]t}:[9L
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 75 df 97 87 16 d8 d6 39 5b e0 60 2e b0 fa 48 88 67 f4 79 0e ce 55 da 4e a3 0d 33 14 3a 21 59 a1 42 d7 16 f5 71 35 17 d8 d1 3c e3 f6 e5 31 a2 17 da cd 2e 59 be 44 f4 31 2d 4e 8e 42 df 02 e6 d1 3d 85 4e 48 96 bc a0 9c be 4f 66 f5 a6 5b 16 c7 01 eb 54 a7 8f 2e b0 15 4c 60 f7 3d 79 c6 d5 5d 32 9e 90 37 ef de 41 e8 36 8f 4e a1 13 92 19 31 a2 ab 78 bb 78 8f 3e 8e 48 c6 f7 50 3c da 3d c3 fe 71 31 2b 29 9d 67 d1 e5 6b ea 19 87 5e 77 0c ab 6b f9 9e d7 6b 84 64 46 4a dd 87 b1 8e 8b 5a 30 a5 d2 4f d3 f4 b8 1f 1d 42 f7 c1 df fa ba 9b 0f ac 76 c6 eb fd 9a 19 ca 31 a2 13 92 1b b7 42 4f fb d1 b5 18 87 20 fd 60 f7 5c e8 3a 55 dd d4 82 a1 16 8d e9 7a 19 37 ed 12 fe 25 b1 d7 dd e9 e8 a5 a5 d0 09 c9 0a bd 5e 13 81 62 1e bd 33 cf 38 dc af 69 0b ec 47 a1 8b 96 51 8d b3 fd 0d Data Ascii: u9[`.HgyUN3:!YBq5<1.YD1-NB=NHOf[T.L`=y]27A6N1xx>HP<=q1+)gk^wkkdFJZ0OBv1BO `\:Uz7%^b38iGQ
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 21 a7 78 8d be 5a 4f 6b 33 41 e8 ae bd ed 75 47 0b 6c 11 c2 ac 2e b0 b0 90 8c f3 e8 71 53 4b e1 53 af 3b 8b 71 84 e4 c6 8d dd 73 74 98 b1 5a 1c b2 71 f7 61 c9 62 21 41 7b eb 9b 1e 5e b1 6a 23 89 1f 20 a2 2f 21 e0 31 30 73 a8 85 90 1c 81 d0 8b 24 74 4d dd c7 18 a3 d1 02 f3 70 8f ae d5 38 b4 c0 8e 71 f9 9a a6 ee 78 2e c0 ee f9 b0 88 e5 02 07 42 32 e3 10 3a 7a d7 d5 d9 7d b4 16 58 2c 59 6c ef e6 d1 31 90 8e 25 8b 73 7f 35 9e c0 61 bd d1 79 74 35 7d a7 67 1c 21 59 62 a9 fb 3e e9 d1 5a 0b e9 5a 5e fb 51 ea ae 03 e9 fb 32 4f 3a ea 36 da 26 f5 c1 86 5a e4 40 6f 6b 93 29 74 42 32 24 f5 ba 37 71 a4 a5 4b 75 74 89 e8 fe 51 e8 ce b9 65 8f 42 d7 51 f4 51 33 77 94 ee bc e4 ee 92 ba 8b d0 1b 0a 9d 90 dc b8 2e 70 48 c3 6b b0 8c 13 a1 a3 d9 ed 56 e8 e5 55 e8 71 f7 5a 7a Data Ascii: !xZOk3AuGl.qSKS;qstZqab!A{^j# /!10s$tMp8qx.B2:z}X,Yl1%s5ayt5}g!Yb>ZZ^Q2O:6&Z@ok)tB2$7qKutQeBQQ3w.pHkVUqZz
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 5e c7 05 0e d3 3c ab 39 a4 57 17 58 a6 ee 84 e4 c6 35 75 b7 29 55 09 e9 26 f4 19 03 69 e5 a3 d0 9d d3 cd c8 d7 33 7a 9d ae d7 b0 aa 05 11 5d 07 5e 28 74 42 b2 02 d7 6b e5 b1 92 c9 3a 66 e2 f4 9a 7f 10 3a 1c 66 6e 8c 27 b4 48 3f ea 98 ea 14 85 be 70 6d 32 21 59 22 42 2f cb 70 a4 ee f8 c6 ea e8 fb f2 d8 30 53 e9 4a 26 f3 75 1f 35 6f ef ba 41 77 af c2 33 ae 42 4d 7e 43 c3 0c 3b e3 08 c9 8d d8 02 3b c5 aa fb cd 02 87 0f 9d 71 d8 df e0 c3 76 dd 8f 6e 3d b0 10 3a f6 37 21 75 d7 fd e8 5c b2 48 48 6e a4 25 8b b6 a9 c5 dc 21 35 46 6f db 0f 84 8e db b5 39 ee 47 8f 5e 52 98 53 95 88 ee 82 2b d4 7e 06 9e ef 14 3a 21 79 71 5d 9b 3c 26 2b 29 13 fa fc 31 75 d7 05 0e 7b 12 7a 67 2b 1c d4 49 6a 5e bc 77 e6 33 c5 d4 9d 90 fc b0 05 0e 9b 9d d1 31 d5 a2 85 f4 c6 76 32 7d f0 Data Ascii: ^<9WX5u)U&i3z]^(tBk:f:fn'H?pm2!Y"B/p0SJ&u5oAw3BM~C;;qvn=:7!u\HHn%!5Fo9G^RS+~:!yq]<&+)1u{zg+Ij^w31v2}
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 24 33 62 c3 4c 6f c6 13 76 8d 3e 9a d0 fd 8f 8c 27 42 5a 9b 7c 98 49 0d cd a0 53 aa b1 ea de cb 19 60 e5 19 9d 90 ac b8 1a 4f 88 78 d7 b8 f4 bc 8f 2d b0 3f 72 98 b1 05 0e 75 0a e9 a3 3a cc cc 8b 47 4c d7 e5 e9 f4 8c 23 24 3b 0e cf 38 9c d1 bb 64 f7 6c 73 2a ee 71 c9 a2 f3 85 5f 6e ad a4 ea ee 78 b3 bc a4 f3 e8 10 7a 4d a1 13 92 15 66 3c 61 7e 11 eb 31 8f ae c5 38 ef 1f e6 d1 0b 17 24 68 4f d1 1c b2 b3 98 ae 8d 71 9b 0a dd 5e 64 44 27 24 3b 52 d5 bd 57 cf 38 ed 60 1f ad 61 e6 47 56 52 21 04 dd 98 8a b5 4b 75 5a bd 36 0c b3 1c e8 17 e7 82 97 c3 7e cf 79 74 42 b2 e3 e8 8c ab ad 5d 26 0a fd 07 2d b0 22 f4 ca e6 56 74 e6 dc 0c 9f eb 38 8f be 38 ef 6c 79 3a 3b e3 08 c9 8f 5b 73 c8 55 a7 d7 ba d1 cc a1 e0 02 fb 78 46 97 e4 7d 47 76 ae 07 fa ee 58 a6 aa cb d4 bd Data Ascii: $3bLov>'BZ\|IS`Ox-?ru:GL#$;8dls*q_nxzMf<a~18$hOq^dD'$;RW8`aGVR!KuZ6~ytB]&-"Vt88ly:;[sUxF}GvX
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 53 eb 2c 75 d7 dd 6b f3 f6 d1 4a aa 42 35 4e cd 25 34 71 ef c6 31 a6 ee d3 0c 9d 07 bf f7 f4 75 27 24 43 6c 53 cb 66 9b 5a a2 c7 4c 5a e0 50 7c 70 98 09 57 e3 09 3b a0 6b f8 c7 5e 17 08 bd f0 da 4c c3 79 74 42 72 23 0a 7d c6 50 8b 0a 5d b3 71 49 dd e7 c7 6d aa 6d 51 15 ea 02 db 6b d5 fd 10 ba cd a3 7b 58 cc 04 b3 99 ea 56 f6 ba 13 92 15 2a f4 60 f3 e8 a8 ba af f2 9d 4a 17 eb d4 3e 6c 53 b5 88 ae 9d 71 37 76 cf 7d 6f 0b 1c 5c 2c d4 71 a8 85 90 cc 78 81 82 03 32 ee ae b6 16 d8 6e 6c ec c6 cc bb 47 87 19 17 d0 19 17 97 2c a2 4a 6f 5b 16 6d 9b aa a4 ee b1 3d 96 42 27 24 33 54 e8 d6 e7 72 98 c6 59 af db 16 ee ae d1 d1 30 83 45 2d d6 19 67 74 a3 45 74 ec 5e f5 58 b5 aa 43 2d 9c 47 27 24 37 6e 36 b5 ac aa f4 38 8f 36 6d fb 72 1f d1 2b d8 3d 07 39 ce c7 16 58 5b Data Ascii: S,ukJB5N%4q1u'$ClSfZLZP\|pW;k^LytBr#}P]qImmQk{XV*`J>lSq7v}o\,qx2nlG,Jo[m=B'$3TrY0E-gtEt^XC-G'$7n686mr+=9X[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49914	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:46 UTC	558	OUT	GET /javascripts/trackpush-v2-cm.js HTTP/1.1 Host: pushrev.pushbroker.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:46 UTC	1232	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4734 Last-Modified: Thu, 12 Dec 2024 20:44:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHITtsudEUDIR5BTi2mT8g3KGmFktnujSnVJ%2B0z4Ir09UW2ecIV85x7r6CUC9W18BwYANpw3NN0h%2F7nCskpa6g1%2BKDKfNDVzyDjMPO3Q0W6bL79ZwdBVFOQtIxYkT7fO9IwFwynXW%2BJk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019e7e03f797-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1479&min_rtt=1478&rtt_var=558&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1136&delivery_rate=1955793&cwnd=151&unsent_bytes=0&cid=ddb77c096be8e0a5&ts=455&x=0"
2024-12-12 22:03:46 UTC	137	IN	Data Raw: 37 32 33 39 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 44 65 66 65 72 72 65 64 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 5f 64 6f 6e 65 20 3d 20 5b 5d 2c 20 74 68 69 73 2e 5f 66 61 69 6c 20 3d 20 5b 5d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 Data Ascii: 7239function _TRKPushDeferred() { this._done = [], this._fail = []}function getUrlVars() { var a = {}; window.loca
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 26 5d 2b 28 5b 5e 3d 26 5d 2b 29 3d 28 5b 5e 26 5d 2a 29 2f 67 69 2c 20 66 75 6e 63 74 69 6f 6e 28 62 2c 20 63 2c 20 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 5b 63 5d 20 3d 20 64 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 61 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 62 61 73 65 36 34 53 74 72 69 6e 67 29 20 7b 0d 0a 20 20 63 6f 6e 73 74 20 70 61 64 64 69 6e 67 20 3d 20 27 3d 27 2e 72 65 70 65 61 74 28 28 34 20 2d 20 62 61 73 65 36 34 53 74 72 69 6e 67 2e 6c 65 6e 67 74 68 20 25 20 34 29 20 25 20 34 29 3b 0d 0a 20 20 63 6f 6e 73 74 20 62 61 73 65 36 34 20 3d 20 28 62 61 73 65 36 34 53 74 72 69 6e Data Ascii: tion.href.replace(/[?&]+([^=&]+)=([^&]*)/gi, function(b, c, d) { a[c] = d }); return a}function urlBase64ToUint8Array(base64String) { const padding = '='.repeat((4 - base64String.length % 4) % 4); const base64 = (base64Strin
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 7c 74 61 29 7c 68 70 28 20 69 7c 69 70 29 7c 68 73 5c 2d 63 7c 68 74 28 63 28 5c 2d 7c 20 7c 5f 7c 61 7c 67 7c 70 7c 73 7c 74 29 7c 74 70 29 7c 68 75 28 61 77 7c 74 63 29 7c 69 5c 2d 28 32 30 7c 67 6f 7c 6d 61 29 7c 69 32 33 30 7c 69 61 63 28 20 7c 5c 2d 7c 5c 2f 29 7c 69 62 72 6f 7c 69 64 65 61 7c 69 67 30 31 7c 69 6b 6f 6d 7c 69 6d 31 6b 7c 69 6e 6e 6f 7c 69 70 61 71 7c 69 72 69 73 7c 6a 61 28 74 7c 76 29 61 7c 6a 62 72 6f 7c 6a 65 6d 75 7c 6a 69 67 73 7c 6b 64 64 69 7c 6b 65 6a 69 7c 6b 67 74 28 20 7c 5c 2f 29 7c 6b 6c 6f 6e 7c 6b 70 74 20 7c 6b 77 63 5c 2d 7c 6b 79 6f 28 63 7c 6b 29 7c 6c 65 28 6e 6f 7c 78 69 29 7c 6c 67 28 20 67 7c 5c 2f 28 6b 7c 6c 7c 75 29 7c 35 30 7c 35 34 7c 5c 2d 5b 61 2d 77 5d 29 7c 6c 69 62 77 7c 6c 79 6e 78 7c 6d 31 5c 2d 77 Data Ascii: \|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(20\|go\|ma)\|i230\|iac( \|\-\|\/)\|ibro\|idea\|ig01\|ikom\|im1k\|inno\|ipaq\|iris\|ja(t\|v)a\|jbro\|jemu\|jigs\|kddi\|keji\|kgt( \|\/)\|klon\|kpt \|kwc\-\|kyo(c\|k)\|le(no\|xi)\|lg( g\|\/(k\|l\|u)\|50\|54\|\-[a-w])\|libw\|lynx\|m1\-w
