Edit tour

Windows Analysis Report
http://auth-owlting.com

Overview

General Information

Sample URL:	http://auth-owlting.com
Analysis ID:	1581055
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious URL

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2244,i,13090271568516702117,15639840964998321001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://auth-owlting.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO PHISHING Possible Successful Generic Phish July 28

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-26T21:25:53.596981+0100	2812237	1	Successful Credential Theft Detected	192.168.2.4	49743	91.212.166.21	80	TCP

HTTP traffic detected: POST /loginpersonal.php HTTP/1.1Host: auth-owlting.comConnection: keep-aliveContent-Length: 45Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestX-CSRF-TOKEN: qYtRaFrfcoX9NISfGTO72RIM7mKwwiTFV6RRJTSaUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Origin: http://auth-owlting.comReferer: http://auth-owlting.com/personal/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Data Raw: 65 6d 61 69 6c 3d 64 6e 6e 63 79 6d 25 34 30 78 61 67 74 2e 69 6f 26 70 61 73 73 77 6f 72 64 3d 75 25 33 45 29 29 47 30 64 62 35 32 70 Data Ascii: email=dnncym%40xagt.io&password=u%3E))G0db52p

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 26 Dec 2024 20:25:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Powered-By: PHP/7.4.33Cache-Control: no-cache, private
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 26 Dec 2024 20:25:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Powered-By: PHP/7.4.33Cache-Control: no-cache, private
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Thu, 26 Dec 2024 20:25:11 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Thu, 26 Dec 2024 20:25:12 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Thu, 26 Dec 2024 20:25:13 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0

Source: chromecache_103.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_103.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_100.2.dr, chromecache_124.2.dr, chromecache_104.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_131.2.dr, chromecache_114.2.dr, chromecache_77.2.dr	String found in binary or memory: https://fengyuanchen.github.io/datepicker
Source: chromecache_100.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: classification engine

Classification label: mal60.win@16/101@12/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2244,i,13090271568516702117,15639840964998321001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://auth-owlting.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2244,i,13090271568516702117,15639840964998321001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://auth-owlting.com	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
http://auth-owlting.com/css/index.3413bd13.css	100%	Avira URL Cloud	phishing
https://auth.owlting.com/bower_components/jquery/dist/jquery.min.js	0%	Avira URL Cloud	safe
https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.js	0%	Avira URL Cloud	safe
https://auth.owlting.com/imgs/owlting_logo_big.svg	0%	Avira URL Cloud	safe
http://auth-owlting.com/img/icon_reload.12563642.svg	100%	Avira URL Cloud	phishing
https://auth.owlting.com/plugins/tingle/dist/tingle.min.css	0%	Avira URL Cloud	safe
http://auth-owlting.com/js/index.5edd0040.js	100%	Avira URL Cloud	phishing
https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.css	0%	Avira URL Cloud	safe
http://auth-owlting.com/img/img-logo-arrows.7350f8b2.png	100%	Avira URL Cloud	phishing
https://auth.owlting.com/imgs/global.svg	0%	Avira URL Cloud	safe
https://auth.owlting.com/imgs/sidebar.svg	0%	Avira URL Cloud	safe
https://auth.owlting.com/imgs/arrow.svg	0%	Avira URL Cloud	safe
https://auth.owlting.com/imgs/sidebar_bottom.png	0%	Avira URL Cloud	safe
https://auth.owlting.com/css/style2.css?v=20221226	0%	Avira URL Cloud	safe
http://auth-owlting.com/css/chunk-vendors.0d8d4f33.css	100%	Avira URL Cloud	phishing
https://auth.owlting.com/plugins/tingle/dist/tingle.min.js	0%	Avira URL Cloud	safe
http://auth-owlting.com/js/runtime~index.4b783e04.js	100%	Avira URL Cloud	phishing
https://auth.owlting.com/js/lib.former.js	0%	Avira URL Cloud	safe
http://auth-owlting.com/js/chunk-vendors.9651c0b9.js	100%	Avira URL Cloud	phishing
https://auth.owlting.com/bower_components/bootstrap/dist/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://auth.owlting.com/bower_components/bootstrap/dist/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://auth.owlting.com/imgs/favicon.svg	0%	Avira URL Cloud	safe
http://auth-owlting.com/img/logo-full.acc3a999.svg	100%	Avira URL Cloud	phishing
http://auth-owlting.com/loginpersonal.php	100%	Avira URL Cloud	phishing
http://auth-owlting.com/img/zh_tw.544fe750.svg	100%	Avira URL Cloud	phishing
https://auth.owlting.com/js/lib.js	0%	Avira URL Cloud	safe
http://auth-owlting.com/img/kv-map.02597139.svg	100%	Avira URL Cloud	phishing
https://auth.owlting.com/plugins/sweetalert/src/sweetalert.min.js	0%	Avira URL Cloud	safe
http://auth-owlting.com/favicon.png	100%	Avira URL Cloud	phishing
https://auth.owlting.com/bower_components/font-awesome/css/font-awesome.min.css	0%	Avira URL Cloud	safe
http://auth-owlting.com/personal	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
site.ru	91.109.201.210	true	false	unknown
www.google.com	142.250.181.68	true	false	high
auth-owlting.com	91.212.166.21	true	true	unknown
nginx-ecs.owlting.com	3.114.85.154	true	false	unknown
auth.owlting.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://auth-owlting.com/img/img-logo-arrows.7350f8b2.png	true	Avira URL Cloud: phishing	unknown
http://auth-owlting.com/css/index.3413bd13.css	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.css	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/imgs/owlting_logo_big.svg	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/bower_components/jquery/dist/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/imgs/global.svg	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/wait/	true		unknown
https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.js	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/img/icon_reload.12563642.svg	true	Avira URL Cloud: phishing	unknown
http://auth-owlting.com/personal/	true		unknown
https://auth.owlting.com/plugins/tingle/dist/tingle.min.css	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/js/index.5edd0040.js	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/imgs/arrow.svg	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/css/chunk-vendors.0d8d4f33.css	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/css/style2.css?v=20221226	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/imgs/sidebar.svg	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/imgs/sidebar_bottom.png	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/plugins/tingle/dist/tingle.min.js	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/js/runtime~index.4b783e04.js	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/js/lib.former.js	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/js/chunk-vendors.9651c0b9.js	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/bower_components/bootstrap/dist/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://auth.owlting.com/bower_components/bootstrap/dist/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/img/logo-full.acc3a999.svg	true	Avira URL Cloud: phishing	unknown
http://auth-owlting.com/img/zh_tw.544fe750.svg	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/imgs/favicon.svg	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/loginpersonal.php	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/js/lib.js	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/img/kv-map.02597139.svg	true	Avira URL Cloud: phishing	unknown
http://auth-owlting.com/	true		unknown
https://auth.owlting.com/plugins/sweetalert/src/sweetalert.min.js	false	Avira URL Cloud: safe	unknown
http://auth-owlting.com/favicon.png	true	Avira URL Cloud: phishing	unknown
http://auth-owlting.com/personal	true	Avira URL Cloud: phishing	unknown
https://auth.owlting.com/bower_components/font-awesome/css/font-awesome.min.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_103.2.dr	false	high
http://fontawesome.io/license	chromecache_103.2.dr	false	high
http://getbootstrap.com)	chromecache_100.2.dr, chromecache_124.2.dr, chromecache_104.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_100.2.dr	false	high
https://fengyuanchen.github.io/datepicker	chromecache_131.2.dr, chromecache_114.2.dr, chromecache_77.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.109.201.210	site.ru	Russian Federation	199669	ATLEX-ASRU	false
54.168.109.197	unknown	United States	16509	AMAZON-02US	false
91.212.166.21	auth-owlting.com	United Kingdom	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
3.114.85.154	nginx-ecs.owlting.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581055
Start date and time:	2024-12-26 21:24:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://auth-owlting.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@16/101@12/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 173.194.220.84, 172.217.19.238, 172.217.17.46, 2.16.168.102, 192.229.221.95, 172.217.19.10, 216.58.208.227, 172.217.19.234, 172.217.17.74, 142.250.181.138, 142.250.181.106, 172.217.17.42, 172.217.21.42, 172.217.19.202, 142.250.181.42, 142.250.181.74, 172.217.17.35, 184.28.90.27, 52.149.20.212, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://auth-owlting.com

Input	Output
URL: http://auth-owlting.com Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": false }
URL: http://auth-owlting.com
URL: http://auth-owlting.com/personal/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple redirect behavior, which is a low-risk indicator. It sets a click event handler on a button that redirects the user to the '/wait/' URL after a 4-second delay. This is a common pattern for web applications and does not demonstrate any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious domain interactions." }
document.querySelector("#authBox > div > div > div > form > div.form-btnBox > button").onclick = function() { setTimeout(function() { window.location.href = "/wait/"; }, 4000); }
URL: https://auth.owlting.com/bower_components/bootstra... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is the Bootstrap JavaScript library, which is a widely used and trusted open-source front-end framework. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is primarily focused on providing functionality for Bootstrap's UI components and does not exhibit any suspicious behavior. Overall, this is a low-risk script that is commonly used in web development." }
/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license / if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){if(a(b.target).is(this))return b.handleObj.handler.apply(this,arguments)}})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=c.data("bs.alert");e\|\|c.data("bs.alert",e=new d(this)),"string"==typeof b&&e[b].call(c)})}var c='[data-dismiss="alert"]',d=function(b){a(b).on("click",c,this.close)};d.VERSION="3.3.7",d.TRANSITION_DURATION=150,d.prototype.close=function(b){function c(){g.detach().trigger("closed.bs.alert").remove()}var e=a(this),f=e.attr("data-target");f\|\|(f=e.attr("href"),f=f&&f.replace(/.(?=#[^\s]*$)/,""));var g=a("#"===f?[]:f);b&&b.preventDefault(),g.length\|\|(g=e.closest(".alert")),g.trigger(b=a.Event("close.bs.alert")),b.isDefaultPrevented()\|\|(g.removeClass("in"),a.support.transition&&g.hasClass("fade")?g.one("bsTransitionEnd",c).emulateTransitionEnd(d.TRANSITION_DURATION):c())};var e=a.fn.alert;a.fn.alert=b,a.fn.alert.Constructor=d,a.fn.alert.noConflict=function(){return a.fn.alert=e,this},a(document).on("click.bs.alert.data-api",c,d.prototype.close)}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof b&&b;e\|\|d.data("bs.button",e=new c(this,f)),"toggle"==b?e.toggle():b&&e.setState(b)})}var c=function(b,d){this.$element=a(b),this.options=a.extend({},c.DEFAULTS,d),this.isLoading=!1};c.VERSION="3.3.7",c.DEFAULTS={loadingText:"loading..."},c.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",null==f.resetText&&d.data("resetText",d[e]()),setTimeout(a.proxy(function(){d[e](null==f[b]?this.options[b]:f[b]),"loadingText"==b?(this.isLoading=!0,d.addClass(c).attr(c,c).prop(c,!0)):this.isLoading&&(this.isLoading=!1,d.removeClass(c).removeAttr(c).prop(c,!1))},this),0)},c.prototype.toggle=function(){var a=!0,b=this.$element.closest('[data-toggle="buttons"]');if(b.length){var c=this.$element.find("input");"radio"==c.prop("type")?(c.prop("checked")&&(a=!1),b.find(".active").removeClass("active"),this.$element.addClass("active")):"checkbox"==c.prop("type")&&(c.prop("checked")!==this.$element.hasClass("active")&&(a=!1),this.$element.toggleClass("active")),c.prop("checked",this.$element.hasClass("active")),a&&c.trigger("change")}else this.$element.attr("aria-pressed",!this.$element.hasClass("active")),this.$element.toggleClass("active")};var d=a.fn.button;a.fn.button=b,a.fn.button.Constructor=c,a.fn.button.noConflict=function(){return a.fn.button=d,this},a(document).on("click.bs.button.data-api",'[data-toggle^="button"]',function(c){var d=a(c.target).closest(".btn");b.call(d,"toggle"),a(c.target).is('input[type="radio"], input[type="checkbox"]')\|\|(c.preventDefault(),d.is("input,button")?d.trigger("focus"):d.find("input:visible,button:visible").first().trigger("focus"))}).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',functio
URL: https://auth.owlting.com/js/lib.js... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate implementation of common web development practices, such as CSRF token handling, form submission, and AJAX request handling. While it includes some legacy practices like the use of `$.ajaxSetup()` and `$.extend()`, these are not inherently malicious and are commonly used in web applications. The code does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. Overall, the code seems to be a standard part of a web application and poses a low risk." }
$.ajaxSetup({ headers: { 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content') } }); $(function(){ var former; if ( $('form').length == 0 ) return; if ( former ) delete former; former = lib.former.init( $('form') ); $('form').submit(function(e){ e.preventDefault(); lib.former.submit(); }); }); $.extend({ create: function( route, data, callback ) { data['_method'] = 'GET'; $.ajax({ url : route, type : 'POST', dataType : 'json', data : data, success : function(msg){ callback(msg); } }); }, destroy: function( url, param, callback ) { if ( param.call ) { callback = param; param = {}; } param['_method'] = 'DELETE'; $.ajax({ url : url, type : 'POST', dataType : 'json', data : param, success : function(msg){ callback(msg); } }); } }); var lib = lib \|\| {}; lib.namespace = function(ns_string) { var parts = ns_string.split('.'), parent = lib, i; if (parts[0] === "lib") parts = parts.slice(1); for (i = 0; i < parts.length; i++) { if (typeof parent[parts[i]] === "undefined") { parent[parts[i]] = {}; } parent = parent[parts[i]]; } return parent; }; lib.alert = function( text ){ return swal(text); }; lib.dialog = (function() { return { show : function(_url, _h) { if ( !_h ) _h = 600; var tmpl = $('<iframe>', { 'src' : _url, 'css' : { 'border' : '0', 'width' : '100%', 'height' : _h, } }); var modal = new tingle.modal({ closeMethods: ['overlay', 'button', 'escape'], closeLabel: "Close", cssClass: ['custom-class-1', 'custom-class-2'], }); modal.setContent( tmpl.get(0) ); modal.open(); }, }; }()); lib.toHHMMSS = function (sec) { var h = Math.floor(sec / 3600); var m = Math.floor((sec - (h * 3600)) / 60); var s = sec - (h * 3600) - (m * 60); if (h < 10) {h = "0"+h;} if (m < 10) {m = "0"+m;} if (s < 10) {s = "0"+s;} return h > 0 ? h+':'+m+':'+s : m+':'+s ; }; lib.event = (function() { var callbacks = {}; return { register: function(event, fn) { if (typeof callbacks[event] === "undefined") { callbacks[event] = []; } callbacks[event].push(fn); }, registerOne: function(event, fn) { fn.one = true; lib.event.register(event, fn); }, trigger: function(event) { if (typeof callbacks[event] === "undefined") { return; } var args = Array.prototype.slice.call(arguments, 1); callbacks[event].forEach(function(fn, key) { if (typeof fn === "function") { fn.apply(null, args); if (fn.one) delete(callbacks[event][key]); } }); } } })(); lib.tmpl = function( tpl ){ return Handlebars.compile( tpl ); };
URL: http://auth-owlting.com/personal/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate language selection functionality for a website. It uses standard DOM manipulation and AJAX techniques to handle the language selection process. While it uses some older APIs like `$.post()`, the overall behavior is consistent with typical user interface interactions and does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The script is likely well-intentioned and poses a low risk." }
$(function(){ $('#headerBoxWarpper [role="selector"]').click(function(){ let ctrl = $('.langSelBox'); if (!ctrl.is(':visible')) { $('.langSelBox').slideDown('fast', function(){ ctrl.click(function(e){ e.stopPropagation(); }); $('body').one('click', function(){ ctrl.slideUp('fast'); }) }); } }); $('#headerBoxWarpper [role="lang"]').click(function(){ if ( $(this).hasClass('selected') ) return; let href = $(this).attr('href'); $.post(href, {}, function(ret){ window.location.href = removeParams('lang'); }); }); }); function removeParams(sParam) { var url = window.location.href.split('?')[0] + '?'; var sPageURL = decodeURIComponent(window.location.search.substring(1)), tmp = sPageURL.split('&'); for (var i = 0; i < tmp.length; i++) { var s = tmp[i].split('='); if (s[0] == sParam) continue; url = url + s[0] + '=' + encodeURIComponent(s[1]) + '&' } return url.substring(0, url.length - 1); }
URL: https://auth.owlting.com/js/lib.former.js... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet exhibits some moderate-risk behaviors, such as external data transmission and aggressive DOM manipulation. However, it does not contain any high-risk indicators like dynamic code execution or data exfiltration. The script appears to be focused on form handling and validation, which is a common and legitimate use case. While the code could be improved to reduce the risk score, it does not appear to be inherently malicious." }
lib.former = (function(){ var selector, submiter; return { init : function( s ){ selector = s; $( 'input[type=submit]' ).replaceWith( $('<button>', { 'type' : 'submit', 'class' : $( 'input[type = submit]' ).attr('class'), 'html' : $( 'input[type = "submit"]' ).val(), 'data-style': 'zoom-out' } )); selector.find('.form-group input') .focus(function(){ $(this).closest('.form-group').addClass('active'); }) .blur (function(){ $(this).closest('.form-group').removeClass('active'); }); var dom = selector.find("input[autofocus]").first(); dom.closest('.form-group').addClass('active'); $('.form-control').focus(function(){ $(this).closest('.control-input').addClass('is-focused'); }).blur(function(){ $(this).closest('.control-input').removeClass('is-focused'); }); }, submit : function(){ var self = this, action = selector.attr('action'); url = (action) ? action : window.location.href; var type = 'POST'; if ( selector.find("[name='_method']").length > 0 ) type = selector.find('[name="_method"]').attr('value'); type = type.toUpperCase(); dataString = this.getData(); self.hold(); dataString['_method'] = type; if ( type == 'GET' ) { window.location.href = ( url.substr(-1) == '?' ) ? url + dataString : url + '?' + dataString; return; } lib.event.trigger('form.submiting'); var param = { type : 'POST', url : url, data : dataString, dataType : 'json', success : function( e ){ if ( e.status == false ) { self.free(); self.validator.fail(e); return; } lib.event.trigger('form.submited'); self.validator.success(e); self.free(); } }; if ( selector.find('input[role="uploader"][type="file"]').length > 0 ){ $.ajax(param); return true; } if ( selector.find('input[type="file"]').length > 0 ) { param.processData = false; param.contentType = false; } $.ajax(param); }, hold : function(){ selector.find('[type="submit"]').prop('disabled', true); selector.find('[type="cancel"]').prop('disabled', true); }, free : function(){ selector.find('[type="submit"]').prop('disabled', false); selector.find('[type="cancel"]').prop('disabled', false); }, getData : function(){ if ( selector.find('[rel="editor"]').length > 0 ){ selector.find('[rel="editor"]').each(function(){ $(this).val( CKEDITOR.instances[ $(this).attr('name') ].getData() ); }); } if ( selector.find('input[role="uploader"][type="file"]').length > 0 ) return selector.find("[name!='_token']").serialize(); return ( selector.find('input[type="file"]').length > 0) ? new FormData( selector.get(0) ) : selector.find("[name!='_token']").serialize(); }, validator : { fail : function( data ){ lib.event.trigger('form.validator.fail', data); var msg = data.error; this.clearError(); if ( data.type == 'alert' ) { if ( typeof msg == "string" ){ lib.alert({ 'title' : msg, 'icon' : "error" }); return; } var fields = ''; $.each( msg, function(k, v){ fields += v.join("\n"); } ); lib.alert({ 'title' : fields, 'icon' : "error" }); return; } if ( data.type == 'none' ) { return; } $.each( msg, function(key, itm){ var inp = selector.find('[name="' + key + '"]'); inp.closest('.form-group').addClass('has-error'); inp.closest('.form-group').find('.form-error').text(itm.join('')); } ); }, clearError : function(){ selector.find('
URL: http://auth-owlting.com/img/kv-map.02597139.svg... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a library or framework for SVG animation, with no obvious malicious behaviors. It uses common JavaScript patterns and functions, such as `eval`, `Function`, and `execScript`, but these are likely used for legitimate purposes within the context of the library. The code does not exhibit any clear indicators of data exfiltration, malicious redirects, or other high-risk activities. While the use of some legacy APIs like `XDomainRequest` may pose minor risks, the overall behavior of the script seems benign and aligned with its intended purpose as an SVG animation utility. Therefore, the risk score is assessed as low (3)." }
!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).__SVGATOR_PLAYER__=n()}(this,(function(){"use strict";function t(n){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(n)}function n(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}function e(t,n){for(var e=0;e<n.length;e++){var r=n[e];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}function i(t){return(i=Object.setPrototypeOf?Object.getPrototypeOf:function(t){return t.__proto__\|\|Object.getPrototypeOf(t)})(t)}function u(t,n){return(u=Object.setPrototypeOf\|\|function(t,n){return t.__proto__=n,t})(t,n)}function o(t,n){return!n\|\|"object"!=typeof n&&"function"!=typeof n?function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}(t):n}function a(t){var n=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}();return function(){var e,r=i(t);if(n){var u=i(this).constructor;e=Reflect.construct(r,arguments,u)}else e=r.apply(this,arguments);return o(this,e)}}function l(t,n,e){return(l="undefined"!=typeof Reflect&&Reflect.get?Reflect.get:function(t,n,e){var r=function(t,n){for(;!Object.prototype.hasOwnProperty.call(t,n)&&null!==(t=i(t)););return t}(t,n);if(r){var u=Object.getOwnPropertyDescriptor(r,n);return u.get?u.get.call(e):u.value}})(t,n,e\|\|t)}var s=f(Math.pow(10,-6));function f(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:6;if(Number.isInteger(t))return t;var e=Math.pow(10,n);return Math.round((+t+Number.EPSILON)e)/e}function c(t,n){var e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:s;return Math.abs(t-n)<e}var h=Math.PI/180;function v(t){return t}function d(t,n,e){var r=1-e;return 3er(tr+ne)+eee}function y(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0,n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0,e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:1,r=arguments.length>3&&void 0!==arguments[3]?arguments[3]:1;return t<0\|\|t>1\|\|e<0\|\|e>1?null:c(t,n)&&c(e,r)?v:function(i){if(i<=0)return t>0?in/t:0===n&&e>0?ir/e:0;if(i>=1)return e<1?1+(i-1)(r-1)/(e-1):1===e&&t<1?1+(i-1)(n-1)/(t-1):1;for(var u,o=0,a=1;o<a;){var l=d(t,e,u=(o+a)/2);if(c(i,l))break;l<i?o=u:a=u}return d(n,r,u)}}function g(){return 1}function p(t){return 1===t?1:0}function m(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:1,n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;if(1===t){if(0===n)return p;if(1===n)return g}var e=1/t;return function(t){return t>=1?1:(t+=ne)-t%e}}function b(t,n,e){return t>=.5?e:n}function w(t,n,e){return 0===t\|\|n===e?n:t(e-n)+n}function x(t,n,e){var r=w(t,n,e);return r<=0?0:r}function A(t,n,e){return 0===t?n:1===t?e:{x:w(t,n.x,e.x),y:w(t,n.y,e.y)}}function k(t,n,e){return 0===t?n:1===t?e:{x:x(t,n.x,e.x),y:x(t,n.y,e.y)}}function _(t,n,e){var r=function(t,n,e){return Math.round(w(t,n,e))}(t,n,e);return r<=0?0:r>=255?255:r}function S(t,n,e){return 0===t?n:1===t?e:{r:_(t,n.r,e.r),g:_(t,n.g,e.g),b:_(t,n.b,e.b),a:w(t,null==n.a?1:n.a,null==e.a?1:e.a)}}function M(t,n,e){if(0===t)return n;if(1===t)return e;var r=n.length;if(r!==e.length)return b(t,n,e);for(var i=[],u=0;u<r;u++)i.push(S(t,n[u],e[u]));return i}function E(t,n,e){var r=n.length;if(r!==e.length)return b(t,n,e);for(var i=new Array(r),u=0;u<r;u++)i[u]=w(t,n[u],e[u]);return i}function O(t,n){for(var e=[],r=0;r<t;r++)e.push(n);return e}function B(t,n)
URL: http://auth-owlting.com/personal/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript code has a mix of low-risk and moderate-risk indicators. It uses jQuery to handle click events and toggle the visibility of UI elements, which is a common practice. However, it also includes a password reset functionality that sends a POST request to an external domain, which could potentially lead to data exfiltration if the target domain is not trusted. Additionally, the use of the `lib.alert()` function, which is not a standard JavaScript API, raises some concerns about the overall context and potential for malicious behavior. Overall, the code requires further review to determine the legitimacy of its purpose and the trustworthiness of the external domains it interacts with." }
$(function(){ $('[role="modeToggle"]').click( function(){ modeToggle(); }); $('[role="socialBtn"]').click( function(){ $('[role="socialBtn"]').prop('disabled', true); } ); }); function modeToggle(){ $('[role="socialBox"]').toggle(300); $('[role="mereberBox"]').toggle(300, function(){ $('#email').focus(); }); } function passwordForgot() { lib.alert({ 'title' : "", 'text' : 'Email', 'content' : { 'element' : "input", 'attributes' : { 'placeholder' : " E-mail", 'type' : "text", }, }, 'buttons' : { 'cancel': "", 'confirm': { 'text' : "", 'closeModal' : false, } } }).then((email) => { if ( email == null ) return; $.post('https://auth.owlting.com/api/project/7aa231dbbc813742a5a0c06fb93c7dec/passwordForgot', { 'email' : email, 'expectTo' : 'https://api.owlpay.com/auth/platform_login/callback', 'lang' : 'zh-TW', }, function(ret){ if ( !ret.status ) { lib.alert( { 'title' : 'OOPS', 'text': ret.msg} ); return; } const wrapper = document.createElement('div'); wrapper.innerHTML = 'OwlTing'; lib.alert( { 'title': 'Thank you!', 'content': wrapper } ); }, 'json'); }); }
URL: https://auth.owlting.com/plugins/tingle/dist/tingl... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The provided JavaScript snippet appears to be a library for creating modal dialogs. While it does not contain any obvious high-risk indicators, there are some moderate-risk behaviors that warrant further review: 1. External Data Transmission (+2 points): The script sends data to external domains, such as 'analytics.example.com', which could potentially include user information. 2. Aggressive DOM Manipulation (+2 points): The script repeatedly alters the DOM, such as clearing the 'innerHTML' of elements. 3. Legitimate Context (-2 points): The script's primary purpose seems to be creating modal dialogs, which is a common and legitimate use case. Overall, the script exhibits some potentially concerning behaviors, but they appear to be within the context of a modal dialog library. Further review may be necessary to ensure there are no hidden malicious intents or vulnerabilities, but the risk score is in the medium range." }
!function(t,o){"function"==typeof define&&define.amd?define(o):"object"==typeof exports?module.exports=o():t.tingle=o()}(this,function(){function t(t){var o={onClose:null,onOpen:null,beforeOpen:null,beforeClose:null,stickyFooter:!1,footer:!1,cssClass:[],closeLabel:"Close",closeMethods:["overlay","button","escape"]};this.opts=r({},o,t),this.init()}function o(){this.modalBoxFooter&&(this.modalBoxFooter.style.width=this.modalBox.clientWidth+"px",this.modalBoxFooter.style.left=this.modalBox.offsetLeft+"px")}function e(){this.modal=document.createElement("div"),this.modal.classList.add("tingle-modal"),0!==this.opts.closeMethods.length&&-1!==this.opts.closeMethods.indexOf("overlay")\|\|this.modal.classList.add("tingle-modal--noOverlayClose"),this.modal.style.display="none",this.opts.cssClass.forEach(function(t){"string"==typeof t&&this.modal.classList.add(t)},this),-1!==this.opts.closeMethods.indexOf("button")&&(this.modalCloseBtn=document.createElement("button"),this.modalCloseBtn.classList.add("tingle-modal__close"),this.modalCloseBtnIcon=document.createElement("span"),this.modalCloseBtnIcon.classList.add("tingle-modal__closeIcon"),this.modalCloseBtnIcon.innerHTML="",this.modalCloseBtnLabel=document.createElement("span"),this.modalCloseBtnLabel.classList.add("tingle-modal__closeLabel"),this.modalCloseBtnLabel.innerHTML=this.opts.closeLabel,this.modalCloseBtn.appendChild(this.modalCloseBtnIcon),this.modalCloseBtn.appendChild(this.modalCloseBtnLabel)),this.modalBox=document.createElement("div"),this.modalBox.classList.add("tingle-modal-box"),this.modalBoxContent=document.createElement("div"),this.modalBoxContent.classList.add("tingle-modal-box__content"),this.modalBox.appendChild(this.modalBoxContent),-1!==this.opts.closeMethods.indexOf("button")&&this.modal.appendChild(this.modalCloseBtn),this.modal.appendChild(this.modalBox)}function s(){this.modalBoxFooter=document.createElement("div"),this.modalBoxFooter.classList.add("tingle-modal-box__footer"),this.modalBox.appendChild(this.modalBoxFooter)}function i(){this._events={clickCloseBtn:this.close.bind(this),clickOverlay:l.bind(this),resize:this.checkOverflow.bind(this),keyboardNav:n.bind(this)},-1!==this.opts.closeMethods.indexOf("button")&&this.modalCloseBtn.addEventListener("click",this._events.clickCloseBtn),this.modal.addEventListener("mousedown",this._events.clickOverlay),window.addEventListener("resize",this._events.resize),document.addEventListener("keydown",this._events.keyboardNav)}function n(t){-1!==this.opts.closeMethods.indexOf("escape")&&27===t.which&&this.isOpen()&&this.close()}function l(t){-1!==this.opts.closeMethods.indexOf("overlay")&&!d(t.target,"tingle-modal")&&t.clientX<this.modal.clientWidth&&this.close()}function d(t,o){for(;(t=t.parentElement)&&!t.classList.contains(o););return t}function a(){-1!==this.opts.closeMethods.indexOf("button")&&this.modalCloseBtn.removeEventListener("click",this._events.clickCloseBtn),this.modal.removeEventListener("mousedown",this._events.clickOverlay),window.removeEventListener("resize",this._events.resize),document.removeEventListener("keydown",this._events.keyboardNav)}function r(){for(var t=1;t<arguments.length;t++)for(var o in arguments[t])arguments[t].hasOwnProperty(o)&&(arguments[0][o]=arguments[t][o]);return arguments[0]}var h=function(){var t,o=document.createElement("tingle-test-transition"),e={transition:"transitionend",OTransition:"oTransitionEnd",MozTransition:"transitionend",WebkitTransition:"webkitTransitionEnd"};for(t in e)if(void 0!==o.style[t])return e[t]}();return t.prototype.init=function(){this.modal\|\|(e.call(this),i.call(this),document.body.insertBefore(this.modal,document.body.firstChild),this.opts.footer&&this.addFooter())},t.prototype.destroy=function(){null!==this.modal&&(a.call(this),this.modal.parentNode.removeChild(this.modal),this.modal=null)},t.prototype.open=function(){var t=this;"function"==typeof t.opts.beforeOpen&&t.opts.beforeOpen(),this.modal.style.removeProperty?this.modal.style.removeProperty("dis
URL: https://auth.owlting.com/plugins/sweetalert/src/sw... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script appears to be a module definition pattern for a library, likely SweetAlert, with no high-risk behaviors such as dynamic code execution or data exfiltration. It uses standard JavaScript practices for module exports and DOM manipulation without any malicious indicators." }
!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,o){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o="swal-button";e.CLASS_NAMES={MODAL:"swal-modal",OVERLAY:"swal-overlay",SHOW_MODAL:"swal-overlay--show-modal",MODAL_TITLE:"swal-title",MODAL_TEXT:"swal-text",ICON:"swal-icon",ICON_CUSTOM:"swal-icon--custom",CONTENT:"swal-content",FOOTER:"swal-footer",BUTTON_CONTAINER:"swal-button-container",BUTTON:o,CONFIRM_BUTTON:o+"--confirm",CANCEL_BUTTON:o+"--cancel",DANGER_BUTTON:o+"--danger",BUTTON_LOADING:o+"--loading",BUTTON_LOADER:o+"__loader"},e.default=e.CLASS_NAMES},function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.getNode=function(t){var e="."+t;return document.querySelector(e)},e.stringToNode=function(t){var e=document.createElement("div");return e.innerHTML=t.trim(),e.firstChild},e.insertAfter=function(t,e){var n=e.nextSibling;e.parentNode.insertBefore(t,n)},e.removeNode=function(t){t.parentElement.removeChild(t)},e.throwErr=function(t){throw t=t.replace(/ +(?= )/g,""),"SweetAlert: "+(t=t.trim())},e.isPlainObject=function(t){if("[object Object]"!==Object.prototype.toString.call(t))return!1;var e=Object.getPrototypeOf(t);return null===e\|\|e===Object.prototype},e.ordinalSuffixOf=function(t){var e=t%10,n=t%100;return 1===e&&11!==n?t+"st":2===e&&12!==n?t+"nd":3===e&&13!==n?t+"rd":t+"th"}},function(t,e,n){"use strict";function o(t){for(var n in t)e.hasOwnProperty(n)\|\|(e[n]=t[n])}Object.defineProperty(e,"__esModule",{value:!0}),o(n(25));var r=n(26);e.overlayMarkup=r.default,o(n(27)),o(n(28)),o(n(29));var i=n(0),a=i.default.MODAL_TITLE,s=i.default.MODAL_TEXT,c=i.default.ICON,l=i.default.FOOTER;e.iconMarkup='\n <div class="'+c+'"></div>',e.titleMarkup='\n <div class="'+a+'"></div>\n',e.textMarkup='\n <div class="'+s+'"></div>',e.footerMarkup='\n <div class="'+l+'"></div>\n'},function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o=n(1);e.CONFIRM_KEY="confirm",e.CANCEL_KEY="cancel";var r={visible:!0,text:null,value:null,className:"",closeModal:!0},i=Object.assign({},r,{visible:!1,text:"Cancel",value:null}),a=Object.assign({},r,{text:"OK",value:!0});e.defaultButtonList={cancel:i,confirm:a};var s=function(t){switch(t){case e.CONFIRM_KEY:return a;case e.CANCEL_KEY:return i;default:var n=t.charAt(0).toUpperCase()+t.slice(1);return Object.assign({},r,{text:n,value:t})}},c=function(t,e){var n=s(t);return!0===e?Object.assign({},n,{visible:!0}):"string"==typeof e?Object.assign({},n,{visible:!0,text:e}):o.isPlainObject(e)?Object.assign({visible:!0},n,e):Object.assign({},n,{visible:!1})},l=function(t){for(var e={},n=0,o=Object.keys(t);n<o.length;n++){var r=o[n],a=t[r],s=c(r,a);e[r]=s}return e.cancel\|\|(e.cancel=i),e},u=function(t){var n={};switch(t.length){case 1:n[e.CANCEL_KEY]=Object.assign({},i,{visible:!1});break;case 2:n[e.CANCEL_KEY]=c(e.CANCEL_KEY,t[0]),n[e.CONFIRM_KEY]=c(e.CONFIRM_KEY,t[1]);break;default:o.throwErr("Invalid number of 'buttons' in array ("+t.length+").\n If you want more than 2 buttons, you need to use an object!")}return n};e.getButtonListOpts=function(t){var n=e.defaultButtonList;return"string"==typeof t?n[e.CONFIRM_KEY]=c(e.CONFIRM_KEY,t):Array.isArray(t)?n=u(t):o.isPlainObject(t)?n=l(t):!0===t?n=u([!0,!0]):!1===t?n=u([!1,!1]):void 0===t&&(n=e.defaultButtonList),n}},function(t,e,n){"use strict";Object.definePropert
URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "", "text_input_field_labels": [ "E-mail", "" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	{ "brands": [ "Owlting" ] }
	{ "brands": [ "Owlting" ] }
URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Leading the Blockchain Revolution", "prominent_button_name": "", "text_input_field_labels": [ "E-mail", "" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	```json{ "legit_domain": "owlting.com", "classification": "unknown", "reasons": [ "The brand 'Owlting' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'auth-owlting.com' includes a hyphen, which can be a tactic used in phishing to create a domain similar to a legitimate one.", "The domain 'owlting.com' appears to be the legitimate domain for the brand 'Owlting', but the presence of 'auth-' as a prefix is suspicious and could indicate a phishing attempt.", "The input fields 'E-mail' and '' (password) are common targets for phishing sites, as they often aim to collect sensitive information." ], "riskscore": 7}
URL: auth-owlting.com Brands: Owlting Input Fields: E-mail,
URL: http://auth-owlting.com/wait/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	{ "brands": [ "OwlTing" ] }
	{ "brands": [ "OwlTing" ] }
URL: http://auth-owlting.com/wait/ Model: Joe Sandbox AI	{ "brands": [ "OwlTing" ] }
	{ "brands": [ "OwlTing" ] }
URL: http://auth-owlting.com/personal/ Model: Joe Sandbox AI	```json{ "legit_domain": "owlting.com", "classification": "known", "reasons": [ "The brand 'OwlTing' is associated with the domain 'owlting.com'.", "The URL 'auth-owlting.com' contains a hyphen, which is often used in phishing attempts to create a domain similar to the legitimate one.", "The domain 'auth-owlting.com' does not fully match the legitimate domain 'owlting.com'.", "The presence of input fields for 'E-mail' and '' (password) is typical for login pages, which are common targets for phishing." ], "riskscore": 7} Google indexed: True
URL: auth-owlting.com Brands: OwlTing Input Fields: E-mail,