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 70 61 67 65 54 69 74 6c 65 3a 20 70 61 67 65 54 69 74 6c 65 2c 0d 0a 20 20 20 20 20 20 20 20 70 61 67 65 55 52 4c 3a 20 70 61 67 65 55 52 4c 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 47 65 74 52 65 66 65 72 72 65 72 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 66 55 72 6c 20 3d 20 6e 75 6c 6c 2c 20 72 65 66 4e 61 6d 65 20 3d 20 6e 75 6c 6c 2c 20 30 20 21 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2e 69 6e 64 65 78 4f 66 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 22 2f 2f 22 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 20 26 26 20 28 72 65 66 55 72 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 3f 20 64 6f 63 75 6d 65 Data Ascii: pageTitle: pageTitle, pageURL: pageURL }}function _TRKPushGetReferrer() { return refUrl = null, refName = null, 0 !== document.referrer.indexOf(location.protocol + "//" + location.host) && (refUrl = document.referrer ? docume
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 78 4f 66 28 22 53 61 66 61 72 69 22 29 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 53 61 66 61 72 69 22 2c 20 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 37 29 2c 20 28 67 20 3d 20 62 2e 69 6e 64 65 78 4f 66 28 22 56 65 72 73 69 6f 6e 22 29 29 20 21 3d 20 2d 31 20 26 26 20 28 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 38 29 29 29 20 3a 20 28 67 20 3d 20 62 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 46 69 72 65 66 6f 78 22 2c 20 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 38 29 29 20 3a 20 62 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e Data Ascii: xOf("Safari")) != -1 ? (c = "Safari", d = b.substring(g + 7), (g = b.indexOf("Version")) != -1 && (d = b.substring(g + 8))) : (g = b.indexOf("Firefox")) != -1 ? (c = "Firefox", d = b.substring(g + 8)) : b.indexOf("Trident/") != -1 ? (c = "Microsoft Intern
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 6e 64 6f 77 73 20 56 69 73 74 61 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 57 69 6e 64 6f 77 73 20 4e 54 20 36 2e 30 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 57 69 6e 64 6f 77 73 20 4e 54 20 35 2e 32 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 69 6e 64 6f 77 73 20 58 50 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 28 57 69 6e 64 6f 77 73 20 4e 54 20 35 2e 31 7c 57 69 6e 64 6f 77 73 20 58 50 29 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 Data Ascii: ndows Vista", r: /Windows NT 6.0/ }, { s: "Windows Server 2003", r: /Windows NT 5.2/ }, { s: "Windows XP", r: /(Windows NT 5.1\|Windows XP)/ }, { s: "W
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 51 4e 58 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 51 4e 58 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 55 4e 49 58 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 55 4e 49 58 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 42 65 4f 53 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 42 65 4f 53 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 4f 53 2f 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 4f 53 5c 2f 32 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 53 65 61 72 63 68 20 42 6f 74 22 2c Data Ascii: QNX", r: /QNX/ }, { s: "UNIX", r: /UNIX/ }, { s: "BeOS", r: /BeOS/ }, { s: "OS/2", r: /OS\/2/ }, { s: "Search Bot",
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 20 5f 54 52 4b 50 75 73 68 47 65 74 50 75 73 68 54 6f 6b 65 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0d 0a 09 09 6c 65 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 3d 20 61 5b 31 5d 3b 0d 0a 09 09 61 20 3d 20 61 5b 30 5d 3b 0d 0a 20 20 20 20 20 20 20 20 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 75 73 68 5f 74 6f 6b 65 6e 20 3d 20 61 2c 20 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 20 3d 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2c 20 5f 54 52 4b 50 75 73 68 54 72 61 63 6b 41 74 74 72 69 62 75 74 65 73 28 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 29 2c 20 5f 54 52 4b 50 75 73 68 53 65 6e 64 54 72 61 63 6b 44 61 74 61 28 74 72 61 63 6b 44 61 74 61 29 0d 0a 20 20 20 20 7d 29 2c 20 21 31 29 20 Data Ascii: _TRKPushGetPushToken().then(function(a) {let subscription = a[1];a = a[0]; _at.attributes.push_token = a, _at.attributes.subscription = subscription, _TRKPushTrackAttributes(_at.attributes), _TRKPushSendTrackData(trackData) }), !1)
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 70 72 6f 6d 70 74 49 64 20 3e 20 30 20 3f 20 5f 54 52 4b 50 75 73 68 4c 6f 61 64 50 72 6f 6d 70 74 28 70 72 6f 6d 70 74 49 64 2c 20 61 75 74 6f 5f 70 72 6f 6d 70 74 29 20 3a 20 31 20 3d 3d 20 61 75 74 6f 5f 70 72 6f 6d 70 74 20 26 26 20 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 28 29 0d 0a 20 20 20 20 7d 29 20 3a 20 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 50 55 53 48 4e 4f 54 49 46 49 43 41 54 49 4f 4e 53 5d 20 2d 20 69 64 53 69 74 65 20 6d 75 73 74 20 62 65 20 73 65 74 2e 22 29 2c 20 21 31 29 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 47 65 74 53 69 74 65 43 6f 6e 66 69 67 28 61 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 Data Ascii: } promptId > 0 ? _TRKPushLoadPrompt(promptId, auto_prompt) : 1 == auto_prompt && _TRKPushPrompt() }) : (console.warn("[PUSHNOTIFICATIONS] - idSite must be set."), !1)}function _TRKPushGetSiteConfig(a) { return new Promise
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 44 65 6e 79 28 29 20 7b 0d 0a 20 20 20 20 73 68 6f 77 44 65 62 75 67 20 26 26 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 50 55 53 48 4e 4f 54 49 46 49 43 41 54 49 4f 4e 53 5d 20 2d 20 43 75 73 74 6f 6d 20 70 72 6f 6d 70 74 20 64 65 6e 69 65 64 2e 22 29 2c 20 5f 54 52 4b 50 75 73 68 53 65 74 43 6f 6f 6b 69 65 28 22 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 44 65 6e 69 65 64 22 2c 20 21 30 2c 20 31 34 29 2c 20 5f 61 74 2e 70 72 6f 6d 70 74 2e 61 63 74 69 6f 6e 20 3d 20 22 64 65 6e 69 65 64 22 2c 20 5f 54 52 4b 50 75 73 68 4f 70 74 49 6e 52 65 73 70 6f 6e 73 65 28 5f 61 74 2e 70 72 6f 6d 70 74 29 2c 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 Data Ascii: function _TRKPushPromptDeny() { showDebug && console.log("[PUSHNOTIFICATIONS] - Custom prompt denied."), _TRKPushSetCookie("_TRKPushPromptDenied", !0, 14), _at.prompt.action = "denied", _TRKPushOptInResponse(_at.prompt), document.getElementById("p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49915	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:46 UTC	622	OUT	GET /fdx-pkgmsn/3c02d7b00307e48726f9e53e6c160950.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMek11YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/png Content-Length: 945 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4697 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4Ran2JgX4pnF8rFNM4g1CdtOTlIJshLQXGocVwHC34rjf0ndYcxAveV0F4Gph9GIQubKzlXHKh%2F9xafdwppL8Acn18R8vXjF6ps47x4LmuuaATmCC9SKbMMNCtkrJT0TO4gRIqU1l4r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019eca1542bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1685&min_rtt=1677&rtt_var=646&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1200&delivery_rate=1671436&cwnd=193&unsent_bytes=0&cid=0f84f385e5665789&ts=456&x=0"
2024-12-12 22:03:46 UTC	179	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b 2e 27 27 27 2e 2b 35 35 30 Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+.'''.+550
2024-12-12 22:03:46 UTC	766	IN	Data Raw: 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 83 00 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 02 04 01 05 10 00 01 03 03 02 02 06 07 09 01 00 00 00 00 00 00 01 00 02 03 11 21 04 31 12 41 05 51 71 91 32 13 33 61 a1 c1 d1 22 42 14 81 52 62 72 b2 23 43 53 34 15 11 00 02 02 01 03 05 01 00 00 00 00 00 00 00 00 00 00 01 11 02 12 31 41 03 21 71 22 33 04 61 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 65 a2 38 db e2 ca 68 da d1 ad 17 73 88 5b 37 9e 49 0c 3e 14 2c 6b 5b c0 ba ee a9 55 f0 59 2c 74 79 e3 62 38 2a 1c 7c 5c 02 f6 64 4a c7 e4 ba 84 1f 91 ac 22 d7 3c 4a f3 f8 a2 1b aa 9b ae 87 a9 cb aa 56 7e 3a 94 7f Data Ascii: 055@@?@@@@@@@@@@@@22"!1AQq23a"BRbr#CS41A!q"3a?e8hs[7I>,k[UY,tyb8*\|\dJ"<JV~:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49916	172.67.130.148	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:46 UTC	421	OUT	GET /i/630b8e4a-5e24-47cb-b22c-55c52b7964c7/fdfae5ab-cd09-45ad-ae48-904ade2ad882 HTTP/1.1 Host: insightsandmarkets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:47 UTC	1104	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bcuFwTR0jOUNW%2B2iv9lcFRKX8rZVmF6po9pwBKdILgZG5XQQ5qOGN%2BFDlSMswQDfSLptG7eu7mJbxNocI1ieAxt73rWWWnPPNGlRUBZuBtD7RmdhMDOtst%2FikDDglf8hMmoFDHbye7%2Fd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11019fdbf97d20-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2020&min_rtt=2015&rtt_var=765&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=999&delivery_rate=1420924&cwnd=207&unsent_bytes=0&cid=5df3d55b15ebdb3a&ts=811&x=0"
2024-12-12 22:03:47 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49917	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:46 UTC	725	OUT	GET /fdx-pkgmsn/files/glyphicons-halflings-regular.woff2 HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cove.richquickcart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cove.richquickcart.com/fdx-pkgmsn/files/bootstrap.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1209	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Length: 18028 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:12 GMT ETag: "466c-625d9354d2fa2" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4472 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Cj6J4pbp6nGgHHgUgOZo3X1bo8EGUL%2FiGgYwZPeGuZuFL%2BcZHPvmM5fiwRSCE3P2%2FCL30ftvIthWYJcmt%2F6zP%2BMbevzZrIrxn%2BGmVHs09kgTG%2FpIt18ChOW4pwJNsL3CNImOJjoO%2Fs7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101a04d4d429b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1586&rtt_var=606&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1303&delivery_rate=1789215&cwnd=235&unsent_bytes=0&cid=8eccc41a0a60fa6e&ts=456&x=0"
2024-12-12 22:03:46 UTC	160	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 46 6c 00 0f 00 00 00 00 b1 5c 00 00 46 09 00 01 02 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 8c 72 08 04 11 08 0a 82 a9 24 81 e5 65 01 36 02 24 03 86 74 0b 84 30 00 04 20 05 87 22 07 95 51 3f 77 65 62 66 06 1b 65 8c 35 ec 98 8f 80 f3 40 a0 c2 3f fe be 08 0a da f6 88 20 1b ac 74 f6 ff 9f 94 a0 86 8c c1 93 c7 d8 dc 2c 33 2b 0f 32 71 0d cb 46 16 ae 59 4f 1b ec 04 26 3e b1 e9 b1 62 d2 6d a4 35 81 Data Ascii: wOF2Fl\FM?FFTM `r$e6$t0 "Q?webfe5@? t,3+2qFYO&>bm5
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 5a 8e e6 48 24 b1 aa 59 8a 19 9c bd 7b ec 48 09 6a 64 86 0b d5 89 0c fc b2 25 f7 b9 d9 a7 7f 79 22 a7 04 03 f7 f6 d7 2b 8d 40 b9 8c 5d bd ab 65 9f fb 7b fa d2 fb 76 90 a0 4e 63 8b 29 0e bb 6e f9 93 c9 3f 7e 3f e8 90 a4 68 f2 00 ff 9e 5f e7 26 69 1f c6 ca c8 1d d1 9d 05 c1 a4 8b 3f ba 3e fc e5 5e 4b 20 fb 76 b4 2d 1b 63 db 8d 31 ed f4 80 12 89 32 4b a0 e1 79 b7 f5 2c 27 6e e4 ab e0 00 07 28 f0 33 45 77 69 e0 42 05 17 82 a0 26 a9 ff 0b e9 ce 54 b4 6c 68 d8 30 4d 1a d2 d8 da d2 86 64 e5 59 d8 72 f1 ef b2 ac b3 6e 74 69 de 5d dd 79 75 72 95 b4 bc ae fb 99 ee 13 56 58 73 6a 0e a1 a2 9e e5 67 4d 6e 19 aa d3 99 48 81 57 95 a9 c3 d4 08 20 72 32 f4 3e 69 54 60 56 37 b8 cd 52 28 b1 a8 c9 cf 1a e0 ff 2b a0 6f 36 f3 27 63 c5 c8 42 b0 8f e6 06 eb 34 e7 b7 d6 ce b9 dd Data Ascii: ZH$Y{Hjd%y"+@]e{vNc)n?~?h_&i?>^K v-c12Ky,'n(3EwiB&Tlh0MdYrnti]yurVXsjgMnHW r2>iT`V7R(+o6'cB4
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 02 4f 9c c1 20 d2 d0 04 13 f1 82 87 d8 46 12 75 8a 6e 20 16 37 3f 25 52 03 47 34 22 84 b8 66 a9 67 c7 c1 46 ea ba 81 20 0e 61 3d 82 91 2d b3 d5 51 97 e1 bd 79 2b 42 bd 2c c4 f8 d0 32 c3 cb 13 d6 85 35 a2 95 87 f0 99 84 8c 78 6e a1 05 15 ce aa 04 66 2a 21 a1 b3 e6 eb 6c e2 7c 47 58 51 f8 20 de 83 55 70 94 e4 0a c5 45 75 20 c2 40 9e 01 8f a6 e5 2d f0 80 04 1f 44 6f 2e 36 59 5a f6 82 2d 26 61 3e 66 12 3f 9b 00 ab 93 4e 8f 4e 9c a2 09 5d d4 4f 2f 5e 3b 5c da 0e c2 4a ca 0d cf 42 06 c7 45 73 4a 72 19 04 aa 90 19 01 a0 c4 9a f5 c6 0f 14 27 f2 85 67 12 2f e3 e3 d1 42 17 25 9f a1 1e 6f 20 1f 43 f5 ea ba 6e 95 37 8b dc 3a 05 7c f5 79 83 4b 74 b2 26 f7 24 a7 d8 73 af 7c b9 f5 77 50 88 f9 c4 5c 69 5d be 24 5a 12 40 2b 01 cd 0c b6 b6 d5 80 39 30 78 5d bb 72 b8 ad 25 Data Ascii: O Fun 7?%RG4"fgF a=-Qy+B,25xnf*!l\|GXQ UpEu @-Do.6YZ-&a>f?NN]O/^;\JBEsJr'g/B%o Cn7:\|yKt&$s\|wP\i]$Z@+90x]r%
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: e7 72 42 e5 58 28 db 82 aa eb 82 02 54 9a 25 bf ab 0b 4a aa 08 bf 84 ad 64 68 4b c4 1f 94 f3 b6 50 93 b2 4b c1 1e 54 46 61 41 87 33 48 48 86 43 5b 72 3b 61 9b c0 b6 64 02 b7 99 17 87 1a 95 35 34 c8 cc 0c 89 97 6c 4c 84 6b 03 6a 47 0f 1a 7b a1 ec 38 9f 68 7e e4 8f 07 0d 66 52 40 03 d0 ec fc 1e 39 77 e0 42 a8 a4 e0 d0 30 eb 0b 7a 53 f5 f4 b0 e2 ff 27 97 a0 14 02 61 37 03 82 40 dd 40 4e 9b b1 8a dd c6 b9 6c 91 62 18 6a 33 0f 68 4e 04 13 ee b2 58 f6 8b 46 2f c9 ed 65 a2 73 a3 d9 27 fa 8a 44 73 51 ab f1 3c fe 6b 5e d3 ed 1d f2 d7 bc b2 fd 88 5a 41 53 4f a8 69 17 64 ba 53 4a e3 78 1c 4e 34 44 bd b3 c0 4b d3 21 b4 b9 d4 f9 09 21 d9 ab 76 89 ac 68 41 60 db 45 96 b7 58 10 90 95 00 02 bc ca 2d 0d a2 50 0d ed c4 3a 9f 82 db d1 a4 1b 7f 43 ea 3a c2 c2 57 cd 7a 53 bd Data Ascii: rBX(T%JdhKPKTFaA3HHC[r;ad54lLkjG{8h~fR@9wB0zS'a7@@Nlbj3hNXF/es'DsQ<k^ZASOidSJxN4DK!!vhA`EX-P:C:WzS
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 12 19 e0 bb 3d 0f fe 77 52 d9 2f ad ab 6f 44 4a 73 35 16 7a 3e 93 3b 8a 27 78 dd f1 45 06 d0 71 15 5e 06 72 e9 5e 3d 47 1a 3f bd 85 39 41 ea a1 06 7f e6 96 c7 41 e4 5f 97 a3 06 ed 4b 25 b5 44 c9 ae 3a 75 69 6b 6a 6b ee 49 18 65 c9 e6 bd 1a ac 47 fa d5 9d 23 2a a1 86 29 b5 6a 6d 06 91 e1 7c bd 74 a3 b9 7d 60 01 4a e6 a9 5a d8 88 e9 d6 f7 17 07 03 48 0f 3d 34 ee 9d 7b 67 df 81 a2 be 29 a1 71 58 88 4d 41 2c 17 9a 48 f8 8c 37 18 fb 31 89 eb 56 22 a5 d9 14 0f 6f 2c e7 59 23 68 12 fd fc f7 dd a8 53 17 f2 5f ea 3b 8b cd 61 5f d4 97 5a 5e 63 6e 34 a2 ad 10 8d a0 82 48 b8 45 ab ae 3f 89 ab b0 11 7d d1 0a c8 9d a1 bb ad dc ee bc d9 a4 3d 7d 42 9e 57 76 de aa 55 65 f0 e5 68 9a 17 83 da 00 47 1d 8a 93 46 90 85 89 91 e6 3b 9d 40 32 53 a5 d8 01 9c 80 40 cb 66 20 05 fe Data Ascii: =wR/oDJs5z>;'xEq^r^=G?9AA_K%D:uikjkIeG#*)jm\|t}`JZH=4{g)qXMA,H71V"o,Y#hS_;a_Z^cn4HE?}=}BWvUehGF;@2S@f
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 1b 99 5a d3 4b 94 c4 9e 13 42 7b 92 44 cc 74 f8 26 89 bd d4 7a 92 d3 f7 29 b5 17 55 6f 61 f9 35 51 a6 33 8f 91 c8 97 88 72 7e bf 8e 91 be 0a a6 01 f4 d9 f9 46 5d 11 a0 24 ba 3c e8 04 fa 74 6d 28 9a 7d 0c fb c3 cf 4d 42 40 87 9e 5b 9c 47 78 ec 08 ce 46 d3 05 68 10 38 00 9b 23 7d 88 f4 2c a3 23 c0 98 75 0b fd 4c 61 7a 28 de 51 68 b1 34 25 d3 78 01 6d 04 60 55 13 e0 95 d5 b9 2e 45 11 a8 e3 76 31 61 92 9e 34 0e 5f 27 2f 5b a8 64 b1 7b 46 78 a8 49 ca 35 39 9e 8c 0c 83 44 f5 11 3c ea ec 26 90 38 56 88 45 f3 46 67 c9 c8 d9 0b e8 8a 98 23 f5 49 91 e4 9f 8d 32 53 b2 cd ee ff 5f 06 0f e3 a9 5d 51 71 41 13 9a 6e 88 d1 5f f0 51 19 e7 07 12 3e 62 de 98 34 67 a1 19 a8 ad 13 b1 2d ae 01 30 26 07 45 23 63 a6 dc 69 38 bf 09 76 52 2f d5 34 ff 18 72 9e 8a eb 08 9a 50 37 95 Data Ascii: ZKB{Dt&z)Uoa5Q3r~F]$<tm(}MB@[GxFh8#},#uLaz(Qh4%xm`U.Ev1a4_'/[d{FxI59D<&8VEFg#I2S_]QqAn_Q>b4g-0&E#ci8vR/4rP7
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: a6 3f c0 05 d2 08 e7 58 31 b9 c0 cf 43 ef d6 0a 61 a5 bf e9 ee 6e 30 6f b9 72 31 d1 0c 99 1e 17 2f 55 ad a5 89 9d 05 f5 0b ce 6f 8f 2f 0f 3f e9 95 e2 99 af 61 f9 d3 5f ac 70 15 ea 8f 48 d6 b1 0d 47 f5 ec b4 a0 a6 c2 38 9f dd a3 3f 33 46 89 30 f0 07 98 80 d9 60 25 c3 f7 cf 91 c4 d3 3c 8d 0a 47 9a 5d d4 bd 9c 19 38 62 6c cd 8f 25 2d 2c c2 29 7d 25 9e 03 4a 94 3a 16 b9 59 02 ad d2 6a d0 1b 10 54 cd 3b d0 ab c8 b6 35 c5 92 3e 9e 36 1c bd 9f 90 77 d2 7b 0f 9c 56 e9 a4 83 2e 26 13 a3 f6 28 86 0e 6f b9 a9 2a f5 6e 3c a7 d8 6e 39 06 a1 06 c1 4a 96 0a 22 61 87 07 a9 0b d0 94 08 cd dd 2b a1 86 0b 61 ca 2f bb fd ba ba f0 3b 37 7a 44 d8 5a ce b7 11 7b d7 74 8f 4d 09 4d 70 97 a3 09 69 d8 9a 6b bc 4e 50 77 88 d8 91 cd ba f0 48 60 54 0d f6 24 32 33 1b 96 86 66 1e d3 f6 Data Ascii: ?X1Can0or1/Uo/?a_pHG8?3F0`%<G]8bl%-,)}%J:YjT;5>6w{V.&(o*n<n9J"a+a/;7zDZ{tMMpikNPwH`T$23f
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: a4 9c c6 c3 f5 37 17 be 54 f6 e3 72 71 7a dc 46 b5 25 17 d7 af 7c 99 9a 55 3c 5a a4 dc 6f c1 13 5b 54 41 3d 8e 84 04 d0 27 44 50 4a 5d b4 3b 2c 55 39 19 af b5 ca 51 9b b1 d3 70 8a 9e 6b 06 f1 34 7e 80 1d ea e1 06 c1 e2 06 5f 05 8d 43 aa 5e 99 71 45 a2 c5 ae 90 9c 62 0d 81 53 47 73 da f8 df ed 7f 59 85 9d 32 4e 96 41 0e ae d2 75 ed ae 1f 25 f0 f0 53 44 84 82 20 d7 68 6a 09 0a ff 79 3b 39 24 df b4 49 41 a8 d5 68 e4 04 45 4f 8f cc 11 84 e1 b2 cb 7d 0a a8 16 67 89 b3 ac 85 14 97 2f 2b 20 f9 d5 83 93 ef 35 9d 4a 59 ca 20 40 e4 07 47 fa f8 8d 8d fc be 82 ea ae 66 32 14 90 a2 b4 04 97 59 a0 c4 e7 2f b8 c2 df bc 99 7f 65 84 df b7 b9 b1 7c 76 de 2f 16 1f b8 22 de ff d5 70 e5 80 d8 7e e5 88 8b f1 54 e3 f4 38 1e 4f 4b f3 72 2a d2 0f 9e dd 2a 0d 86 83 1d c0 13 34 68 Data Ascii: 7TrqzF%\|U<Zo[TA='DPJ];,U9Qpk4~_C^qEbSGsY2NAu%SD hjy;9$IAhEO}g/+ 5JY @Gf2Y/e\|v/"p~T8OKr**4h