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/bower_components/bootstrap/dist/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4794
Entropy (8bit):	4.810857047460974
Encrypted:	false
SSDEEP:	96:VjOnNIPGpjbmqTinDkJLJbayg9jD90Y8U/fUbETJCvM8yFUj8Uj59U7rUoUc:9ICPG0kLbi9jDe48y/X
MD5:	CEFABC9B2D43A4F74BB259CB4850A97C
SHA1:	7C756691709868DCE459963C868E2C8050BF0127
SHA-256:	E03C058E399607F87B71436C80DB2229B2ECA10C11B36327D496E9285B0AA030
SHA-512:	4195F16D7B3B6B775BD3C8C139C83DA4742EB0E29C728941A2490FDC681D982803C8E1766F21531D3CE7F662B34B3846019849FA991ED0D38E2A4908FDC536C1
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/js/lib.former.js
Preview:	lib.former = (function(){...var selector, submiter;...return {....init : function( s ){.....selector = s;.....$( 'input[type=submit]' ).replaceWith( $('<button>', {.....'type'. : 'submit',.....'class' : $( 'input[type = submit]' ).attr('class'),.....'html'. : $( 'input[type = "submit"]' ).val(),.....'data-style': 'zoom-out'....} ));.....selector.find('.form-group input')......focus(function(){ $(this).closest('.form-group').addClass('active'); })......blur (function(){ $(this).closest('.form-group').removeClass('active'); });.. var dom = selector.find("input[autofocus]").first();. dom.closest('.form-group').addClass('active');......$('.form-control').focus(function(){.....$(this).closest('.control-input').addClass('is-focused');....}).blur(function(){.....$(this).closest('.control-input').removeClass('is-focused');....});....},....submit : function(){.....var self.= this,.....action.= selector.attr('action');.....url = (action) ? action : window.locat

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmQFK7-HTbGhxIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/bower_components/font-awesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	dropped
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7903
Entropy (8bit):	7.965234477359709
Encrypted:	false
SSDEEP:	192:pSjHA2/DnObgEMxI+gOHAnJpmvVCM7aTjI8Km:QjZ/T4gbxM4UUVCDTfKm
MD5:	D6914E8DF4AFB58D07FDBBE0314B9FD7
SHA1:	85727AEF56F36EFCEF9D18FE2454EA403B4461B8
SHA-256:	27182EADFF6523D84FB2F8D114205D41AFA68DD491E12E0EE9A398DB2781170D
SHA-512:	F9C9FE1BFD2E86CC7FEDC9CC659C68893926AEA382C4B778D25183D2BA8CA77246D518765CC74A91ACA2D21F7B2FFEE1DE99B7444B7D72EB39F4181DF567274D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs.................sRGB.........gAMA......a....tIDATx..]..]Uy.......$..IH.dH.1..@[..#.Ji../....]..E..jiB[k..,.ZY.Z..eKQ......A@.%$H.y..$.H.}.g......w&....u.{.>........'a.........\/.x... .U.o....sD...b...........".aO.\."....,.,...a....f...3b3.ls..s...Ep......4......Z..\e...?b.`X... w..........Mf`.m..q.\..1.[40..c...;7^.~..).^.n...C^.a...).. ..v.2.ER....1...../.Bt...b.......`n.a. ..<.....@L.5N.s...GL....1.l)..n%.`UJX.l9......G..<# .v`m......"xF...{3....u.....8..M.....vU!.....p.{..... .m[.2yv.....B.<..."`_.."./^."....7y...)O....m...x..I..#P...+r.DN....q..M..O...."..:.F........$..(.q....T...:...0/y{.J1...h.S9.v0 ...y.".cR[...MxM...r..............v.O.`...LG.,..K-r...gZ.....Y...@......wfN.........=+.../b,t.4.ur..#*......?Ax#....E_>T..!...0.........gO S.....>.\pNNx.F...K .....".<...aC.y..:..@=T.....r.^.5}=....,\....Cd.Mv.V{..9._<N...N.H.<g`-.Co.....^b.^.8t..5y.'........~G....&.~...-u.......-.4.H3.N..@k

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 93429
Category:	downloaded
Size (bytes):	13319
Entropy (8bit):	7.97692313944959
Encrypted:	false
SSDEEP:	384:Ds6t/HWjQ7iquHrb0fDqUMBoX50+whH31UHKP6B8Ha/0c:A66Q7YHE1MBo38+dBQ2
MD5:	E4CB98944EB13492DE0E65EE791BD98F
SHA1:	727429A9683642A1A09943DF697E69A1A5A3E7D7
SHA-256:	DBC420492A6A7294FD8E249F6E1FC06214101B8669390D5DE75F8185CBAEFBF4
SHA-512:	50F9B3CD35E36F8A71675A84969FD29F63ECC4DAF2BB4847E9678C5F3956230331915D92B267B1796A5752339B1B1D8D2C5529BB73F5FB30DFD3FA9B248F5F19
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/img/kv-map.02597139.svg
Preview:	...........}iw.....+l.m?..f.,..$=...r..>..W...MG.7..m..k....I..N..@.U.v.j.....h.k........N{.vp.....v.e7.....;......m...aUF..(.TU....'.T;...W.........:}[;X^.7a;..Y.F.]..u....m.N.e...A..g;.8.F.t......R_.ng.qaLY...y.^..u.M...=@..o.....;t..6.2...&.F...nA{.h....Bw.]...Z.,M>...'q...w.,..5G;.....Bw Ah.m...m.;;!t.\|.Ao.:].;..\v......;P.].6t.z..;...>.......n.K.]}m..;!.......o..:..0...<..=...".....w.(....#.qv....NG..w...Aw....:.............gb...q;...S_....8.........JD6.\..M,...n...:..4......n}M..m.t.6.$C.b..Hd...z.w..>......l.....o........t_.5...%.A_=.....=.cp..)..=.H.="a...j.z....f.1...#.O<...nE"..`.+.`}-..g.....v.k......W_.x.=p.n-".s.+9.....=p.n.R.;.so....z.{=e...........Cb.u.....k..o..(...C.Gp.......Cp..^.u.k..Q/.:.5.k.A.....@....9..z..[_s8.....9....xx..<..=.G={twk.R..U....D.... .u..."J.S....G)..l.\|....[.l....U..w.>......;.2.w+....P.T..+..'.D.e.j..F.D......p.)..5vgU..q...@...P.).o.J...Q7...J.\|....M.S...5I.\|..c...k...Ee...AJ.5C.KhG...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	4.810857047460974
Encrypted:	false
SSDEEP:	96:VjOnNIPGpjbmqTinDkJLJbayg9jD90Y8U/fUbETJCvM8yFUj8Uj59U7rUoUc:9ICPG0kLbi9jDe48y/X
MD5:	CEFABC9B2D43A4F74BB259CB4850A97C
SHA1:	7C756691709868DCE459963C868E2C8050BF0127
SHA-256:	E03C058E399607F87B71436C80DB2229B2ECA10C11B36327D496E9285B0AA030
SHA-512:	4195F16D7B3B6B775BD3C8C139C83DA4742EB0E29C728941A2490FDC681D982803C8E1766F21531D3CE7F662B34B3846019849FA991ED0D38E2A4908FDC536C1
Malicious:	false
Reputation:	low
Preview:	lib.former = (function(){...var selector, submiter;...return {....init : function( s ){.....selector = s;.....$( 'input[type=submit]' ).replaceWith( $('<button>', {.....'type'. : 'submit',.....'class' : $( 'input[type = submit]' ).attr('class'),.....'html'. : $( 'input[type = "submit"]' ).val(),.....'data-style': 'zoom-out'....} ));.....selector.find('.form-group input')......focus(function(){ $(this).closest('.form-group').addClass('active'); })......blur (function(){ $(this).closest('.form-group').removeClass('active'); });.. var dom = selector.find("input[autofocus]").first();. dom.closest('.form-group').addClass('active');......$('.form-control').focus(function(){.....$(this).closest('.control-input').addClass('is-focused');....}).blur(function(){.....$(this).closest('.control-input').removeClass('is-focused');....});....},....submit : function(){.....var self.= this,.....action.= selector.attr('action');.....url = (action) ? action : window.locat

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7903
Entropy (8bit):	7.965234477359709
Encrypted:	false
SSDEEP:	192:pSjHA2/DnObgEMxI+gOHAnJpmvVCM7aTjI8Km:QjZ/T4gbxM4UUVCDTfKm
MD5:	D6914E8DF4AFB58D07FDBBE0314B9FD7
SHA1:	85727AEF56F36EFCEF9D18FE2454EA403B4461B8
SHA-256:	27182EADFF6523D84FB2F8D114205D41AFA68DD491E12E0EE9A398DB2781170D
SHA-512:	F9C9FE1BFD2E86CC7FEDC9CC659C68893926AEA382C4B778D25183D2BA8CA77246D518765CC74A91ACA2D21F7B2FFEE1DE99B7444B7D72EB39F4181DF567274D
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/favicon.png
Preview:	.PNG........IHDR...P...P............pHYs.................sRGB.........gAMA......a....tIDATx..]..]Uy.......$..IH.dH.1..@[..#.Ji../....]..E..jiB[k..,.ZY.Z..eKQ......A@.%$H.y..$.H.}.g......w&....u.{.>........'a.........\/.x... .U.o....sD...b...........".aO.\."....,.,...a....f...3b3.ls..s...Ep......4......Z..\e...?b.`X... w..........Mf`.m..q.\..1.[40..c...;7^.~..).^.n...C^.a...).. ..v.2.ER....1...../.Bt...b.......`n.a. ..<.....@L.5N.s...GL....1.l)..n%.`UJX.l9......G..<# .v`m......"xF...{3....u.....8..M.....vU!.....p.{..... .m[.2yv.....B.<..."`_.."./^."....7y...)O....m...x..I..#P...+r.DN....q..M..O...."..:.F........$..(.q....T...:...0/y{.J1...h.S9.v0 ...y.".cR[...MxM...r..............v.O.`...LG.,..K-r...gZ.....Y...@......wfN.........=+.../b,t.4.ur..#*......?Ax#....E_>T..!...0.........gO S.....>.\pNNx.F...K .....".<...aC.y..:..@=T.....r.^.5}=....,\....Cd.Mv.V{..9._<N...N.H.<g`-.Co.....^b.^.8t..5y.'........~G....&.~...-u.......-.4.H3.N..@k

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 1070064
Category:	downloaded
Size (bytes):	302961
Entropy (8bit):	7.993569687026071
Encrypted:	true
SSDEEP:	6144:lX9riPkHE9AlWyP607gPvyWDJ+5xS3jBRxphEN38c/35axN8XqEHY:ttiPkH5WyykoqwJ+IxpiND/peOqN
MD5:	F5437B2707507CE95C0F6E8273AA4673
SHA1:	DA21102818976546B5FF24AD0F48878240C7B8AD
SHA-256:	D5A3C4D05E7C517921D6B0335DE046C27439849B17F635D3634B6ABBE37DBE26
SHA-512:	0DC8F26E1B29C4AE63469CB88F316E51D9C5DA988669B37F920CDE34BF1EEB83A0FFA6BE7D32AB4AA863F2A3ED2319713A735F30DEDF0797AFBA0F0E217B4A00
Malicious:	false
Reputation:	low
URL:	http://fonts.googleapis.com/earlyaccess/notosanstc.css
Preview:	...........K...q....gGI.!.~.6v8......v8..K7...h.H....w._==X..1....[w.......?....7_....?\|...=.......'.?}..._..............O........O_~......?.......\.../_.....O?..?.....7_......O...O_.o.o..............9..>......k.................?....../..y.......O.............w...=......./.+.........._~.....-........._.W.....}}.q\|.G..?.....?.5..{..^l~..b;lrbSz...4`..i.a..R....G.......b7l.=..a_O{.]Oo.....~.....?...Rm.ik.b...+..W..\H......~.X..Gm.].su.\....N.XG&.\|..q.&..>.....\....R.:.....O.Z8C......!..9.Y...;..y../...lx.Oj..}..8.._.#....+.......2.......o.........A.ay.<...>..:...].L7...{.*..y..}I..0.......]...9..[.X...>1.\|v.....=..."..}.y_"l.4..?.SO...Om.UI}.._..../....W.{?O.....#..s.h!../..{aV..0:...R..GM..U...5....p.P....z.o..=.;...J....0(.b..9q.cc..u..Qn...$.0...cs_..M..r&.5....\.....fV......5\|3.S.cb..b....G.>...L...,..d....`(^...>..>.B.w)dm.]..\|..\..`.A.:.q.cl...#..w.........-......!oz.......#."4C...<..d.]..5D..;b.........A....9e.Z......3

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14928
Entropy (8bit):	3.763335077488301
Encrypted:	false
SSDEEP:	384:H6n86GAXoS1NwWNIROj3StLjHkAi+/6CQnrr0GixVdhcsKm8ZedshME:M86Ggn1NeRtLkAz/65gzh3XshB
MD5:	6144C55B4E185CC6CEB05A998DA4FCE6
SHA1:	2007F784C5DA643F61A7AA43629A0B706A7DFDC0
SHA-256:	DAC32F05DB550579A570B04FFEEE9EA26382144493F7EF10C6212C793251A574
SHA-512:	D57827390959B2FEFF39783A3783131E7FBB0CD01AB9AD3386475DFAF03C9D13F3BE12442BCD5300B4C2FBEEA7E26A458AE74685D156CC474968AD06C9210969
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/imgs/sidebar.svg
Preview:	<svg width="167" height="91" viewBox="0 0 167 91" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1.68 0.863999V18H13.704V15.768H4.272V0.863999H1.68ZM20.8757 5.256C19.0517 5.256 17.5877 5.88 16.5317 7.152C15.4277 8.4 14.8997 9.936 14.8997 11.784C14.8997 13.824 15.4757 15.432 16.6277 16.632C17.6837 17.76 19.1477 18.336 20.9717 18.336C22.6277 18.336 23.9957 17.856 25.0757 16.92C25.9397 16.152 26.4917 15.168 26.7797 14.016H24.2357C23.8997 14.736 23.5397 15.288 23.1077 15.624C22.5557 16.032 21.8357 16.248 20.9477 16.248C19.9397 16.248 19.1477 15.912 18.5717 15.288C17.9957 14.64 17.6837 13.704 17.5877 12.504H26.9957C26.9717 10.296 26.4677 8.568 25.5077 7.32C24.4517 5.928 22.8917 5.256 20.8757 5.256ZM20.9477 7.344C22.9637 7.344 24.0917 8.424 24.3317 10.584H17.6357C17.7797 9.528 18.1397 8.736 18.6677 8.184C19.2437 7.608 19.9877 7.344 20.9477 7.344ZM34.7586 5.256C33.2226 5.256 31.9746 5.52 31.0626 6.096C30.0066 6.72 29.3346 7.728 29.0706 9.072L31.5906 9.288C31.7346 8.592 32.0946 8.08

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 436, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68968
Entropy (8bit):	7.990918156224507
Encrypted:	true
SSDEEP:	1536:plhTXPxAI7vhzyXFf11yj0OFHhBCBRhO9lD06bA+QuAG0pB:plhbxny911hOFyBzOrg4Urfj
MD5:	1C383D5989BC8376D1C78B93FC273376
SHA1:	787ECFFDD1B9836177656EBCC786DFDED170DF01
SHA-256:	61499525DAA7C34BD8363F2D15D3022DC547B5BF72485CCB60653E2568F36B3D
SHA-512:	3ABD8BAFD2C4793211350128AC6D5219FB4A77658E7F57E30061E6B03A44F37AAA5889D873BA4CA8F60EA6B091E5B023FBD7AFA56E18A875A9B4497894A53876
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........H.[....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx...`..y-\|.mG.w..S.7S.mY.-Gn...9..Oy.[..v\eYr..%K.D.`.$.P..{.b....]..`A.$H....rvgggg.3g.w......C...:t..C...:t..C...:t.,x....._...79x...x..t..7.y.._.......t.......[.~.(.....<'..z.....a....C..&.....%%.........b{..b....C.....W.gf..<w..(t.....<G~..;..M....>w..\|pG^^Z...Hzo...........C......1.z.Y......hS.w>......J<....O.{t...ZZ[.........9EE...R:.r.:t...k.#=}..\|.o...q.Z..r..i.m.H\.zQ..br'%../]._g6.....ns..{..C..N...t@....:a.c,\.4UQ.......).!.K.....A.{AqN+O..b...fw.ZUr.n..{{..$.....5...uM...G.C......1..6.i5..<tk..P....a.9Q>...m...Oo...uP...?.f3....kMKKhP.......x7..r.]........q.C'.y.RI...k..eU\|.. ..f..r+.........y...8K#-Q......+.4$'.7...e......Q.....0.K...)..:.NX..[..M....T...aE\.'..8^..H..N.etv..o\..d...VI..k..:N.H.))....-9...]...[.p8...........*i?w..t\w..k..B...}r..EYa.DD2yV..":.ZFLu.....!=9Y).w.Q....8-K(...'..XQRi...;:zV8..O..)..he...}..:.NX......7

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 71672, version 1.0
Category:	downloaded
Size (bytes):	71672
Entropy (8bit):	7.996424381850915
Encrypted:	true
SSDEEP:	1536:YGPSxM1QomyFXwaJzp5N98RntoQwAtm0W2HS3uCj:OKQo7wud6toQtB5HS3j
MD5:	F2FA4CADF0B68B868B744E813FD23860
SHA1:	7BF9C03148E342B289EC5990C099A2DE5BC410CE
SHA-256:	304DAFAA54B29DFBE7C4715B59C26BC40163DDD887275D3B4C2CC2CD09C8B873
SHA-512:	5764A94FB5F2A34DF8740FFEF083CD4FC8BE6666DCF6285E52C0951EB3BD51DC69CBD43FC5AF7612838BEA350F6CABF07ED3AE2A465229182C53A2A5108E762F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.116.woff2
Preview:	wOF2.................................................r..R?HVAR.x.`?STAT..'..L/l........I..6.0....6.$..h. ..0. ...$..6[#.Q.e7.v......X..q.M..<3.l.......Z..c._l.....A.2k..>./.[.............w.R..p!k...ymTq}..}%..sPe..x.Z.S....0..6%.d.....(.&K6.R"Q...V<..._..3^.C...U`.z..Q...]U....J..:.l.Ts."..{....\.=.6f.]....ax~n.m.....6`......bD.....R.bPV.h..w.b..q.^X.v....To..{....-..`...X1...6.9h.0P.F.....3...+.0.b2....<..V. ......;..v.......H.$c.....W...u..f0.Md<..T.Cr...".d+.......aT.......0zD..(...2b...0:t.....6P.H,.H.W...pm....k...^.w.n..tf.8.:>d>$.4.......G..3'........"....s.T...j+..[*.M\|.3.$....Y...s...A".D5.(...}....}.W}..T\|.A....Y..........r.R.T..x.'.?....)...@T...;.A`...... .P....S..N._...N.g.pR.].?_.r...5..!..zw..&..../]].P..&B-\|&..{..KE.(FE....Dw<.:W....#...v.......3.R.....X.`..._.x..,.....#m....u........c...$..R....x...'\=..B!dY......l.e.........pP....~>.....4I....#...........V5.......AH.5A.Q.U...._w.A.3 5.%.9..g...jP...5..Nk}..F.. .i2.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7184), with no line terminators
Category:	dropped
Size (bytes):	7185
Entropy (8bit):	4.957232527894267
Encrypted:	false
SSDEEP:	96:k7CE6Nn9QyInJkMdmeV3HJ5QXbfyU0x7laJTJy8+y862HS+HlezT0:K2uyInWM8l8OVyDyKFld
MD5:	C46094E2972E9EB41F402BFB240B09B3
SHA1:	38DB9C2AF18ED9F621D386D2171424387BB17F21
SHA-256:	293F65B6A60499FC49E8D3358C83BD694ABAD95A3909413E53AE46B2309BD553
SHA-512:	77E41279155FE2ABC890C996BAF7D30804DA2BEC8DD3E3B83307C913893D90354BE1748FE8F9388A0BB623142A1D76A61BB4B47BAD45DB0397ABC26DF77B6A65
Malicious:	false
Reputation:	low
Preview:	!function(t,o){"function"==typeof define&&define.amd?define(o):"object"==typeof exports?module.exports=o():t.tingle=o()}(this,function(){function t(t){var o={onClose:null,onOpen:null,beforeOpen:null,beforeClose:null,stickyFooter:!1,footer:!1,cssClass:[],closeLabel:"Close",closeMethods:["overlay","button","escape"]};this.opts=r({},o,t),this.init()}function o(){this.modalBoxFooter&&(this.modalBoxFooter.style.width=this.modalBox.clientWidth+"px",this.modalBoxFooter.style.left=this.modalBox.offsetLeft+"px")}function e(){this.modal=document.createElement("div"),this.modal.classList.add("tingle-modal"),0!==this.opts.closeMethods.length&&-1!==this.opts.closeMethods.indexOf("overlay")\|\|this.modal.classList.add("tingle-modal--noOverlayClose"),this.modal.style.display="none",this.opts.cssClass.forEach(function(t){"string"==typeof t&&this.modal.classList.add(t)},this),-1!==this.opts.closeMethods.indexOf("button")&&(this.modalCloseBtn=document.createElement("button"),this.modalCloseBtn.classList.a

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17076)
Category:	downloaded
Size (bytes):	17269
Entropy (8bit):	5.251909642198016
Encrypted:	false
SSDEEP:	384:Gg4zMsPLKzUOO2/JlxKS3eC1Zd2C5ZEX8QGcEj3EpZLVvRCTcx:kDDkUOLGCJEJnR2cx
MD5:	49E129F766E6317812419BD5C5EA2CAD
SHA1:	744973F29DD1E0D052F63499A37E619C4F1B62C9
SHA-256:	32AA42B33CB403A91BEC4B8F77E7BB7B4FC4FBF8C34302C5B644701677244EEC
SHA-512:	8A5D122DFC289DE3CE838F86EC2782BDAC95D1E21D054BB7C6C8269AE16290C52ED4C139173D766A87E7A72FDDC6A17413297B998F800445ACA7D4F679FDD2E4
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.js
Preview:	/!. Datepicker v1.0.0-beta. * https://fengyuanchen.github.io/datepicker. . Copyright 2014-present Chen Fengyuan. * Released under the MIT license. . Date: 2018-06-30T09:15:49.717Z. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("jquery")):"function"==typeof define&&define.amd?define(["jquery"],t):t(e.jQuery)}(this,function(D){"use strict";D=D&&D.hasOwnProperty("default")?D.default:D;var a={autoShow:!1,autoHide:!1,autoPick:!1,inline:!1,container:null,trigger:null,language:"",format:"mm/dd/yyyy",date:null,startDate:null,endDate:null,startView:0,weekStart:0,yearFirst:!1,yearSuffix:"",days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],daysShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],daysMin:["Su","Mo","Tu","We","Th","Fr","Sa"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],monthsShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct",

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4242), with no line terminators
Category:	downloaded
Size (bytes):	4242
Entropy (8bit):	5.001767614668358
Encrypted:	false
SSDEEP:	96:Ciow2iDaweSdRnC2aIy2DmV0SFpMTPNiXZ2INN05L:f2isiNy2m0SFpnJ2W05L
MD5:	FE89E6556DCAF55B82F557A507D3F041
SHA1:	EC90EEBF54CCCCB4186089CEB26500BF68AD29AD
SHA-256:	C2A6116ADB77A5BEEC39FA555B78013D4382FB30725F3739C866BBBCFCB70616
SHA-512:	A399CD174AF46EB0BE177FEDCA2596BB9C0D754D3264BEB162D5E62648D99D7F01316C7757F9622A965C8E73B55382AE140EA4E2CE528B8757003C981D6E6F90
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/plugins/tingle/dist/tingle.min.css
Preview:	.tingle-modal *{box-sizing:border-box}.tingle-modal{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1000;display:-webkit-box;display:-ms-flexbox;display:flex;visibility:hidden;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-align:center;-ms-flex-align:center;align-items:center;overflow:hidden;-webkit-overflow-scrolling:touch;background:rgba(0,0,0,.8);opacity:0;cursor:pointer;-webkit-transition:-webkit-transform .2s ease;transition:-webkit-transform .2s ease;transition:transform .2s ease;transition:transform .2s ease,-webkit-transform .2s ease}.tingle-modal--noClose .tingle-modal__close,.tingle-modal__closeLabel{display:none}.tingle-modal--confirm .tingle-modal-box{text-align:center}.tingle-modal--noOverlayClose{cursor:default}.tingle-modal__close{position:fixed;top:10px;right:28px;z-index:1000;padding:0;width:5rem;height:5rem;border:none;background-color:transparent;color:#f0f0f0;font-size:6rem;font-family:monosp

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 278
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	7.111462878568565
Encrypted:	false
SSDEEP:	3:FttRWtYxd7YEhgY7rx/kTNONjbHbvtmr32LWeOKyiiscPZX0a/3OEGtAlHJToG/9:XtAt87Pdx/dpWeOpfssZX0M+vg94QOJa
MD5:	EAA77037DADA371E8614AB3C0FE2C642
SHA1:	50577B108721797A4896A25B8542603540A6C3C9
SHA-256:	3EABA789AD9673BB8CE5FD4B0C0E20CAE75FF62B558DAB9E887892CEA767F2A4
SHA-512:	0A49D143E53F2D73DDF53F6B86D9809DDB8469480AAA3CD8EF5BC69670E7C5CEC3065426CC0E6A086C97BB66573B462B5A9062F5F3EACD0BB096160F7BE7C044
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/js/runtime~index.4b783e04.js
Preview:	..........M..N.0.D....'8....8X.h..J.D.=pt.-....v..{.TH\V..7.Y~S...GS..\|.../...fs.M%..,.......Ld..s'.!...m.H.y.[.a...9^........F...$..^HC..k..I.~W.E...;..8.....o.c?&.4..B..:...+..#.th......*.....K.[........r......1....~...l.....

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7184), with no line terminators
Category:	downloaded
Size (bytes):	7185
Entropy (8bit):	4.957232527894267
Encrypted:	false
SSDEEP:	96:k7CE6Nn9QyInJkMdmeV3HJ5QXbfyU0x7laJTJy8+y862HS+HlezT0:K2uyInWM8l8OVyDyKFld
MD5:	C46094E2972E9EB41F402BFB240B09B3
SHA1:	38DB9C2AF18ED9F621D386D2171424387BB17F21
SHA-256:	293F65B6A60499FC49E8D3358C83BD694ABAD95A3909413E53AE46B2309BD553
SHA-512:	77E41279155FE2ABC890C996BAF7D30804DA2BEC8DD3E3B83307C913893D90354BE1748FE8F9388A0BB623142A1D76A61BB4B47BAD45DB0397ABC26DF77B6A65
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/plugins/tingle/dist/tingle.min.js
Preview:	!function(t,o){"function"==typeof define&&define.amd?define(o):"object"==typeof exports?module.exports=o():t.tingle=o()}(this,function(){function t(t){var o={onClose:null,onOpen:null,beforeOpen:null,beforeClose:null,stickyFooter:!1,footer:!1,cssClass:[],closeLabel:"Close",closeMethods:["overlay","button","escape"]};this.opts=r({},o,t),this.init()}function o(){this.modalBoxFooter&&(this.modalBoxFooter.style.width=this.modalBox.clientWidth+"px",this.modalBoxFooter.style.left=this.modalBox.offsetLeft+"px")}function e(){this.modal=document.createElement("div"),this.modal.classList.add("tingle-modal"),0!==this.opts.closeMethods.length&&-1!==this.opts.closeMethods.indexOf("overlay")\|\|this.modal.classList.add("tingle-modal--noOverlayClose"),this.modal.style.display="none",this.opts.cssClass.forEach(function(t){"string"==typeof t&&this.modal.classList.add(t)},this),-1!==this.opts.closeMethods.indexOf("button")&&(this.modalCloseBtn=document.createElement("button"),this.modalCloseBtn.classList.a

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 205409
Category:	downloaded
Size (bytes):	45943
Entropy (8bit):	7.992363073692692
Encrypted:	true
SSDEEP:	768:9A4vHyavMUUFXYVy4aDpsr9eqNaJSgWr65W3YFHTD41GqXGWI3T3PVvCXGbDN+/s:JvSavMUWXHDDps5JaYv38HT81GqWT3PN
MD5:	C853F61BACB8ABDC584C2D3390141061
SHA1:	77905298DCB2D9AEFA701E7412D7426A22EBD5AB
SHA-256:	5922C15D0B6EB52666C3AA1DEE73D8210BC3C9E620FACFCA981159382AEB050A
SHA-512:	CBA7F516A6DB7BA87FFC7FA5C5D0C1012556344F915123B42AF5529C47A8F97944C98F7D3C5C4207F1004FF0C01FAB732FE51814F745E0E038083DBA5BBBC4CB
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/css/chunk-vendors.0d8d4f33.css
Preview:	...............'.5.X...U. .@U..... @.B.cm.A\.E...s..../..K..RV.wNw.....xxxx..<.B_.........+t..U.E.... )..._.J\|......+._!l....;V.b.I..Q..."(.4.f.E.U..=r.............x....jv\|xyZ%......4..R.D.D...O5.Z.L.o.....K.aPv"1..M..[..F...Fl..........}.....4k.a..\|........./..K......s..:<vPd..~..(H:..R+......5....`}...S......e..(....o...[.t...Q.%....#........1H.o..]...u`..7h..........F..:....N...~?'.....[...u.........9.N...(...+<..u8..u....o.j}.I.W......w..f...NR.W......?.....M/.7.r6_.2..."a..........e;].........J...~O...CC..B....\|.....D....D......_V..?...5_.<.........^._...{c.......S..U...m.I.;.q.s.Orq....H3....TiU...[.&..t5./...$.L...f?A.2.....{A_........3.s...8x?~o..~5.F?......'..TvT.r...v.....p>.7/...=.6.q....v^1..5...../n.4.i....p......Y....6..mwV.l.!.geO...9V.._.......=a..9~.].s...E......U....3.W..w..OZx....q.CN...'..c.......6..y.ng:=....p..l.yj..W.r..NH...J....-.kV.......U....S.#.v...'..xI.(.rs...v...4m.qm....c$_....d.1..o..e.).k..r..7.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 21753
Category:	downloaded
Size (bytes):	5372
Entropy (8bit):	7.95390582826167
Encrypted:	false
SSDEEP:	96:xUbKj8XlK34kf1NCtg72xBa598ZQBYHsbxTnx4H65Tkv1KhjX:KtVKo0CtT3aI+YHcTnE6evKX
MD5:	91C6A44AE5B427AFFD9092527BBA08CB
SHA1:	D7F0EB0AE9E13726F6A3DCC5462ADA8C7EAD0668
SHA-256:	169245B7D63909E21F74BAA48177A3C02C03E4C27E088F2712A32E0DA1ED7C54
SHA-512:	28407718C3EFF51C968AAA1FB0FE89B9537E54CA304F6D18F95EE3488F8BA9E02340AC4866D91895B9E695A24873BE5FA770652EC216C694F5473D218780EF1B
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/personal/
Preview:	...........<....u?.3..`...1A.<.>....n.Z#.kg<..%.$!.....;q.#;.vl.n...t.w..%n..N2M....1..I?._.{.....$O..f.<K"v.}...[..G..Vl..{..N...%..v...T..=.SCz.. Pwj...e...Q.w.Y..M.k.k.~.As....jS.j..q.1.-...o...y..+.v.]<}..lo.@.....s.......i...&.....W.....X..{>%.....J..kOB..Qk8.;m.;..p.im..>1..}w......].....}bZ......(.4...Y.]..'.....!pPn.M:.t..qq........o....O....:..D..=..dL.%..~.p....].n...1......DEh.H.GGO...Z(]f.rr...\k.;$c.YC...,..@.......[..h...Q....&.d.@.#.@_...exV...eJ\|.r.....o.KB.7...<_..6.b9..B..;......\F..^.5.g<Nc..7...OC...c.<.lpN.JgL7.d...lB.,.... 2..F.A>. ...-....5...,..m?.>..T....r./.H.;......$i.FF@.`.......>.C.3....vTU".......D...J.@.`..,.!.4M..V....<......._.?m.Vj.dr.a.+...bEdx.h...9.h...5...A/` ...$...M.:rm`@i..g(..f9.!e.....-.am...........h..(.Iyk..n...o.........-....Nd...I.9..L.....j.NSN..2)8..P?...-]^.Kx.4. .o.!...M.......V...z.\.P2.y>..X";^S......m.............].c.2....,".v...R%/.c.m>..-".[n...Y.C.RZ.?......e.7..W....s.*....

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74456, version 1.0
Category:	downloaded
Size (bytes):	74456
Entropy (8bit):	7.996792570895188
Encrypted:	true
SSDEEP:	1536:j0zxa5eXP4nbPwBRj2GCWjmZrY0emJ2Mw0YHtmRzCwVje9Bu:otXP4bPqSFYQteI2Z0YH+zTVjezu
MD5:	4DB4FB890C0DD7F649B8B77FE93471BB
SHA1:	A4C9A12E564FB4F7557B043C615E0371B306273B
SHA-256:	1458F29401C63C3B3D8BB17E4387E96CFA803EC81830A3F61E305FED27DA5F6F
SHA-512:	DFE506A8F40881F1B88D8ABF28C3905BAA5C4136165BBF1B776CFCE9955422838500BF17E837268921116C88F5F060A163D521E50E555B34A4E6F9BC0D2C7BA3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2
Preview:	wOF2......".........."`............................2..$..z?HVAR...`?STAT..'..}/l.....<..2..@.0..F.6.$..\|. ..0. ...$..@[..q....;A....{yE.bp..`./.(+}....OIN....s.V.E..in....B..j..g"i4..)..8`.....$.Ns..n.E.....xZ\|.V[..?.v..$.6......l:..$).fC0..+.>X.......%....p%=....^..{..'.\|.....O..$$L......9.U..gv...=........8...M..r...vx~n..L.....`c.k...F..DjH.(0.........3.N.../.(..k.H.N.c'.p...VUb..-HHD."F.#......[..{~.?..z..I...2P.8...(K\|....p.%N9..1FY......WDJ.S.2.Y).a..l....."..2m...nx_..@3.$..)...$<..t<.M.^#6.l/.=@..$.........6.,.......y.9..!!!....d.'@.t......Y..Q.j5...Pq..PT&..z.M .!D.....X$.........L.....2.=m.":=b...W..Np2..T.....m.O..'&../7....(...!R..B..aLe.s..=./7.....Q...+..A..#.9..F.CO.t. .q... ..=V%.B...G.eg^'..:.B....n.\.'.. .xL.-[.Y....p.N.z.7<!p)H.H?....`Tm.......F.....R)H+=.%Zi.AE..mTl.TP....6F}...-.....k.......u.....&b6..v....W..$.r3.>...N...N....8..!9$....q...F'.o...n]Y../M....YW.u.\;`9a..(.....fV...*#mV......\..W.)..9,1K..7@b..X(...,'..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3498
Entropy (8bit):	4.255711754897488
Encrypted:	false
SSDEEP:	96:8M9ImGkC20g4Ek5QJeBXmFrFTd57b3Hp6GfiL5aLJ00YwsScgGaPLuX:8rkC20g4Ek5QJeBXmZpd57b3Hp6GS5aQ
MD5:	DEE3963CBC96E8A0E384F78B46604220
SHA1:	15AD60FBCC7B0DAD0038983C73842DBE93759F9F
SHA-256:	233020D979FA99E8BC93DE49A43EE7F65B64938C1DDFB534A7B0C60A19BF2F2A
SHA-512:	92854B71EEA91977642089AC61AE4D05A296CE18259EA34FE5DD9FACDA1484F328E92E386DC2266B60CF6E531F071E19232FE5B7CFF6B5C1017DFE7B1EA9DB81
Malicious:	false
Reputation:	low
Preview:	$.ajaxSetup({. headers: {. 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content'). }.});..$(function(){.. var former;.. if ( $('form').length == 0 ) return;.. if ( former ) delete former;.. former = lib.former.init( $('form') );.. $('form').submit(function(e){. e.preventDefault();. lib.former.submit();. });.});...$.extend({.. create: function( route, data, callback ) {.. data['_method'] = 'GET';.. $.ajax({. url : route,. type : 'POST',. dataType : 'json',. data : data,.. success : function(msg){. callback(msg);. }. });.. },.. destroy: function( url, param, callback ) {.. if ( param.call ) {. callback = param;. param = {};. }.. param['_method'] = 'DELETE';.. $.ajax({. url : url,. type : 'POST',. dataTyp

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65176)
Category:	dropped
Size (bytes):	65261
Entropy (8bit):	5.289016833813444
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/A:5kn6x2xe9NK6A
MD5:	151F0D385D6201C9EE9545DFDCCB9F65
SHA1:	844D8E1F52E1CAC5C8080757336FA786087DE63F
SHA-256:	ECF84EB2A332C59D2E08805672DB03442A342AAC3E2116C98613CB2919BB00A4
SHA-512:	BB79BDFBECB9E6C0095A6F907CC394CE5116C40AEF462E86263B1C974EB94DCCBC6D3CEB1B7FDA12BC19C0D5974892446F500C45C38EC67EE20C56C9D998B401
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74932, version 1.0
Category:	downloaded
Size (bytes):	74932
Entropy (8bit):	7.996250218805099
Encrypted:	true
SSDEEP:	1536:TxFW3ez3bMfc7VUzwq/VUbeaH7LiHHwnfvsf/sXwSYW6Ydb:AALMIUnd1abNvy/sXdT6Ub
MD5:	98D641E6E4829624A9FB8F03F42A4130
SHA1:	C0B2BF040D261051AF66E743E0135A53820EF0CB
SHA-256:	95342401C1423E11EEF2C248CB55B5578EEEA54E47936E37E002051B60018973
SHA-512:	FEF940A2EC8962E11AC5BC1A989F7591ECB79D83C805857931EB2DE8BD18F70BBFF7C610E88EE4421E727E3A8190501EE49C4C5AEE08015F4CC0DA7722A08599
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.111.woff2
Preview:	wOF2......$..........$;.............................r..R?HVAR.n.`?STAT..'..</l........ ..2.0..,.6.$..`. ..0. ...$..2[.qBq.t".s...e...b..n,.q...W...6....^#.........I.m.3...dA$3.....L.....G;...~...e.[........JD...ws..W=.i.D....m..L..L.~n.X.^..J..E..&.D@V....J.@P2..`....F..?....'...r.b".a..Z.../.4..__...V.yeW.......y..s..3sF.h. .x.&.]..w...."^1Z...!zD......$..).EHq.(,O..QHv.........a.{.cc.0X.QK.-U" .%......a.'V.zf.ug.uV...n.J..M.,$...!!...J!..@B......B..U.....<...g.giw^....<...3.6...E.0..G>...\...Y...i.vQv..pE\..~LR+...Q.I..6...<..oA\........S[.q..........j.$...j......?........H....7.g......}.=nD...X. >_N...H.v.GF.H3..Fl.9......N.....[.`...?...MA.N..y.>.\|.Y......V.\|.e...:..m..V..S..LHH..........V...&.$g2l..'..0o../..RAjL..rf.........@3....d.%.d._jne.eG.U?...P....,1'..C.-.'..a....RE....D..m.I&..4.\|..7....&.qb[R..~@............[.{.I.F.k..^....8$@D...y~n?.1F...;wT.{...Q..TX.E.zH........Sh.@1P....+...1s..d.S...1..<..P..3l)@._.f.%.Hg:.*rF...x

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	downloaded
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/bower_components/bootstrap/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65560, version 1.0
Category:	downloaded
Size (bytes):	65560
Entropy (8bit):	7.995929290728143
Encrypted:	true
SSDEEP:	1536:aFkY2VmKG64Ypi2XjPnjI/GrQXVanvD1puWf8fJ0ckH+2Or:a+UKG8VfDQXsnvDXnUzqOr
MD5:	0235E10363BF82C8F4E201C6A01918DF
SHA1:	C415A428B6E1C05C94E4BDCF7B0E597B930953CE
SHA-256:	9AB69E66ED399A0646BC494FC668570E59B2A27354367ACDA9109BB6DE550201
SHA-512:	45939D30E6D8F197CDDE7D644EEEBC828A3DC8A8BBF68FAB3DF7298DF63A95443308FC203BFE268D31A713C4BA955C662D534377E14120968C3C9BB575789285
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2
Preview:	wOF2....................................................H?HVAR...`?STAT..'..$/l.....H.....>.0..(.6.$..x. ..0. ...$..>[.iqB...w...JDE..Y...........`.@........YrTZ..../P.L..(..W%.....\[.q.y...u.W..MK..3gO..X L.j...^.......A.b...A.T..].......h(4P....\|.......n(c~.e?.#..&g.?}d...N...R.^.....gV...bL({x..+.t...).(.Q..HmE..B.[>.z...7D...6R.........).R......t).t+.....z..r..a...[..yz........E.x.'.../.&.$bD..1. ..x...h..h..Vq.BM.:...mo._....U[....>Iw..8.3....z...........H.......NudA;..E#I5..........!.sG....8...(I.j.+5`..........i..E.F.m....W...1.N;.$U)%....HG....[q.5...Z.f.-=.I. Em..i.0...y........3.`.Z..G.}\|w..{.OD........3.Q...k..........(..r...Q)....U...'.dB...Z......{8.mOCH.c.....%...VB..q~-..5..e......2$.0.{.......s?...i.`'....l..<.....u:......M..w.3.H&... \...S.\.$sV..6 .%....{../[..s.5[s^m..)....:6Ig.x#.`..........MM...I.)...F...&M/=...0....W....e.[..Qa.e7..).0..].RD:.....G3]S.#d.g/"..t..3.Ak......O..Nm(5wFZ.y..-je}.Q......>..MP49.2M..?U...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23325
Category:	downloaded
Size (bytes):	8254
Entropy (8bit):	7.972699318647449
Encrypted:	false
SSDEEP:	192:lHKIcUZF5xtbLfnxzkFz9z9L/nQVg35ZheRwMWvPsmvSXfVmg8W4FMT/:lHHcUZvxtbLfn0c4ZheRRWM0SXp4FE
MD5:	F1CC869DD81E6DFCDBE4591ADA49AB41
SHA1:	310DC7AC34740D62855D44C0E3EA53868808DD02
SHA-256:	6D7325B49DBDE96EE85C115A57B9F5F8E8E5B8878270E7A8CE36B821A188697A
SHA-512:	0A1693007381ED25432C56B558CBA8C8FD0AB1FE6E6CF3CE64B113A19E38C7F4110F33AB778A543536983755B3B8A56B2391EB5197A7984320A8C50465C493CE
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/img/logo-full.acc3a999.svg
Preview:	...........\M.d.q..W4.7..-.E...2..#e..."...C.....$H....9......g9Pl....%...........7.\|..........\|.....<....../......Nxz.....>~...._?...._}...._.}......?.p....\|..G%....~........~y.......(...s.3o...u?.\|N).)..m.S..9.T.y..x..7.)...s....p..........Aw.@.Y..]......5...ZO..s.a1..$=S..vn......k.S...f.r=..;...........6..#..97LW..k2..ju.S."J&.[..TO..O,.....:....,...6...p......ym..5.......nN.w....w_../.....o..z.....=V....z.........r....l....x..r20......\|..J0........F... .....9.r..ls...1..,...:..k@.....y.5........i..z2.8...h...`......5......r..$NAs. u.\.1w..s.-..4....gn.d.....T..z.$.:N.8&C:..V..v.....{q.....+..9...#..8...x...N.4io....~..G...:z......{6....S%....d.p....F..8S"07@.......... ...=..y.S#..m.}.M.Q6...>..w.G.....g.H..p.z.@(...6.).> ..g...?....cx{..........O......1h\|..0..p....5.....p..zB.A...S...$..U.....0;.....?....1].......=.....<.S*.....R.0..B..XJ%...P..3q.....1T-I..IwB..G..}.&.O.op.......RP.u.7.(...P..'h..R....nx.....~5.!M.pt....A~.0.a3.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14928
Entropy (8bit):	3.763335077488301
Encrypted:	false
SSDEEP:	384:H6n86GAXoS1NwWNIROj3StLjHkAi+/6CQnrr0GixVdhcsKm8ZedshME:M86Ggn1NeRtLkAz/65gzh3XshB
MD5:	6144C55B4E185CC6CEB05A998DA4FCE6
SHA1:	2007F784C5DA643F61A7AA43629A0B706A7DFDC0
SHA-256:	DAC32F05DB550579A570B04FFEEE9EA26382144493F7EF10C6212C793251A574
SHA-512:	D57827390959B2FEFF39783A3783131E7FBB0CD01AB9AD3386475DFAF03C9D13F3BE12442BCD5300B4C2FBEEA7E26A458AE74685D156CC474968AD06C9210969
Malicious:	false
Reputation:	low
Preview:	<svg width="167" height="91" viewBox="0 0 167 91" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1.68 0.863999V18H13.704V15.768H4.272V0.863999H1.68ZM20.8757 5.256C19.0517 5.256 17.5877 5.88 16.5317 7.152C15.4277 8.4 14.8997 9.936 14.8997 11.784C14.8997 13.824 15.4757 15.432 16.6277 16.632C17.6837 17.76 19.1477 18.336 20.9717 18.336C22.6277 18.336 23.9957 17.856 25.0757 16.92C25.9397 16.152 26.4917 15.168 26.7797 14.016H24.2357C23.8997 14.736 23.5397 15.288 23.1077 15.624C22.5557 16.032 21.8357 16.248 20.9477 16.248C19.9397 16.248 19.1477 15.912 18.5717 15.288C17.9957 14.64 17.6837 13.704 17.5877 12.504H26.9957C26.9717 10.296 26.4677 8.568 25.5077 7.32C24.4517 5.928 22.8917 5.256 20.8757 5.256ZM20.9477 7.344C22.9637 7.344 24.0917 8.424 24.3317 10.584H17.6357C17.7797 9.528 18.1397 8.736 18.6677 8.184C19.2437 7.608 19.9877 7.344 20.9477 7.344ZM34.7586 5.256C33.2226 5.256 31.9746 5.52 31.0626 6.096C30.0066 6.72 29.3346 7.728 29.0706 9.072L31.5906 9.288C31.7346 8.592 32.0946 8.08

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3498
Entropy (8bit):	4.255711754897488
Encrypted:	false
SSDEEP:	96:8M9ImGkC20g4Ek5QJeBXmFrFTd57b3Hp6GfiL5aLJ00YwsScgGaPLuX:8rkC20g4Ek5QJeBXmZpd57b3Hp6GS5aQ
MD5:	DEE3963CBC96E8A0E384F78B46604220
SHA1:	15AD60FBCC7B0DAD0038983C73842DBE93759F9F
SHA-256:	233020D979FA99E8BC93DE49A43EE7F65B64938C1DDFB534A7B0C60A19BF2F2A
SHA-512:	92854B71EEA91977642089AC61AE4D05A296CE18259EA34FE5DD9FACDA1484F328E92E386DC2266B60CF6E531F071E19232FE5B7CFF6B5C1017DFE7B1EA9DB81
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/js/lib.js
Preview:	$.ajaxSetup({. headers: {. 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content'). }.});..$(function(){.. var former;.. if ( $('form').length == 0 ) return;.. if ( former ) delete former;.. former = lib.former.init( $('form') );.. $('form').submit(function(e){. e.preventDefault();. lib.former.submit();. });.});...$.extend({.. create: function( route, data, callback ) {.. data['_method'] = 'GET';.. $.ajax({. url : route,. type : 'POST',. dataType : 'json',. data : data,.. success : function(msg){. callback(msg);. }. });.. },.. destroy: function( url, param, callback ) {.. if ( param.call ) {. callback = param;. param = {};. }.. param['_method'] = 'DELETE';.. $.ajax({. url : url,. type : 'POST',. dataTyp

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25476, version 1.0
Category:	downloaded
Size (bytes):	25476
Entropy (8bit):	7.992334783167032
Encrypted:	true
SSDEEP:	768:GVwp3qtxtmnc9qpaNe7whxTPGUvGHXG9XMx7nUagKU1O:K/Uc9NekHONW9bagKU1O
MD5:	E3FBB86C1BDB4F768C188EF7472415F3
SHA1:	DA07301AB737803592A25645B2FC71AF80386557
SHA-256:	7601E8DA6B91723C9696C34F491268687874699D92BBF42E26FF6DD6B69F9FD9
SHA-512:	78C1B7393E2966FAF1271281BCDF0D195F948BFBABFB7CBA288DAABA8D4756B2A148A7E187460C2251195DCB9785D8162025EC1405AE389E7677B4F0B88A2B65
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9i1OCEK.woff2
Preview:	wOF2......c........<..c.................................v..l?HVAR.;.`?STAT..'.../l.....`.......0..v.6.$..r. ..0. ...$.........T:~..&...j.1...\|....D.....8........L.._."9A....do.....2.z..xll.".x.......kK.[..DF.......g..66m.....6^.ep.].....>...?....K...u...uX...O....3.jaE.....M.=n..W>..H...p.+t.'.Ek.3{...q..9.....q'..{.........R.AJ@B.P...vu.......o}?^f.=Q.n9<?..0.j.....m...U.(F.lE....lT.B..:.J.h....q[?.F.b..q....J...e\..5.7Q2F.......^~.K..=%H....W...h.....S....:%..5H....4....b5....J......;.\|.C.zHj..J....=T2......L...!+^.$IW...:my..3~......l.4..P..p/f...C...p....T..s...?@X.....^$..... w....%.[...p(.v.t.....gbD)./.%...{S..?Pai............U..B.....X..H...)-A.Z.G..&m..=X. ..b...'i.k.8.$..B.]H...X.X.W.....uqe..o.V....M{.S:...o... .\..B.t.x..I.J...5..3.D(.gU.].j.3.d...O.W.V9..{....BU.Z...''..?..[W...fH...u..t..\|...Y.n.....=....e{...EX...8.\.d.A.Qr......v,J..)M....s{..............@0p..` ....V7...f.CT.H:.....F .).x.....h.....;...I...r..G.,@.X....P..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40802), with no line terminators
Category:	downloaded
Size (bytes):	40802
Entropy (8bit):	5.373503760082732
Encrypted:	false
SSDEEP:	384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj
MD5:	FE0F18CD4D5F1D03DD247211C5667669
SHA1:	99E239BBCA743FE70220E684EBE98E57FFACD4E4
SHA-256:	15211E0BE73438987ED05236DC4CE90962F7C46452427364446576505E66697B
SHA-512:	A2B27F39C521AE136483CC2036B7B9946714272863D49B28B7F4129D128A8ABCBC92C1AF0296C70446EAEC06CCB134AFE0B9E77D1DCD49A8C240516C1067BC8A
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/plugins/sweetalert/src/sweetalert.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,o){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o="swal-button";e.CLASS_NAMES={MODAL:"swal-modal",OVERLAY:"swal-overlay",SHOW_MODAL:"swal-overlay--show-modal",MODAL_TITLE:"swal-title",MODAL_TEXT:"swal-text",ICON:"swal-icon",ICON_CUSTOM:"swal-icon--custom",CONTENT:"swal-content",FOOTER:"

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17076)
Category:	dropped
Size (bytes):	17269
Entropy (8bit):	5.251909642198016
Encrypted:	false
SSDEEP:	384:Gg4zMsPLKzUOO2/JlxKS3eC1Zd2C5ZEX8QGcEj3EpZLVvRCTcx:kDDkUOLGCJEJnR2cx
MD5:	49E129F766E6317812419BD5C5EA2CAD
SHA1:	744973F29DD1E0D052F63499A37E619C4F1B62C9
SHA-256:	32AA42B33CB403A91BEC4B8F77E7BB7B4FC4FBF8C34302C5B644701677244EEC
SHA-512:	8A5D122DFC289DE3CE838F86EC2782BDAC95D1E21D054BB7C6C8269AE16290C52ED4C139173D766A87E7A72FDDC6A17413297B998F800445ACA7D4F679FDD2E4
Malicious:	false
Reputation:	low
Preview:	/!. Datepicker v1.0.0-beta. * https://fengyuanchen.github.io/datepicker. . Copyright 2014-present Chen Fengyuan. * Released under the MIT license. . Date: 2018-06-30T09:15:49.717Z. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("jquery")):"function"==typeof define&&define.amd?define(["jquery"],t):t(e.jQuery)}(this,function(D){"use strict";D=D&&D.hasOwnProperty("default")?D.default:D;var a={autoShow:!1,autoHide:!1,autoPick:!1,inline:!1,container:null,trigger:null,language:"",format:"mm/dd/yyyy",date:null,startDate:null,endDate:null,startView:0,weekStart:0,yearFirst:!1,yearSuffix:"",days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],daysShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],daysMin:["Su","Mo","Tu","We","Th","Fr","Sa"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],monthsShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct",

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 278
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	7.111462878568565
Encrypted:	false
SSDEEP:	3:FttRWtYxd7YEhgY7rx/kTNONjbHbvtmr32LWeOKyiiscPZX0a/3OEGtAlHJToG/9:XtAt87Pdx/dpWeOpfssZX0M+vg94QOJa
MD5:	EAA77037DADA371E8614AB3C0FE2C642
SHA1:	50577B108721797A4896A25B8542603540A6C3C9
SHA-256:	3EABA789AD9673BB8CE5FD4B0C0E20CAE75FF62B558DAB9E887892CEA767F2A4
SHA-512:	0A49D143E53F2D73DDF53F6B86D9809DDB8469480AAA3CD8EF5BC69670E7C5CEC3065426CC0E6A086C97BB66573B462B5A9062F5F3EACD0BB096160F7BE7C044
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/js/index.5edd0040.js
Preview:	..........M..N.0.D....'8....8X.h..J.D.=pt.-....v..{.TH\V..7.Y~S...GS..\|.../...fs.M%..,.......Ld..s'.!...m.H.y.[.a...9^........F...$..^HC..k..I.~W.E...;..8.....o.c?&.4..B..:...+..#.th......*.....K.[........r......1....~...l.....

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	18178
Entropy (8bit):	5.115032935011131
Encrypted:	false
SSDEEP:	384:7vg1ngl9BgUwu4dM0M4mkKXP6Yf3iRCL0NZk/NSsrhec5CE0tQq/73P7uI:zangl9BgUwuL0xw/6Y/W7Nq/kKUcmh
MD5:	5781FB247CA4CA391F846FDFB1A13A2A
SHA1:	1E73D7146EE5503B078BFCB967A5A073656C9B2F
SHA-256:	8FE5109A87002EB7020384F3B02449BB7481D2646A78273D5FDDFBD786E652F2
SHA-512:	FE2AF36631879407736A841F9F556607C5C59A9762AB56C5A0C525F2FDACCA13BBA705FE534C240143454B114811D20AA456AA58C63143A00EE1564842895447
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/imgs/owlting_logo_big.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 158 44" style="enable-background:new 0 0 158 44;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C4948;}...st1{fill:url(#SVGID_1_);}...st2{fill:url(#SVGID_2_);}...st3{fill:#FFFFFF;}...st4{fill:url(#SVGID_3_);}...st5{fill:url(#SVGID_4_);}...st6{fill:url(#SVGID_5_);}...st7{fill:url(#SVGID_6_);}...st8{fill:url(#SVGID_7_);}...st9{fill:url(#SVGID_8_);}...st10{fill:url(#SVGID_9_);}...st11{fill:url(#SVGID_10_);}...st12{fill:url(#SVGID_11_);}...st13{fill:url(#SVGID_12_);}...st14{fill:url(#SVGID_13_);}...st15{fill:url(#SVGID_14_);}...st16{fill:url(#SVGID_15_);}...st17{fill:url(#SVGID_16_);}...st18{fill:url(#SVGID_17_);}...st19{fill:#FDD23E;}...st20{fill:url(#SVGID_18_);}...st21{fill:url(#SVGID_19_);}...st22{fill

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 79328, version 1.0
Category:	downloaded
Size (bytes):	79328
Entropy (8bit):	7.997034051482799
Encrypted:	true
SSDEEP:	1536:VS0XJTIbcd7I5pIrjx8zlcY2TPaVaoMj47jzHM/AHRtTsTq:VS0X1F32zl2uV6jMjvCq
MD5:	E48C8FFBA5CC6942099F47FA16A4FA81
SHA1:	792BD1537445436A57FBA7FEF3005108288D388B
SHA-256:	794FE44F598B687899E9315B4082FB19D413A24109503EA0ABFDDFBAA6836DA9
SHA-512:	A7619449819DD8AB362D5174DC313F23C8ECCA2A6E652DD3E772B0580BE0A17BDA848A0AD8C9200A310E238F3F72F000CC3D5A88E08C45B84E7900867EBEA1D1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2
Preview:	wOF2......5........ ..5i.............................r..R?HVAR.s.`?STAT..'..,/l.....x..=..4.0..d.6.$..d. ..0. ...$..4[..Q"...........pc.y..B..q....-....OK:dl`.8..v5....6$...HTCO...l\|..{..t..)....~..j.$8.p.`...4#M9.].pW..!..6BP.T.O...F..{'.5.(y..L.1.1)..Od..._%.A........l.n2._=Z/...J.2b.....D.........}..M...~ ...C8.B!b8......_....+...9..n.. y&U....t...T......?.........4yi.M......`M[.H..b./.C}...!.0&..2`.. ..={dAm..E.b"q...._........R.w.^D........."..86.x._.R1..=........;.}w..p8q"O.=.D..EY........\.k..K..4........=.S[.e..0..B.!..%........K..!.,...9.Cm.......E.....;...u.d...D....pf...H.D...>i......a,d.>._c.....`...Y.L\!b.d\..3....".3..k....I.1%.._.....J&PZ....-h1'...-.ex~n}76...%0z....6b....a ..b.b.y.qF...g.q.y.....L1.AjJ..g>0/..@9.....c..'F..J.(.$?..c..Q.(G<..N..x..?{^.._....f.+...".:$...:..Y/......G.2.V..>x.X.A...M.3.3y..........\:.q..19.Y...dD.c.VI....W:.Z.kS~....I....,...l..TB....W.O..X.;J..O.....z.j..{Ui..[.g.6...Ct.,.5$..0

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 823
Category:	dropped
Size (bytes):	430
Entropy (8bit):	7.476163178864061
Encrypted:	false
SSDEEP:	12:XqjzcedUX9sW53XAkAaCG9bZJNbJuAsujxyBEaIndzimd:XIzc4mHdAwCG5jb32ELdz/d
MD5:	FC2E5F1D888ED06673FFA5CE41434745
SHA1:	31F85AB8DDA79FF1EEBFA3791CD9C6F9B46545CD
SHA-256:	FB2091C4E68667F7981254DFEF1EBE55F543CD3CD47B7D123F9B6DC93F83D8EF
SHA-512:	AAE447AEF9AFC2DEBB669E2752D2713591443F9C52E8935774825072E468BA7A247BC5AF347E6E667DC6930AF097CDD71C4A1064615A6E085CA56A93C80A88CF
Malicious:	false
Reputation:	low
Preview:	..........uS.r.0....{&D.\3./...k..Y.<.H.X.:...d}H.........m..?/.\|k..OM..;....1Z.oH._O..J.R...2..>_....2...<m...@...\.f..E....:....>....a^N')N.....;Q.^.R.D......K.C..XQ.....H ..^!.HB.. bT..ze...v......lq..)p.>...G.....Qv".1>.q.....A..{...I[m.qZ^p...C.;..D.....3t.34W..&..C.>^8.6.5...'...\u..G.."1.df..u.e.ZV$..zU.B..2'.dp.<r..'7.2+.B....,.....UY@Q..fV2cf%M.R.!E.......t.K.@)\|+.o~u...r..?....Y6.C.....q...7...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3260)
Category:	downloaded
Size (bytes):	3449
Entropy (8bit):	4.928002511682155
Encrypted:	false
SSDEEP:	48:MZ0bIBQKrkMuOpZtk8yoykyvtV9h8h+LKnOgBBmIGuBgxVIY9IQOGI4Btbitq5Ne:X4LBpZtk8yoykyvtV9h8Gh19BQ5iq
MD5:	283BE54AC5CF0298DC307F4CB487B53F
SHA1:	B038582B123D2093441571AE9285DC1B9C60EBEB
SHA-256:	F098358472CC64F2410916D3428B79F74A80F50D3C456348E875CDF7F42418F1
SHA-512:	D0DAAC9E1480C97ADCF95D02F54B732EC1A20140F8977F0FA02659ECE06F06B7845F9C1C9A4F8B25B4178CA154BD66E2A964664D55F50154B1B3ACEAE81723AD
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/plugins/datepicker/dist/datepicker.min.css
Preview:	/!. Datepicker v1.0.0-beta. * https://fengyuanchen.github.io/datepicker. . Copyright 2014-present Chen Fengyuan. * Released under the MIT license. . Date: 2018-06-30T09:15:24.612Z. */.datepicker-container{background-color:#fff;direction:ltr;font-size:12px;left:0;line-height:30px;position:fixed;top:0;-ms-touch-action:none;touch-action:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;width:210px;z-index:-1;-webkit-tap-highlight-color:transparent;-webkit-touch-callout:none}.datepicker-container:after,.datepicker-container:before{border:5px solid transparent;content:" ";display:block;height:0;position:absolute;width:0}.datepicker-dropdown{border:1px solid #ccc;box-shadow:0 3px 6px #ccc;box-sizing:content-box;position:absolute;z-index:1}.datepicker-inline{position:static}.datepicker-top-left,.datepicker-top-right{border-top-color:#39f}.datepicker-top-left:after,.datepicker-top-left:before,.datepicker-top-right:after,.datepicker-top-right:bef

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 436, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68968
Entropy (8bit):	7.990918156224507
Encrypted:	true
SSDEEP:	1536:plhTXPxAI7vhzyXFf11yj0OFHhBCBRhO9lD06bA+QuAG0pB:plhbxny911hOFyBzOrg4Urfj
MD5:	1C383D5989BC8376D1C78B93FC273376
SHA1:	787ECFFDD1B9836177656EBCC786DFDED170DF01
SHA-256:	61499525DAA7C34BD8363F2D15D3022DC547B5BF72485CCB60653E2568F36B3D
SHA-512:	3ABD8BAFD2C4793211350128AC6D5219FB4A77658E7F57E30061E6B03A44F37AAA5889D873BA4CA8F60EA6B091E5B023FBD7AFA56E18A875A9B4497894A53876
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/imgs/sidebar_bottom.png
Preview:	.PNG........IHDR...,..........H.[....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx...`..y-\|.mG.w..S.7S.mY.-Gn...9..Oy.[..v\eYr..%K.D.`.$.P..{.b....]..`A.$H....rvgggg.3g.w......C...:t..C...:t..C...:t.,x....._...79x...x..t..7.y.._.......t.......[.~.(.....<'..z.....a....C..&.....%%.........b{..b....C.....W.gf..<w..(t.....<G~..;..M....>w..\|pG^^Z...Hzo...........C......1.z.Y......hS.w>......J<....O.{t...ZZ[.........9EE...R:.r.:t...k.#=}..\|.o...q.Z..r..i.m.H\.zQ..br'%../]._g6.....ns..{..C..N...t@....:a.c,\.4UQ.......).!.K.....A.{AqN+O..b...fw.ZUr.n..{{..$.....5...uM...G.C......1..6.i5..<tk..P....a.9Q>...m...Oo...uP...?.f3....kMKKhP.......x7..r.]........q.C'.y.RI...k..eU\|.. ..f..r+.........y...8K#-Q......+.4$'.7...e......Q.....0.K...)..:.NX..[..M....T...aE\.'..8^..H..N.etv..o\..d...VI..k..:N.H.))....-9...]...[.p8...........*i?w..t\w..k..B...}r..EYa.DD2yV..":.ZFLu.....!=9Y).w.Q....8-K(...'..XQRi...;:zV8..O..)..he...}..:.NX......7