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: 46 07 33 33 ad d2 a7 b6 85 ab 3c 24 27 db 0e bb b8 47 97 45 2b b4 da 7d a5 a5 ce f3 fa f3 a7 85 27 31 f0 66 33 9b c6 fd d2 79 d0 35 dd 2f 26 a4 5a 9c 5c 1a 52 42 f4 37 64 6d ed f4 5d e6 bc 38 a7 a7 c2 5c cd fd 01 84 33 df 82 84 c8 aa 98 40 f7 ec 6f bf fb 54 e9 bf 33 65 75 5e 12 1d b7 57 40 8a aa 15 fc 94 96 8e a6 65 37 6c 96 1e 07 21 42 e3 2c c0 73 82 e4 e6 31 dc cd df 24 9a e4 1b f2 af db 5a a7 e3 26 d9 14 92 e7 3f 03 af e2 64 43 e9 e1 20 9d 28 59 d0 a6 53 6d 3e 82 4a 22 26 70 74 de dc 88 aa 50 e3 87 84 03 42 1b 01 46 ac 14 f8 b4 9d da 04 b1 e0 d9 f8 34 8c 47 e1 35 9c 09 74 5e 1d c4 86 24 af de f2 6a 2d 61 e3 a0 8d 67 1a 5e c1 0e ca 90 43 a4 12 96 85 83 41 02 73 d6 54 3d 6b a1 54 53 2c 7c 0e 80 72 e0 e5 0f 9a 39 49 b7 0f bd 42 cf 98 07 d0 ac 86 f6 27 01 Data Ascii: F33<$'GE+}'1f3y5/&Z\RB7dm]8\3@oT3eu^W@e7l!B,s1$Z&?dC (YSm>J"&ptPBF4G5t^$j-ag^CAsT=kTS,\|r9IB'
2024-12-12 22:03:46 UTC	1369	IN	Data Raw: af 65 fa 23 2d 9f 98 18 b7 3b 6f 4a 98 c4 8b e3 d2 e6 8e d4 9d 3e 29 0b c7 fd 82 3b 4a 67 ed a3 cf 7f d7 ad 39 52 3b 4f 67 ed a2 1f c5 fd 69 49 37 fa 7d 97 e2 38 4b a1 92 9c 1f db 81 04 71 a6 6a 8f b9 d1 65 d8 93 a3 2b d9 97 27 6e f1 cf b7 6b 33 8b c1 ad bb 07 fc 65 46 cf 81 03 fb 05 9e ec 0e 85 30 b1 9a f2 af df 56 23 a9 ed c6 70 a5 4d 41 7a 62 5e 50 8e f7 56 cf 75 a4 db 7e de 31 75 ba 97 d2 93 95 77 1e 6e c8 09 5e 9b 2e 49 49 97 a1 8a 5f 1c c6 cc da 76 64 57 ae c8 f6 8f f3 ce 5b 51 2c cd de e8 2b 4c 0f 04 be 62 82 16 ed be c9 02 a5 e5 84 c6 c4 87 71 bc fe 0d 39 ab 56 1c 7d ef 09 94 ce 8f 56 d1 77 34 71 55 e4 33 26 6a db c4 b1 48 59 62 bc 20 fc b9 88 0b 15 bf 74 15 74 8d 54 9c f5 88 37 cf 81 f2 92 ab d9 61 16 72 42 77 50 39 3f 29 db 75 95 e9 8b 54 2f d9 Data Ascii: e#-;oJ>);Jg9R;OgiI7}8Kqje+'nk3eF0V#pMAzb^PVu~1uwn^.II_vdW[Q,+Lbq9V}Vw4qU3&jHYb ttT7arBwP9?)uT/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49918	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:46 UTC	622	OUT	GET /fdx-pkgmsn/f1dcdeddad5acb03b389c53b02a6e0bc.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMelF1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:46 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:46 GMT Content-Type: image/png Content-Length: 1013 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4697 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsR4LWdUVEYNB0PAEypzLmFm7jpd1fKp51AlLv0myDrGRiq5vLJpbofw5g4W5AuyxduUTsS9ojXjjTHhHik9wXjUlJuXJe3k4BKIOJA2yr1O%2FQ0M1KuRqUJqVIjdYb4p6hYuKz0Jk5vc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101a12b680f67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1673&rtt_var=651&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1200&delivery_rate=1745367&cwnd=32&unsent_bytes=0&cid=9cfe996828640b75&ts=460&x=0"
2024-12-12 22:03:46 UTC	179	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e 1e 23 30 2b 2e 27 27 27 2e 2b 35 35 30 Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0##0+.'''.+550
2024-12-12 22:03:46 UTC	834	IN	Data Raw: 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8d 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 05 03 00 01 10 00 01 03 01 04 06 06 07 09 00 00 00 00 00 00 00 01 00 02 03 11 21 31 12 04 41 51 61 22 32 05 71 d1 52 13 33 06 b1 42 62 82 14 34 15 81 91 c1 e1 72 53 93 44 54 11 00 02 01 01 06 05 05 00 00 00 00 00 00 00 00 00 00 01 02 11 21 31 51 61 12 03 41 71 32 72 13 22 52 23 33 04 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 61 d9 82 65 00 58 da db 5b 56 89 ae 11 e5 63 de ab 9c 2b a9 65 e3 0e 93 32 d6 0f 59 c0 15 6f 3e 5f 0b 43 5a 4b 5c db c5 6d bf 42 91 36 e9 42 bc a2 9b 5c 09 ad cc c4 e3 84 ba 8f ec 9b Data Ascii: 055@@?@@@@@@@@@@@@22"!1AQa"2qR3Bb4rSDT!1QaAq2r"R#3?aeX[Vc+e2Yo>_CZK\mB6B\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49925	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:48 UTC	622	OUT	GET /fdx-pkgmsn/08cddb4ea7051446f87d989fcf78ea67.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekl1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:49 UTC	1203	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:49 GMT Content-Type: image/png Content-Length: 1223 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4700 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ae4nbFRU11PUxqjp2AO0GbQsbIvSrperC%2B6GR1dMyNAIjnEEVOUI8Ay%2BqbzmN3Y4O94hjmiomuC2ctg%2F3HAjXHoPkIL%2B5oJq1E%2BtXn4%2Biw18adxxefTYP6TWcbR6zJFzZ6ZeY%2Bg05btg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101afe952438e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1766&min_rtt=1763&rtt_var=668&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1200&delivery_rate=1630374&cwnd=206&unsent_bytes=0&cid=f5a0b787a3ee6d68&ts=462&x=0"
2024-12-12 22:03:49 UTC	166	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 10 0b 0b 0b 0c 0b 10 0c 0c 10 17 0f 0d 0f 17 1b 14 10 10 14 1b 1f 17 17 17 17 17 1f 1e 17 1a 1a 1a 1a 17 1e 1e 23 25 27 25 23 1e 2f 2f 33 33 2f 2f 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 01 11 0f 0f 11 13 11 15 12 12 15 14 11 14 11 14 1a 14 16 16 14 1a 26 1a 1a 1c 1a 1a 26 30 23 1e 1e 1e Data Ascii: ExifII*DuckyAdobed#%'%#//33//@@@@@@@@@@@@@@@&&0#
2024-12-12 22:03:49 UTC	1057	IN	Data Raw: 1e 23 30 2b 2e 27 27 27 2e 2b 35 35 30 30 35 35 40 40 3f 40 40 40 40 40 40 40 40 40 40 40 40 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 8a 00 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 05 06 04 02 07 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 03 02 01 00 10 00 02 01 02 05 01 05 05 05 09 00 00 00 00 00 00 01 02 03 00 04 11 21 31 12 05 41 51 61 22 32 13 71 82 33 14 06 81 a1 42 72 15 91 b1 c1 52 43 53 34 44 35 11 00 02 02 00 05 02 05 05 00 00 00 00 00 00 00 00 00 01 11 02 21 31 51 12 03 41 81 71 b1 22 32 42 52 72 13 33 04 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 57 d4 16 f7 10 dd 34 1b 98 c0 0f 82 32 30 19 67 a8 c8 d4 99 ad 43 44 4e 07 31 d7 51 5b 9e 4e 18 6f a7 54 70 c5 47 c4 23 20 3d ea ca 73 96 c6 2b d6 b5 85 Data Ascii: #0+.'''.+550055@@?@@@@@@@@@@@@22"!1AQa"2q3BrRCS4D5!1QAq"2BRr3?W420gCDN1Q[NoTpG# =s+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49926	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:48 UTC	622	OUT	GET /fdx-pkgmsn/b583e79cc6eb89243a82fcef5ed952b1.jpg?reci=ZXlKeWIyOTBJam9pWEM5bVpIZ3RjR3RuYlhOdVhDOGlMQ0ptYVd4bElqb2lMbHd2Wm1sc1pYTmNMekV1YW5Cbklpd2lkSGx3WlNJNkltbHRZV2RsSWl3aWRpSTZJaklpZlE9PQ==aaIiaKjaseS HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:49 UTC	1203	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:49 GMT Content-Type: image/png Content-Length: 1941 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4700 Last-Modified: Thu, 12 Dec 2024 20:45:29 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1BjSeSuBheSio5szg%2Fsus%2Byl3AOnTXWttMALxB91VHSe0qRqwEAQ1dmz%2FoSRCFtBpzBIbYXdtvwulceX8pHcya1%2BbTGVO%2BGLcisbB%2FqsyX5gTttbyR8DD0zqoM7Hefz8%2BKqDyMrJFblE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101affebc43f1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1557&min_rtt=1545&rtt_var=605&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1200&delivery_rate=1771844&cwnd=218&unsent_bytes=0&cid=fa833373c2223c10&ts=467&x=0"
2024-12-12 22:03:49 UTC	166	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f Data Ascii: ExifII*Ducky<Adobed
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 32 00 32 03 01 11 00 02 11 01 03 11 01 ff c4 00 99 00 00 03 01 00 03 00 00 00 00 00 00 00 00 00 00 00 05 06 07 04 00 03 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 02 01 00 10 00 02 01 02 04 03 04 05 08 05 0d 00 00 00 00 00 01 02 03 11 04 00 21 12 05 31 32 06 41 22 33 34 51 61 71 13 14 52 62 82 53 63 15 35 07 81 54 55 16 36 f0 91 a1 c1 d1 42 72 c2 23 24 44 17 37 11 00 01 03 03 03 02 06 03 01 01 00 00 00 00 00 00 01 00 02 03 11 21 31 51 12 04 41 13 61 71 81 22 32 14 a1 b1 52 91 d2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 7c dc 3a 98 7d e1 0e e8 f3 34 f7 76 c8 d0 c4 28 a2 26 0f 42 4b aa 73 76 52 87 db 96 26 8e 43 89 aa ac f8 9a Data Ascii: 22!12A"34QaqRbSc5TU6Br#$D7!1QAaq"2R?\|:}4v(&BKsvR&C
2024-12-12 22:03:49 UTC	406	IN	Data Raw: ed 0e 57 b4 36 c6 49 2d 23 bd 66 a2 cc ba e3 08 48 a2 b0 ca b4 e2 70 ca 55 2d 75 7e d9 d2 9b f5 dc 1b 25 f4 5a f7 29 17 5d 9b 49 0e b5 47 70 da 14 4e 41 11 c9 20 8d ca 29 3d ed 27 1c 5d 05 4e 3a 83 a1 ec cd 8a 5a d9 db 9b 0b ed ba 37 76 9a 69 42 da dd 40 a7 fd 48 e3 73 46 8e 60 41 2d 1b fd 12 45 30 9c f0 0c 84 dc 33 1c 15 36 de 76 e8 cc 06 44 8b 4b e9 33 22 b5 41 08 73 01 47 cd 14 24 76 61 68 5d 74 79 5b 64 c3 f9 63 d1 7b 97 50 af c3 6c 92 c3 69 a6 0f 88 bd bb ba 46 92 20 d2 65 0a 80 84 1a b6 64 7a 38 e0 c6 2e e3 88 28 7d d0 c6 82 15 36 0f ca 6b 28 76 d7 8e 5b a9 df 7d 80 9f f7 ad a0 32 39 fa b8 e8 63 a1 e2 85 81 20 e3 47 86 d0 2d 95 86 72 ce eb e1 28 7f d3 dd 37 fb 73 7b e6 f8 8f 37 ff 00 2f eb f9 7c 5f 56 17 ef bf f9 6e 98 fc 27 7e b3 3f a3 ae 7f 2a e1 Data Ascii: W6I-#fHpU-u~%Z)]IGpNA )=']N:Z7viB@HsF`A-E036vDK3"AsG$vah]ty[dc{PliF edz8.(}6k(v[}29c G-r(7s{7/\|_Vn'~?*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49927	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:49 UTC	1882	OUT	GET /fdx-pkgmsn/files/fx-favicon.ico HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i; _TRKPushSubscriberID=4663cdaa-3187-78f7-7e26-829221737b22
2024-12-12 22:03:49 UTC	1236	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:49 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 5430 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:10 GMT ETag: "1536-625d9352cb730" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4699 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5GBANM9bYNPWn9W12HgVmuMdlQsFOeq29JGNwTjYulT2VMObuTq9xAJO9SKd8JVrGgtSGSOe9y%2F3GQB7JsC4y0Wt8yAZpVW%2BdpLkc6c58grSVwZZpyXr2ksNSAbv8KLesrNM2apO1X1F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101b24c30727a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2013&min_rtt=2012&rtt_var=757&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2460&delivery_rate=1444114&cwnd=217&unsent_bytes=0&cid=4f7a5d05a27d9545&ts=464&x=0"
2024-12-12 22:03:49 UTC	133	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff Data Ascii: h& (
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff Data Ascii:
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff Data Ascii:
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 14 4d ff 8c 14 4d ff a5 48 74 ff ff ff ff 00 ff ff ff 00 d9 b2 c4 ff 8c 14 4d ff 8c 14 4d ff 93 22 57 ff 8c 14 4d ff 8c 14 4d ff e0 c0 d0 ff a7 4b 77 ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 00 6b ff ff 00 6b ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 8b b9 ff ff 00 66 ff ff 00 66 ff ff 83 b5 ff ff 45 8f ff ff 00 66 ff ff 00 66 ff ff c8 de ff ff 8c 14 4d ff 8c 14 4d ff aa 51 7b ff ff ff ff 00 ff ff ff 00 a9 50 7a ff 8c 14 4d ff cb 94 ae ff fd fb fc ff d8 af c2 ff c4 87 a4 ff b4 66 8b ff 8c 14 4d ff 91 1e 55 ff da b4 c6 ff dd ba cb ff 8c 14 4d ff 8c 14 4d ff 00 6b ff ff 00 6b ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff ff ff ff 00 5c 9d ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 8f bc ff ff ff ff ff 00 Data Ascii: MMHtMM"WMMKwMMMMMkkffffffEffMMQ{PzMfMUMMkkffff\ffff
2024-12-12 22:03:49 UTC	1190	IN	Data Raw: ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49928	104.21.1.144	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:49 UTC	376	OUT	GET /javascripts/trackpush-v2-cm.js HTTP/1.1 Host: pushrev.pushbroker.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:49 UTC	1232	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4737 Last-Modified: Thu, 12 Dec 2024 20:44:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2FvwzxGmbXbSJNnFHzwBJXtkeoxTtqv2b32VYnkhCSB%2FEDHfqrRYTHBHVG7T7fga7Eh09F9c29FqS6mW3M5Dd%2BcIMrwNaGDOcl4cL%2F652nDIlVDErImghuK15i5ZcR6KfSpl3DQEMF9D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101b31b1f19b6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2640&min_rtt=2633&rtt_var=1003&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=954&delivery_rate=1083086&cwnd=170&unsent_bytes=0&cid=c9101613ad579190&ts=456&x=0"
2024-12-12 22:03:49 UTC	137	IN	Data Raw: 37 32 33 39 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 44 65 66 65 72 72 65 64 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 5f 64 6f 6e 65 20 3d 20 5b 5d 2c 20 74 68 69 73 2e 5f 66 61 69 6c 20 3d 20 5b 5d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 Data Ascii: 7239function _TRKPushDeferred() { this._done = [], this._fail = []}function getUrlVars() { var a = {}; window.loca
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 26 5d 2b 28 5b 5e 3d 26 5d 2b 29 3d 28 5b 5e 26 5d 2a 29 2f 67 69 2c 20 66 75 6e 63 74 69 6f 6e 28 62 2c 20 63 2c 20 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 5b 63 5d 20 3d 20 64 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 61 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 62 61 73 65 36 34 53 74 72 69 6e 67 29 20 7b 0d 0a 20 20 63 6f 6e 73 74 20 70 61 64 64 69 6e 67 20 3d 20 27 3d 27 2e 72 65 70 65 61 74 28 28 34 20 2d 20 62 61 73 65 36 34 53 74 72 69 6e 67 2e 6c 65 6e 67 74 68 20 25 20 34 29 20 25 20 34 29 3b 0d 0a 20 20 63 6f 6e 73 74 20 62 61 73 65 36 34 20 3d 20 28 62 61 73 65 36 34 53 74 72 69 6e Data Ascii: tion.href.replace(/[?&]+([^=&]+)=([^&]*)/gi, function(b, c, d) { a[c] = d }); return a}function urlBase64ToUint8Array(base64String) { const padding = '='.repeat((4 - base64String.length % 4) % 4); const base64 = (base64Strin
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 7c 74 61 29 7c 68 70 28 20 69 7c 69 70 29 7c 68 73 5c 2d 63 7c 68 74 28 63 28 5c 2d 7c 20 7c 5f 7c 61 7c 67 7c 70 7c 73 7c 74 29 7c 74 70 29 7c 68 75 28 61 77 7c 74 63 29 7c 69 5c 2d 28 32 30 7c 67 6f 7c 6d 61 29 7c 69 32 33 30 7c 69 61 63 28 20 7c 5c 2d 7c 5c 2f 29 7c 69 62 72 6f 7c 69 64 65 61 7c 69 67 30 31 7c 69 6b 6f 6d 7c 69 6d 31 6b 7c 69 6e 6e 6f 7c 69 70 61 71 7c 69 72 69 73 7c 6a 61 28 74 7c 76 29 61 7c 6a 62 72 6f 7c 6a 65 6d 75 7c 6a 69 67 73 7c 6b 64 64 69 7c 6b 65 6a 69 7c 6b 67 74 28 20 7c 5c 2f 29 7c 6b 6c 6f 6e 7c 6b 70 74 20 7c 6b 77 63 5c 2d 7c 6b 79 6f 28 63 7c 6b 29 7c 6c 65 28 6e 6f 7c 78 69 29 7c 6c 67 28 20 67 7c 5c 2f 28 6b 7c 6c 7c 75 29 7c 35 30 7c 35 34 7c 5c 2d 5b 61 2d 77 5d 29 7c 6c 69 62 77 7c 6c 79 6e 78 7c 6d 31 5c 2d 77 Data Ascii: \|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(20\|go\|ma)\|i230\|iac( \|\-\|\/)\|ibro\|idea\|ig01\|ikom\|im1k\|inno\|ipaq\|iris\|ja(t\|v)a\|jbro\|jemu\|jigs\|kddi\|keji\|kgt( \|\/)\|klon\|kpt \|kwc\-\|kyo(c\|k)\|le(no\|xi)\|lg( g\|\/(k\|l\|u)\|50\|54\|\-[a-w])\|libw\|lynx\|m1\-w
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 70 61 67 65 54 69 74 6c 65 3a 20 70 61 67 65 54 69 74 6c 65 2c 0d 0a 20 20 20 20 20 20 20 20 70 61 67 65 55 52 4c 3a 20 70 61 67 65 55 52 4c 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 47 65 74 52 65 66 65 72 72 65 72 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 66 55 72 6c 20 3d 20 6e 75 6c 6c 2c 20 72 65 66 4e 61 6d 65 20 3d 20 6e 75 6c 6c 2c 20 30 20 21 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2e 69 6e 64 65 78 4f 66 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 22 2f 2f 22 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 20 26 26 20 28 72 65 66 55 72 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 3f 20 64 6f 63 75 6d 65 Data Ascii: pageTitle: pageTitle, pageURL: pageURL }}function _TRKPushGetReferrer() { return refUrl = null, refName = null, 0 !== document.referrer.indexOf(location.protocol + "//" + location.host) && (refUrl = document.referrer ? docume
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 78 4f 66 28 22 53 61 66 61 72 69 22 29 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 53 61 66 61 72 69 22 2c 20 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 37 29 2c 20 28 67 20 3d 20 62 2e 69 6e 64 65 78 4f 66 28 22 56 65 72 73 69 6f 6e 22 29 29 20 21 3d 20 2d 31 20 26 26 20 28 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 38 29 29 29 20 3a 20 28 67 20 3d 20 62 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 46 69 72 65 66 6f 78 22 2c 20 64 20 3d 20 62 2e 73 75 62 73 74 72 69 6e 67 28 67 20 2b 20 38 29 29 20 3a 20 62 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 20 21 3d 20 2d 31 20 3f 20 28 63 20 3d 20 22 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e Data Ascii: xOf("Safari")) != -1 ? (c = "Safari", d = b.substring(g + 7), (g = b.indexOf("Version")) != -1 && (d = b.substring(g + 8))) : (g = b.indexOf("Firefox")) != -1 ? (c = "Firefox", d = b.substring(g + 8)) : b.indexOf("Trident/") != -1 ? (c = "Microsoft Intern