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 680160
Category:	downloaded
Size (bytes):	108849
Entropy (8bit):	7.997079990159299
Encrypted:	true
SSDEEP:	3072:o2eF1KRyWe3e6276fvjKcAsE+3cm7E1sOS0Rf:oW8FlAesbfRf
MD5:	5A6F210A033181DDF8E4FB0EFD11F26E
SHA1:	47D0C70D0BBAE2548A7A5B15389FF31EFAA57133
SHA-256:	A8CBDD1A1CE7E1B557FC26DF1B6F232D5BDDB190DDBA141ECA74ED688C14A547
SHA-512:	B41C8CE54687437F2CCD26EEA4A9EFB55ABAEB6502F649B737CE724C49D337151CACBF1BCB7316838ECAB5BCC506BDBF898A3BC1BA88441E0BF4CB23F099BF1E
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/css/index.3413bd13.css
Preview:	...........k..6.0.W.f+U......hfj]...o6.&..I.8.5b...(y<Q.............8v.O..[$.Fw...h4.^..&.]..-.]..l7...qU...b._^.....T....{....5.{.Y........b}s....Ut..X._...mr.__^...?...w..T../..jS....~..._]ovs..=0...7W..,+gO........B.......[..CR.......x]f....'..f...f{$p..q..Xm7.=....m.V..,.I.&...._.:.>.W?.}..N&...1..F......'.n...F....gj....f....NI.z..+..`N^.@.S.F...2.V...<a...dld...)./.e~...b...z..,..^..UR .:..............T.:.j..J...(Q.^.....\N...j...L`i.NoXu....).... 1Y...-..r..k....q.}............l.Y....M.f=S...(..<.....M...0..y...=.(.7WYY.I..r..X.{.F.Y...:8.3.. .q.AL.?....y...j3.I...oH....,5....Nv.%..l. .....'...d..tw7...Ew0...1..g.^....!..u.P.1.GE...e....&.d..J+{%.....:..A_c>...'...Cu.K..s).a..cz).U;X.l.n../..>..M0....b.TU..u..&0...j..j."E.6~.^.k.hi....;@#.0r.P.C....j.r.?mvrq..L.A...oP..IX...p..Zm..t[!..\|MW.:..ny.oCa.....Q.........v.d..6...$.#.'...0...i;.(....O..q...mx...e.<..@.....cv...wC....z........Sf..f..sHh..\|B.K.......v..-......&#.q..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 823
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	7.476163178864061
Encrypted:	false
SSDEEP:	12:XqjzcedUX9sW53XAkAaCG9bZJNbJuAsujxyBEaIndzimd:XIzc4mHdAwCG5jb32ELdz/d
MD5:	FC2E5F1D888ED06673FFA5CE41434745
SHA1:	31F85AB8DDA79FF1EEBFA3791CD9C6F9B46545CD
SHA-256:	FB2091C4E68667F7981254DFEF1EBE55F543CD3CD47B7D123F9B6DC93F83D8EF
SHA-512:	AAE447AEF9AFC2DEBB669E2752D2713591443F9C52E8935774825072E468BA7A247BC5AF347E6E667DC6930AF097CDD71C4A1064615A6E085CA56A93C80A88CF
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/img/icon_reload.12563642.svg
Preview:	..........uS.r.0....{&D.\3./...k..Y.<.H.X.:...d}H.........m..?/.\|k..OM..;....1Z.oH._O..J.R...2..>_....2...<m...@...\.f..E....:....>....a^N')N.....;Q.^.R.D......K.C..XQ.....H ..^!.HB.. bT..ze...v......lq..)p.>...G.....Qv".1>.q.....A..{...I[m.qZ^p...C.;..D.....3t.34W..&..C.>^8.6.5...'...\u..G.."1.df..u.e.ZV$..zU.B..2'.dp.<r..'7.2+.B....,.....UY@Q..fV2cf%M.R.!E.......t.K.@)\|+.o~u...r..?....Y6.C.....q...7...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 20532
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.9640406581543255
Encrypted:	false
SSDEEP:	96:jwhwIlZP0pODpjDUy3nlTvQrmMSvjXVyU9XQlYxwycsNyrOLc:jwhwIX0pOVjtvQaM4zhmlYxTBNEOLc
MD5:	AAE55F55207B005B8234CC7F64F9D8BC
SHA1:	87810D4FFAA813185CAF9A269B2D9190B4F6F4C6
SHA-256:	F275C77A4D508F1035B838F37EE45D8A1A238D69B94BFC5408C30FFA5D4BCA35
SHA-512:	5EE7AD512A64024E8B0C172AF94869029E448270996707FDFFD4DBD617F924D34A70E29B94D42543A1525DB880377AC5EF3D66A9FAC99B8CBC5968C39A43ED72
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/wait/
Preview:	...........<m...y.....5m.dL.._.<...r.6.=.v...,.%.....x...:.....v.U'..dF....N.e.&?.;.S.B........d...'...g.}._.KmM..l.....%.W..&...[Axh...zdP..A.4.....sl+..:.B\|...C.7........G...z....p....XS.Z.....%..2,Gj7.O..6..=P...[xn`.u>...>.V....7.]c.x..^...S.}m.!.x...,$.........s..'..:..bco.3..%Md.z.6.."..i.^.;(.@Ql2..1w...`.....A..5../...{.z.~..S..R.C<....5......9..xJ....B.P..k5]..%3...+<.iG.[...M..~t.......ev,'70.MjjG.!....[.B....H.~..6J.......F...T........\._..2.#......ac8.X..fof..U......Y..r.. l..w@!...........i.....B6.G.d.8..O%..S......%......%.&(.6...`=. .C(.........<:.....U.....`djM9..C$......A..wM##....G`.....!......{..Ddy5qY.i.....J.@.h...,.!.4M...i...`.L....n...O......r.._<U.........Z#g..=.......\|@._..A&......8Cp@....R&..]...7....6....wE`...&..k...n.Bcm.BCm.%.;t......{..+0$..$.0..77.P...Zrj'.I..\|..A>xnj.z.\..I...- .....!.?...9`..P.....%S..3A.....5uhy..Z....X...2._Q...9W9.;..2d......o.Kse........_.....m7J.,,!d)-.ee.j..~..z.t.V.....gY.&./."..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40802), with no line terminators
Category:	dropped
Size (bytes):	40802
Entropy (8bit):	5.373503760082732
Encrypted:	false
SSDEEP:	384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj
MD5:	FE0F18CD4D5F1D03DD247211C5667669
SHA1:	99E239BBCA743FE70220E684EBE98E57FFACD4E4
SHA-256:	15211E0BE73438987ED05236DC4CE90962F7C46452427364446576505E66697B
SHA-512:	A2B27F39C521AE136483CC2036B7B9946714272863D49B28B7F4129D128A8ABCBC92C1AF0296C70446EAEC06CCB134AFE0B9E77D1DCD49A8C240516C1067BC8A
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,o){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o="swal-button";e.CLASS_NAMES={MODAL:"swal-modal",OVERLAY:"swal-overlay",SHOW_MODAL:"swal-overlay--show-modal",MODAL_TITLE:"swal-title",MODAL_TEXT:"swal-text",ICON:"swal-icon",ICON_CUSTOM:"swal-icon--custom",CONTENT:"swal-content",FOOTER:"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	11399
Entropy (8bit):	5.054061772593269
Encrypted:	false
SSDEEP:	192:a/NWH0rv390fPka+8t7p82ofpV77hMnLs8XRk66EuNOl0kofZMC:E0H0rvt0X97EqnLhTkNOWkofZD
MD5:	569CE4F01716EDD502AD6F967B7D6144
SHA1:	7FA1AE8A65633C705E8606E046812F9F6270E361
SHA-256:	6CCB1CF23A309DE31D0E52F48A6ECE011A0AF10AE11A4184562429A0E452C132
SHA-512:	8EDC64302C4D889F9D58DD366C7FA438B2FBFFE39F1666C7B73019C9B19369AE9CDE5700B61EEA0414D5C5844D0686113345E0A47D0FBDD9FF404F1EB6B85D73
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/css/style2.css?v=20221226
Preview:	html, body {height:100%}..body {font-family:'Noto Sans TC', "Heiti TC", ....., "Helvetica Neue", Helvetica, Arial, sans-serif; font-weight:500}.form sup {color:#f00; padding:0 2px}..* {-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}.input::placeholder {font-weight:400 !important}..img {-webkit-user-select:none !important; -webkit-touch-callout:none; max-width:100%}..hr {border-top:1px solid #E9EDEF}...form-btnBox a {color:#3ab3e2 !important}..form-btnBox a:link {color:#3ab3e2 !important}..form-btnBox a:hover {color:#f00 !important}..form-btnBox a:visited {color:#3ab3e2 !important}..form-btnBox .btn {box-shadow:none !important}.....hint {font-size:12px; color:#666}...tingle-modal-box__content {padding:1rem !important}...form-btnBox {margin-top:16px}. .form-btnBox .btn {height:40px; font-size:16px; border:0}. .form-btnBox .btn + .btn {margin-left:10px}. .form-btnBox .btn-primary {padding:8px 80px; background-color:#3AB3E2;

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1178
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	7.592598559141977
Encrypted:	false
SSDEEP:	12:Xa2Vrva7qfeG0HNXyWGhNJjQQq/W9A9koxTPst1AsZ4LSkJ:X3WGeN3GpEQfA9pJCAsZ6
MD5:	477F0CE7BC97AB82C41F99D6AC5142EE
SHA1:	E274293E3E3607695AC249FD3707340F501E4AB1
SHA-256:	89F14ED7BB9469A5402A065D3F3E7EE840217313BBB453E3C832EDFEC015E621
SHA-512:	9CF27635BC7224C5AE951840A21A484A3F15A663BF3C28FA2BD0F6537D3CF7DE798E0A9E5A47AAAD2035981375CEFF7669239E2BCB679F0C6A671DB7089303EB
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/img/zh_tw.544fe750.svg
Preview:	............Qo.0....}..\|...S.H.S.R.j......."...O....).m...w...Y.r<.......t.......a.)!DD..N.v.s.4..6.z.~.m...,Pn..3..h........j./..h.9.c.\|>..6gE{.....5..y...x(J..{..9g.......e3....r.bP..}......`.j..v.....C....+q..T.t>.....m.o..H... ..^+.,.\........<.y..Cr}1e....?uUU.i....Y...Te.*...Z.q...h.l.Dm.H4:..'.W.kEV......o8.0.JI.Bg.@....Sm.P..s.....c..HQyX.8.x(.....C...1...un.b....0...83<..}..^PTf...H..aR.SF..}$..R.J..... d.L...;U4.....L.l.=,P(.Q.0'...C...".a....o.>^5[..m.p].0i7....X..evkC).rV?.........

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11575
Entropy (8bit):	4.894229051877225
Encrypted:	false
SSDEEP:	192:8djHu/ApeK3iXPWC8ofM04BQCqirvLsZ2sR/Zxogn3nXAL3XBvwnFAdQZfVtoq:KLuoMK3IuC8OMjGCFULo63iM
MD5:	A505FF173797A7552C71A77B69342332
SHA1:	1D44D76217EE4A345DA01613B5005DC0ADA5CBA4
SHA-256:	26222ED553D1E6BA46B3E8EDD103837416033CA474A147B666D8D0A11CC29798
SHA-512:	085D555ACEA738454CB030366D5DA745D6F38FC062C648640134F9366B4FB579899838090A65753FB935CCBE7FB804B9ECBA0457DED7C30348B7D44D084DD652
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/imgs/favicon.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M6.08212 21.0379C8.13438 19.3514 10.9157 18.8738 13.4031 19.7638C12.9993 20.3676 12.5102 20.9068 11.9421 21.3737C11.7705 21.5149 11.5922 21.6446 11.4106 21.7684C10.6762 22.1197 9.82476 22.2209 8.99981 22.0035C9.14919 22.0975 9.30483 22.1842 9.47204 22.257C9.69177 22.3524 9.91632 22.4204 10.1418 22.4681C8.41001 23.215 6.43821 23.2978 4.62158 22.6478C5.02539 22.0435 5.514 21.5043 6.0826 21.0374L6.08212 21.0379Z" fill="url(#paint0_linear_2441_7865)"/>.<path d="M26.9363 20.8417C24.7751 19.2963 21.9687 19.0063 19.5464 20.0615C19.9897 20.6369 20.514 21.1424 21.112 21.5698C21.2927 21.6994 22.0381 22.2203 22.9816 22.5412C24.7597 23.1705 26.7324 23.1209 28.5014 22.3504C28.0581 21.7746 27.5343 21.2691 26.9358 20.8417H26.9363Z" fill="url(#paint1_linear_2441_7865)"/>.<path d="M5.07099 20.7199C4.63972 20.4308 4.06437 20.1094 3.60949 20.2689C3.31218 20.3296 2.99318 20.3002 2.69876 20.1807L2.70021

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 85568, version 1.0
Category:	downloaded
Size (bytes):	85568
Entropy (8bit):	7.996346835376706
Encrypted:	true
SSDEEP:	1536:tL0+yrGYHN2ro0c0OTNdZg2Fes/G1G2NGgT61LqOyJsdw:tLbyq/rFNOPZhes/GZ4qtJf
MD5:	C3E49B4F6B4B115D718A6410F060DD1A
SHA1:	57923C6EC288A3BFC347B1DD3C941DA6A00BE758
SHA-256:	ACC15D5D02082CA940E801C7747F25D1AAC7E28BA2D8D0AF4436C13C1478CBE4
SHA-512:	82E175888BC77013F324B3E366C11FC0547C276289109573469DB77689DE202C045E625C3F24E5BA337836E5590246F919EC1C369498DC2E8D74878FBCAA5853
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.114.woff2
Preview:	wOF2......N@......]$..M..............................h..`?HVAR..`?STAT..'..,/l.....D.....J.0....6.$..x. ..0. ...$..J[."rE.b;.!........^.+..N#..}...B...a....I....C2...tp......T......#..G..2.5.PG...0.B.l..\|.I}.8.(s.......}@.e........z.{DL1 .x<_..a.......x.2.'g..G.c.q.........o..}..v.t{z..p.ZM0]...F..[.%.A1.Eo..b\.;(..Fd.Q..dreB%.".5y2I.(...VU..Dq...A.AS(.U.TI(Q7..u.....O....9(]...\|K..Q.9....0.5...$..M._.COU,...L.?...<._9\$.?..X..cs..mD.:..y....2.G,j$...T0._.C.U....T..;.w...[.........[2&.`#rI...F....(......v V#V..^Z\..N.o.5...I..D.(...+..+z.>!.=\N.$[.3.K..l#.s\.wy....... ...0....jm.e..$.Dc.P.6w.VZ........B..i......$....-..(0I2..T0.;....JI.c.%..IGls.ny....>@.Qa..z.....kV._..B.Q..H.0.I;..p.\...0..tVJ6/.......4E..:`8X.e.2..A@....g.rP3..a.A.G.wss.x....vg...d......Z..T........?X.[..v...y[..nuY...T....hE:./._....1..u.f...;..i.Q....E..c:.;C...~..K.x..h..R...]...j.e....Y......yI.Y.S.T.f@)..r.I..K....yk..P@............)u...91.3.y..%9.\.......XE..Shj_...P1J.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34736, version 1.0
Category:	downloaded
Size (bytes):	34736
Entropy (8bit):	7.994583186734484
Encrypted:	true
SSDEEP:	768:HtJgDM9N+9DxgS1txGEbUXeguJqkzcItQqn9NgbyR3jBc:HADS0ltxGJegkqcHPgbyR9c
MD5:	8822610EC522FEAAFC5DAA33311DDA90
SHA1:	6E72457C14D36A2DBF5796CF6EA4C5873142A3D0
SHA-256:	4A9850F931ED681BCB86F15DBE8D7961203AF4BE7BFC28B18657C27C47F1DC1F
SHA-512:	386DA30A80BF787702527481C3E0F30C98008EEBA4752850FF0E8C3B02B2899798DB1B2072A68B90B31425331C528CCC43C2CF460AEC6EB7D36FB2F151857040
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2
Preview:	wOF2...................4....................................?HVAR...`?STAT..'..z/l.....x..p..v.0..l.6.$..d. ..0. ...$..h.....n.z.........6.w7..^JhG".....z....IIe.M:....n.dS..f.l.E9.0..P.:...@.......DS......~..q..).0..'.s].T.....i......c.2.....k....5.a.n~...j....Az..%C..}....&.R.[..E..Yb.t......&v h.1h.=............tp....G..3.m.Or.....g... .B(Z...RI.......C.T^...{...'.........V,...!.Bv..j/.H.,..- ...%.p.........n...I.....[..J.(...HX.50`...z.F.DYTY mc.......y\.^.....4i..[.c....J.....Hx..qP.?..4s7IMHi..}+C5~.\8.v.I3...:........gH.{E.d.....-j.c...oxx..Y5....sA..H...QB".......+-.....sB.]....5.F.K...5On..v.j:..[s..7=...N.R1..$!!.. ^Jg(...=.S.)?.j....N..p.<.5LV..fi...U._...+g....#8..Vg..\|...l..CnV......L.{.h.}./.(..3.O.Q. .....a...I...!..../..._,7.....8}5.bx.DQ...`..W;...DB!e..!j._..3o........i.Vu.....-....!EH...[..........z...H.@.^..2"..{.#f.%...%.%...A.Yr~.~......Q....[.U.:.3... ...@.DK..Z..^.../.}.-#G..F..1&..Pw.Q!.d..@.v...-...........ug..t

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	385
Entropy (8bit):	4.919990942035239
Encrypted:	false
SSDEEP:	12:tr0rpqFuXM65sRrOeiERcRUSsnZOBLZ9AYZ+BW:tIrpqFuXMMwrA2gUfnAZ9AYZ+E
MD5:	9BB5CD2AEB60886E48149742C8A45268
SHA1:	1F07B5248DDF6D33970BBCBD41E42170399F7ABA
SHA-256:	8F88D937D87C0B18E2738FCB1EE0181F8E47BC3E064A5F54D6C1CC2AF8C5FF0F
SHA-512:	E3B0BDE19435D088F562461FA43B3AD5F503D9F9DA5A6D9CD8512F3DB05AE95FEB4406B6A61E3831D0B6B34B7C29844CBB6AF9CAC227EB8CBEC9D8F1ED49E578
Malicious:	false
Reputation:	low
Preview:	<svg width="6" height="6" viewBox="0 0 6 6" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.83004 1.44282L3.26314 5.68097C3.14729 5.87207 2.87009 5.87242 2.75424 5.68132L0.166339 1.41937C0.0455889 1.22022 0.189439 0.966116 0.422189 0.967166L5.57664 0.990966C5.80834 0.992016 5.94974 1.24507 5.83004 1.44282Z" fill="#3C4145"/>.</svg>.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	385
Entropy (8bit):	4.919990942035239
Encrypted:	false
SSDEEP:	12:tr0rpqFuXM65sRrOeiERcRUSsnZOBLZ9AYZ+BW:tIrpqFuXMMwrA2gUfnAZ9AYZ+E
MD5:	9BB5CD2AEB60886E48149742C8A45268
SHA1:	1F07B5248DDF6D33970BBCBD41E42170399F7ABA
SHA-256:	8F88D937D87C0B18E2738FCB1EE0181F8E47BC3E064A5F54D6C1CC2AF8C5FF0F
SHA-512:	E3B0BDE19435D088F562461FA43B3AD5F503D9F9DA5A6D9CD8512F3DB05AE95FEB4406B6A61E3831D0B6B34B7C29844CBB6AF9CAC227EB8CBEC9D8F1ED49E578
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/imgs/arrow.svg
Preview:	<svg width="6" height="6" viewBox="0 0 6 6" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.83004 1.44282L3.26314 5.68097C3.14729 5.87207 2.87009 5.87242 2.75424 5.68132L0.166339 1.41937C0.0455889 1.22022 0.189439 0.966116 0.422189 0.967166L5.57664 0.990966C5.80834 0.992016 5.94974 1.24507 5.83004 1.44282Z" fill="#3C4145"/>.</svg>.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 524 x 1316, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49276
Entropy (8bit):	7.933487883223591
Encrypted:	false
SSDEEP:	768:C8KikbnRWhfToS3FJ0Dk4xUtX2fxrtxPEVFvHpgSxb5vii7jxfbco1vF9NDHdj2d:C8knRWhfTKDk4ahoWvJddHdbNnJ0
MD5:	902E81DB0C9E420EFDFE611ABC874BCB
SHA1:	092F8A3335FF3B58801E98A654B79BACED830B3D
SHA-256:	5081624F058C9AF8939189B70B535FC4C94C27CC3ABDA7DDA2CCD79770B116B8
SHA-512:	E7F2938F1D3E0DE81E85D1D18F95D0C809C64549B0D8FBBD819F5048C8CD7BD2A37E8A6EFC1A49DA5B4B098E3201796B74C7F617E689F639A4D8254D5B6AFA79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$.......M.....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx.....d.u.y...B..Z.#..,....ck#v.M.....5..x%...U.Z...k...C.JP..z..z.K=:.".....=2..p.@Q.G..jo.R..G.=..Am.&....~g...F......n..$:.....y...C....=s...'..j.5jzZ.N..IQ=...G3I.#6...?i.T.?.N.?......sU^...KX.Gz.g;~......\..i....?.^.9...m........?...L...._..?......7..\|.v...?..........?...C.G.m?y...x._..9.........?.]..o..........m}.7~-e..[.sd.'o..u..\|.m..s............7........V....n.o..S....`..q=..Z%.5"....7..vk...p.m.p..t.ZN..90..+.{_h............._n.m........w.6$.A......z.5.......v..............[.....v}>v..{....;...W.^.}e........7......n.5....?.._k.1h..^..o....._-8.e......l.o>.;.+......Xu.....b....I...i.>V.ho...........7\|.7.....k..........ZuF.-o..L.....ZSUkU..x..u}`}]...{.....b...d..N......K.......m..K..ey.`5j.......P..>w.i...S.....D......<R.E..n......b.0.....A..J.\|......N.B-..G..`b_..W...3....,..@aU.t.....\..W.G.Q.w.z.....5..../~...\|.........8.....yf.....

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18804
Category:	downloaded
Size (bytes):	12992
Entropy (8bit):	7.9806216099281775
Encrypted:	false
SSDEEP:	384:a0N0xhREff/6ynDjvzISAblsOHbdcg9VZU:a0CxhREP6WDj8XP7dhV2
MD5:	B56E0145F7872F5530DF512ACFBBF4E7
SHA1:	EF2ED123170F7DF9F7FFEC81F6E8C93DFA2E6021
SHA-256:	BA09093B394F0CE5962679D3DCFB20DF5D4B30453BAB08F562E3A3FA0670B99D
SHA-512:	354ED6F5F029067EC1950F3D0714D51C85E78A9C68D9D872673C3CD3BFE340B8F52D7A2FAB6F26073F2BE7AA8D7D360928C0514BFEC6207418F1395233D27C2E
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/
Preview:	............$i....z.P.B7...6....&..m6s.4l...... ..$@.........$7.....\|........H;].^7....;....!...S......7....y..../~h.9....8%.[..3....<...a)._..}........OQ..I{M.._'q..4......E...8.l.V.s..8Y.(.........<EA.....H]..1...]qM..S>&.......}.f_...\'.ym...?..]..\|\|y.8.....a....._...M0fE..O.?.^. ..6..._......?..n.\w.G...E.9O.,......5....S_..>.u..4.u....9i._}..c&..l..I...~\|....y*./.a7....j...DU6vK............H.._.,. K~.i..?....L.....I.}..}p\|.u.......e..`..m.......`.M...K1..Q.v....d.6....g.c.'..............Oy..I.E.?m...k....}.}n.....>....5.=..k......../...'...?..$..\|....nl~....m............ x....\|{....A.&.......,...B.?...5.....y.\|...Q..W....x-.\N.~.~s......).e.~.8~u..~.oc....m.........v..5?....6........}..%.~...G..+.N.~[.......Q2.g..r..TzY...-L...l..?j....o..)..~..'i2.../..}....r..K;.M._.m...#!N...\|_N...Z...{.(_...q7N...F@H.'..U.4.c.@..6..T~..h..{.1.#)...u}..Q.(`.d.........p..../.......>&.t..%..\|$.y.b...3.....s]..%L..._.?`....w....k.......

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 524 x 1316, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	7.933487883223591
Encrypted:	false
SSDEEP:	768:C8KikbnRWhfToS3FJ0Dk4xUtX2fxrtxPEVFvHpgSxb5vii7jxfbco1vF9NDHdj2d:C8knRWhfTKDk4ahoWvJddHdbNnJ0
MD5:	902E81DB0C9E420EFDFE611ABC874BCB
SHA1:	092F8A3335FF3B58801E98A654B79BACED830B3D
SHA-256:	5081624F058C9AF8939189B70B535FC4C94C27CC3ABDA7DDA2CCD79770B116B8
SHA-512:	E7F2938F1D3E0DE81E85D1D18F95D0C809C64549B0D8FBBD819F5048C8CD7BD2A37E8A6EFC1A49DA5B4B098E3201796B74C7F617E689F639A4D8254D5B6AFA79
Malicious:	false
Reputation:	low
URL:	http://auth-owlting.com/img/img-logo-arrows.7350f8b2.png
Preview:	.PNG........IHDR.......$.......M.....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx.....d.u.y...B..Z.#..,....ck#v.M.....5..x%...U.Z...k...C.JP..z..z.K=:.".....=2..p.@Q.G..jo.R..G.=..Am.&....~g...F......n..$:.....y...C....=s...'..j.5jzZ.N..IQ=...G3I.#6...?i.T.?.N.?......sU^...KX.Gz.g;~......\..i....?.^.9...m........?...L...._..?......7..\|.v...?..........?...C.G.m?y...x._..9.........?.]..o..........m}.7~-e..[.sd.'o..u..\|.m..s............7........V....n.o..S....`..q=..Z%.5"....7..vk...p.m.p..t.ZN..90..+.{_h............._n.m........w.6$.A......z.5.......v..............[.....v}>v..{....;...W.^.}e........7......n.5....?.._k.1h..^..o....._-8.e......l.o>.;.+......Xu.....b....I...i.>V.ho...........7\|.7.....k..........ZuF.-o..L.....ZSUkU..x..u}`}]...{.....b...d..N......K.......m..K..ey.`5j.......P..>w.i...S.....D......<R.E..n......b.0.....A..J.\|......N.B-..G..`b_..W...3....,..@aU.t.....\..W.G.Q.w.z.....5..../~...\|.........8.....yf.....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	18178
Entropy (8bit):	5.115032935011131
Encrypted:	false
SSDEEP:	384:7vg1ngl9BgUwu4dM0M4mkKXP6Yf3iRCL0NZk/NSsrhec5CE0tQq/73P7uI:zangl9BgUwuL0xw/6Y/W7Nq/kKUcmh
MD5:	5781FB247CA4CA391F846FDFB1A13A2A
SHA1:	1E73D7146EE5503B078BFCB967A5A073656C9B2F
SHA-256:	8FE5109A87002EB7020384F3B02449BB7481D2646A78273D5FDDFBD786E652F2
SHA-512:	FE2AF36631879407736A841F9F556607C5C59A9762AB56C5A0C525F2FDACCA13BBA705FE534C240143454B114811D20AA456AA58C63143A00EE1564842895447
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 158 44" style="enable-background:new 0 0 158 44;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C4948;}...st1{fill:url(#SVGID_1_);}...st2{fill:url(#SVGID_2_);}...st3{fill:#FFFFFF;}...st4{fill:url(#SVGID_3_);}...st5{fill:url(#SVGID_4_);}...st6{fill:url(#SVGID_5_);}...st7{fill:url(#SVGID_6_);}...st8{fill:url(#SVGID_7_);}...st9{fill:url(#SVGID_8_);}...st10{fill:url(#SVGID_9_);}...st11{fill:url(#SVGID_10_);}...st12{fill:url(#SVGID_11_);}...st13{fill:url(#SVGID_12_);}...st14{fill:url(#SVGID_13_);}...st15{fill:url(#SVGID_14_);}...st16{fill:url(#SVGID_15_);}...st17{fill:url(#SVGID_16_);}...st18{fill:url(#SVGID_17_);}...st19{fill:#FDD23E;}...st20{fill:url(#SVGID_18_);}...st21{fill:url(#SVGID_19_);}...st22{fill

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11575
Entropy (8bit):	4.894229051877225
Encrypted:	false
SSDEEP:	192:8djHu/ApeK3iXPWC8ofM04BQCqirvLsZ2sR/Zxogn3nXAL3XBvwnFAdQZfVtoq:KLuoMK3IuC8OMjGCFULo63iM
MD5:	A505FF173797A7552C71A77B69342332
SHA1:	1D44D76217EE4A345DA01613B5005DC0ADA5CBA4
SHA-256:	26222ED553D1E6BA46B3E8EDD103837416033CA474A147B666D8D0A11CC29798
SHA-512:	085D555ACEA738454CB030366D5DA745D6F38FC062C648640134F9366B4FB579899838090A65753FB935CCBE7FB804B9ECBA0457DED7C30348B7D44D084DD652
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M6.08212 21.0379C8.13438 19.3514 10.9157 18.8738 13.4031 19.7638C12.9993 20.3676 12.5102 20.9068 11.9421 21.3737C11.7705 21.5149 11.5922 21.6446 11.4106 21.7684C10.6762 22.1197 9.82476 22.2209 8.99981 22.0035C9.14919 22.0975 9.30483 22.1842 9.47204 22.257C9.69177 22.3524 9.91632 22.4204 10.1418 22.4681C8.41001 23.215 6.43821 23.2978 4.62158 22.6478C5.02539 22.0435 5.514 21.5043 6.0826 21.0374L6.08212 21.0379Z" fill="url(#paint0_linear_2441_7865)"/>.<path d="M26.9363 20.8417C24.7751 19.2963 21.9687 19.0063 19.5464 20.0615C19.9897 20.6369 20.514 21.1424 21.112 21.5698C21.2927 21.6994 22.0381 22.2203 22.9816 22.5412C24.7597 23.1705 26.7324 23.1209 28.5014 22.3504C28.0581 21.7746 27.5343 21.2691 26.9358 20.8417H26.9363Z" fill="url(#paint1_linear_2441_7865)"/>.<path d="M5.07099 20.7199C4.63972 20.4308 4.06437 20.1094 3.60949 20.2689C3.31218 20.3296 2.99318 20.3002 2.69876 20.1807L2.70021

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1178
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.592598559141977
Encrypted:	false
SSDEEP:	12:Xa2Vrva7qfeG0HNXyWGhNJjQQq/W9A9koxTPst1AsZ4LSkJ:X3WGeN3GpEQfA9pJCAsZ6
MD5:	477F0CE7BC97AB82C41F99D6AC5142EE
SHA1:	E274293E3E3607695AC249FD3707340F501E4AB1
SHA-256:	89F14ED7BB9469A5402A065D3F3E7EE840217313BBB453E3C832EDFEC015E621
SHA-512:	9CF27635BC7224C5AE951840A21A484A3F15A663BF3C28FA2BD0F6537D3CF7DE798E0A9E5A47AAAD2035981375CEFF7669239E2BCB679F0C6A671DB7089303EB
Malicious:	false
Reputation:	low
Preview:	............Qo.0....}..\|...S.H.S.R.j......."...O....).m...w...Y.r<.......t.......a.)!DD..N.v.s.4..6.z.~.m...,Pn..3..h........j./..h.9.c.\|>..6gE{.....5..y...x(J..{..9g.......e3....r.bP..}......`.j..v.....C....+q..T.t>.....m.o..H... ..^+.,.\........<.y..Cr}1e....?uUU.i....Y...Te.*...Z.q...h.l.Dm.H4:..'.W.kEV......o8.0.JI.Bg.@....Sm.P..s.....c..HQyX.8.x(.....C...1...un.b....0...83<..}..^PTf...H..aR.SF..}$..R.J..... d.L...;U4.....L.l.=,P(.Q.0'...C...".a....o.>^5[..m.p].0i7....X..evkC).rV?.........

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23325
Category:	dropped
Size (bytes):	8254
Entropy (8bit):	7.972699318647449
Encrypted:	false
SSDEEP:	192:lHKIcUZF5xtbLfnxzkFz9z9L/nQVg35ZheRwMWvPsmvSXfVmg8W4FMT/:lHHcUZvxtbLfn0c4ZheRRWM0SXp4FE
MD5:	F1CC869DD81E6DFCDBE4591ADA49AB41
SHA1:	310DC7AC34740D62855D44C0E3EA53868808DD02
SHA-256:	6D7325B49DBDE96EE85C115A57B9F5F8E8E5B8878270E7A8CE36B821A188697A
SHA-512:	0A1693007381ED25432C56B558CBA8C8FD0AB1FE6E6CF3CE64B113A19E38C7F4110F33AB778A543536983755B3B8A56B2391EB5197A7984320A8C50465C493CE
Malicious:	false
Reputation:	low
Preview:	...........\M.d.q..W4.7..-.E...2..#e..."...C.....$H....9......g9Pl....%...........7.\|..........\|.....<....../......Nxz.....>~...._?...._}...._.}......?.p....\|..G%....~........~y.......(...s.3o...u?.\|N).)..m.S..9.T.y..x..7.)...s....p..........Aw.@.Y..]......5...ZO..s.a1..$=S..vn......k.S...f.r=..;...........6..#..97LW..k2..ju.S."J&.[..TO..O,.....:....,...6...p......ym..5.......nN.w....w_../.....o..z.....=V....z.........r....l....x..r20......\|..J0........F... .....9.r..ls...1..,...:..k@.....y.5........i..z2.8...h...`......5......r..$NAs. u.\.1w..s.-..4....gn.d.....T..z.$.:N.8&C:..V..v.....{q.....+..9...#..8...x...N.4io....~..G...:z......{6....S%....d.p....F..8S"07@.......... ...=..y.S#..m.}.M.Q6...>..w.G.....g.H..p.z.@(...6.).> ..g...?....cx{..........O......1h\|..0..p....5.....p..zB.A...S...$..U.....0;.....?....1].......=.....<.S*.....R.0..B..XJ%...P..3q.....1T-I..IwB..G..}.&.O.op.......RP.u.7.(...P..'h..R....nx.....~5.!M.pt....A~.0.a3.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
URL:	https://auth.owlting.com/bower_components/jquery/dist/jquery.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 60392, version 1.0
Category:	downloaded
Size (bytes):	60392
Entropy (8bit):	7.996210242932536
Encrypted:	true
SSDEEP:	1536:rMDNusnjSUnO7LSXghxnOQ2zPx1YqHB1IbisUllR:rMpzSUnO7L1hxOQqPxmqh++sUlj
MD5:	F8ACA6ED71A0E762C288E42F6BD2AE05
SHA1:	5248C522C0D1D500F6A1EE2266A482BB61BFE7DE
SHA-256:	E4B63B4B428294F9315339496162012EB40497DD9B84E1E52D5D7ABCF6338A48
SHA-512:	03839633576BF208B8E291FEEC1E927E5B1DBFCB5B27111193250AE57B6E9D4185E3DEC7C9ED4D5D07BBE3DC8991E1EE299E72D51B3412EF22A2798962A24313
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.118.woff2
Preview:	wOF2...............X...q...............................R?HVAR...`?STAT..'..6/l.....X..#..B.0....6.$..~. ..0. ...$..B[.Tq..U`w.Z)..............9$........%....T.1./...!.5.jd......A3{..-Q.S.u..`...}.....G....=A..2ig..Lc ......UFv.h....t....._i..2.c..p..5..X......u..;..6A.'...[.3.....w....%$G...9R..D.d...XF..............(]@." ..h....J.i.R.&..~....]..Z.Wr.s=&......6..Z.......VQ....B+H.(.b..X.].........bW.E.&..U.T...E .2.{..o......&p..e .X.%[H...s.7a...Q..-%l.......D......") .`.`...G.hc.3PP.}.}o.%K2$v.IC.A..Yb.~w..~1.t.3m....Y....v'.....{...3.p.A....).p.x.~.v....O4J.KA5..F'.m....%..[......R....n...D...8#@.1"@....s.k.......'3.4A.5E^........~3..bY...Z..R.4..mY.x4........%........-.. ..qs>............EJ[.T....&Ol..`xV._...Z,&.E<;.$...Xk..l..+..*...Y...]u.....e.6....&\J.S...T.).q:._].5.....F-Z..N.)>.7.....{;;.:..u.N.....<..../......v...?.....4...: RyVk....Tz....f...P3.sV..te0&y?...7..li..R..Vb..WJ.8.lBa.B(......x..(....7[.GA.a.H....O..g...9.N2.\|.....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 71492, version 1.0
Category:	downloaded
Size (bytes):	71492
Entropy (8bit):	7.996571087013662
Encrypted:	true
SSDEEP:	1536:5DW833Hw1uckod2UqRsZCo8S6GZ9HIeJfl2/KlLC4bPuLE7PKc:5q83w17kWqRgN8WIkflWKlsLUPKc
MD5:	4EC1408E893B4C0CB5FE1B625CBB4534
SHA1:	AA9154947F7ECF8D4C8D75BE89983229B8F814E9
SHA-256:	6C445FAAF9A67202172FADA7218DC052407A166BF483166742785AB51F2549CF
SHA-512:	FF8C7B94E022081FCF997321AD3A26D809375F0D69E8F0A0B4C31676C45B0198B1937BAC6DD4B9E9BC9BC5A84E8CACFA70DD6E95952F33A107091A833144FD1B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.113.woff2
Preview:	wOF2.......D.........................................j..F?HVAR...`?STAT..'..y/l.....p.....<.0....6.$..p. ..0. ...$..<[..Q...x...[..{..6..:X.U.Z.8.l..%..yI..1....f.J3..P&V...g4..No....l...q......o.....0i")...eZC!.P....F.<.,..u?tI?.....n.)'/+A...3.u..:...7/..U....-`...NRF..s.C4....>.M.I..zR.BE..../0ZDt.0gC.1.`.3af...[.%.l.arI.T..t..#.~`..........t....@P.d...E""#dE....@Xd.xD.(<....mG,9~F^&$ ..L]..&Qh.#.:D..j..'.d&...$..)..H.$.PBB.!..@hU.I..."..;....a9[9.;.Z..z..?\|...Z.\.......WY.I.v2.P.[.Q.;.w.....'m.I...3Pf&nR..."..o....9Y..,........."k..8.l....g..R....]..r.N.p 0.H.;...qd.U./..?.i.y9...Y.3..'\|=h'...T....w.8...Z.\.....?J..-..k..6l..6.\.Qs...>.@.+..X.O.]..I.+..?.>2..0j.1`Dn.ToD+.V.P0....p:@Bh.D.......=.Q.N...EA..(..+..L.8....<..g....,#H2.LBZ...6M.......&9T'....?a.% .Dy......b.,......!C.....AK.`..AI..E.<..S.....]..5...8....aINK..i......K.....,...Jq.........2v`..~.m..N.......9........<.......Kv).<../nI..!.8....>._...s.......A.Uu.y;...K_....T

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-26T21:25:53.596981+0100	2812237	ETPRO PHISHING Possible Successful Generic Phish July 28	1	192.168.2.4	49743	91.212.166.21	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 21:24:54.644602060 CET	49675	443	192.168.2.4	173.222.162.32
Dec 26, 2024 21:25:04.252557039 CET	49675	443	192.168.2.4	173.222.162.32
Dec 26, 2024 21:25:08.284531116 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:08.284558058 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:08.284611940 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:08.284820080 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:08.284832001 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:09.875973940 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:09.876382113 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:09.995644093 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:09.995718956 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:09.995932102 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:09.996014118 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:09.996089935 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:10.072458029 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:10.072839975 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:10.072856903 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:10.073734045 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:10.073795080 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:10.074754000 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:10.074809074 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:10.115474939 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:10.117248058 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:10.117261887 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:10.162960052 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:11.432292938 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432374954 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432431936 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432454109 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.432461023 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432513952 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432549000 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432564974 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.432583094 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432600021 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.432616949 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432652950 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432688951 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.432704926 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.432719946 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.446125984 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.446460962 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.446707964 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.447141886 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.447427988 CET	49745	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.801430941 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.804061890 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804094076 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804147959 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804167032 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804182053 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804197073 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804210901 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804214954 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.804233074 CET	80	49745	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.804249048 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.804275036 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.804277897 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.804306984 CET	49745	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.805291891 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.805356979 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.805408001 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.805773973 CET	49745	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.805870056 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:11.921092987 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.924921989 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.924952030 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.924966097 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.925247908 CET	80	49745	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:11.925333023 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.154475927 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.156186104 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.261985064 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.264794111 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.275738001 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.384499073 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.622545958 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.665165901 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.716944933 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.761044025 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.769036055 CET	49746	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.769165993 CET	49747	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.886599064 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.888725996 CET	80	49746	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.888747931 CET	80	49747	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:12.888854027 CET	49747	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.888853073 CET	49746	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.889066935 CET	49746	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:12.889111996 CET	49747	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.006170034 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.006329060 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.008575916 CET	80	49746	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.008641958 CET	80	49747	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246064901 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246136904 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246172905 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246225119 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.246249914 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246268034 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246284962 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246295929 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.246301889 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246320009 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246330976 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.246365070 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.246557951 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246575117 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.246627092 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.249577999 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.249640942 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.249692917 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.249969006 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250020027 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250072002 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.250073910 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250164032 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250180960 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250210047 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.250308990 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250324965 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250339985 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.250353098 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.250384092 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.260004044 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260121107 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260135889 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260193110 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260185003 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.260210991 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260227919 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260252953 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260274887 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.260274887 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.260377884 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.260418892 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.263546944 CET	80	49745	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.272293091 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.317887068 CET	49745	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.366018057 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.366079092 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.366149902 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.369254112 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.369357109 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.369404078 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.370059013 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.373439074 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.392175913 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.419640064 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.419771910 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.464468956 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.464580059 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.464643955 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.464777946 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.464886904 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.464931011 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.468746901 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.468810081 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.468858004 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.468983889 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.469101906 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.469155073 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.477119923 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.477238894 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.477284908 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.477374077 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.477483988 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.477534056 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.485483885 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.485613108 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.485663891 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.485848904 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.485929966 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.485971928 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.493891954 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.494009972 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.494059086 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.494141102 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.494227886 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.494270086 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.502233028 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.502352953 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.502398014 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.502521992 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.502598047 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.502635956 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.510739088 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.510823011 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.510869026 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.510951042 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.511081934 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.511118889 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.519053936 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.519205093 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.519253016 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.519357920 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.519499063 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.519541025 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.527411938 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.527579069 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.527623892 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.527728081 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.527813911 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.527856112 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.535859108 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.535953045 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.535991907 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.536125898 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.536286116 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.536325932 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.544157982 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.544281960 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.544346094 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.544495106 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.544615984 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.544658899 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.584198952 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.584223986 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.584279060 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.584358931 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.584481001 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.584521055 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.675160885 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.675179005 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.675234079 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.675765991 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.675780058 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.675818920 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.677299976 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.677463055 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.677511930 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.677619934 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.682287931 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.682363987 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.682406902 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.687697887 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.687781096 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.687822104 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.693197966 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.693295002 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.693346977 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.698621988 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.698721886 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.698761940 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.704056978 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.704152107 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.704195023 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.709502935 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.709630966 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.709681034 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.714989901 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.715125084 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.715172052 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.718770027 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.718847990 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.718883991 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.722567081 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.722630978 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.722671986 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.723172903 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.726386070 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.726455927 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.726501942 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.730205059 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.730362892 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.730401993 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.733942032 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.734122038 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.734169960 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.737843037 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.737886906 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.737931967 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.741600990 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.741673946 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.741707087 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.745428085 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.745543003 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.745584965 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.885786057 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.885867119 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.885927916 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.887407064 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.887490034 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.887535095 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.890018940 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.890100002 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.890145063 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.893318892 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.893448114 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.893492937 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.896666050 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.896929026 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.896977901 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.899949074 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.900125027 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.900177002 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.903291941 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.903518915 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.903577089 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.906647921 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.906699896 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.906744003 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.909895897 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.910021067 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.910067081 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.913250923 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.913348913 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.913395882 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:13.916575909 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:13.958432913 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.078677893 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.326524019 CET	80	49747	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.334630013 CET	80	49746	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.376954079 CET	49747	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.376954079 CET	49746	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.421468973 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.421619892 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.421669960 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.422399044 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.422478914 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.422522068 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.424398899 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.424551010 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.424599886 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.427707911 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.427835941 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.427886963 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.431011915 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.431128979 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.431184053 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.434323072 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.434458971 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.434508085 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.437635899 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.437761068 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.437805891 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.440984011 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.441111088 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.441158056 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.443912029 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.443994999 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444011927 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444042921 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.444065094 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444108963 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.444108963 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444125891 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444140911 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444171906 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.444312096 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444385052 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.444426060 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.447624922 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.447773933 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.447819948 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.450927019 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.451049089 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.451092958 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.454240084 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.454345942 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.454420090 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.457597971 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.457691908 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.457736969 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.488580942 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.554776907 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.554826021 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.554955006 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.556407928 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.556514025 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.556566000 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.558973074 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.559101105 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.559144020 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.562364101 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.562450886 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.562501907 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.565659046 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.565757036 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.565826893 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.568949938 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.569061995 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.569106102 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.572269917 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.572417974 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.572465897 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.575583935 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.575690985 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.575741053 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.578877926 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.619646072 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.622934103 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.654283047 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.688422918 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:14.742469072 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:14.808089018 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.087979078 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.088089943 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.088145018 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.089457989 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.090154886 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.090209007 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.090253115 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.093456984 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.093512058 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.093514919 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.096740961 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.096788883 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.096815109 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.100073099 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.100135088 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.100193977 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.103358030 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.103420019 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.126678944 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.147324085 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.147361040 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.147423983 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.151180029 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.151269913 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.151319981 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.157655001 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.157782078 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.157850027 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.166023016 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.166110992 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.166161060 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.174396038 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.174546957 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.174622059 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.182794094 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.182919025 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.182966948 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.191153049 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.238574028 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.246273041 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.275388002 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.275474072 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.275521040 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.279548883 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.279635906 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.279684067 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.286024094 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.286092043 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.286140919 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.294353962 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.333714962 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.357480049 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.357661963 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.357764959 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.361572981 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.363126040 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.363183975 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.363234043 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.371845007 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.371885061 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.371929884 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.379875898 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.379937887 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.379981041 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.388242960 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.388309002 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.388372898 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.396708965 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.396754980 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.396781921 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.405026913 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.405091047 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.405132055 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.413372993 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.413444042 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.413487911 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.421363115 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.421421051 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.421425104 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.428198099 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.428262949 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.428266048 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.434489965 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.434555054 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.434592009 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.440706015 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.440773010 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.589281082 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.589315891 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.589373112 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.590796947 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.590910912 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.590990067 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.593378067 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.593554974 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.593595982 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.596687078 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.596750021 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:15.596796989 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.605305910 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:15.724859953 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.064383030 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.064413071 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.064486027 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:16.066379070 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.066409111 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.066453934 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:16.070681095 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.070837975 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.070883989 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:16.074965954 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:16.119750023 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:19.776843071 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:19.776918888 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:19.777539968 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:20.183262110 CET	49737	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:25:20.183298111 CET	443	49737	142.250.181.68	192.168.2.4
Dec 26, 2024 21:25:23.015883923 CET	49723	80	192.168.2.4	199.232.214.172
Dec 26, 2024 21:25:23.136080027 CET	80	49723	199.232.214.172	192.168.2.4
Dec 26, 2024 21:25:23.136138916 CET	49723	80	192.168.2.4	199.232.214.172
Dec 26, 2024 21:25:25.391210079 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:25.510868073 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:25.858635902 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:25.861603975 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:25.981163025 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.330207109 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.330476999 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.330670118 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:26.331660032 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.331733942 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.331779957 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:26.334942102 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:26.374844074 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:26.809799910 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.809798002 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.809847116 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.809895992 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.809899092 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.809911966 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.809936047 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.809966087 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.809983015 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810044050 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810061932 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810112953 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810141087 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810148001 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810198069 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810235023 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810242891 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810287952 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810471058 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810482979 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810621977 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810659885 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810729027 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810741901 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810852051 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810868979 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.810961962 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.810970068 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:26.811083078 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:26.811094046 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.025840998 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.026053905 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.026079893 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.026946068 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.026987076 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.027045012 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.027084112 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.027106047 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.027627945 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.028021097 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.028073072 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.030697107 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.030705929 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.030826092 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.030885935 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.031287909 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.031296968 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.031438112 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.031488895 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.031554937 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.031562090 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.031572104 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.031624079 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.032201052 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.032258034 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.032341957 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.032349110 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.085742950 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.086711884 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.086720943 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.125319004 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.125514030 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.125524044 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.125654936 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.125840902 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.125861883 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.126429081 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.126487970 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.126739025 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.126756907 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.126777887 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.126807928 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.126996040 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.127053976 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.127073050 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.127078056 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.127178907 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.127187967 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.128314972 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.128526926 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.128566980 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.132154942 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.132227898 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.132509947 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.132607937 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.132620096 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.132688999 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.180071115 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.180074930 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.180083036 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.180104971 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.222017050 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.568247080 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568275928 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568284035 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568335056 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.568335056 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568373919 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568394899 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.568401098 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.568440914 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.569825888 CET	49767	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.569838047 CET	443	49767	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.570230007 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.570261002 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.570327044 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.570857048 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.570869923 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.647851944 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.647870064 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.647933960 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.647939920 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.647974968 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.649017096 CET	49766	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.649030924 CET	443	49766	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.649323940 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.649359941 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.649419069 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.649895906 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.649909019 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.650118113 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.650137901 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.650188923 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.650192976 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.650239944 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.651217937 CET	49763	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.651237011 CET	443	49763	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.651520014 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.651537895 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.651597977 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.651941061 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.651957035 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738502979 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738535881 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738543987 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738555908 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738563061 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738568068 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738665104 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.738701105 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.738751888 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.740483046 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740506887 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740514994 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740557909 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740597010 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740596056 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.740628004 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740658998 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.740674973 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.740674973 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.740675926 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.740705967 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.802622080 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.802675962 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.802702904 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.802755117 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.802769899 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.802789927 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.802820921 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.803323984 CET	49764	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.803339005 CET	443	49764	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.803651094 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.803678989 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.803730011 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.804426908 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.804438114 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.807328939 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.807364941 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.807419062 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.807429075 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.807468891 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.863931894 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.863972902 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.863984108 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864002943 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864012957 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864022970 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864038944 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.864084959 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864120007 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.864151001 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.864151001 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.914482117 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.918735981 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.918762922 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.918823004 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.918824911 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.918843985 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.918848991 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.918876886 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.918879986 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.918893099 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.918926001 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.950556993 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.950597048 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.950659990 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.950671911 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:29.950692892 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:29.950715065 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.003952980 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.003973961 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.004142046 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.004149914 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.004193068 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.053942919 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.053966999 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.054033995 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.054042101 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.054080963 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.074594021 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.074662924 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.074702024 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.074748993 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.074788094 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.074814081 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.095516920 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.095551014 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.095609903 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.095618963 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.095659018 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.110918045 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.111011028 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.111071110 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.111071110 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.111093044 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.111144066 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.150393009 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.150439024 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.150486946 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.150509119 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.150552034 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.150578022 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.161705017 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.161781073 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.161794901 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.161887884 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.161941051 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162091017 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162139893 CET	443	49762	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.162166119 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162190914 CET	49762	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162447929 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162513018 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.162580967 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162909031 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.162925959 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.162966967 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.162976027 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.163000107 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.163022041 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.163177967 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.163197994 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186263084 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186330080 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.186337948 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186351061 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186376095 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.186403036 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.186629057 CET	49765	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.186639071 CET	443	49765	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186835051 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.186866999 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.186923027 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.187366009 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:30.187381029 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:30.306293011 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:30.306317091 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:30.306386948 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:30.306549072 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:30.306559086 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:31.256747007 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.257044077 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.257060051 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.257389069 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.257695913 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.257755041 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.257818937 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.303338051 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.316453934 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.316514969 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.316657066 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.316667080 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.316946983 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.316963911 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.317244053 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.317575932 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.317579985 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.317632914 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.317641020 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.318017960 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.318078995 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.318154097 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.318244934 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.318253994 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.363344908 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.367146969 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.477963924 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.478190899 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.478203058 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.479094028 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.479159117 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.479456902 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.479510069 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.479582071 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:31.479588985 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:31.522398949 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.061506033 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.061527967 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.061592102 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.061598063 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.061645985 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.067280054 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.067301989 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.067363024 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.067384005 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.067426920 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.068195105 CET	49769	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.068213940 CET	443	49769	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.072227001 CET	49770	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.072241068 CET	443	49770	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.091825962 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.091866016 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.091933012 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.092134953 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.092150927 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.093286037 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.093317986 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.093393087 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.093533039 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.093544006 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.215851068 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.215877056 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.215892076 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.215977907 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.215993881 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.216047049 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.269789934 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.269812107 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.269917011 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.269929886 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.284924984 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.284992933 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.285003901 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.285018921 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.285063982 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.317622900 CET	49768	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.317635059 CET	443	49768	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.359159946 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.380433083 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.391705036 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.391721010 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.391808987 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.391844034 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.392749071 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.392819881 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.393104076 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.393173933 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.393237114 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.393244028 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.395607948 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.395678043 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.396837950 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.396953106 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.396958113 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.397033930 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.398487091 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.398513079 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.398643017 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.398788929 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.398803949 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.440341949 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.440880060 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.440887928 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442543030 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442568064 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442574024 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442583084 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442600965 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442636967 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.442658901 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.442672014 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.442703962 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.484749079 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.484951973 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.484957933 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.485857010 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.485912085 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.486177921 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.486229897 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.486277103 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.486413002 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.496644974 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.496661901 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.496731043 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.496737003 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.497308969 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.520174026 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.520240068 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.520260096 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.520291090 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.520512104 CET	49771	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.520525932 CET	443	49771	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.523034096 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.523051977 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.523116112 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.523475885 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.523489952 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.523948908 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.523968935 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.524030924 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.524316072 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.524331093 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.526138067 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.526168108 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.526238918 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.526407957 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.526421070 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.531342030 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.533938885 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.533946991 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.580295086 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.919486046 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.919512033 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.919519901 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.919564009 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.919583082 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.919596910 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.919635057 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.920588970 CET	49773	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:32.920603991 CET	443	49773	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:32.925055981 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.925100088 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:32.925160885 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.925390005 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:32.925403118 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585611105 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585635900 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585643053 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585643053 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585668087 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585680008 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585695028 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585722923 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585730076 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.585741997 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585760117 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.585772991 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.585783005 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585791111 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.585803986 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585812092 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.585812092 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.585822105 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585835934 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.585850000 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585858107 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.585871935 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.585876942 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.585890055 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.586117029 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.586173058 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.587363958 CET	49772	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.587385893 CET	443	49772	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.631618023 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.631649017 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.631695986 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.631716013 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.631737947 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.631772995 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.688644886 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.688679934 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.688764095 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.689235926 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.689265013 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.689321041 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.689624071 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.689654112 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.689699888 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.690824986 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.690838099 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.690999031 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.691010952 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.691415071 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:33.691426992 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:33.743032932 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.743050098 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.743153095 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.743161917 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.743210077 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.845863104 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.845901966 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.845931053 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.845944881 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.845973969 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.845994949 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.879863024 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.879918098 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.879959106 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.879986048 CET	49774	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.879995108 CET	443	49774	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.880367994 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.880460024 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:33.880532026 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.881016016 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:33.881052971 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.423975945 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.424041986 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.424053907 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.424177885 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.424336910 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.424340963 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.424359083 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.424367905 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.424520969 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.424527884 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.424704075 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.424992085 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.425005913 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.425400019 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.425465107 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.425535917 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.425549030 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.425551891 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.425606012 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.425615072 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.426151991 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.426208019 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.426503897 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.426558971 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.426855087 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.426987886 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.427160978 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.427203894 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.427212954 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.427273989 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.427279949 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.427320004 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:34.468811989 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.468904018 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.471334934 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.471338034 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:34.818669081 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.828587055 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.828608036 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.829710007 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.829772949 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.836571932 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.836641073 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.840820074 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.840830088 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.891623020 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.940804005 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.945818901 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.945846081 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.945899963 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.945915937 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.945951939 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.946743011 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.946765900 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.946810007 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.946815968 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.946854115 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.952380896 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.952395916 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.952804089 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.953936100 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.954015970 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.954617023 CET	49775	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.954634905 CET	443	49775	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.955074072 CET	49776	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:34.955091000 CET	443	49776	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:34.955507040 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.003341913 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.008940935 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.009146929 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.009171009 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.009485960 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.009772062 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.009831905 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.009881020 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.051338911 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.056709051 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.356770039 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.356828928 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.357019901 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.357037067 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.357120991 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.357144117 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.358524084 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.358581066 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.358606100 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.358654976 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.358975887 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.359054089 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.359357119 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.359441042 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.359513044 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.359519958 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.359572887 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.359582901 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.381510973 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.381540060 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.381556988 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.381624937 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.381640911 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.381695986 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.382179022 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.382205009 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.382219076 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.382266045 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.382285118 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.382333994 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.382877111 CET	49779	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.382889032 CET	443	49779	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.386390924 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.386445999 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.386456013 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.386493921 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.387448072 CET	49778	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.387460947 CET	443	49778	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.402873993 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.402920961 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.402993917 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.403223038 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.403244972 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.404175043 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.404210091 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.404282093 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.404443979 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.404459953 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.411680937 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.411679983 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.541182995 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541212082 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541219950 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541250944 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541268110 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541275978 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541285038 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.541301966 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.541313887 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.541335106 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.541356087 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.615690947 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.615708113 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.615784883 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.615796089 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.615852118 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.632477999 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.632538080 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.632539988 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.632587910 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.632755041 CET	49777	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.632765055 CET	443	49777	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.667880058 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.667903900 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.667917967 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.667985916 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.668009043 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.668064117 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.734483957 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.734504938 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.734574080 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.734587908 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.734637022 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758318901 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758342981 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758347988 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758379936 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758416891 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758420944 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758423090 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.758446932 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758465052 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758479118 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758692980 CET	49780	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.758703947 CET	443	49780	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.760606050 CET	49781	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:35.760621071 CET	443	49781	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:35.880470991 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.880712032 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.880731106 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.884327888 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.884393930 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.884704113 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.884824991 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.884830952 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.884905100 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.924906969 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:35.924916029 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:35.971333981 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.065252066 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.065485001 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.065519094 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.066591024 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.066663027 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.067122936 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.067188025 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.067276955 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.067286015 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.109376907 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.109400988 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.109477043 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.109481096 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.109524965 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.110498905 CET	49783	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.110517025 CET	443	49783	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.111102104 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.111170053 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.111221075 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.112154961 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.118153095 CET	49782	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.118170977 CET	443	49782	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.125566006 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.125611067 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.125705004 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.125878096 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.125890970 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.587950945 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.587975979 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.587985039 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.588002920 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.588010073 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.588013887 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.588052988 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.588077068 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.588094950 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.588628054 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.661353111 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.661361933 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.661451101 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.661484957 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.661505938 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.661505938 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.661530972 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.661560059 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.661576986 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.771785975 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.771811008 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.771819115 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.771881104 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.771929026 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.771966934 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.771989107 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.772038937 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.772039890 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.772072077 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.775497913 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.775561094 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.775567055 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.775621891 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.775729895 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.775763035 CET	443	49785	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.775788069 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.775834084 CET	49785	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.807104111 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.807113886 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.807171106 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.807210922 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.807219982 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.807262897 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.859050035 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.859069109 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.859169006 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.859188080 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.859234095 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.866485119 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.866566896 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.866571903 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.866628885 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.866837025 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.866856098 CET	443	49784	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:36.866867065 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.866908073 CET	49784	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:36.880587101 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.880606890 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:36.880680084 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.880872965 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:36.880889893 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.067373991 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.067667007 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.067974091 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.067990065 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.068095922 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.068116903 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.068346977 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.068495035 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.068660021 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.068725109 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.068929911 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.068999052 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.069077015 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.069123030 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:37.111336946 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:37.111346960 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.022578001 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.022604942 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.022624969 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.022665024 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.022747993 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.022789001 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.022810936 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.026549101 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.026599884 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.026619911 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.026644945 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.026676893 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.026709080 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.026820898 CET	49787	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.026846886 CET	443	49787	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030198097 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030224085 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030237913 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030278921 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.030308962 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030323029 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.030325890 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.030349016 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.030378103 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.031769037 CET	49788	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.031786919 CET	443	49788	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.311027050 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.311269045 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.311289072 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.312442064 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.312750101 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.312865019 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.312922001 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.362669945 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.556021929 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.556274891 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.556289911 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.556767941 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.557077885 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.557168961 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.557193041 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.601249933 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.601262093 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.833055019 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.833233118 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:38.833287001 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.833688974 CET	49789	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:38.833699942 CET	443	49789	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523571014 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523600101 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523610115 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523627043 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523653984 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523678064 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.523705959 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.523730993 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.523782015 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.579643011 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.579679966 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.579714060 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.579727888 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.579758883 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.579771042 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.742156029 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.742181063 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.742257118 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.742268085 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.742312908 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.774693966 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.774722099 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.774782896 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.774795055 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.774830103 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.774842024 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.782102108 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.782172918 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.782181978 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.782207966 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:39.782227993 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.782255888 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.919369936 CET	49796	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:39.919385910 CET	443	49796	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:42.554316044 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:42.554354906 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:42.554430008 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:42.554774046 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:42.554795027 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.742574930 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.746285915 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:44.746304989 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.746668100 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.747487068 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:44.747487068 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:44.747503042 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.747549057 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:44.802639961 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.290889025 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.290924072 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.290931940 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.290957928 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.290967941 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.290971994 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.290987968 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.291002035 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.291029930 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.291035891 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.291048050 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.291071892 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.291100979 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.292166948 CET	49801	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:45.292176962 CET	443	49801	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:45.297590017 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:45.297632933 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:45.297688007 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:45.297893047 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:45.297905922 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:47.503871918 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:47.504174948 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:47.504209042 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:47.504544020 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:47.504930973 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:47.504996061 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:47.505069017 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:47.547338963 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:48.044583082 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:48.044606924 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:48.044646025 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:48.044678926 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:48.044696093 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:48.044739008 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:48.045747042 CET	49802	443	192.168.2.4	54.168.109.197
Dec 26, 2024 21:25:48.045763016 CET	443	49802	54.168.109.197	192.168.2.4
Dec 26, 2024 21:25:52.635823011 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:52.755801916 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:53.553184986 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:53.596981049 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:54.121236086 CET	49803	80	192.168.2.4	91.109.201.210
Dec 26, 2024 21:25:54.240901947 CET	80	49803	91.109.201.210	192.168.2.4
Dec 26, 2024 21:25:54.240967989 CET	49803	80	192.168.2.4	91.109.201.210
Dec 26, 2024 21:25:54.241277933 CET	49803	80	192.168.2.4	91.109.201.210
Dec 26, 2024 21:25:54.361423969 CET	80	49803	91.109.201.210	192.168.2.4
Dec 26, 2024 21:25:55.669311047 CET	80	49803	91.109.201.210	192.168.2.4
Dec 26, 2024 21:25:55.721951008 CET	49803	80	192.168.2.4	91.109.201.210
Dec 26, 2024 21:25:56.656073093 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:56.656114101 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:56.656178951 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:56.657062054 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:56.657077074 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:56.657476902 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:56.777244091 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.126751900 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.126904011 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.126960039 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:57.127974033 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.128110886 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.128156900 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:57.131243944 CET	80	49743	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.176060915 CET	49743	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:57.628084898 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:57.722501993 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:57.884970903 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:57.884994984 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:58.266490936 CET	49745	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:58.269865990 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:58.386738062 CET	80	49745	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:58.389872074 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:58.681858063 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:58.801435947 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:58.844495058 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:58.877681017 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:58.877737045 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:58.878189087 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:58.879066944 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:58.879139900 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:58.879225016 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:58.919379950 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:59.336594105 CET	49746	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:59.336612940 CET	49747	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:25:59.412292957 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:59.412317038 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:59.412384987 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:59.412415028 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:59.412431002 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:59.415419102 CET	49804	443	192.168.2.4	3.114.85.154
Dec 26, 2024 21:25:59.415430069 CET	443	49804	3.114.85.154	192.168.2.4
Dec 26, 2024 21:25:59.456758976 CET	80	49746	91.212.166.21	192.168.2.4
Dec 26, 2024 21:25:59.456794024 CET	80	49747	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:01.081192017 CET	49748	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:26:01.200784922 CET	80	49748	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:08.200639009 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:08.200685978 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:08.200767040 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:08.200988054 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:08.201000929 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:09.867088079 CET	49724	80	192.168.2.4	199.232.214.172
Dec 26, 2024 21:26:09.981589079 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:09.982566118 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:09.982598066 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:09.982923031 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:09.983342886 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:09.983401060 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:09.987183094 CET	80	49724	199.232.214.172	192.168.2.4
Dec 26, 2024 21:26:09.987329006 CET	49724	80	192.168.2.4	199.232.214.172
Dec 26, 2024 21:26:10.028836012 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:19.689022064 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:19.689086914 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:19.689133883 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:20.489790916 CET	49823	443	192.168.2.4	142.250.181.68
Dec 26, 2024 21:26:20.489815950 CET	443	49823	142.250.181.68	192.168.2.4
Dec 26, 2024 21:26:27.620429039 CET	80	49740	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:27.620490074 CET	49740	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:26:27.718445063 CET	80	49739	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:27.718571901 CET	49739	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:26:28.241731882 CET	80	49742	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:28.241799116 CET	49742	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:26:28.242461920 CET	80	49744	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:28.242521048 CET	49744	80	192.168.2.4	91.212.166.21
Dec 26, 2024 21:26:28.285867929 CET	80	49745	91.212.166.21	192.168.2.4
Dec 26, 2024 21:26:28.285953045 CET	49745	80	192.168.2.4	91.212.166.21

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 21:25:03.830806017 CET	53	52927	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:04.351382971 CET	53	56135	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:07.149965048 CET	53	50622	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:08.146248102 CET	53036	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:08.146269083 CET	56267	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:08.283272982 CET	53	56267	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:08.283457994 CET	53	53036	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:09.503880978 CET	57705	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:09.504012108 CET	52632	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:09.875287056 CET	53	57705	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:09.875310898 CET	53	52632	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:12.628415108 CET	49558	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:12.628520012 CET	55156	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:12.766444921 CET	53	55156	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:12.768480062 CET	53	49558	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:21.463181973 CET	138	138	192.168.2.4	192.168.2.255
Dec 26, 2024 21:25:24.110877991 CET	53	54724	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:26.355298042 CET	57187	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:26.355418921 CET	60218	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:26.489357948 CET	53	65465	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:26.808921099 CET	53	57187	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:26.809272051 CET	53	60218	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:30.165714025 CET	53864	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:30.165846109 CET	52278	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:30.303544044 CET	53	52278	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:30.305844069 CET	53	53864	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:33.932271957 CET	53	60172	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:37.164566994 CET	53	62631	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:42.875760078 CET	53	56365	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:53.556365013 CET	65219	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:53.556423903 CET	62665	53	192.168.2.4	1.1.1.1
Dec 26, 2024 21:25:54.120599985 CET	53	62665	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:54.120759010 CET	53	65219	1.1.1.1	192.168.2.4
Dec 26, 2024 21:25:59.987240076 CET	53	61834	1.1.1.1	192.168.2.4
Dec 26, 2024 21:26:03.521328926 CET	53	55328	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 26, 2024 21:25:08.146248102 CET	192.168.2.4	1.1.1.1	0x2f5b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:08.146269083 CET	192.168.2.4	1.1.1.1	0xfaa5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 26, 2024 21:25:09.503880978 CET	192.168.2.4	1.1.1.1	0xafb1	Standard query (0)	auth-owlting.com	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:09.504012108 CET	192.168.2.4	1.1.1.1	0x7cea	Standard query (0)	auth-owlting.com	65	IN (0x0001)	false
Dec 26, 2024 21:25:12.628415108 CET	192.168.2.4	1.1.1.1	0x2c00	Standard query (0)	auth-owlting.com	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:12.628520012 CET	192.168.2.4	1.1.1.1	0x65c0	Standard query (0)	auth-owlting.com	65	IN (0x0001)	false
Dec 26, 2024 21:25:26.355298042 CET	192.168.2.4	1.1.1.1	0x257	Standard query (0)	auth.owlting.com	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:26.355418921 CET	192.168.2.4	1.1.1.1	0xf8ac	Standard query (0)	auth.owlting.com	65	IN (0x0001)	false
Dec 26, 2024 21:25:30.165714025 CET	192.168.2.4	1.1.1.1	0x2a98	Standard query (0)	auth.owlting.com	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:30.165846109 CET	192.168.2.4	1.1.1.1	0xe06b	Standard query (0)	auth.owlting.com	65	IN (0x0001)	false
Dec 26, 2024 21:25:53.556365013 CET	192.168.2.4	1.1.1.1	0xe379	Standard query (0)	site.ru	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:53.556423903 CET	192.168.2.4	1.1.1.1	0xbb6e	Standard query (0)	site.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 26, 2024 21:25:08.283272982 CET	1.1.1.1	192.168.2.4	0xfaa5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 26, 2024 21:25:08.283457994 CET	1.1.1.1	192.168.2.4	0x2f5b	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:09.875287056 CET	1.1.1.1	192.168.2.4	0xafb1	No error (0)	auth-owlting.com		91.212.166.21	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:12.768480062 CET	1.1.1.1	192.168.2.4	0x2c00	No error (0)	auth-owlting.com		91.212.166.21	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:26.808921099 CET	1.1.1.1	192.168.2.4	0x257	No error (0)	auth.owlting.com	nginx-ecs.owlting.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 26, 2024 21:25:26.808921099 CET	1.1.1.1	192.168.2.4	0x257	No error (0)	nginx-ecs.owlting.com		3.114.85.154	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:26.808921099 CET	1.1.1.1	192.168.2.4	0x257	No error (0)	nginx-ecs.owlting.com		54.168.109.197	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:26.809272051 CET	1.1.1.1	192.168.2.4	0xf8ac	No error (0)	auth.owlting.com	nginx-ecs.owlting.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 26, 2024 21:25:30.303544044 CET	1.1.1.1	192.168.2.4	0xe06b	No error (0)	auth.owlting.com	nginx-ecs.owlting.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 26, 2024 21:25:30.305844069 CET	1.1.1.1	192.168.2.4	0x2a98	No error (0)	auth.owlting.com	nginx-ecs.owlting.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 26, 2024 21:25:30.305844069 CET	1.1.1.1	192.168.2.4	0x2a98	No error (0)	nginx-ecs.owlting.com		54.168.109.197	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:30.305844069 CET	1.1.1.1	192.168.2.4	0x2a98	No error (0)	nginx-ecs.owlting.com		3.114.85.154	A (IP address)	IN (0x0001)	false
Dec 26, 2024 21:25:54.120759010 CET	1.1.1.1	192.168.2.4	0xe379	No error (0)	site.ru		91.109.201.210	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