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 6e 64 6f 77 73 20 56 69 73 74 61 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 57 69 6e 64 6f 77 73 20 4e 54 20 36 2e 30 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 57 69 6e 64 6f 77 73 20 4e 54 20 35 2e 32 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 69 6e 64 6f 77 73 20 58 50 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 28 57 69 6e 64 6f 77 73 20 4e 54 20 35 2e 31 7c 57 69 6e 64 6f 77 73 20 58 50 29 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 57 Data Ascii: ndows Vista", r: /Windows NT 6.0/ }, { s: "Windows Server 2003", r: /Windows NT 5.2/ }, { s: "Windows XP", r: /(Windows NT 5.1\|Windows XP)/ }, { s: "W
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 51 4e 58 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 51 4e 58 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 55 4e 49 58 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 55 4e 49 58 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 42 65 4f 53 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 42 65 4f 53 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 4f 53 2f 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 3a 20 2f 4f 53 5c 2f 32 2f 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 22 53 65 61 72 63 68 20 42 6f 74 22 2c Data Ascii: QNX", r: /QNX/ }, { s: "UNIX", r: /UNIX/ }, { s: "BeOS", r: /BeOS/ }, { s: "OS/2", r: /OS\/2/ }, { s: "Search Bot",
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 20 5f 54 52 4b 50 75 73 68 47 65 74 50 75 73 68 54 6f 6b 65 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0d 0a 09 09 6c 65 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 3d 20 61 5b 31 5d 3b 0d 0a 09 09 61 20 3d 20 61 5b 30 5d 3b 0d 0a 20 20 20 20 20 20 20 20 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 75 73 68 5f 74 6f 6b 65 6e 20 3d 20 61 2c 20 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 20 3d 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2c 20 5f 54 52 4b 50 75 73 68 54 72 61 63 6b 41 74 74 72 69 62 75 74 65 73 28 5f 61 74 2e 61 74 74 72 69 62 75 74 65 73 29 2c 20 5f 54 52 4b 50 75 73 68 53 65 6e 64 54 72 61 63 6b 44 61 74 61 28 74 72 61 63 6b 44 61 74 61 29 0d 0a 20 20 20 20 7d 29 2c 20 21 31 29 20 Data Ascii: _TRKPushGetPushToken().then(function(a) {let subscription = a[1];a = a[0]; _at.attributes.push_token = a, _at.attributes.subscription = subscription, _TRKPushTrackAttributes(_at.attributes), _TRKPushSendTrackData(trackData) }), !1)
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 70 72 6f 6d 70 74 49 64 20 3e 20 30 20 3f 20 5f 54 52 4b 50 75 73 68 4c 6f 61 64 50 72 6f 6d 70 74 28 70 72 6f 6d 70 74 49 64 2c 20 61 75 74 6f 5f 70 72 6f 6d 70 74 29 20 3a 20 31 20 3d 3d 20 61 75 74 6f 5f 70 72 6f 6d 70 74 20 26 26 20 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 28 29 0d 0a 20 20 20 20 7d 29 20 3a 20 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 50 55 53 48 4e 4f 54 49 46 49 43 41 54 49 4f 4e 53 5d 20 2d 20 69 64 53 69 74 65 20 6d 75 73 74 20 62 65 20 73 65 74 2e 22 29 2c 20 21 31 29 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 47 65 74 53 69 74 65 43 6f 6e 66 69 67 28 61 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 Data Ascii: } promptId > 0 ? _TRKPushLoadPrompt(promptId, auto_prompt) : 1 == auto_prompt && _TRKPushPrompt() }) : (console.warn("[PUSHNOTIFICATIONS] - idSite must be set."), !1)}function _TRKPushGetSiteConfig(a) { return new Promise
2024-12-12 22:03:49 UTC	1369	IN	Data Raw: 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 44 65 6e 79 28 29 20 7b 0d 0a 20 20 20 20 73 68 6f 77 44 65 62 75 67 20 26 26 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 50 55 53 48 4e 4f 54 49 46 49 43 41 54 49 4f 4e 53 5d 20 2d 20 43 75 73 74 6f 6d 20 70 72 6f 6d 70 74 20 64 65 6e 69 65 64 2e 22 29 2c 20 5f 54 52 4b 50 75 73 68 53 65 74 43 6f 6f 6b 69 65 28 22 5f 54 52 4b 50 75 73 68 50 72 6f 6d 70 74 44 65 6e 69 65 64 22 2c 20 21 30 2c 20 31 34 29 2c 20 5f 61 74 2e 70 72 6f 6d 70 74 2e 61 63 74 69 6f 6e 20 3d 20 22 64 65 6e 69 65 64 22 2c 20 5f 54 52 4b 50 75 73 68 4f 70 74 49 6e 52 65 73 70 6f 6e 73 65 28 5f 61 74 2e 70 72 6f 6d 70 74 29 2c 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 Data Ascii: function _TRKPushPromptDeny() { showDebug && console.log("[PUSHNOTIFICATIONS] - Custom prompt denied."), _TRKPushSetCookie("_TRKPushPromptDenied", !0, 14), _at.prompt.action = "denied", _TRKPushOptInResponse(_at.prompt), document.getElementById("p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49929	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:50 UTC	1680	OUT	GET /service_worker.js HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i
2024-12-12 22:03:50 UTC	1244	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 16 Oct 2024 16:58:48 GMT ETag: W/"52-6249afbc7c200-gzip" Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4881 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2BDQNfdQT8KixXbfXCKZehEBiksH3kYtLPzdzPYPBFbNXqCdoMY1KAG4e6p4p7NeSLZ82j9SruIvf6lV3D9m6OsiB8OVUrHjWpF5S5MM3NzHGd8Gumqe5fIAAIIxRIb0oswMqT%2Ftvi5d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101b7df1341ed-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1597&min_rtt=1597&rtt_var=798&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4226&recv_bytes=2258&delivery_rate=75317&cwnd=211&unsent_bytes=0&cid=89cfec203eb6da22&ts=496&x=0"
2024-12-12 22:03:50 UTC	88	IN	Data Raw: 35 32 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 70 75 73 68 6c 69 74 65 2e 70 75 73 68 62 72 6f 6b 65 72 2e 63 6f 6d 2f 6a 61 76 61 73 63 72 69 70 74 73 2f 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 2e 6a 73 3f 76 31 27 29 3b 0d 0a Data Ascii: 52importScripts('https://pushlite.pushbroker.com/javascripts/service_worker.js?v1');
2024-12-12 22:03:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49930	104.21.68.16	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:50 UTC	1668	OUT	GET /manifest.json HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx6ZcnVALWWTghFaOmtEfau5%2FlH65dn8ZCwy5HWOPe9hqaeJyRkoayc93HENdKnbr6dyIr%2B6Nli%2B8zVWc%2BMiXRTD8bmBIMNZbDgtRVZTkwoA755RKUNvEomkkEgPqF8lYzvtArvPJz8aBcHoO%2Fq0Fbo1p3rteZccOMb1kBk07OCP1yO4ddaV59Ens6Csq3IAKAGXOViPRyCFOrb9zjlQau2BJrnbisa6epgfVICFKuMrTGZb4Ka6aVpb1KM%2F10HNjat8xOp70b5JW3MsFtvpRs9e1il0ZWZUU%2Bj9joRp9nWi2wfscuE1Kb0Hd%2FaOzNkCCgiR8rGhgDjU8vYkcI979gXn9hNS9%2FmX4wz2GBrEiX5OTCAnpdRHpF5aBiSOOTo5h%2BXYv2mg2sdb93yfXcZIKbite9AKWkDl6hCWD%2F9wrdxez%2Bzq7k5hnNJwQb1nDXRInkthzQVOSz2rB3Hd0niEBI6t4KG0tkcQUquKnXGwSHhF043DgpApogWpSTDee8lSK5OsMZZnRCGBKJ5chhAJdXV1mV3Ul%2FLAcuSsiJUi48PbhH8RA%2B6sCLE%2BWMZFqiiCxRRJEi%2F8zXRaQL8gAV88Kilsx6IgBXtXz5a%2FCibNRIXq1ktXC7JedsDtLpjNYXcuQ8%2BjiFsA4VXrXRS4Z5o9dg%2B0NJQwTIK29yfAttfd50ono5Dk%2F%2BOV%2FlgCW1wpQt5EfeecUewQRFc%2FelMdUVGBBAPfACNSY700znH5sKVjL%2FNRXfavYbJWEQ7jAf%2B4y7ChxtK8ecIFS66YjPN16TfbTFw%2FTGFbycsfitRQ6qbfpo03fZEFuAe%2F%2FVmfwrLtnm1P%2F5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:50 UTC	1192	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:50 GMT Content-Type: application/json Content-Length: 42 Connection: close Last-Modified: Wed, 25 Oct 2023 20:20:22 GMT ETag: "2a-608902f51aef8" Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TT2Ogtox02Iq2wRtJjWxYmprBtlxzcO3HGtTxnL5EVV0SDI7UO8Bt3Y2v3s%2F5CIn1Xqh6LS%2B9MWL9PKiXYIO3jNoEZVQe3eW2Ls%2B%2FFCMM63rg%2BfeCDrnq8NFunOA4tXYCS7GQd3OfnH6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101b7ee538c05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2014&min_rtt=2014&rtt_var=1007&sent=8&recv=9&lost=0&retrans=1&sent_bytes=4226&recv_bytes=2246&delivery_rate=80241&cwnd=215&unsent_bytes=0&cid=c0af6418e6b0519d&ts=872&x=0"
2024-12-12 22:03:50 UTC	42	IN	Data Raw: 7b 20 20 20 0d 0a 20 20 22 67 63 6d 5f 73 65 6e 64 65 72 5f 69 64 22 3a 20 22 33 32 35 33 37 37 36 39 32 38 38 31 22 0d 0a 7d Data Ascii: { "gcm_sender_id": "325377692881"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49933	172.67.184.220	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:52 UTC	512	OUT	GET /fdx-pkgmsn/files/fx-favicon.ico HTTP/1.1 Host: cove.richquickcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=88ajsf8rnkfbbpvlkv332rnqvr; cid=w9m2bptvgkqebu86jhi9555i; _TRKPushSubscriberID=4663cdaa-3187-78f7-7e26-829221737b22