auth-owlting.com

auth.owlting.com

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:09.995932102 CET	431	OUT	GET / HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:11.432292938 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 33 32 63 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed bc c9 ae 24 69 96 1e b6 ae 7a 8a 50 12 42 37 e1 1d e9 36 0f c5 ac 02 dc 26 b7 d9 6d 36 73 db 34 6c 9e e7 d9 04 09 a4 20 8a 04 24 40 0b 0a 02 a8 8d a4 05 01 01 24 37 da a8 d9 94 de a6 bb d9 7c 0b d9 8d 88 ca cc ea ae 1e 08 48 3b 5d e0 5e 37 fb c7 f3 9f e1 3b df 89 ff de f8 21 9f 9b fa 53 1d b4 d9 af bf fb ee 37 bf fc e5 0f 79 12 c4 bf f9 e5 2f 7e 68 92 39 f8 14 e5 c1 38 25 f3 af bf 5b e6 f4 33 f1 dd 8f ed f9 3c f7 9f 93 61 29 d6 5f 7f e7 7d b6 1f 9f e9 ae e9 83 b9 08 eb e4 bb 4f 51 d7 ce 49 7b 4d 12 d8 5f 27 71 96 fc 34 ad 0d 9a e4 d7 df ad 45 b2 f5 dd 38 ff 6c e4 56 c4 73 fe eb 38 59 8b 28 f9 fc e5 e5 8f 8a b6 98 8b a0 fe 3c 45 41 9d fc 1a fc b2 48 5d b4 d5 a7 31 a9 7f fd 5d 71 4d fd ee 53 3e 26 e9 af bf bb a7 c1 fa f1 fe 7d df 66 5f 86 cd c5 5c 27 bf 79 6d b5 16 1c 3f dc bf be 5d cd d3 7c 7c 79 f8 38 f1 1f fd f2 17 61 17 1f 9f fe 8b 5f fe e2 17 4d 30 66 45 fb ab 4f c0 3f ba 5e fa 20 8e 8b 36 fb fa f6 5f fe f2 17 bf fc c5 3f 18 bb 6e fe 5c 77 c1 47 [TRUNCATED] Data Ascii: 32c0$izPB76&m6s4l $@$7\|H;]^7;!S7y/~h98%[3<a)_}OQI{M_'q4E8lVs8Y(<EAH]1]qMS>&}f_\'ym?]\|\|y8a_M0fEO?^ 6_?n\wGE9O,5S_>u4u9i_}c&lI~\|y*/a7jDU6vKH_, K~i?LI}}p\|ue`m`MK1Qvd6gc'OyIE?mk}}n>5=k/'?$\|nl~m x\|{A&,B?5y\|QWx-\N~~s.)e~8~u~ocmv5?6}%~G+N~[Q2grTzY-Ll?jo)~'i2/}rK;M_m#!N\|_NZ{(_q7NF@H'.U4c@6T~h{1#)u}Q(`dp/>&t%\|$yb3s]%L_?`wk!F}S [TRUNCATED]
Dec 26, 2024 21:25:11.432374954 CET	224	IN	Data Raw: e4 0f c6 e4 d3 d4 8d e3 f1 29 5c e6 4f 5f b3 c3 a7 b8 4b a6 f6 0f e6 4f 5b 37 56 9f fa b1 eb 93 b1 3e 3e 6d c5 9c 77 d7 20 31 58 03 f3 ab 15 92 36 b8 92 5b fc fd 27 ad 4e 82 29 f9 f6 fe a9 98 3f cd dd 97 3c 56 b4 4b f2 fd 87 44 5f b6 fb e1 fe a3 Data Ascii: )\O_KO[7V>>mw 1X6['N)?<VKD_4q~*_.6Du0MQ2WK+;O>/O>}IAWn_>F(/;V_t@LdfspjX{BI
Dec 26, 2024 21:25:11.432431936 CET	1236	IN	Data Raw: c9 ef af 31 df 7d 0a c6 22 f8 5c 07 e1 87 5b 5c 96 bd 34 f8 75 bf 6f db 7f 5d fa b7 27 fc b4 7d 4e 97 ba fe 94 7f f9 f8 70 de af fd 5f a5 be 5f 62 ff 24 ff c7 c6 9f d7 cf f0 95 f5 a2 00 03 2e a6 f2 db 35 9b fd f3 07 60 7c 5b ec c7 a3 35 c1 fe 5b Data Ascii: 1}"\[\4uo]'}Np__b$.5`\|[5[WAp:+?c&,'YBjyJ\|?A!@Vy~sHa3yE4Q+/}]}_xd}-2\|Pw
Dec 26, 2024 21:25:11.432461023 CET	224	IN	Data Raw: ae ca 27 ec ed 52 4d 55 87 53 33 d9 f6 8a 13 82 6e cb 1b 8b 57 ef d3 b6 ca 67 e0 9f c3 23 58 97 9c dc fc 29 70 69 2c 54 9a 1d 6f a0 25 7c 08 44 39 f4 af e9 24 28 46 0c 9f ab a7 4f 59 03 f1 88 93 d7 a6 e3 3c cd 5d e8 26 2c 3b 66 41 7b cd d2 e0 f5 Data Ascii: 'RMUS3nWg#X)pi,To%\|D9$(FOY<]&,;fA{[r*J`,W6zd[''Rh7CS\|X>.oDM5mSi8m`(0,yXFh@:54.lHMu!K;0
Dec 26, 2024 21:25:11.432513952 CET	1236	IN	Data Raw: d6 a6 95 d9 85 a9 48 66 40 51 c3 cb 84 59 b5 ec e2 70 38 e4 49 c1 2f a0 1a 60 08 eb 96 d2 29 ed 64 a8 0e 48 72 f5 f7 fb 7c b2 1c 4b 64 86 30 e3 a3 8d 8b 8a fa 28 1f b9 a2 04 0b 75 41 a8 49 26 fe 72 f4 d2 c1 bc 1d 49 f4 24 85 1e 42 ad 29 8f 64 d0 Data Ascii: Hf@QYp8I/`)dHr\|Kd0(uAI&rI$B)d&o"-j6*Z1[]T,(M;muCO\$7SY9#t~l\PCl]elsKs!C=-cxx+ORoEJ"L)@`9+F0Q/h
Dec 26, 2024 21:25:11.432549000 CET	1236	IN	Data Raw: 70 96 0e f9 74 4e ed 8d f1 44 d7 19 f1 5b 32 e1 f9 5b 96 c2 b8 f1 f6 ec 06 f2 3e 74 ae c0 ec 0f 05 e6 24 a4 07 69 af bb f6 bc 69 03 78 6f e1 f1 70 6e 45 19 20 6e 03 04 ea 8e b7 95 1c 69 83 ef 1f e2 9a ea 50 49 ca bb 0f 3c 66 0b 58 48 6a 9f c5 c6 Data Ascii: ptND[2[>t$iixopnE niPI<fXHjdyIw}RM@y5QZC.\GW>pry*KSW#7n&r]m^aA u$m;A<u9S'^UE%D0xh'6Tq1K!&3>
Dec 26, 2024 21:25:11.432583094 CET	448	IN	Data Raw: 7b 75 6f 1f 16 9f 57 5a 1a 24 e7 f5 b8 0a 02 6a 51 df af 09 c0 54 1b 0c ad fc 95 88 53 35 5e ce 16 6e 2a c2 c1 c0 33 9e c1 53 7d 0e e1 13 cb 92 c0 6b 24 60 59 06 ec 9e bb ce 43 04 99 68 44 05 5c c4 04 2f be 05 3e df 55 cf 20 6d 5c 2d 6e df a0 b4 Data Ascii: {uoWZ$jQTS5^n*3S}k$`YChD\/>U m\-nZo~dn``7afdwN9g,na1vBFAmP}0vZm["$oV $jCDB+@jzm"t~m.Ii4V
Dec 26, 2024 21:25:11.432616949 CET	1236	IN	Data Raw: 64 d6 3a a9 97 f7 9a 0d 00 15 73 ca 88 2f 75 24 e7 97 61 a4 4a 05 9f c8 83 2a 5b a1 73 33 44 7a c2 a6 a0 03 37 20 0b 8c 99 3e aa c1 b0 d1 c0 04 c7 b1 f4 59 f4 66 5f 92 2b 4d 45 83 91 91 cc f7 92 0a 2e 9f ec 35 ba 01 49 74 4e f8 78 5a 22 38 48 15 Data Ascii: d:s/u$aJ[s3Dz7 >Yf_+ME.5ItNxZ"8H(HJ#`)UZboIWbZ2dOB^tf%XY`&DcT?$I(P6VAS<N;}NE e,g>h?oIDB>c58Q~z5!Q
Dec 26, 2024 21:25:11.432652950 CET	1236	IN	Data Raw: 09 8d 49 fb c7 16 55 ca 9d bd f1 a7 14 33 76 91 3c f9 70 94 1f e8 0d 71 30 42 9e 45 02 78 5b 1b 6f 0f 60 f1 6e a1 7d f3 86 89 19 ac e1 11 64 8e b3 a4 a3 58 67 d8 32 4c f6 71 a1 3f 42 cd 9b c7 0a b6 e7 c8 ee 4a be dd f3 11 6f af 86 1d d3 0b c4 e1 Data Ascii: IU3v<pq0BEx[o`n}dXg2Lq?BJo5VuoR6!}O1[Ii;?0u9}e3/~/toO_#?[=+g~?
Dec 26, 2024 21:25:11.432688951 CET	1236	IN	Data Raw: 84 de 95 28 d2 9e 09 03 be 3c ea a8 49 f1 71 fd 40 ce 9e 29 f4 97 1b c3 51 7f 42 a5 86 a9 ac 2d 91 9e b1 4c f5 d3 84 63 5d bb e9 b4 ed 42 32 7d 4a 12 40 f7 aa 7e 8b 75 d8 9f f0 d3 ca 75 e9 f6 18 f3 67 23 8b b9 4d f4 a5 69 88 4f 0f d1 91 4a a2 64 Data Ascii: (<Iq@)QB-Lc]B2}J@~uug#MiOJd`Rh){Kn8Zq5j"e@'x/\rmt=GtT_~\?uON ,NNH/QPgzNc6"yF!"
Dec 26, 2024 21:25:11.804061890 CET	1236	IN	Data Raw: 66 e0 e0 72 20 18 de 2e 04 e6 02 a5 06 43 92 20 83 13 3a 28 53 50 f4 6a 59 ba 07 70 2e 9f 30 8c ed e3 41 a3 97 68 c8 b5 1c 3d c6 63 d6 4c 99 3b ee 05 ab da f0 f3 6d 5c 05 6b 8e 42 60 38 a7 2d 77 93 f3 0d b8 02 c5 13 51 57 1e a0 c7 21 9e ae 7c 88 Data Ascii: fr .C :(SPjYp.0Ah=cL;m\kB`8-wQW!\|yQ9ax&,`cZ_\|y#"AK]HQb+j-2\R+gL4\|[kf^wL$aB/bp0EvE[}_$UeOvFzA=Zh
Dec 26, 2024 21:25:11.805870056 CET	324	OUT	GET /js/index.5edd0040.js HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:12.261985064 CET	452	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:12 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0
Dec 26, 2024 21:25:12.264794111 CET	393	OUT	GET /img/icon_reload.12563642.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:12.716944933 CET	765	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:12 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-337" Expires: Fri, 27 Dec 2024 20:25:12 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 31 61 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 53 c9 72 db 30 0c fd 15 0e 7b 26 44 10 5c 33 96 2f bd e4 d2 6b ef 1a 59 b6 3c a3 48 99 58 91 3a f9 fa 82 64 7d 48 9c 8e b8 80 0b 1e 1e f0 a8 c3 6d bb 88 3f 2f d3 7c 6b e5 b8 ae af 4f 4d b3 ef 3b ec 04 cb db a5 31 5a eb 86 6f 48 b1 5f 4f eb d8 4a f4 52 8c c3 f5 32 ae d5 3e 5f a7 a9 95 f3 32 0f b2 a2 3c 6d 15 e7 c6 40 db d0 af 1d 5c 97 66 ee e6 45 1e 0f af dd 3a 16 0f f5 f6 3e 0d ad 1c b6 61 5e 4e 27 29 4e ad fc 85 08 c9 3b 51 a7 5e 01 52 ed 44 8e 0d 93 14 d8 c0 4b ad 43 e7 c0 58 51 06 cd 1f 2a 02 9b 48 20 90 c1 5e 21 f8 48 42 f3 a6 f1 a8 20 62 54 96 af 7a 65 00 ad 7f 76 e0 a8 03 b2 dc 8a b7 16 6c 71 14 bb 29 70 98 3e 1d a9 7f 47 cf 06 0c d1 c3 51 76 22 08 31 3e e0 71 1b c1 99 ff c4 41 88 14 7b 04 83 9e 49 5b 6d 05 71 5a 5e 70 14 e7 84 85 a4 43 b5 3b 0f 96 44 19 2a 04 a3 19 9f 33 74 fe 33 34 57 85 eb 93 26 0e e0 43 19 3e 5e 38 8c 36 0a 35 af e2 a8 be d2 b9 27 90 c9 84 9f 5c 75 9f 0c 47 a5 80 22 31 03 64 66 ce a0 88 75 2e 65 c5 5a 56 24 0f 2e 7a 55 c8 88 [TRUNCATED] Data Ascii: 1aeuSr0{&D\3/kY<HX:d}Hm?/\|kOM;1ZoH_OJR2>_2<m@\fE:>a^N')N;Q^RDKCXQH ^!HB bTzevlq)p>GQv"1>qA{I[mqZ^pC;D3t34W&C>^865'\uG"1dfu.eZV$.zUB2'dp<r'72+B,UY@QfV2cf%MR!EtK@)\|+o~ur?Y6Cq70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:11.446125984 CET	332	OUT	GET /js/runtime~index.4b783e04.js HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:11.801430941 CET	332	OUT	GET /js/runtime~index.4b783e04.js HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:12.154475927 CET	452	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:11 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0
Dec 26, 2024 21:25:12.156186104 CET	387	OUT	GET /img/zh_tw.544fe750.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:12.622545958 CET	854	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:12 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-49a" Expires: Fri, 27 Dec 2024 20:25:12 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 32 30 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9d 94 51 6f 9b 30 10 c7 bf ca c9 7d d9 1e 7c d8 c6 10 53 85 48 ed 53 1e 52 ed a1 6a 1f f6 86 88 09 a8 04 22 a0 c9 d2 4f bf b3 bd d2 29 ea a2 6d 02 8e c3 77 f7 bb ff 59 c0 72 3c ee e0 c7 be ed c6 9c d5 d3 74 b8 8d a2 d3 e9 84 a7 18 fb 61 17 29 21 44 44 19 0c 4e cd 76 aa 73 a6 34 83 da 36 bb 7a 0a 7e d5 b4 6d ce ba be b3 2c 50 6e 8f 81 33 12 e8 68 cb a9 c0 a6 8f ba a2 eb d9 6a b9 2f c6 17 68 b6 39 bb 63 e0 7c 3e 9d 0f 36 67 45 7b a8 8b b0 f2 d4 35 13 09 79 1d ed f0 78 28 4a fb ad 7b 1a 1d 39 67 82 c1 d9 db cf 85 ac 96 65 33 94 ad 85 92 72 a5 62 50 9e c3 7d 08 b7 a0 f3 a6 d4 ee 60 d1 6a 19 b9 76 ab e5 ce b7 a5 8e 43 fb e5 e6 ee 2b 71 0e c5 54 fb 74 3e bc b6 a4 ce 1e 6d d7 6f b7 0c 48 f7 03 d7 20 9e 95 5e 2b f3 2c d6 5c 7f 9f c1 b6 a2 9d 12 0e 3c 0f 79 ff ef 43 72 7d 31 65 ac 2e a6 fc 3f 75 55 55 fd 69 e6 fb bf 9b 59 ea b5 d4 17 54 65 b5 2a 12 07 be 5a af 71 11 83 14 68 a4 6c b9 44 6d 14 48 34 3a e3 18 27 19 57 18 6b 45 56 89 05 9a 94 ce e0 6f 38 1a 30 98 4a [TRUNCATED] Data Ascii: 207Qo0}\|SHSRj"O)mwYr<ta)!DDNvs46z~m,Pn3hj/h9c\|>6gE{5yx(J{9ge3rbP}`jvC+qTt>moH ^+,\<yCr}1e.?uUUiYTe*ZqhlDmH4:'WkEVo80JIBg@SmPscHQyX8x(C1unb083<}^PTfHaRSF}$RJ dL;U4Ll=,P(Q0'C"ao>^5[mp]0i7XevkC)rV?0
Dec 26, 2024 21:25:57.628084898 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:11.805291891 CET	349	OUT	GET /css/chunk-vendors.0d8d4f33.css HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:13.246064901 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:13 GMT Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-32261" Expires: Fri, 27 Dec 2024 20:25:13 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 34 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd fb 92 a3 cc 92 27 f8 2a 35 df 58 9b 9d 1a 55 16 20 81 40 55 d6 bb 03 88 9b 10 20 40 12 42 b3 63 6d dc 41 5c c5 45 80 ca ce 73 ec df fb 2a bb 2f b6 a0 4b a6 94 52 56 d5 77 4e 77 cf ae d9 a7 ac ca 84 b8 78 78 78 78 b8 ff 3c 08 42 5f 0f bb e2 a5 cc 1d e7 c5 cc 0d 2b 74 ca e2 87 55 e5 45 9a 7f cb d2 20 29 9d fc ef 5f 1f 4a 7c f3 d3 83 93 ff b0 d2 a8 2b f6 5f 21 6c 02 ba ee b9 98 e5 3b 56 f8 62 a5 49 99 a7 51 d4 95 c9 d2 22 28 83 34 f9 66 98 45 1a 55 a5 f3 3d 72 dc f2 1b f8 bc f8 d7 e0 92 e6 d8 9f 9e 16 78 09 92 a4 a3 6a 76 7c 78 79 5a 25 f6 cb 1d 13 df cd 34 b7 bb 52 97 44 10 44 c7 0e fc 4f 35 f5 5a cc 4c 9b 6f 86 db c9 e3 c7 4b ed 98 61 50 76 22 31 92 c2 4d f3 f8 5b 9e 96 46 e9 fc 0d 46 6c c7 fb fc a9 b0 8c c8 d1 ff 06 7d fe fe cb 12 ff 34 6b b9 61 07 e9 87 7c 9d ae a2 be e1 17 04 fc 97 2f fd af 4b e3 f7 dc fd b4 dc 73 1e 7f 3a 3c 76 50 64 91 d1 7e 0b 92 28 48 3a b5 89 52 2b fc fe aa 09 b9 d3 35 15 1c 9c cb 60 7d 83 b2 e6 53 a7 1b 81 fd e9 bf 9a ae [TRUNCATED] Data Ascii: 4000'5XU @U @BcmA\Es/KRVwNwxxxx<B_+tUE )_J\|+_!l;VbIQ"(4fEU=rxjv\|xyZ%4RDDO5ZLoKaPv"1M[FFl}4ka\|/Ks:<vPd~(H:R+5`}Se(o[tQ%#1Ho]u`7hF:N~?'[u9N(+<u8uoj}IWwfNRW?M/7r6_2"ae;]J~OCCB\|D.D_V?5_<^_{c.SUmI;qsOrqH3TiU[&t5/$Lf?A2{A_3s8x?~o~5F?'TvTrvp>7/=6qv^15/n4ipY6mwVl!geO9V_=a9~]sEU3WwOZxqCN'c6yng:=plyjWrNHJ
Dec 26, 2024 21:25:13.246136904 CET	1236	IN	Data Raw: cc 81 f3 2d cb 9d 6b 56 1c f7 e2 b9 c8 f1 b6 cd 83 11 55 ce 8f ba e3 ae 0b 53 1c 23 fc 76 fa fd d2 27 dc 14 78 49 aa 28 fa 72 73 df 8d 8a e3 76 fd b2 af 34 6d 04 71 6d e7 b6 8a 99 a6 91 63 24 5f ee a8 c4 e6 cd 64 b2 31 cb 01 6f ab 14 65 de 29 cd Data Ascii: -kVUS#v'xI(rsv4mqmc$_d1oe)kr7p;q41$QLNJFcNn\|R9+~_'\|?r4cZ /vFiiO0$i}#=Fz>{[<m7#k
Dec 26, 2024 21:25:13.246172905 CET	1236	IN	Data Raw: 4b 12 81 a3 12 99 3e 9c 54 db 78 52 d9 78 f6 76 4d cf a2 ed 68 5d e8 9b d9 5b 1a 13 ed cc 21 12 77 ff c1 75 bc 6e ad 61 74 30 03 bc 99 ef 6e 68 50 76 64 76 79 37 f4 8f 76 6c b5 36 ab c4 1c b3 6d cd 21 e8 29 27 5a eb c2 64 30 cf 62 67 07 23 5e ef Data Ascii: K>TxRxvMh][!wunat0nhPvdvy7vl6m!)'Zd0bg#^lI2`[~-{$pE3p#y\30/+k1>C]-{aKB%r}yoS/[Hy\|xw[x?=N,$a/p
Dec 26, 2024 21:25:13.246249914 CET	1236	IN	Data Raw: f2 d4 22 c6 52 8d 87 30 5e b6 b8 04 10 dc 0c 29 86 51 e1 ba 07 36 da 2d eb a9 05 e3 96 b3 2b b1 72 82 50 93 cd 94 43 2d 0f dc 54 84 53 ad 46 98 6c 76 e2 f6 67 65 0a 43 1a ac b8 90 38 14 ac 63 56 cc 4a 9b a1 11 6f e2 c0 fa c1 a0 ec 21 b5 60 37 35 Data Ascii: "R0^)Q6-+rPC-TSFlvgeC8cVJo!`75Hq9Yq!`7VaRi&q`~oq&+X6`L._oq:NC'`sI3,trP&FjJ:FfcZ\#9xe
Dec 26, 2024 21:25:13.246268034 CET	896	IN	Data Raw: ff 7d 97 3f 20 78 55 ca 9e a7 e1 23 e7 97 52 27 1d 3e 38 a7 e6 11 6c 82 ba e6 cf cb dd 04 11 cf cb bd 6a e9 69 90 4c 04 43 b0 5f 95 7c 4f f3 ed 65 c9 97 32 88 fb b7 f8 dc 2a 39 4d b5 6f 77 af f2 42 5f 5e c0 af 10 84 7c 01 bf 4e d0 fe 37 86 5c ad Data Ascii: }? xU#R'>8ljiLC_\|Oe2*9MowB_^\|N7\O;AV^4.jSw.[}Xu=tZ77btPO_~<y~LsV^f1!?'D\/+]Z//~\|~N>Poe
Dec 26, 2024 21:25:13.246284962 CET	1236	IN	Data Raw: 98 f4 89 3f ff 18 a6 de 2c 6f 3c da b1 a7 6b 0a 37 86 e7 e9 2a c5 4f f2 ff 14 82 fa 88 d1 77 16 e7 04 51 6e b5 fc b5 c6 4d e2 e7 ab ed 81 2f 0f d0 c0 1b 88 f4 75 88 38 f1 eb 84 be 7a 80 ab 3e fd dc fb fc 7b 41 d7 8b 89 7e ee ad de 3d 7f 39 f5 f8 Data Ascii: ?,o<k7OwQnM/u8z>{A~=9r#O#pbG8O C-G}7\|C+g<+<{,t~p``jqP%XXUTVVUY^=8?LuI
Dec 26, 2024 21:25:13.246301889 CET	1236	IN	Data Raw: 14 5f 87 e3 fb 31 ff cf 83 04 ef a6 27 fc 1b 43 7a bf ec f7 31 e5 c7 91 1d bd 51 bf 7b 68 fb 44 49 9e 48 e0 86 e0 69 0e de 50 eb 1f 7d fd 82 d4 8d b4 2e d3 e3 42 e0 46 e9 2e 91 f3 e9 61 f0 2f c8 dd ca f7 c2 d8 07 e4 6e 16 1e 9e 50 fb cf c3 a9 27 Data Ascii: _1'Cz1Q{hDIHiP}.BF.a/nP's7yT+A>?m{_.xGT!U<}HN?&[2]$:-~+>wt=?~C?VC_pwpx
Dec 26, 2024 21:25:13.246320009 CET	1236	IN	Data Raw: 94 a1 b4 23 00 0c 2c 84 91 05 5d d5 e1 d5 b8 1c 03 2d bd 35 a4 78 80 61 84 35 62 c2 ed 18 f3 96 07 65 b0 6a b2 39 37 54 d1 85 49 cd 1c 93 48 ed 75 ac 0e 5a 9d e5 bc 55 40 18 04 32 9e e4 f4 6c 0f e0 ab e5 80 d9 71 78 81 ed 2b 30 da c1 fc 8a 03 19 Data Ascii: #,]-5xa5bej97TIHuZU@2lqx+05 Ei@ul>f28gl F1&(t(6=d_!0C#{d;,{ c <&dM@F)*4\IbfJ6d
Dec 26, 2024 21:25:13.246557951 CET	1236	IN	Data Raw: 5a 2b 3e 0e 4e 09 5b 10 19 2d 10 e4 09 a5 83 88 9c ce 86 3e ce 2f 7c 7c cf 2a 6a 2b 91 38 14 07 81 8c 51 42 94 2e b7 7e ad 20 3b 25 36 49 6f 8a 30 0c 5e f0 04 68 29 30 40 c8 8e 4b e8 d1 80 e4 b1 01 99 c6 ba 31 d6 7d ad 0a 98 12 a0 58 51 5e 62 23 Data Ascii: Z+>N[->/\|\|j+8QB.~ ;%6Io0^h)0@K1}XQ^b#b1\mW`8%xG&lSg[ci{(dph#;G64x3~()7>0>~={vzmFVfBD{Uz!"Q"KQmQb&$MK
Dec 26, 2024 21:25:13.246575117 CET	1236	IN	Data Raw: cd 1c c0 aa 18 c2 3d 70 09 52 3b 8e 9f 4b c9 b8 73 61 76 15 64 ab c9 b1 d6 f0 5d 34 da 69 c3 45 5a 3a fb 64 e8 ab 5b 5f f1 e9 70 2d cf 61 64 35 81 1b b1 1a 97 cd 84 dd 4c 31 21 99 63 43 ca ac 31 5e 4b 56 e2 74 b7 cd 65 3b 19 70 9b 63 72 88 e6 69 Data Ascii: =pR;Ksavd]4iEZ:d[_p-ad5L1!cC1^KVte;pcri=b&99rv/eR+=u61[.B`Q ]8#~":JIu"SbLx-Qft5z!,M4\|o p]CY77+rpT<pTm
Dec 26, 2024 21:25:13.366018057 CET	1236	IN	Data Raw: 9e 8f f1 3d b9 e3 94 d0 96 31 1c 37 27 da 51 35 e7 1a 60 c7 60 83 0d 77 5d 40 65 55 49 b8 09 c8 60 b7 b5 9a aa 45 16 82 b0 15 2a 6d 46 3b 0c 04 23 f6 31 04 79 1c 0c b9 50 27 49 0e 1a 75 41 e1 30 a2 96 42 40 17 fc 86 da f6 5f 3a 67 8b 82 dc 96 aa Data Ascii: =17'Q5``w]@eUI`E*mF;#1yP'IuA0B@_:g:)`\ul6j6RR:,4.U8R-h9T$Rbiwlcu!?FufiuE}$hliqGcH0m+wL U{c>Z`[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:11.805356979 CET	341	OUT	GET /css/index.3413bd13.css HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:13.249577999 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:13 GMT Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-a60e0" Expires: Fri, 27 Dec 2024 20:25:13 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 37 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 93 db 36 d2 30 fa 57 f4 66 2b 55 9e b5 a8 95 a8 cb 68 66 6a 5d 8f e3 c4 b9 6f 36 f1 26 9b cb 49 a5 38 12 35 62 86 ba ac 28 79 3c 51 cd d7 f3 f9 d4 f9 89 e7 97 1c dc af 0d 10 a0 38 76 b2 4f d6 1b 5b 24 81 46 77 a3 d1 dd 68 34 80 5e b6 dd 26 d5 5d b1 9f 2d f3 5d b2 dd 6c 37 af f3 dd 71 55 ac 93 bb 62 be 5f 5e 0e 87 a3 ed 9b 87 1e 54 aa d3 cb d6 7b fe 90 14 eb 35 fa 7b b6 59 ef f3 f5 fe b8 cd e6 f3 62 7d 73 d9 1b ef f2 55 74 f5 0e 58 e1 97 5f ae b3 d9 6d 72 bd 5f 5f 5e e7 8b cd 2e 3f b2 e2 97 ef bd 77 b5 dd 54 c5 be d8 ac 2f b3 eb 6a 53 1e f6 f9 d5 7e b3 bd ec 5f 5d 6f 76 73 04 02 3d 30 82 06 db 37 57 f4 d7 2c 2b 67 4f 06 fd fe fb 9d a7 9d 01 42 f3 ec aa cc 17 fb cb 84 e3 8c b0 5b e5 eb 43 52 1d ae c9 bf 08 8d c3 16 78 5d 66 b3 1c fd da 27 bb e2 66 b9 ff d7 66 7b 24 70 a6 88 71 ff a7 58 6d 37 bb 3d aa f3 d0 db 6d 10 56 bb a4 2c d6 b7 49 fe 26 9b ed 13 f4 5f f1 3a d7 3e d0 57 3f cd b3 7d 96 bc 4e 26 b3 e9 b4 7f 31 cf 7f 46 94 96 9b dd e5 b2 2a b3 [TRUNCATED] Data Ascii: 7000k60Wf+Uhfj]o6&I85b(y<Q8vO[$Fwh4^&]-]l7qUb_^T{5{Yb}sUtX_mr__^.?wT/jS~_]ovs=07W,+gOB[CRx]f'ff{$pqXm7=mV,I&_:>W?}N&1F'n.FgjfNIz+`N^@SF2V<adld)/e~bz,^UR :T:jJ(Q^\NjL`iNoXu) 1Y-rkq}.lYMf=S(<M0y=(7WYYIrX{FY:83 qAL?yj3IoH,5Nv%l 'dtw7Ew01g^!u.P1GEe&dJ+{%:A_c>'CuKs)acz)U;Xln/>M0bTUu&0jj"E6~^khi;@#0rPCjr?mvrqLAoPIXpZmt[!\|MW:nyoCaQvd6$#'0i;(
Dec 26, 2024 21:25:13.249640942 CET	224	IN	Data Raw: 4f 18 95 71 2a c7 9c 84 1a 6d 78 d1 f5 d4 65 94 3c b3 de 40 b3 b1 be ec 05 63 76 de 0f ec 9f 77 43 05 9d cc fd 7a a8 f6 c5 e2 9e c7 89 c4 bc 8d 94 53 66 bd c9 66 87 c7 73 48 68 a5 eb aa 7c 42 c9 4b da d6 11 1c e9 1e ad 76 d1 17 2a 2d 1d 8f bb 03 Data Ascii: Oqmxe<@cvwCzSffsHh\|BKv-&#q5M2s_:)e R$Bd\$bau{bT;;k\|vE1@A\T<vd:?Zo97<qCEaNtM4
Dec 26, 2024 21:25:13.249969006 CET	1236	IN	Data Raw: 72 73 97 dc 5f 66 87 fd 46 35 7c 2c 0e 85 41 0a e3 87 20 26 48 32 d4 59 2c 43 ad d3 2b 37 37 1b 00 41 16 08 a6 b1 c5 12 c9 c3 21 bb c9 99 02 e5 c5 07 c3 fe 78 71 7e 31 51 e8 d9 e5 65 86 a5 e6 8a c7 6f 98 ea c0 61 1c 0b ce 2f bf 10 1d 61 83 d3 82 Data Ascii: rs_fF5\|,A &H2Y,C+77A!xq~1Qeoa/a?Bn4>WzL&'4)3U%b2UlN'g<fu!,kQ~Yj~g}]78Oyk#(ZFA<zq%vbQ{Aw
Dec 26, 2024 21:25:13.250020027 CET	1236	IN	Data Raw: 5c b3 45 b3 53 b3 12 91 2b 7f 25 d7 19 4e 8a 52 5e 14 eb c5 46 8d 8a ff 65 7c 71 9e 2f ce af a4 d3 1e 01 a8 a3 3c af f2 aa 42 62 de 8d ac 8d fb 48 7d 8f bb ec 04 5c 90 96 3e 2a 36 9b eb 15 42 63 13 60 b4 c7 65 70 f6 2a d4 c7 06 0d 2e e8 65 c7 21 Data Ascii: \ES+%NR^Fe\|q/<BbH}\>6Bc`ep.e!Ud7M*6":q 4qJciv<()&1_d5]].tMs,=OiX>cQ'H[[IqmWO\|X jGz
Dec 26, 2024 21:25:13.250073910 CET	1236	IN	Data Raw: e9 74 7e 3d 17 af bb bc 16 48 05 47 14 81 f9 09 69 44 6c 0e e7 3f 03 8a 30 45 c3 87 d1 b1 de 60 87 12 8d 4f 24 96 8c a6 04 99 8e f5 be a2 9d 8e d3 48 ba b7 d7 f3 ee 16 e9 e2 2a 5b e9 8b 4c af 5e 7e b9 59 6f 92 6f f2 1b ac 7a ba 2f 36 eb 6a 53 66 Data Ascii: t~=HGiDl?0E`O$H*[L^~Yooz/6jSfUAt}>Wky@@kIl>Q0;X%b>/G"z}CB52dC.}dW~>u9YlV^0[k.Y2;YeCPP79$q`
Dec 26, 2024 21:25:13.250164032 CET	1236	IN	Data Raw: 56 c7 1a 71 c1 1f 61 a4 85 91 a2 22 a4 cd bd 8f 1a dc dd 06 2b e1 27 83 fd 61 b7 3e 7b 78 f8 09 e1 9e cc ca 62 76 9b 30 25 88 b4 df 5d b1 5f e2 6c 8c fc 0d aa 97 ac 91 11 fb fb 7e 77 c0 47 29 02 a5 e9 27 7b 07 3c 5d b2 4e 50 c1 fd 3c b9 c3 36 43 Data Ascii: Vqa"+'a>{xbv0%]_l~wG)'{<]NP<6C!KI1'jtmb"CbC,vh l=D`}]xbx,WCd%{#oQAp"IE,FNFLoUrhkSyf2qYd:NUztZ
Dec 26, 2024 21:25:13.250180960 CET	1236	IN	Data Raw: 6e c8 29 0a 62 8b 3e 71 0b 2e 87 7d ad 02 83 08 a6 0d 0e 10 27 f8 01 a8 f2 d0 6c 5a 6d 9e 57 b3 5d 41 cf 00 50 f7 5f 9a 2c 57 19 4b ef 95 90 30 aa c3 6c 86 8f 0b 01 b6 f4 4e 16 0b 71 d6 08 3e dc 8a dd 7f f2 97 eb f3 fc 7a ba 00 80 58 c7 bc 32 48 Data Ascii: n)b>q.}'lZmW]AP_,WK0lNq>zX2Ht6da\|V\YvO\,$"~SZ]d\|0R+K6>f6-iXr8!qeyXk(UR@03EO`a8~[!87%vj\|\|fOm
Dec 26, 2024 21:25:13.250308990 CET	1120	IN	Data Raw: 8b af f1 f3 e6 c5 f3 1f f0 c3 bf ef ca 5f 7f c5 2f 3e f8 78 fe c1 bf be fd e8 f9 f3 2f 3e fe e7 8b bf bd 59 7e 80 8b 5d ef 3f fb e6 a3 97 df fe fb f9 7a bf fa 72 ff f9 5d ff f9 b7 cb e5 97 af 5f 8d 67 87 37 9f 7e 71 f3 75 f9 cd b7 db 4f 6f 6e 3e Data Ascii: _/>x/>Y~]?zr]_g7~quOon>\|AO<-&/?E~Mwy}?vx;j~aV'.?~/\|~'^o
Dec 26, 2024 21:25:13.250324965 CET	1236	IN	Data Raw: 2c 05 4a 96 c5 4a c7 34 eb cf 2f 06 03 a8 75 6c 7e b5 a2 ce 01 44 ee dc 54 4b 3a 87 c8 4d 9e df 5a a5 d3 c5 78 94 5f 43 03 ea b0 43 ca 5c 2b 7b 9e a6 f9 1c 42 97 64 c4 a8 f1 f2 e9 d6 95 7a 02 4d 46 29 2c 92 22 cf 93 f2 8d d7 34 31 5f 1b 71 24 f7 Data Ascii: ,JJ4/ul~DTK:MZx_CC\+{BdzMF),"41_q$tL)t{Ew+-Y%GJ6>z><9 3" ~u\|KL7:RtUuD*j8zu\|HH6%\|f^v>P?@HMn6Tr
Dec 26, 2024 21:25:13.250339985 CET	1236	IN	Data Raw: 94 d5 b5 9c e4 66 b2 39 73 55 db f2 72 39 76 d6 ea 04 0c f3 f9 9d cc 58 49 d3 c0 7c 55 7f 0f f7 84 7b ae 6a 7c 86 86 8a 73 9e 4a b9 e6 c0 c8 3d 47 d5 3f c3 18 39 e7 a7 c6 57 08 23 50 c7 ea 1f 60 9c 3c f3 52 f3 3b 84 d5 3b 9e 93 82 72 e0 1b 25 81 Data Ascii: f9sUr9vXI\|U{j\|sJ=G?9W#P`<R;;r%QHBf3zQ_y((UaekIE}BgT*piTQszh(cfAF4F 1sLE"]W%Oj{j_$[l$\|'Li]Z#u[ Q^
Dec 26, 2024 21:25:13.369254112 CET	1236	IN	Data Raw: 37 54 3d 0a 46 06 1b de 5a bb 72 7c e8 84 9f ab 08 e0 01 bb 15 92 c1 4e 12 5a 94 b9 59 a4 ab 3f 3e e3 8f e6 7b 7c 30 91 f8 e8 11 70 03 8c 35 53 d5 3f 5b 33 55 e3 b3 31 53 35 be 1a 73 67 00 51 47 f3 5a 19 07 0e 7a 19 10 11 bd 08 9d 37 73 1d 9a ba Data Ascii: 7T=FZr\|NZY?>{\|0p5S?[3U1S5sgQGZz7s8"RVU)x3w'j\;bPflZ9E@BcLSNqo6(`O*<tyu<\|e9Tls}+,ehCkMe_,l(zcGCnjA~G
Dec 26, 2024 21:25:13.958432913 CET	419	OUT	GET /img/img-logo-arrows.7350f8b2.png HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://auth-owlting.com/css/index.3413bd13.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:14.421468973 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/png Content-Length: 49276 Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Connection: keep-alive ETag: "65f7d5f1-c07c" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 05 24 08 06 00 00 00 b7 de 4d da 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 c0 11 49 44 41 54 78 01 ec fd 0b 90 64 e7 75 d8 79 9e f3 dd aa 42 83 d0 5a dd 23 02 12 2c 8d 91 b0 c7 63 6b 23 76 d4 b4 4d 0d a4 95 c4 a4 c3 9e 35 e5 95 05 78 25 07 88 11 55 09 5a f4 92 1c 6b d0 d0 c3 43 ca 8f 4a 50 0f c0 7a b8 9b 7a 81 4b 3d 3a 9b 22 09 88 b2 07 90 3d 32 15 de 70 a0 40 51 12 47 b2 8c 6a 6f c4 52 eb 09 47 df b6 3d 03 b9 41 6d 97 26 f8 00 bb ea 7e 67 be f3 dd ac 46 d7 a3 81 aa ce ac aa fc 6e fe 7f 24 3a 13 8f ee ae ae aa bc 79 ee f9 ce 43 05 00 8e 90 3d 73 f2 e4 cb 27 be e4 b4 6a f3 35 6a 7a 5a cc 4e 9b ca 49 51 3d 99 9e a7 47 33 49 7f 23 36 fe 09 ea 3f 69 fc 54 af 3f bd 4e fd 3f b5 b8 f5 1f be f2 73 55 5e f9 fb fc 4b 58 fa 47 7a c3 af 67 3b 7e 8d f6 e7 f8 b3 f4 5c b5 fd 69 af fc bc eb 3f cd 5e f9 39 d7 7f a3 6d 1f d5 f5 df fd c0 f2 [TRUNCATED] Data Ascii: PNGIHDR$MpHYs%%IR$sRGBgAMAaIDATxduyBZ#,ck#vM5x%UZkCJPzzK=:"=2p@QGjoRG=Am&~gFn$:yC=s'j5jzZNIQ=G3I#6?iT?N?sU^KXGzg;~\i?^9m?L_?7\|v??CGm?yx_9?]om}7~-e[sd'ou\|ms7VnoS`q=Z%5"7vkpmptZN90+{_h_nmw6$Az5v[v}>v{;W^}e7n5?_k1h^o_-8elo>;+XubIi>Vho7\|7kZuF-oLZSUkUxu}`}]{bdNKmKey`5jP>wiSD<REnb0AJ\|NB-G`b_
Dec 26, 2024 21:25:14.622934103 CET	489	OUT	GET /img/kv-map.02597139.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:15.087979078 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-16cf5" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 33 34 30 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 7d 69 77 9b c8 b6 e8 f7 f7 2b 6c ce 6d 3f b0 10 66 d0 2c 13 dd 24 3d e5 de 1e 72 92 9c 3e 83 97 57 16 96 90 4d 47 06 37 02 0f 6d eb bf bf bd 6b a2 90 90 05 49 a7 f4 4e 9f c8 40 15 55 bb 76 ed b9 6a 17 a7 cb db cb 83 68 e6 6b e1 bb 1f 07 7f c6 7f 9f df 4e 7b 8e 76 70 7f bd 88 97 be 76 95 65 37 a3 93 93 bb bb 3b eb ce b3 92 f4 f2 c4 b5 6d fb 04 de 61 55 46 f7 8b 28 fe 54 55 d1 19 0e 87 27 a4 54 3b b8 8d c2 bb 57 c9 bd af d9 07 f6 c1 c0 b6 0f 3a 7d 5b 3b 58 5e 05 37 61 3b 0d e3 59 98 46 f1 a5 af 5d 86 c9 75 98 a5 d1 f4 6d 1a 4e a3 65 94 c4 da 41 16 de 67 3b ea bc 38 9d 46 e9 74 11 ae 0f c3 d5 0e 52 5f f3 ac 6e 67 d8 71 61 4c 59 1a c4 cb 79 92 5e fb da 75 00 4d dc eb b6 d5 3d 40 90 f0 6f bf d3 b3 86 fd ae 3b 74 0e ba 36 bb 32 b4 83 e4 26 98 46 d9 03 80 6e 41 7b f3 68 b1 f0 b5 f4 f2 42 77 bb 5d 93 fd 83 5a cb 2c 4d 3e 85 be 16 27 71 c8 ef da 77 d1 2c bb f2 35 47 3b d9 06 a1 d7 0c 42 77 20 41 68 0f 6d c7 e9 7f 6d 08 3b 3b 21 74 08 7c ce 41 6f d8 b1 3a 5d [TRUNCATED] Data Ascii: 3407}iw+lm?f,$=r>WMG7mkIN@UvjhkN{vpve7;maUF(TU'T;W:}[;X^7a;YF]umNeAg;8FtR_ngqaLYy^uM=@o;t62&FnA{hBw]Z,M>'qw,5G;Bw Ahmm;;!t\|Ao:];\v;P]6tz;>nK]}m;!o:0<="w(#qvNGwAw:gbq;S_8JD6\M,n:4n}Mmt6$CbHdzw>lot_5%A_==cp.)=H="ajzf1#O<nE"`+`}-gvkW_x=pn-"s+9=pnR;soz{=eCbuko(CGpCp^ukQ/:5kA@9z[_s89xx<=G={twkRUD u"JSG)l\|[lUw>;2w+PT+'Dej