2024-12-12 22:03:52 UTC	1238	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:52 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 5430 Connection: close Last-Modified: Fri, 01 Nov 2024 12:38:10 GMT ETag: "1536-625d9352cb730" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4702 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nWLcAoBxXLb3KwYWG%2BX0XGsjyejaORPAprHweHHl1YEs1w5GMdabH8qLyTbDdDGSI%2Ftjdn9JACuboPlRWJlSaHe%2B5sLHmt0J8Sb0i6ohRqq7iCc3GIMwg4gmhJavAKfm3Wx4DBrs340"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101c47c13435b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1798&min_rtt=1774&rtt_var=682&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1090&delivery_rate=1645997&cwnd=214&unsent_bytes=0&cid=e59d368ae6bb2c56&ts=457&x=0"
2024-12-12 22:03:52 UTC	131	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h& (
2024-12-12 22:03:52 UTC	1369	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii:
2024-12-12 22:03:52 UTC	1369	IN	Data Raw: ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii:
2024-12-12 22:03:52 UTC	1369	IN	Data Raw: 00 8c 14 4d ff 8c 14 4d ff a5 48 74 ff ff ff ff 00 ff ff ff 00 d9 b2 c4 ff 8c 14 4d ff 8c 14 4d ff 93 22 57 ff 8c 14 4d ff 8c 14 4d ff e0 c0 d0 ff a7 4b 77 ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 8c 14 4d ff 00 6b ff ff 00 6b ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 8b b9 ff ff 00 66 ff ff 00 66 ff ff 83 b5 ff ff 45 8f ff ff 00 66 ff ff 00 66 ff ff c8 de ff ff 8c 14 4d ff 8c 14 4d ff aa 51 7b ff ff ff ff 00 ff ff ff 00 a9 50 7a ff 8c 14 4d ff cb 94 ae ff fd fb fc ff d8 af c2 ff c4 87 a4 ff b4 66 8b ff 8c 14 4d ff 91 1e 55 ff da b4 c6 ff dd ba cb ff 8c 14 4d ff 8c 14 4d ff 00 6b ff ff 00 6b ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff ff ff ff 00 5c 9d ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 00 66 ff ff 8f bc ff ff ff ff Data Ascii: MMHtMM"WMMKwMMMMMkkffffffEffMMQ{PzMfMUMMkkffff\ffff
2024-12-12 22:03:52 UTC	1192	IN	Data Raw: ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49934	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:03:53 UTC	457	OUT	GET /javascripts/service_worker.js?v1 HTTP/1.1 Host: pushlite.pushbroker.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:03:53 UTC	1237	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:03:53 GMT Content-Type: application/javascript Content-Length: 9738 Connection: close Last-Modified: Mon, 08 Jul 2024 17:05:04 GMT ETag: "668c1c40-260a" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2143 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t8xDxcXly7LzKGdolruHNfLjmAYc2ObAdr9q8C0guJLvzY8KszQlKHvF5EbnzTyorTNMcR1chY62%2FBeA8N01K26NHXg7GsEc7dm49EEV3VK2TJEZketfC%2BSIgGH9tZ7ObToyIKTCdJX5lQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1101cae8508cab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2056&min_rtt=2052&rtt_var=778&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1035&delivery_rate=1398467&cwnd=240&unsent_bytes=0&cid=fec560f8ebbe5e0d&ts=457&x=0"
2024-12-12 22:03:53 UTC	132	IN	Data Raw: 76 61 72 20 5f 24 5f 35 35 37 35 3d 5b 22 5c 78 36 39 5c 78 36 45 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 36 43 5c 78 36 43 22 2c 22 5c 78 35 42 5c 78 35 30 5c 78 35 35 5c 78 35 33 5c 78 34 38 5c 78 34 45 5c 78 34 46 5c 78 35 34 5c 78 34 39 5c 78 34 36 5c 78 34 39 5c 78 34 33 5c 78 34 31 5c 78 35 34 5c 78 34 39 5c 78 34 46 5c 78 34 45 5c 78 35 33 5c 78 35 44 5c 78 32 30 5c 78 34 39 5c 78 36 Data Ascii: var _$_5575=["\x69\x6E\x73\x74\x61\x6C\x6C","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x49\x6
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 45 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 36 43 5c 78 36 43 5c 78 36 39 5c 78 36 45 5c 78 36 37 5c 78 32 30 5c 78 37 33 5c 78 36 35 5c 78 37 32 5c 78 37 36 5c 78 36 39 5c 78 36 33 5c 78 36 35 5c 78 32 30 5c 78 37 37 5c 78 36 46 5c 78 37 32 5c 78 36 42 5c 78 36 35 5c 78 37 32 22 2c 22 5c 78 36 43 5c 78 36 46 5c 78 36 37 22 2c 22 5c 78 37 33 5c 78 36 42 5c 78 36 39 5c 78 37 30 5c 78 35 37 5c 78 36 31 5c 78 36 39 5c 78 37 34 5c 78 36 39 5c 78 36 45 5c 78 36 37 22 2c 22 5c 78 37 37 5c 78 36 31 5c 78 36 39 5c 78 37 34 5c 78 35 35 5c 78 36 45 5c 78 37 34 5c 78 36 39 5c 78 36 43 22 2c 22 5c 78 36 31 5c 78 36 34 5c 78 36 34 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 34 43 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 45 5c 78 Data Ascii: E\x73\x74\x61\x6C\x6C\x69\x6E\x67\x20\x73\x65\x72\x76\x69\x63\x65\x20\x77\x6F\x72\x6B\x65\x72","\x6C\x6F\x67","\x73\x6B\x69\x70\x57\x61\x69\x74\x69\x6E\x67","\x77\x61\x69\x74\x55\x6E\x74\x69\x6C","\x61\x64\x64\x45\x76\x65\x6E\x74\x4C\x69\x73\x74\x65\x6E\x
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 5c 78 35 34 5c 78 36 39 5c 78 36 44 5c 78 36 35 22 2c 22 5c 78 33 46 5c 78 37 36 5c 78 33 44 5c 78 33 32 5c 78 32 45 5c 78 33 30 5c 78 33 31 5c 78 32 36 5c 78 37 34 5c 78 33 44 22 2c 22 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 37 35 5c 78 37 33 22 2c 22 5c 78 35 42 5c 78 35 30 5c 78 35 35 5c 78 35 33 5c 78 34 38 5c 78 34 45 5c 78 34 46 5c 78 35 34 5c 78 34 39 5c 78 34 36 5c 78 34 39 5c 78 34 33 5c 78 34 31 5c 78 35 34 5c 78 34 39 5c 78 34 46 5c 78 34 45 5c 78 35 33 5c 78 35 44 5c 78 32 30 5c 78 34 32 5c 78 36 31 5c 78 36 34 5c 78 32 30 5c 78 35 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 37 35 5c 78 37 33 5c 78 32 30 5c 78 34 33 5c 78 36 46 5c 78 36 34 5c 78 36 35 22 2c 22 5c 78 36 35 5c 78 37 32 5c 78 37 32 5c 78 36 46 5c 78 37 32 22 2c 22 Data Ascii: \x54\x69\x6D\x65","\x3F\x76\x3D\x32\x2E\x30\x31\x26\x74\x3D","\x73\x74\x61\x74\x75\x73","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x42\x61\x64\x20\x53\x74\x61\x74\x75\x73\x20\x43\x6F\x64\x65","\x65\x72\x72\x6F\x72","
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 36 33 5c 78 36 43 5c 78 36 39 5c 78 36 33 5c 78 36 42 22 2c 22 5c 78 36 33 5c 78 36 43 5c 78 36 46 5c 78 37 33 5c 78 36 35 22 2c 22 5c 78 36 45 5c 78 36 46 5c 78 37 34 5c 78 36 39 5c 78 36 36 5c 78 36 39 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 22 2c 22 5c 78 35 42 5c 78 35 30 5c 78 35 35 5c 78 35 33 5c 78 34 38 5c 78 34 45 5c 78 34 46 5c 78 35 34 5c 78 34 39 5c 78 34 36 5c 78 34 39 5c 78 34 33 5c 78 34 31 5c 78 35 34 5c 78 34 39 5c 78 34 46 5c 78 34 45 5c 78 35 33 5c 78 35 44 5c 78 32 30 5c 78 34 45 5c 78 36 46 5c 78 37 34 5c 78 36 39 5c 78 36 36 5c 78 36 39 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 30 5c 78 36 33 5c 78 36 43 Data Ascii: 61\x74\x69\x6F\x6E\x63\x6C\x69\x63\x6B","\x63\x6C\x6F\x73\x65","\x6E\x6F\x74\x69\x66\x69\x63\x61\x74\x69\x6F\x6E","\x5B\x50\x55\x53\x48\x4E\x4F\x54\x49\x46\x49\x43\x41\x54\x49\x4F\x4E\x53\x5D\x20\x4E\x6F\x74\x69\x66\x69\x63\x61\x74\x69\x6F\x6E\x20\x63\x6C
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 36 46 5c 78 36 39 5c 78 36 45 5c 78 37 34 22 2c 22 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 37 33 5c 78 33 41 5c 78 32 46 5c 78 32 46 5c 78 37 30 5c 78 37 35 5c 78 37 33 5c 78 36 38 5c 78 36 43 5c 78 36 39 5c 78 37 34 5c 78 36 35 5c 78 32 45 5c 78 36 45 5c 78 36 35 5c 78 37 30 5c 78 37 34 5c 78 37 35 5c 78 36 45 5c 78 36 35 5c 78 36 31 5c 78 36 34 5c 78 37 33 5c 78 37 30 5c 78 37 35 5c 78 37 33 5c 78 36 38 5c 78 32 45 5c 78 36 33 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 31 5c 78 37 30 5c 78 36 39 5c 78 32 46 5c 78 37 33 5c 78 37 35 5c 78 36 32 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 36 45 5c 78 36 37 5c 78 36 35 5c 78 32 46 22 5d Data Ascii: 6F\x69\x6E\x74","\x68\x74\x74\x70\x73\x3A\x2F\x2F\x70\x75\x73\x68\x6C\x69\x74\x65\x2E\x6E\x65\x70\x74\x75\x6E\x65\x61\x64\x73\x70\x75\x73\x68\x2E\x63\x6F\x6D\x2F\x61\x70\x69\x2F\x73\x75\x62\x73\x63\x72\x69\x70\x74\x69\x6F\x6E\x63\x68\x61\x6E\x67\x65\x2F"]
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 35 5b 32 31 5d 2b 20 5f 30 78 43 31 35 34 5b 5f 24 5f 35 35 37 35 5b 31 37 5d 5d 2b 20 5f 24 5f 35 35 37 35 5b 32 32 5d 2b 20 5f 30 78 43 31 35 34 5b 5f 24 5f 35 35 37 35 5b 31 39 5d 5d 2b 20 5f 24 5f 35 35 37 35 5b 32 36 5d 2b 20 28 20 6e 65 77 20 44 61 74 65 28 29 29 5b 5f 24 5f 35 35 37 35 5b 32 35 5d 5d 28 29 7d 3b 72 65 74 75 72 6e 20 66 65 74 63 68 28 5f 30 78 43 31 36 38 29 5b 5f 24 5f 35 35 37 35 5b 34 32 5d 5d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 43 31 42 38 29 7b 69 66 28 5f 30 78 43 31 42 38 5b 5f 24 5f 35 35 37 35 5b 32 37 5d 5d 21 3d 3d 20 32 30 30 29 7b 74 68 72 6f 77 20 20 6e 65 77 20 45 72 72 6f 72 28 5f 24 5f 35 35 37 35 5b 32 38 5d 29 7d 3b 72 65 74 75 72 6e 20 5f 30 78 43 31 42 38 5b 5f 24 5f 35 35 37 35 5b 34 33 5d 5d 28 29 5b 5f 24 Data Ascii: 5[21]+ _0xC154[_$_5575[17]]+ _$_5575[22]+ _0xC154[_$_5575[19]]+ _$_5575[26]+ ( new Date())[_$_5575[25]]()};return fetch(_0xC168)[_$_5575[42]](function(_0xC1B8){if(_0xC1B8[_$_5575[27]]!== 200){throw new Error(_$_5575[28])};return _0xC1B8[_$_5575[43]]()[_$