Dec 26, 2024 21:25:15.126678944 CET	376	OUT	GET /favicon.png HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:15.589281082 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:15 GMT Content-Type: image/png Content-Length: 7903 Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Connection: keep-alive ETag: "65f7d5f1-1edf" Expires: Fri, 27 Dec 2024 20:25:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1e 74 49 44 41 54 78 01 c5 5d 0b 94 5d 55 79 fe f6 b9 e7 ce 9d 99 cc 24 93 0c 49 48 08 64 48 00 31 e1 11 40 5b 01 01 23 96 4a 69 8b 8a 2f ac ad ab 2a b4 5d d6 2e 45 90 e5 6a 69 42 5b 6b bb ba 2c d2 5a 59 ed 5a 96 da 65 4b 51 b1 a8 b4 f5 81 06 41 40 04 25 24 48 08 79 92 c7 24 f3 48 e6 7d df 67 ef fe fb bd f7 b9 77 26 14 93 f4 ac 75 e7 9e 7b ce 3e fb f1 fd df ff d8 ff de 27 61 c8 1d f7 1c da f4 a6 b4 90 5c 2f 84 78 9b 00 06 20 e4 55 a6 6f 0a a1 7f aa 73 44 e7 f2 8f fe 62 e6 9e d0 cf e5 ce 83 e2 f6 8f ac d6 1d 22 f8 61 4f dd a5 5c 9b 22 b8 a9 da 10 2c f7 2c 8b 1e 12 61 fb c1 89 88 2a 66 ba 0f d1 33 62 33 13 6c 73 ad da b8 73 e3 a5 d7 ee 45 70 b8 16 ef da b3 a9 af 34 af b0 81 9e f8 18 5a 06 c4 5c 65 ad 8d 9b 3f 62 16 60 58 0e 80 10 20 77 c2 82 b6 e0 1e [TRUNCATED] Data Ascii: PNGIHDRPPpHYssRGBgAMAatIDATx]]Uy$IHdH1@[#Ji/].EjiB[k,ZYZeKQA@%$Hy$H}gw&u{>'a\/x UosDb"aO\",,af3b3lssEp4Z\e?b`X wMf`mq\1[40c;7^~)^nC^a) v2ER1/Btb`na <@L5NsGL1l)n%`UJXl9G<# v`m"xF{3u8MvU!p{ m[2yvB<"`_"/^".7y)OmxI#P+rDNqMO":F$(qT:0/y{J1hS9v0 y"cR[MxMrvO`LG,K-rgZY@wfN=+/b,t4ur#*?Ax#E_>T!0gO S>\pNNxFK "<aCy:@=Tr^5}=,\CdMvV{9_<N
Dec 26, 2024 21:25:25.391210079 CET	474	OUT	GET /personal HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:25.858635902 CET	570	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:25 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Location: http://auth-owlting.com/personal/ Data Raw: 31 34 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 61 75 74 68 2d 6f 77 6c 74 69 6e 67 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 61 75 74 68 2d 6f 77 6c 74 69 6e 67 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 143<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://auth-owlting.com/personal/">here</a>.</p><hr><address>Apache/2.4.56 (Debian) Server at auth-owlting.com Port 80</address></body></html>0
Dec 26, 2024 21:25:25.861603975 CET	475	OUT	GET /personal/ HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:26.330207109 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 31 34 66 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3c fd 93 db c6 75 3f bb 33 fd 1f 60 d8 0a c9 31 41 82 3c f2 3e c8 e3 d9 8e 2a b7 6e e3 5a 23 9d 6b 67 3c 9e 9b 25 b0 24 21 81 00 0c 80 c7 3b 71 ae 23 3b 1f 76 6c ab 6e a6 ae 93 74 14 77 9c 19 25 6e 1c d7 4e 32 4d 95 b1 13 ff 31 d6 dd 49 3f e5 5f e8 7b bb 00 b1 00 16 24 4f 96 db 66 c6 3c 4b 22 76 df be 7d df ef ed 5b 9c b7 47 e1 d8 56 6c e2 0c 7b ea b5 91 16 4e d5 9d ed 11 25 e6 ce 76 10 1e da 54 09 0f 3d da 53 43 7a 10 d6 8d 20 50 77 6a c1 94 d8 9a 65 b8 8e a6 51 df 77 fd 59 df f5 4d ea 6b 86 6b bb 7e e7 91 41 73 a3 b5 d1 ea 6a 53 da bf 6a 85 1a 71 ac 31 09 2d d7 e9 f0 6f f4 02 ae 79 1a 96 2b b5 76 d0 5d 3c 7d 94 db 6c 6f ef 40 1b 13 ff ea cc 73 03 8b ad f3 a9 0d 08 f6 69 d7 b4 02 cf 26 87 9d be ed 1a 57 8b f7 7f e1 19 58 2e df 7b 3e 25 db d7 b6 1c 9a ec 4a fa 81 6b 4f 42 da 1d 51 6b 38 0a 3b 6d ef a0 3b b5 cc 70 d4 69 6d c0 d7 3e 31 ae 0e 7d 77 e2 98 19 b1 a4 89 0c 5d af b3 c6 e0 b9 08 7d 62 5a 93 a0 d3 f4 0e 8a 28 d0 34 9b 0e c2 59 cc 5d e8 13 27 [TRUNCATED] Data Ascii: 14fc<u?3`1A<>nZ#kg<%$!;q#;vlntw%nN2M1I?_{$Of<K"v}[GVl{N%vT=SCz PwjeQwYMkk~AsjSjq1-oy+v]<}lo@si&WX.{>%JkOBQk8;m;pim>1}w]}bZ(4Y]'!pPnM:tqqoO:D=dL%~p]n1DEhHGGOZ(]frr\k;$cYC,@[hQ&d@#@_exVeJ\|roKB7<_6b9B;\F^5g<Nc7OCc<lpNJgL7dlB, 2FA> -5,m?>Tr/H;$iFF@`>C3vTU"DJ@`,!4MV<_?mVj.dra+bEdxh9h5A/` $M:rm`@ig(f9!e-amh(Iykno-NdI9LjNSN2)8P?-]^Kx4 o!MVz\P2y>X";^Sm]c2,"vR%/cm>-"[nYCRZ?e7Ws*X [TRUNCATED]
Dec 26, 2024 21:25:52.635823011 CET	626	OUT	POST /loginpersonal.php HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Content-Length: 45 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest X-CSRF-TOKEN: qYtRaFrfcoX9NISfGTO72RIM7mKwwiTFV6RRJTSa User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: http://auth-owlting.com Referer: http://auth-owlting.com/personal/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 65 6d 61 69 6c 3d 64 6e 6e 63 79 6d 25 34 30 78 61 67 74 2e 69 6f 26 70 61 73 73 77 6f 72 64 3d 75 25 33 45 29 29 47 30 64 62 35 32 70 Data Ascii: email=dnncym%40xagt.io&password=u%3E))G0db52p
Dec 26, 2024 21:25:53.553184986 CET	201	IN	HTTP/1.1 302 Found Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Location: http://site.ru/index1.php
Dec 26, 2024 21:25:56.657476902 CET	480	OUT	GET /wait/ HTTP/1.1 Host: auth-owlting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://auth-owlting.com/personal/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:57.126751900 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 31 34 32 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3c 6d 93 db c6 79 9f 93 99 fc 87 35 6d 85 64 4c 80 00 5f ee 85 3c 9e 9d a8 72 ab 36 ae 3d d2 b9 76 aa f1 dc 2c 81 25 09 1d 08 c0 00 78 bc 13 e7 3a 92 9b 17 c7 b1 eb 76 c6 55 27 1d d5 9d 64 46 8d 93 d4 b5 93 4e 13 65 e4 26 3f c6 ba 3b e9 53 ff 42 9f dd 05 88 05 b0 00 ef 64 ab d3 cc 98 27 e9 c8 dd 67 9f 7d de 5f 16 4b 6d 4d c2 a9 8d 6c ec 8c 07 95 1b 13 25 9c 57 b6 b7 26 04 9b db 5b 41 78 68 13 14 1e 7a 64 50 09 c9 41 d8 34 82 a0 b2 ad 06 73 6c 2b 96 e1 3a 8a 42 7c df f5 17 43 d7 37 89 af 18 ae ed fa bd a7 47 ad f5 ce 7a a7 af cc c9 70 cf 0a 15 ec 58 53 1c 5a ae d3 e3 ef c8 25 ba e6 32 2c 47 6a 37 e8 97 4f 1f e5 36 db dd 3d 50 a6 d8 df 5b 78 6e 60 b1 75 3e b1 01 c1 3e e9 9b 56 e0 d9 f8 b0 37 b4 5d 63 af 78 ff d7 5e 84 e5 f2 bd 97 53 b2 7d 6d cb 21 c9 ae 78 18 b8 f6 2c 24 fd 09 b1 c6 93 b0 d7 f5 0e fa 73 cb 0c 27 bd ce 3a bc 1d 62 63 6f ec bb 33 c7 cc 88 25 4d 64 e8 7a bd 36 83 e7 22 f4 b1 69 cd 82 5e cb 3b 28 a2 40 51 6c 32 0a 17 31 77 a1 8f 9d 60 e4 [TRUNCATED] Data Ascii: 142c<my5mdL_<r6=v,%x:vU'dFNe&?;SBd'g}_KmMl%W&[AxhzdPA4sl+:B\|C7GzpXSZ%2,Gj7O6=P[xn`u>>V7]cx^S}m!x,$s':bco3%Mdz6"i^;(@Ql21w`A5/{z~SRC<59xJBPk5]%3+<iG[M~tev,'70MjjG![BH~6JFT\_2#ac8XfofUYr lw@!iB6Gd8O%S%%&(6`= C(<:U`djM9C$AwM##G`!{Ddy5qYiJ@h,!4Mi`LnOr_<UZ#g=\|@_A&8Cp@R&]76wE`&knBcmBCm%;t{+0$$077PZrj'I\|A>xnjz\I- !?9`P%S3A5uhyZX2_Q9W9;2doKse_m7J,,!d)-eej~ztVgY.&/"J\| [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:11.805408001 CET	391	OUT	GET /img/logo-full.acc3a999.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:13.260004044 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:13 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-5b1d" Expires: Fri, 27 Dec 2024 20:25:13 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 32 30 33 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5c 4d af 64 b7 71 dd e7 57 34 9e 37 c9 c2 2d 92 45 b2 c8 c0 32 a0 b9 23 65 16 cf c8 22 f0 c6 1b 43 b0 c7 d2 00 8a 24 48 13 cb fa f7 39 e7 14 ef ed d7 ed 9e 99 67 39 50 6c 18 f0 a8 de bd e4 25 8b a7 be 8b fd ab ef ff fc c5 e9 87 37 7f 7c fb e5 c7 0f b9 a6 87 d3 97 af df 7c f1 e5 db 8f 1f ac 3c 9c fe fc e6 f5 0f 2f be f9 cb c7 0f e9 94 4e 78 7a e2 1f ff f4 e6 ab af 3e 7e f8 fa 9b af 5f 3f 9c fe f2 df 5f 7d fd fd c7 0f 5f be 7d fb ed bf 7f f4 d1 0f 3f fc 70 fe c1 ce df 7c f7 c5 47 25 a5 f4 11 a6 7e f8 f5 bf fc ea db cf df 7e 79 fa e3 c7 0f bf f1 f3 28 de e6 a9 d4 73 9b 33 6f b9 9c 93 75 3f 95 7c 4e 29 fb 29 fb d9 6d ce 53 9e e7 39 ec 54 ca 79 d4 9c f9 78 8c dc 37 d0 29 17 0c b7 73 ee b3 c7 b0 a9 e9 ac 70 d0 a8 15 93 b5 b3 e5 d6 1f 83 ce 41 77 db 40 d7 59 0a e9 9e 5d ef e7 d2 8d f4 98 98 35 8f b3 b7 5a 4f a5 9f 73 f3 be 61 31 a5 fa 24 3d 53 c7 f3 76 6e 89 e3 1d e3 0a 16 6b e7 91 53 e1 f3 de 66 db 72 3d e7 dc 3b e9 d1 e6 00 bb ce d5 da e0 fb a9 36 92 ee [TRUNCATED] Data Ascii: 203e\MdqW47-E2#e"C$H9g9Pl%7\|\|</Nxz>~_?_}_}?p\|G%~~y(s3ou?\|N))mS9Tyx7)spAw@Y]5ZOsa1$=SvnkSfr=;6#97LWk2juS"J&[TOO,:,6pym5nNww_/oz=Vzrlxr20\|J0F 9rls1,:k@y5iz28h`5r$NAs u\1ws-4gndTz$:N8&C:Vv{q+9#8xN4io~G:z{6S%dpF8S"07@ =yS#m}MQ6>wGgHpz@(6)> g?cx{O1h\|0p5pzBAS$U0;?1]=<S*R0BXJ%P
Dec 26, 2024 21:25:13.260121107 CET	1236	IN	Data Raw: d3 33 71 8f f3 cd a1 0f e2 31 54 2d 49 9f c9 49 77 42 8e c3 47 ed c4 7d 2e 26 dc 4f e8 6f 70 ce 06 85 89 12 ee d2 52 50 cc 75 a7 37 a2 28 e3 c4 8f e7 50 9d 1d 27 68 09 e8 a9 52 f4 d2 ac 18 d6 ac 6e 78 0c b3 d0 96 04 0f 7e 35 97 21 4d da 70 74 a7 Data Ascii: 3q1T-IIwBG}.&OopRPu7(P'hRnx~5!MptA~0a3-?bh>w~<JFqZ]8%4t90Ga%*&(!(U#65[<N[8ncy=:IN\|lO,S1bXB?6))T-%%t
Dec 26, 2024 21:25:13.260135889 CET	448	IN	Data Raw: d3 10 51 08 d1 76 d0 50 7a 3d 6b 67 18 5f 69 6e 60 84 65 1e 62 fe a0 95 03 20 62 f6 c7 0e 5d 97 c6 1a fe 84 5e d3 1f f4 fa fc 3e 7c ad ee 66 f5 ef 3f 53 e6 92 bc 29 81 00 ad 54 1f a9 65 5a d8 63 46 b0 d4 e6 74 10 f9 5a 6f ca ee 4c 9f fa d7 ac 06 Data Ascii: QvPz=kg_in`eb b]^>\|f?S)TeZcFtZoLFsr1"4.8(}.I&p#Em ](B/HLXB!82N?Yfa1h-13[s 0P#qNA1sf{{d"g
Dec 26, 2024 21:25:13.260193110 CET	1236	IN	Data Raw: 26 80 d4 6e e0 97 6a ef d7 f0 eb f0 6c ec 0a 7e 0d b0 b8 86 df 18 d7 f0 b3 7e 05 bf 9c fc 1a 7e b3 5c c1 6f e6 fa 14 7e 95 49 90 2b f8 09 34 17 f8 95 54 ae e1 e7 76 0d 3f 38 7e d7 f0 c3 66 ae e1 67 f3 29 fc 00 ff 1b fc d5 5b fc d5 5b f8 8d 1b f8 Data Ascii: &njl~~~\o~I+4Tv?8~fg)[[5:q2+^4:XZ(}PQCvi~LL$S1/()+8dgJ`gBLt8fqM%/#![x/Jjpue.#/S,.]{%SWoT
Dec 26, 2024 21:25:13.260210991 CET	1236	IN	Data Raw: f7 a2 5e 99 ea 91 b7 84 67 31 a3 a8 33 85 04 84 3e 12 9d 32 43 cd 4c 25 d7 6a a8 7c aa 99 19 95 c8 96 22 c3 33 73 57 1b 52 ad a6 cc 01 a2 d5 68 50 60 c0 42 57 85 00 bb de ee 05 50 9f 6d 2f d9 31 75 cd 1b 96 54 f4 6d 69 55 6d 87 9e a7 8d 35 ad d2 Data Ascii: ^g13>2CL%j\|"3sWRhP`BWPm/1uTmiUm5+Yk6fb'{d*mz]v[\d;'hm){Y[gCs:-McD]RNG"@KY 2kkMIV`gYO/r)-t9Z
Dec 26, 2024 21:25:13.260227919 CET	1236	IN	Data Raw: 6a 56 a9 cd d5 ea 9a 8b d9 4e b3 33 b6 b9 07 64 1b 7b b7 76 5a 3d dc 65 3b 68 8a b3 ad ce 5b 1e 2b c3 0e 56 c2 d7 fc 8b 66 bb 50 b3 7e 79 cc 2c 79 b9 8c 5e e4 3e f9 22 f7 6f c7 d8 63 69 d7 4b 7f bf 51 8c 97 c3 ae 80 d3 2c d8 7b f5 b1 d3 5c 37 54 Data Ascii: jVN3d{vZ=e;h[+VfP~y,y^>"ociKQ,{\7Ty4JVX57aaQ9y_>N_]]\|F^CY-E!fB-"llN-L'U*pzAnJv~RyMMDe:OTYY
Dec 26, 2024 21:25:13.260252953 CET	1236	IN	Data Raw: 18 c1 34 c3 b1 be 6b c6 fc ee 37 9d 3d ac 1c cf a2 17 02 c0 ce 4b 4c 55 ae 7c 27 d7 bb 31 2b a5 2c 48 a3 98 76 e6 52 fb 8c 6b b0 c3 b7 9e 78 21 23 1f cf 1b bf 5f c7 31 1e b4 ab 2d 63 cd 0f ba a5 68 5d 1a 6c e2 c1 78 1b 51 89 54 97 47 67 ef ca 50 Data Ascii: 4k7=KLU\|'1+,HvRkx!#_1-ch]lxQTGgP@(Q?r&C;:=ty6zr]8v1u$XRDdEEiV!-l{Vl5sJ3c-["F7]\|'_e.={
Dec 26, 2024 21:25:13.260377884 CET	727	IN	Data Raw: 17 83 2b 71 71 69 61 85 9e 5d 2b 6d b1 85 ce 61 6b c1 16 fd a2 4f 7e 36 5b 6e 76 d6 e6 fc ec 2e 38 fa cf cb 86 7b cd 88 c1 86 c6 03 cc 33 d8 20 c5 30 2d d8 a0 86 b2 b9 44 46 1d 71 e4 d6 4f 60 c3 4b ff d4 3f b9 cb 06 c4 49 b7 32 b2 d8 10 7f fc 06 Data Ascii: +qqia]+makO~6[nv.8{3 0-DFqO`K?I23y#^{lhu^cx2[SOw{]U7%q@pxNb+s*`vs\|V<UMC3nj_:Nvf>=+
Dec 26, 2024 21:25:58.269865990 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:11.805773973 CET	332	OUT	GET /js/chunk-vendors.9651c0b9.js HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:13.263546944 CET	452	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:13 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 4e c3 30 10 44 ef f9 8a a5 27 38 d4 1b aa 80 38 58 96 68 93 8a 4a a1 44 c5 3d 70 74 eb 2d 8e 94 da c1 76 a8 f8 7b 9c 54 48 5c 56 9a dd 37 a3 59 7e 53 be ad e4 47 53 c1 8b 7c ad a1 d9 2f eb cd 0a 66 73 c4 4d 25 d7 88 a5 2c af 97 05 cb 11 ab ed 4c 64 dc c4 73 27 b8 21 a5 93 88 6d ec 48 14 79 01 5b 17 61 ed 06 ab 39 5e 97 19 c7 09 e2 07 a7 7f 46 df bd f8 c7 24 95 f1 5e 48 43 e0 e9 6b a0 10 49 c3 7e 57 c3 45 05 b0 89 3b 8d 1c 38 0b d1 b4 01 02 f9 6f f2 8c 63 3f 26 f9 34 94 d6 9e 42 10 cf bd 3a 1a c2 05 2b d8 c3 23 dc 96 74 68 95 bd 83 f7 c9 00 2a 82 1a a2 99 bb 4b 17 5b fb c9 8e ee 0c 8d f3 11 9e 72 8e 7f 11 a9 e9 d4 31 b5 1a 7f cb 7e 01 f5 ab 6c 00 16 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ebMN0D'88XhJD=pt-v{TH\V7Y~SGS\|/fsM%,Lds'!mHy[a9^F$^HCkI~WE;8oc?&4B:+#th*K[r1~l0
Dec 26, 2024 21:25:58.266490936 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:12.889066935 CET	291	OUT	GET /img/zh_tw.544fe750.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:14.334630013 CET	854	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-49a" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 32 30 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9d 94 51 6f 9b 30 10 c7 bf ca c9 7d d9 1e 7c d8 c6 10 53 85 48 ed 53 1e 52 ed a1 6a 1f f6 86 88 09 a8 04 22 a0 c9 d2 4f bf b3 bd d2 29 ea a2 6d 02 8e c3 77 f7 bb ff 59 c0 72 3c ee e0 c7 be ed c6 9c d5 d3 74 b8 8d a2 d3 e9 84 a7 18 fb 61 17 29 21 44 44 19 0c 4e cd 76 aa 73 a6 34 83 da 36 bb 7a 0a 7e d5 b4 6d ce ba be b3 2c 50 6e 8f 81 33 12 e8 68 cb a9 c0 a6 8f ba a2 eb d9 6a b9 2f c6 17 68 b6 39 bb 63 e0 7c 3e 9d 0f 36 67 45 7b a8 8b b0 f2 d4 35 13 09 79 1d ed f0 78 28 4a fb ad 7b 1a 1d 39 67 82 c1 d9 db cf 85 ac 96 65 33 94 ad 85 92 72 a5 62 50 9e c3 7d 08 b7 a0 f3 a6 d4 ee 60 d1 6a 19 b9 76 ab e5 ce b7 a5 8e 43 fb e5 e6 ee 2b 71 0e c5 54 fb 74 3e bc b6 a4 ce 1e 6d d7 6f b7 0c 48 f7 03 d7 20 9e 95 5e 2b f3 2c d6 5c 7f 9f c1 b6 a2 9d 12 0e 3c 0f 79 ff ef 43 72 7d 31 65 ac 2e a6 fc 3f 75 55 55 fd 69 e6 fb bf 9b 59 ea b5 d4 17 54 65 b5 2a 12 07 be 5a af 71 11 83 14 68 a4 6c b9 44 6d 14 48 34 3a e3 18 27 19 57 18 6b 45 56 89 05 9a 94 ce e0 6f 38 1a 30 98 4a [TRUNCATED] Data Ascii: 207Qo0}\|SHSRj"O)mwYr<ta)!DDNvs46z~m,Pn3hj/h9c\|>6gE{5yx(J{9ge3rbP}`jvC+qTt>moH ^+,\<yCr}1e.?uUUiYTe*ZqhlDmH4:'WkEVo80JIBg@SmPscHQyX8x(C1unb083<}^PTfHaRSF}$RJ dL;U4Ll=,P(Q0'C"ao>^5[mp]0i7XevkC)rV?0
Dec 26, 2024 21:25:59.336594105 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:12.889111996 CET	297	OUT	GET /img/icon_reload.12563642.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:14.326524019 CET	765	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-337" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 31 61 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 53 c9 72 db 30 0c fd 15 0e 7b 26 44 10 5c 33 96 2f bd e4 d2 6b ef 1a 59 b6 3c a3 48 99 58 91 3a f9 fa 82 64 7d 48 9c 8e b8 80 0b 1e 1e f0 a8 c3 6d bb 88 3f 2f d3 7c 6b e5 b8 ae af 4f 4d b3 ef 3b ec 04 cb db a5 31 5a eb 86 6f 48 b1 5f 4f eb d8 4a f4 52 8c c3 f5 32 ae d5 3e 5f a7 a9 95 f3 32 0f b2 a2 3c 6d 15 e7 c6 40 db d0 af 1d 5c 97 66 ee e6 45 1e 0f af dd 3a 16 0f f5 f6 3e 0d ad 1c b6 61 5e 4e 27 29 4e ad fc 85 08 c9 3b 51 a7 5e 01 52 ed 44 8e 0d 93 14 d8 c0 4b ad 43 e7 c0 58 51 06 cd 1f 2a 02 9b 48 20 90 c1 5e 21 f8 48 42 f3 a6 f1 a8 20 62 54 96 af 7a 65 00 ad 7f 76 e0 a8 03 b2 dc 8a b7 16 6c 71 14 bb 29 70 98 3e 1d a9 7f 47 cf 06 0c d1 c3 51 76 22 08 31 3e e0 71 1b c1 99 ff c4 41 88 14 7b 04 83 9e 49 5b 6d 05 71 5a 5e 70 14 e7 84 85 a4 43 b5 3b 0f 96 44 19 2a 04 a3 19 9f 33 74 fe 33 34 57 85 eb 93 26 0e e0 43 19 3e 5e 38 8c 36 0a 35 af e2 a8 be d2 b9 27 90 c9 84 9f 5c 75 9f 0c 47 a5 80 22 31 03 64 66 ce a0 88 75 2e 65 c5 5a 56 24 0f 2e 7a 55 c8 88 [TRUNCATED] Data Ascii: 1aeuSr0{&D\3/kY<HX:d}Hm?/\|kOM;1ZoH_OJR2>_2<m@\fE:>a^N')N;Q^RDKCXQH ^!HB bTzevlq)p>GQv"1>qA{I[mqZ^pC;D3t34W&C>^865'\uG"1dfu.eZV$.zUB2'dp<r'72+B,UY@QfV2cf%MR!EtK@)\|+o~ur?Y6Cq70
Dec 26, 2024 21:25:59.336612940 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	91.212.166.21	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:13.272293091 CET	295	OUT	GET /img/logo-full.acc3a999.svg HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:14.443912029 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/svg+xml Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65f7d5f1-5b1d" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Content-Encoding: gzip Data Raw: 32 30 33 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5c 4d af 64 b7 71 dd e7 57 34 9e 37 c9 c2 2d 92 45 b2 c8 c0 32 a0 b9 23 65 16 cf c8 22 f0 c6 1b 43 b0 c7 d2 00 8a 24 48 13 cb fa f7 39 e7 14 ef ed d7 ed 9e 99 67 39 50 6c 18 f0 a8 de bd e4 25 8b a7 be 8b fd ab ef ff fc c5 e9 87 37 7f 7c fb e5 c7 0f b9 a6 87 d3 97 af df 7c f1 e5 db 8f 1f ac 3c 9c fe fc e6 f5 0f 2f be f9 cb c7 0f e9 94 4e 78 7a e2 1f ff f4 e6 ab af 3e 7e f8 fa 9b af 5f 3f 9c fe f2 df 5f 7d fd fd c7 0f 5f be 7d fb ed bf 7f f4 d1 0f 3f fc 70 fe c1 ce df 7c f7 c5 47 25 a5 f4 11 a6 7e f8 f5 bf fc ea db cf df 7e 79 fa e3 c7 0f bf f1 f3 28 de e6 a9 d4 73 9b 33 6f b9 9c 93 75 3f 95 7c 4e 29 fb 29 fb d9 6d ce 53 9e e7 39 ec 54 ca 79 d4 9c f9 78 8c dc 37 d0 29 17 0c b7 73 ee b3 c7 b0 a9 e9 ac 70 d0 a8 15 93 b5 b3 e5 d6 1f 83 ce 41 77 db 40 d7 59 0a e9 9e 5d ef e7 d2 8d f4 98 98 35 8f b3 b7 5a 4f a5 9f 73 f3 be 61 31 a5 fa 24 3d 53 c7 f3 76 6e 89 e3 1d e3 0a 16 6b e7 91 53 e1 f3 de 66 db 72 3d e7 dc 3b e9 d1 e6 00 bb ce d5 da e0 fb a9 36 92 ee [TRUNCATED] Data Ascii: 203e\MdqW47-E2#e"C$H9g9Pl%7\|\|</Nxz>~_?_}_}?p\|G%~~y(s3ou?\|N))mS9Tyx7)spAw@Y]5ZOsa1$=SvnkSfr=;6#97LWk2juS"J&[TOO,:,6pym5nNww_/oz=Vzrlxr20\|J0F 9rls1,:k@y5iz28h`5r$NAs u\1ws-4gndTz$:N8&C:Vv{q+9#8xN4io~G:z{6S%dpF8S"07@ =yS#m}MQ6>wGgHpz@(6)> g?cx{O1h\|0p5pzBAS$U0;?1]=<S*R0BXJ%P
Dec 26, 2024 21:25:14.443994999 CET	1236	IN	Data Raw: d3 33 71 8f f3 cd a1 0f e2 31 54 2d 49 9f c9 49 77 42 8e c3 47 ed c4 7d 2e 26 dc 4f e8 6f 70 ce 06 85 89 12 ee d2 52 50 cc 75 a7 37 a2 28 e3 c4 8f e7 50 9d 1d 27 68 09 e8 a9 52 f4 d2 ac 18 d6 ac 6e 78 0c b3 d0 96 04 0f 7e 35 97 21 4d da 70 74 a7 Data Ascii: 3q1T-IIwBG}.&OopRPu7(P'hRnx~5!MptA~0a3-?bh>w~<JFqZ]8%4t90Ga%*&(!(U#65[<N[8ncy=:IN\|lO,S1bXB?6))T-%%t
Dec 26, 2024 21:25:14.444011927 CET	1236	IN	Data Raw: d3 10 51 08 d1 76 d0 50 7a 3d 6b 67 18 5f 69 6e 60 84 65 1e 62 fe a0 95 03 20 62 f6 c7 0e 5d 97 c6 1a fe 84 5e d3 1f f4 fa fc 3e 7c ad ee 66 f5 ef 3f 53 e6 92 bc 29 81 00 ad 54 1f a9 65 5a d8 63 46 b0 d4 e6 74 10 f9 5a 6f ca ee 4c 9f fa d7 ac 06 Data Ascii: QvPz=kg_in`eb b]^>\|f?S)TeZcFtZoLFsr1"4.8(}.I&p#Em ](B/HLXB!82N?Yfa1h-13[s 0P#qNA1sf{{d"g
Dec 26, 2024 21:25:14.444065094 CET	1236	IN	Data Raw: c6 a2 79 d8 34 86 6d 28 af 40 0d 7d b3 db 7b 62 f0 8c da 87 62 b8 26 d1 1f 29 1b 75 9e d5 90 51 c4 64 42 64 b7 16 16 5a 2a 16 88 ec 55 c1 9a 43 67 6e 59 76 49 29 7a 98 13 d9 b0 52 a7 47 c2 cd c2 5f 64 ba 88 e3 0b 55 47 e3 e2 a5 a6 46 4f f1 7e cb Data Ascii: y4m(@}{bb&)uQdBdZUCgnYvI)zRG_dUGFO~~c3(40\Q6US VmLvt`2d3\+,(\|V"Ii4^phusz}-}u7,',omDw)
Dec 26, 2024 21:25:14.444108963 CET	1236	IN	Data Raw: 4d ad ca 8a a9 33 52 7b e7 c7 a0 e6 2d f6 de 9b f3 fc 7d 85 64 ea 7f e1 81 aa 13 98 7b af 16 09 e3 19 8b c3 89 6f 6a 60 ea 01 10 b0 9a f3 63 ad 23 8e 6a 44 fa 3d 45 f9 a5 72 e9 6d d0 c8 30 10 4d ca 63 79 13 16 3b 70 54 95 11 32 05 4b 64 71 1d 1b Data Ascii: M3R{-}d{oj`c#jD=Erm0Mcy;pT2Kdq"`eAgTtVb'N>KU!F`E?Rp\X^4q@+6oe>'IV4[tPQSy2M_u;eflN1rxIWl&VeF*:kSxtU2
Dec 26, 2024 21:25:14.444125891 CET	1236	IN	Data Raw: bd 34 57 3e 37 57 1c 06 68 a6 39 8e e9 5b 38 47 c7 2a 4c a9 d3 cd d9 70 19 69 e1 78 af d0 db 51 c1 90 de b8 68 f6 74 a8 96 31 fa a3 b3 23 8f e9 eb 41 ef 85 14 2f ed 28 81 ca b2 ae 9d 55 28 e7 85 16 c8 19 e9 b9 3a 60 48 bf 72 02 0b 36 d2 e9 c4 fb Data Ascii: 4W>7Wh9[8GLpixQht1#A/(U(:`Hr6)C%^slgxyicAynZ5nZ{=(`1GY+s6G^/s}l/^8;_/:qB}y5Hc};47TB
Dec 26, 2024 21:25:14.444140911 CET	776	IN	Data Raw: f9 d1 e3 97 35 0a ef a5 e6 bc 2e 97 31 f1 cd 7a 3b ef 35 e6 78 ac 3b 93 f5 5c e3 b1 22 70 d2 fa 81 06 4e 4f 4b 42 cc 4d da 58 c4 ed e4 9e e4 59 ed db 85 92 29 c8 c5 e1 8e 14 af a7 b8 39 32 92 90 c9 1c 8b 45 bb b0 7c 1b 23 e6 a2 51 0b f1 44 8e 3e Data Ascii: 5.1z;5x;\"pNOKBMXY)92E\|#QD>a@Q~>CRlI3M4zZ0)A=gs4Lj3G4"$guU6@SJ=r\jI^F.*5jX}Z=}
Dec 26, 2024 21:25:14.654283047 CET	399	IN	Data Raw: 93 3a 9f af e6 af 21 f0 a2 7e 66 2f ee 6f e2 bd bb 7f 82 9d bf 61 b3 ef 76 ef 18 ab 78 5e 70 a7 f7 0d b7 fa d8 6c db 0d 38 bd 57 1f dd ff 19 f6 fa 1e a7 ad 50 82 97 7e 63 bc d2 f2 52 e5 72 e0 76 ff 9e 8d 48 3f 51 95 ff cc 5b 7d b7 63 c6 58 c6 ea Data Ascii: :!~f/oavx^pl8WP~cRrvH?Q[}cX3eK11.%-^W~I'tWVG~N\|ai=F>5W=FnZxiOR=/VSg<6n,C\g^n%N-3CX?&/I?i?
Dec 26, 2024 21:25:14.688422918 CET	301	OUT	GET /img/img-logo-arrows.7350f8b2.png HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:15.147324085 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:14 GMT Content-Type: image/png Content-Length: 49276 Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Connection: keep-alive ETag: "65f7d5f1-c07c" Expires: Fri, 27 Dec 2024 20:25:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0c 00 00 05 24 08 06 00 00 00 b7 de 4d da 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 c0 11 49 44 41 54 78 01 ec fd 0b 90 64 e7 75 d8 79 9e f3 dd aa 42 83 d0 5a dd 23 02 12 2c 8d 91 b0 c7 63 6b 23 76 d4 b4 4d 0d a4 95 c4 a4 c3 9e 35 e5 95 05 78 25 07 88 11 55 09 5a f4 92 1c 6b d0 d0 c3 43 ca 8f 4a 50 0f c0 7a b8 9b 7a 81 4b 3d 3a 9b 22 09 88 b2 07 90 3d 32 15 de 70 a0 40 51 12 47 b2 8c 6a 6f c4 52 eb 09 47 df b6 3d 03 b9 41 6d 97 26 f8 00 bb ea 7e 67 be f3 dd ac 46 d7 a3 81 aa ce ac aa fc 6e fe 7f 24 3a 13 8f ee ae ae aa bc 79 ee f9 ce 43 05 00 8e 90 3d 73 f2 e4 cb 27 be e4 b4 6a f3 35 6a 7a 5a cc 4e 9b ca 49 51 3d 99 9e a7 47 33 49 7f 23 36 fe 09 ea 3f 69 fc 54 af 3f bd 4e fd 3f b5 b8 f5 1f be f2 73 55 5e f9 fb fc 4b 58 fa 47 7a c3 af 67 3b 7e 8d f6 e7 f8 b3 f4 5c b5 fd 69 af fc bc eb 3f cd 5e f9 39 d7 7f a3 6d 1f d5 f5 df fd c0 f2 [TRUNCATED] Data Ascii: PNGIHDR$MpHYs%%IR$sRGBgAMAaIDATxduyBZ#,ck#vM5x%UZkCJPzzK=:"=2p@QGjoRG=Am&~gFn$:yC=s'j5jzZNIQ=G3I#6?iT?N?sU^KXGzg;~\i?^9m?L_?7\|v??CGm?yx_9?]om}7~-e[sd'ou\|ms7VnoS`q=Z%5"7vkpmptZN90+{_h_nmw6$Az5v[v}>v{;W^}e7n5?_k1h^o_-8elo>;+XubIi>Vho7\|7kZuF-oLZSUkUxu}`}]{bdNKmKey`5jP>wiSD<REnb0AJ\|NB-G`b_
Dec 26, 2024 21:25:15.147361040 CET	1236	IN	Data Raw: f8 57 f5 d5 e2 33 e9 e9 c9 14 2c d4 e3 40 61 55 00 74 06 01 03 80 89 5c fb f8 57 2e 47 b3 51 fb 77 b6 7a db 17 bf f0 00 35 0a 00 00 e0 ba 2f 7e fc 8f af 7c e1 d7 fe b8 bd fc cf ef b6 f4 38 14 00 00 80 1b 79 66 c1 83 05 ff eb 8b 1f ff 8a 15 01 d0 Data Ascii: W3,@aUt\W.GQwz5/~\|8yfiI8W^{A!2oCivC80?>A`k_90Z' `/(B-7d}1=[`%5yvAbx/`aBV\|=/"Xd
Dec 26, 2024 21:25:15.151180029 CET	1236	IN	Data Raw: 30 00 b8 65 6a 31 67 19 62 43 a7 04 d0 75 04 0c 00 6e 99 a9 ae a9 f7 4b 30 c0 09 e8 3c 02 06 00 b7 2c 88 d6 5e c6 a0 c1 58 42 05 74 1c 01 03 80 5b 66 9b f1 62 ca 2e 88 b1 53 02 e8 3c 02 06 00 b7 cc 3b 25 f2 13 d3 9e 00 e8 34 02 06 00 b7 cc 3b 25 Data Ascii: 0ej1gbCunK0<,^XBt[fb.S<;%4;%DNL$Y6:DeMi=Y&75JtJF`"K"k%T@0kQ1"`0)aV@0cS0Sdv$]LY*a:$
Dec 26, 2024 21:25:15.151269913 CET	672	IN	Data Raw: d3 40 a7 04 50 10 02 06 00 47 ca d2 91 84 6f ad 8c 1c 49 00 45 21 60 00 70 a4 36 5f 1e ef 94 e0 48 02 28 0a 01 03 80 23 95 3b 25 44 d6 d3 53 3a 25 80 82 10 30 00 38 72 3a 3e 96 a0 53 02 28 07 01 03 80 23 47 a7 04 50 1e 02 06 00 47 2e 98 f8 aa eb Data Ascii: @PGoIE!`p6_H(#;%DS:%08r:>S(#GPG.itJ `po9Am\k)wJ)@PBMRNEA3oAxj4(dkff#@oGXx61:%08>nS}