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 5d 5b 5f 24 5f 35 35 37 35 5b 34 37 5d 5d 28 29 3b 63 6f 6e 73 6f 6c 65 5b 5f 24 5f 35 35 37 35 5b 32 5d 5d 28 5f 24 5f 35 35 37 35 5b 34 39 5d 2c 5f 30 78 43 31 34 30 29 3b 76 61 72 20 5f 30 78 43 32 30 38 3d 5f 30 78 43 31 34 30 5b 5f 24 5f 35 35 37 35 5b 34 38 5d 5d 5b 5f 24 5f 35 35 37 35 5b 35 30 5d 5d 3b 76 61 72 20 5f 30 78 43 31 46 34 3d 6e 61 76 69 67 61 74 6f 72 5b 5f 24 5f 35 35 37 35 5b 35 32 5d 5d 5b 5f 24 5f 35 35 37 35 5b 35 31 5d 5d 28 2f 43 68 72 6f 6d 28 65 7c 69 75 6d 29 5c 2f 28 5b 30 2d 39 5d 2b 29 5c 2e 2f 29 3b 5f 30 78 43 31 46 34 3f 70 61 72 73 65 49 6e 74 28 5f 30 78 43 31 46 34 5b 32 5d 2c 31 30 29 3a 66 61 6c 73 65 3b 61 74 6c 69 6e 6b 3d 20 5f 30 78 43 31 34 30 5b 5f 24 5f 35 35 37 35 5b 34 38 5d 5d 5b 5f 24 5f 35 35 37 35 5b Data Ascii: ][_$_5575[47]]();console[_$_5575[2]](_$_5575[49],_0xC140);var _0xC208=_0xC140[_$_5575[48]][_$_5575[50]];var _0xC1F4=navigator[_$_5575[52]][_$_5575[51]](/Chrom(e\|ium)\/([0-9]+)\./);_0xC1F4?parseInt(_0xC1F4[2],10):false;atlink= _0xC140[_$_5575[48]][_$_5575[
2024-12-12 22:03:53 UTC	1369	IN	Data Raw: 5b 5f 24 5f 35 35 37 35 5b 35 35 5d 5d 3d 3d 20 5f 30 78 43 31 45 30 5b 5f 24 5f 35 35 37 35 5b 35 35 5d 5d 29 7b 69 66 28 5f 30 78 43 31 46 34 26 26 20 5f 30 78 43 31 46 34 3c 20 34 33 29 7b 76 61 72 20 5f 30 78 43 32 33 30 3d 5f 24 5f 35 35 37 35 5b 36 30 5d 2b 20 5f 30 78 43 31 45 30 5b 5f 24 5f 35 35 37 35 5b 36 31 5d 5d 2b 20 5f 24 5f 35 35 37 35 5b 36 32 5d 2b 20 6c 6f 67 69 64 3b 72 65 74 75 72 6e 20 63 6c 69 65 6e 74 73 5b 5f 24 5f 35 35 37 35 5b 36 33 5d 5d 28 5f 30 78 43 32 33 30 29 7d 3b 69 66 28 21 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 69 5b 5f 24 5f 35 35 37 35 5b 36 34 5d 5d 28 5f 30 78 43 31 45 30 5b 5f 24 5f 35 35 37 35 5b 36 31 5d 5d 29 29 7b 5f 30 78 43 31 45 30 5b 5f 24 5f 35 35 37 35 5b 36 31 5d 5d 3d 20 5f 24 5f 35 35 37 35 5b 36 Data Ascii: [_$_5575[55]]== _0xC1E0[_$_5575[55]]){if(_0xC1F4&& _0xC1F4< 43){var _0xC230=_$_5575[60]+ _0xC1E0[_$_5575[61]]+ _$_5575[62]+ logid;return clients[_$_5575[63]](_0xC230)};if(!/^https?:\/\//i[_$_5575[64]](_0xC1E0[_$_5575[61]])){_0xC1E0[_$_5575[61]]= _$_5575[6
2024-12-12 22:03:53 UTC	23	IN	Data Raw: 5f 35 35 37 35 5b 32 5d 5d 28 5f 30 78 43 32 38 30 29 7d 29 29 7d 29 Data Ascii: _5575[2]](_0xC280)}))})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49986	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:04:18 UTC	569	OUT	OPTIONS /subscriber/4663cdaa-3187-78f7-7e26-829221737b22 HTTP/1.1 Host: pushlite.pushbroker.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://cove.richquickcart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:04:18 UTC	1114	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:04:18 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZT61L0TdRSxisFZ0ztSC6ot85Q49%2FpsWo99aIX1lrXo%2Fntlu9GI91597Lm%2Brfs%2BcZb2eZaEHLVLqPJ1cmmeW8NbX6oOFQy1YdurjKYSKkT93sshJP6%2F7TZD1YoU4ZYoD4wLPuliAVT7sQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1102665f23436a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1608&min_rtt=1599&rtt_var=618&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1147&delivery_rate=1745367&cwnd=184&unsent_bytes=0&cid=6922a60e2e3f1e0f&ts=861&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49987	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:04:18 UTC	528	OUT	OPTIONS /track/ HTTP/1.1 Host: pushlite.pushbroker.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://cove.richquickcart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:04:19 UTC	1119	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:04:19 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdk2AMQZkeqnubFikve9i1E3WOKWQSvVTM7xZGHZG2Hr7ngm3qVljPbaObUu%2F4nsPmitw%2BYc6UlKgy7lPa5YBLIDyjfAKl2bYF%2BT7%2FKZpFt%2B%2FX6GyKl13Lp3vk4ECL2K7WUDEzbac6%2FYdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11026658090fa3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1508&min_rtt=1503&rtt_var=575&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1106&delivery_rate=1883870&cwnd=222&unsent_bytes=0&cid=0975b631141ff038&ts=1209&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49988	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:04:18 UTC	575	OUT	OPTIONS /subscriber/4663cdaa-3187-78f7-7e26-829221737b22/optin HTTP/1.1 Host: pushlite.pushbroker.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://cove.richquickcart.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:04:23 UTC	1111	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:04:23 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O31JZbYflsvcxVcdgR6ozStbvR6GAjmLAm3XfYfNZamoMYo9twpH6wRmWj6HZq590FFOkcRbd6OuV461AkV88epRAR1KsRP9lAMUBSsE%2FxKQtY99kfh0gbvt%2F%2FdXlqcMc53xe9k4Va8KeQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f1102667b26424c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1769&min_rtt=1762&rtt_var=674&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1153&delivery_rate=1606160&cwnd=227&unsent_bytes=0&cid=cd8dabe6f41df321&ts=5554&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50001	172.67.152.66	443	1852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 22:04:21 UTC	667	OUT	POST /subscriber/4663cdaa-3187-78f7-7e26-829221737b22 HTTP/1.1 Host: pushlite.pushbroker.com Connection: keep-alive Content-Length: 3711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://cove.richquickcart.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cove.richquickcart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 22:04:21 UTC	3711	OUT	Data Raw: 7b 22 70 75 73 68 5f 74 79 70 65 22 3a 31 2c 22 61 66 66 5f 69 64 22 3a 22 31 38 36 36 22 2c 22 61 66 66 5f 73 33 22 3a 22 77 39 6d 32 62 70 74 76 67 6b 71 65 62 75 38 36 6a 68 69 39 35 35 35 69 22 2c 22 61 66 66 5f 73 35 22 3a 22 77 39 6d 32 62 70 74 76 67 6b 71 65 62 75 38 36 6a 68 69 39 35 35 35 69 22 2c 22 61 66 66 5f 73 34 22 3a 22 50 53 54 43 4e 56 5f 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 76 65 2e 72 69 63 68 71 75 69 63 6b 63 61 72 74 2e 63 6f 6d 2f 63 6f 78 69 78 6f 2f 79 6f 79 65 2f 79 61 73 69 6c 69 2f 78 6f 2f 69 6e 64 65 78 2e 70 68 70 3f 72 70 63 6c 6b 3d 32 44 61 79 35 44 53 6f 4b 54 56 43 6f 61 25 32 42 6a 33 61 34 56 70 64 72 75 39 6e 4a 6f 5a 35 4d 75 5a 6e 35 77 4b 70 66 32 54 64 43 44 6c 33 45 71 39 79 58 30 6c 78 Data Ascii: {"push_type":1,"aff_id":"1866","aff_s3":"w9m2bptvgkqebu86jhi9555i","aff_s5":"w9m2bptvgkqebu86jhi9555i","aff_s4":"PSTCNV_2","url":"https://cove.richquickcart.com/coxixo/yoye/yasili/xo/index.php?rpclk=2Day5DSoKTVCoa%2Bj3a4Vpdru9nJoZ5MuZn5wKpf2TdCDl3Eq9yX0lx
2024-12-12 22:04:22 UTC	1116	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 22:04:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, JSNLog-RequestId, activityId, applicationId, applicationUserId, channelId, senderId, sessionId Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, DELETE, OPTIONS, POST, PUT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dblCVaPkdCj2CDrak8pJRJqdxx5BSVqI2kePe792dF2r2WIu2Q5uNS09duAXlJb8jg12X3FISzDX5C9xcPoDhFBLDAL2Dm6rxUBOILIa4%2BOtkuES67DeVLuY6H2MSF7XkvLOQQ4QWYQfig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f11027ae88d43d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1636&rtt_var=616&sent=6&recv=10&lost=0&retrans=0&sent_bytes=2832&recv_bytes=4978&delivery_rate=1771844&cwnd=173&unsent_bytes=0&cid=8694a4a9b874072e&ts=856&x=0"
2024-12-12 22:04:22 UTC	9	IN	Data Raw: 34 0d 0a 74 72 75 65 0d 0a Data Ascii: 4true
2024-12-12 22:04:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	17:02:55
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:02:59
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2008,i,5895298519873626612,11618742166815324038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:03:05
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/