Dec 26, 2024 21:25:15.605305910 CET	280	OUT	GET /favicon.png HTTP/1.1 Host: auth-owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:16.064383030 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 26 Dec 2024 20:25:15 GMT Content-Type: image/png Content-Length: 7903 Last-Modified: Mon, 18 Mar 2024 05:49:37 GMT Connection: keep-alive ETag: "65f7d5f1-1edf" Expires: Fri, 27 Dec 2024 20:25:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1e 74 49 44 41 54 78 01 c5 5d 0b 94 5d 55 79 fe f6 b9 e7 ce 9d 99 cc 24 93 0c 49 48 08 64 48 00 31 e1 11 40 5b 01 01 23 96 4a 69 8b 8a 2f ac ad ab 2a b4 5d d6 2e 45 90 e5 6a 69 42 5b 6b bb ba 2c d2 5a 59 ed 5a 96 da 65 4b 51 b1 a8 b4 f5 81 06 41 40 04 25 24 48 08 79 92 c7 24 f3 48 e6 7d df 67 ef fe fb bd f7 b9 77 26 14 93 f4 ac 75 e7 9e 7b ce 3e fb f1 fd df ff d8 ff de 27 61 c8 1d f7 1c da f4 a6 b4 90 5c 2f 84 78 9b 00 06 20 e4 55 a6 6f 0a a1 7f aa 73 44 e7 f2 8f fe 62 e6 9e d0 cf e5 ce 83 e2 f6 8f ac d6 1d 22 f8 61 4f dd a5 5c 9b 22 b8 a9 da 10 2c f7 2c 8b 1e 12 61 fb c1 89 88 2a 66 ba 0f d1 33 62 33 13 6c 73 ad da b8 73 e3 a5 d7 ee 45 70 b8 16 ef da b3 a9 af 34 af b0 81 9e f8 18 5a 06 c4 5c 65 ad 8d 9b 3f 62 16 60 58 0e 80 10 20 77 c2 82 b6 e0 1e [TRUNCATED] Data Ascii: PNGIHDRPPpHYssRGBgAMAatIDATx]]Uy$IHdH1@[#Ji/].EjiB[k,ZYZeKQA@%$Hy$H}gw&u{>'a\/x UosDb"aO\",,af3b3lssEp4Z\e?b`X wMf`mq\1[40c;7^~)^nC^a) v2ER1/Btb`na <@L5NsGL1l)n%`UJXl9G<# v`m"xF{3u8MvU!p{ m[2yvB<"`_"/^".7y)OmxI#P+rDNqMO":F$(qT:0/y{J1hS9v0 y"cR[MxMrvO`LG,K-rgZY@wfN=+/b,t4ur#*?Ax#E_>T!0gO S>\pNNxFK "<aCy:@=Tr^5}=,\CdMvV{9_<N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49803	91.109.201.210	80	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2024 21:25:54.241277933 CET	463	OUT	OPTIONS /index1.php HTTP/1.1 Host: site.ru Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-csrf-token,x-requested-with Origin: http://auth-owlting.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 26, 2024 21:25:55.669311047 CET	356	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 26 Dec 2024 20:25:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://site.ru/index1.php Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49765	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	582	OUT	GET /bower_components/bootstrap/dist/css/bootstrap.min.css HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	262	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: text/css Content-Length: 121200 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1d970-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	16122	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-f
2024-12-26 20:25:29 UTC	16384	IN	Data Raw: 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d Data Ascii: mg-thumbnail{display:inline-block;max-width:100%;height:auto;padding:4px;line-height:1.42857143;background-color:#fff;border:1px solid #ddd;border-radius:4px;-webkit-transition:all .2s ease-in-out;-o-transition:all .2s ease-in-out;transition:all .2s ease-
2024-12-26 20:25:29 UTC	16384	IN	Data Raw: 65 3e 74 68 65 61 64 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 69 6e 66 6f 3a 68 6f 76 Data Ascii: e>thead>tr.info>td,.table>thead>tr.info>th,.table>thead>tr>td.info,.table>thead>tr>th.info{background-color:#d9edf7}.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr.info:hover>th,.table-hover>tbody>tr:hover>.info,.table-hover>tbody>tr>td.info:hov
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e Data Ascii: -color:#398439}.btn-success.active,.btn-success:active,.open>.dropdown-toggle.btn-success{color:#fff;background-color:#449d44;border-color:#398439}.btn-success.active.focus,.btn-success.active:focus,.btn-success.active:hover,.btn-success:active.focus,.btn
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 65 65 20 23 65 65 65 20 23 64 64 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 2e 61 63 74 69 76 65 3e 61 2c 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 2e 61 63 74 69 76 65 3e 61 3a 66 6f 63 75 73 2c 2e Data Ascii: d}.nav-tabs>li{float:left;margin-bottom:-1px}.nav-tabs>li>a{margin-right:2px;line-height:1.42857143;border:1px solid transparent;border-radius:4px 4px 0 0}.nav-tabs>li>a:hover{border-color:#eee #eee #ddd}.nav-tabs>li.active>a,.nav-tabs>li.active>a:focus,.
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 37 37 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 62 61 64 67 65 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 20 2e 62 61 64 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: inline-block;min-width:10px;padding:3px 7px;font-size:12px;font-weight:700;line-height:1;color:#fff;text-align:center;white-space:nowrap;vertical-align:middle;background-color:#777;border-radius:10px}.badge:empty{display:none}.btn .badge{position:relative
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 Data Ascii: .panel>.table-responsive:last-child>.table:last-child>tfoot:last-child>tr:last-child,.panel>.table:last-child>tbody:last-child>tr:last-child,.panel>.table:last-child>tfoot:last-child>tr:last-child{border-bottom-right-radius:3px;border-bottom-left-radius:3
2024-12-26 20:25:30 UTC	6774	IN	Data Raw: 30 2c 30 2c 2e 30 30 30 31 29 29 2c 74 6f 28 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 30 30 30 30 30 30 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 38 30 30 30 30 30 30 30 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 Data Ascii: 0,0,.0001)),to(rgba(0,0,0,.5)));background-image:linear-gradient(to right,rgba(0,0,0,.0001) 0,rgba(0,0,0,.5) 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#00000000', endColorstr='#80000000', GradientType=1);background-repeat:repe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49764	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	583	OUT	GET /bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	260	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: text/css Content-Length: 31000 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "7918-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	16124	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-12-26 20:25:29 UTC	14876	IN	Data Raw: 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: f166"}.fa-youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49767	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	554	OUT	GET /css/style2.css?v=20221226 HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	260	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: text/css Content-Length: 11399 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "2c87-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	11399	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 0a 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4e 6f 74 6f 20 53 61 6e 73 20 54 43 27 2c 20 22 48 65 69 74 69 20 54 43 22 2c 20 e5 be ae e8 bb 9f e6 ad a3 e9 bb 91 e9 ab 94 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 0a 66 6f 72 6d 20 73 75 70 20 7b 63 6f 6c 6f 72 3a 23 66 30 30 3b 20 70 61 64 64 69 6e 67 3a 30 20 32 70 78 7d 0a 0a 2a 20 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 Data Ascii: html, body {height:100%}body {font-family:'Noto Sans TC', "Heiti TC", , "Helvetica Neue", Helvetica, Arial, sans-serif; font-weight:500}form sup {color:#f00; padding:0 2px}* {-webkit-font-smoothing: antialiased; -moz-osx-font-smoothing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49766	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	563	OUT	GET /plugins/tingle/dist/tingle.min.css HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	259	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: text/css Content-Length: 4242 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1092-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	4242	IN	Data Raw: 2e 74 69 6e 67 6c 65 2d 6d 6f 64 61 6c 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 74 69 6e 67 6c 65 2d 6d 6f 64 61 6c 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f Data Ascii: .tingle-modal *{box-sizing:border-box}.tingle-modal{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1000;display:-webkit-box;display:-ms-flexbox;display:flex;visibility:hidden;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-directio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49763	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	571	OUT	GET /plugins/datepicker/dist/datepicker.min.css HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	258	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: text/css Content-Length: 3449 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "d79-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	3449	IN	Data Raw: 2f 2a 21 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 76 31 2e 30 2e 30 2d 62 65 74 61 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 66 65 6e 67 79 75 61 6e 63 68 65 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 61 74 65 70 69 63 6b 65 72 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 70 72 65 73 65 6e 74 20 43 68 65 6e 20 46 65 6e 67 79 75 61 6e 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 36 2d 33 30 54 30 39 3a 31 35 3a 32 34 2e 36 31 32 5a 0a 20 2a 2f 2e 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d Data Ascii: /! Datepicker v1.0.0-beta * https://fengyuanchen.github.io/datepicker * * Copyright 2014-present Chen Fengyuan * Released under the MIT license * * Date: 2018-06-30T09:15:24.612Z */.datepicker-container{background-color:#fff;direction:ltr;font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49762	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:29 UTC	557	OUT	GET /bower_components/jquery/dist/jquery.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:29 UTC	275	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:29 GMT Content-Type: application/javascript Content-Length: 86927 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1538f-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:29 UTC	16109	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-26 20:25:29 UTC	16384	IN	Data Raw: 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 69 5b 62 5d 3f 69 28 74 29 3a 69 2e 6c 65 6e 67 74 68 3e 31 3f 28 6e 3d 5b 65 2c 65 2c 22 22 2c 74 5d 2c 72 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 69 28 65 2c 74 29 2c 61 3d 6f 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 61 2d 2d 29 65 5b 72 3d 4f 28 65 2c 6f 5b 61 5d 29 5d 3d 21 28 6e 5b 72 5d 3d 6f 5b 61 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 2c 30 2c 6e 29 7d 29 3a 69 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 73 65 28 66 Data Ascii: e.error("unsupported pseudo: "+e);return i[b]?i(t):i.length>1?(n=[e,e,"",t],r.setFilters.hasOwnProperty(e.toLowerCase())?se(function(e,n){var r,o=i(e,t),a=o.length;while(a--)e[r=O(e,o[a])]=!(n[r]=o[a])}):function(e){return i(e,0,n)}):i}},pseudos:{not:se(f
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 47 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 47 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 67 65 74 28 65 2c 74 29 3a 28 74 68 69 73 2e 73 65 74 28 65 2c 74 2c 6e 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 29 7d Data Ascii: =n;else for(r in t)i[G(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][G(t)]},access:function(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)}
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 4c 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e Data Ascii: this.nodeType){var t=Le(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return Re(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return Re(this,arguments,function(e){this.parentNode&&this.
2024-12-26 20:25:30 UTC	16384	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 77 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c Data Ascii: entNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),w.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan",
2024-12-26 20:25:30 UTC	5282	IN	Data Raw: 2b 3d 28 6b 74 2e 74 65 73 74 28 74 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 74 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 69 29 2c 74 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 77 2e 65 72 72 6f 72 28 69 2b 22 20 77 61 73 20 6e 6f 74 20 63 61 6c 6c 65 64 22 29 2c 61 5b 30 5d 7d 2c 74 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3d 22 6a 73 6f 6e 22 2c 6f 3d 65 5b 69 5d 2c 65 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 61 72 67 75 6d 65 6e 74 73 7d 2c 72 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 3f 77 28 65 29 2e 72 65 6d 6f 76 65 50 72 6f 70 28 69 29 3a 65 5b 69 5d 3d 6f 2c 74 5b 69 5d 26 26 28 74 2e 6a 73 6f 6e 70 Data Ascii: +=(kt.test(t.url)?"&":"?")+t.jsonp+"="+i),t.converters["script json"]=function(){return a\|\|w.error(i+" was not called"),a[0]},t.dataTypes[0]="json",o=e[i],e[i]=function(){a=arguments},r.always(function(){void 0===o?w(e).removeProp(i):e[i]=o,t[i]&&(t.jsonp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49768	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:31 UTC	566	OUT	GET /bower_components/bootstrap/dist/js/bootstrap.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:32 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:31 GMT Content-Type: application/javascript Content-Length: 37045 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "90b5-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:32 UTC	16110	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquer
2024-12-26 20:25:32 UTC	16384	IN	Data Raw: 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 2c 74 68 69 73 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 28 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 66 6f 72 63 65 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f Data Ascii: .$element.hasClass("fade")?this.$element.one("bsTransitionEnd",a.proxy(this.hideModal,this)).emulateTransitionEnd(c.TRANSITION_DURATION):this.hideModal())},c.prototype.enforceFocus=function(){a(document).off("focusin.bs.modal").on("focusin.bs.modal",a.pro
2024-12-26 20:25:32 UTC	4551	IN	Data Raw: 69 6f 6e 73 2e 74 61 72 67 65 74 2c 22 2e 61 63 74 69 76 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3b 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 63 2c 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 62 2c 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 64 2c 74 68 69 73 7d 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 2e 62 73 2e 73 63 72 6f 6c 6c 73 70 79 2e 64 61 74 61 2d 61 70 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d Data Ascii: ions.target,".active").removeClass("active")};var d=a.fn.scrollspy;a.fn.scrollspy=c,a.fn.scrollspy.Constructor=b,a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=d,this},a(window).on("load.bs.scrollspy.data-api",function(){a('[data-spy="scroll"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49769	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:31 UTC	524	OUT	GET /js/lib.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:32 UTC	272	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:31 GMT Content-Type: application/javascript Content-Length: 3498 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "daa-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:32 UTC	3498	IN	Data Raw: 24 2e 61 6a 61 78 53 65 74 75 70 28 7b 0a 20 20 20 20 68 65 61 64 65 72 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 27 58 2d 43 53 52 46 2d 54 4f 4b 45 4e 27 3a 20 24 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 5d 27 29 2e 61 74 74 72 28 27 63 6f 6e 74 65 6e 74 27 29 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 65 72 3b 0a 0a 20 20 20 20 69 66 20 28 20 24 28 27 66 6f 72 6d 27 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 20 66 6f 72 6d 65 72 20 29 20 64 65 6c 65 74 65 20 66 6f 72 6d 65 72 3b 0a 0a 20 20 20 20 66 6f 72 6d 65 72 20 3d 20 6c 69 62 2e 66 6f 72 6d 65 72 2e 69 6e 69 74 28 20 24 28 27 66 6f 72 6d 27 Data Ascii: $.ajaxSetup({ headers: { 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content') }});$(function(){ var former; if ( $('form').length == 0 ) return; if ( former ) delete former; former = lib.former.init( $('form'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49770	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:31 UTC	531	OUT	GET /js/lib.former.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:32 UTC	273	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:31 GMT Content-Type: application/javascript Content-Length: 4794 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "12ba-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:32 UTC	4794	IN	Data Raw: 6c 69 62 2e 66 6f 72 6d 65 72 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 73 65 6c 65 63 74 6f 72 2c 20 73 75 62 6d 69 74 65 72 3b 0a 0a 09 72 65 74 75 72 6e 20 7b 0a 0a 09 09 69 6e 69 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 20 29 7b 0a 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 73 3b 0a 0a 09 09 09 24 28 20 27 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 27 20 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 20 24 28 27 3c 62 75 74 74 6f 6e 3e 27 2c 20 7b 0a 09 09 09 09 27 74 79 70 65 27 09 20 20 20 20 3a 20 27 73 75 62 6d 69 74 27 2c 0a 09 09 09 09 27 63 6c 61 73 73 27 20 20 20 20 20 3a 20 24 28 20 27 69 6e 70 75 74 5b 74 79 70 65 20 3d 20 73 75 62 6d 69 74 5d 27 20 29 2e 61 74 74 72 28 27 63 6c 61 73 73 27 29 2c 0a 09 09 Data Ascii: lib.former = (function(){var selector, submiter;return {init : function( s ){selector = s;$( 'input[type=submit]' ).replaceWith( $('<button>', {'type' : 'submit','class' : $( 'input[type = submit]' ).attr('class'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49771	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:31 UTC	555	OUT	GET /plugins/sweetalert/src/sweetalert.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:32 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:31 GMT Content-Type: application/javascript Content-Length: 40802 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "9f62-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:32 UTC	16110	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 73 77 61 6c 3d 65 28 29 3a 74 2e 73 77 61 6c 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[
2024-12-26 20:25:32 UTC	16384	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 31 3b 74 72 Data Ascii: ;background-color:#fff;text-align:center;border-radius:5px;position:static;margin:20px auto;display:inline-block;vertical-align:middle;-webkit-transform:scale(1);transform:scale(1);-webkit-transform-origin:50% 50%;transform-origin:50% 50%;z-index:10001;tr
2024-12-26 20:25:32 UTC	8308	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 2b 22 2d 2d 73 75 63 63 65 73 73 22 3b 72 65 74 75 72 6e 27 5c 6e 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 74 2b 22 5f 5f 6c 69 6e 65 20 22 2b 74 2b 27 5f 5f 6c 69 6e 65 2d 2d 6c 6f 6e 67 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 74 2b 22 5f 5f 6c 69 6e 65 20 22 2b 74 2b 27 5f 5f 6c 69 6e 65 2d 2d 74 69 70 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 74 2b 27 5f 5f 72 69 6e 67 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 74 2b 27 5f 5f 68 69 64 65 2d 63 6f 72 6e 65 72 73 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e Data Ascii: nction(){var t=r+"--success";return'\n <span class="'+t+"__line "+t+'__line--long"></span>\n <span class="'+t+"__line "+t+'__line--tip"></span>\n\n <div class="'+t+'__ring"></div>\n <div class="'+t+'__hide-corners"></div>\n '}},function(t,e,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49773	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:32 UTC	548	OUT	GET /plugins/tingle/dist/tingle.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:32 UTC	273	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:32 GMT Content-Type: application/javascript Content-Length: 7185 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1c11-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:32 UTC	7185	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6f 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6f 28 29 3a 74 2e 74 69 6e 67 6c 65 3d 6f 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6f 3d 7b 6f 6e 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 6f 6e 4f 70 65 6e 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 4f 70 65 6e 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 73 74 69 63 6b 79 46 6f 6f 74 65 72 3a 21 31 2c 66 6f 6f 74 65 72 3a 21 31 2c 63 73 73 43 6c 61 73 73 3a 5b 5d 2c 63 Data Ascii: !function(t,o){"function"==typeof define&&define.amd?define(o):"object"==typeof exports?module.exports=o():t.tingle=o()}(this,function(){function t(t){var o={onClose:null,onOpen:null,beforeOpen:null,beforeClose:null,stickyFooter:!1,footer:!1,cssClass:[],c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49772	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:32 UTC	556	OUT	GET /plugins/datepicker/dist/datepicker.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:33 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:32 GMT Content-Type: application/javascript Content-Length: 17269 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "4375-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:33 UTC	16110	IN	Data Raw: 2f 2a 21 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 76 31 2e 30 2e 30 2d 62 65 74 61 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 66 65 6e 67 79 75 61 6e 63 68 65 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 61 74 65 70 69 63 6b 65 72 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 70 72 65 73 65 6e 74 20 43 68 65 6e 20 46 65 6e 67 79 75 61 6e 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 36 2d 33 30 54 30 39 3a 31 35 3a 34 39 2e 37 31 37 5a 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d Data Ascii: /! Datepicker v1.0.0-beta * https://fengyuanchen.github.io/datepicker * * Copyright 2014-present Chen Fengyuan * Released under the MIT license * * Date: 2018-06-30T09:15:49.717Z */!function(e,t){"object"==typeof exports&&"undefined"!=typeof m
2024-12-26 20:25:33 UTC	1159	IN	Data Raw: 73 29 2c 61 2e 70 69 63 6b 65 64 26 26 73 2e 70 75 73 68 28 74 2e 70 69 63 6b 65 64 43 6c 61 73 73 29 2c 61 2e 64 69 73 61 62 6c 65 64 26 26 73 2e 70 75 73 68 28 74 2e 64 69 73 61 62 6c 65 64 43 6c 61 73 73 29 2c 22 3c 22 2b 69 2b 27 20 63 6c 61 73 73 3d 22 27 2b 73 2e 6a 6f 69 6e 28 22 20 22 29 2b 27 22 20 64 61 74 61 2d 76 69 65 77 3d 22 27 2b 61 2e 76 69 65 77 2b 27 22 3e 27 2b 61 2e 74 65 78 74 2b 22 3c 2f 22 2b 69 2b 22 3e 22 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 6e 70 75 74 3f 65 2e 76 61 6c 28 29 3a 65 2e 74 65 78 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 56 61 6c 75 65 22 Data Ascii: s),a.picked&&s.push(t.pickedClass),a.disabled&&s.push(t.disabledClass),"<"+i+' class="'+s.join(" ")+'" data-view="'+a.view+'">'+a.text+"</"+i+">"}},{key:"getValue",value:function(){var e=this.$element;return this.isInput?e.val():e.text()}},{key:"setValue"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49774	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:32 UTC	382	OUT	GET /bower_components/jquery/dist/jquery.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:33 UTC	275	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:32 GMT Content-Type: application/javascript Content-Length: 86927 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1538f-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:33 UTC	16109	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-26 20:25:33 UTC	16384	IN	Data Raw: 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 69 5b 62 5d 3f 69 28 74 29 3a 69 2e 6c 65 6e 67 74 68 3e 31 3f 28 6e 3d 5b 65 2c 65 2c 22 22 2c 74 5d 2c 72 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 69 28 65 2c 74 29 2c 61 3d 6f 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 61 2d 2d 29 65 5b 72 3d 4f 28 65 2c 6f 5b 61 5d 29 5d 3d 21 28 6e 5b 72 5d 3d 6f 5b 61 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 2c 30 2c 6e 29 7d 29 3a 69 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 73 65 28 66 Data Ascii: e.error("unsupported pseudo: "+e);return i[b]?i(t):i.length>1?(n=[e,e,"",t],r.setFilters.hasOwnProperty(e.toLowerCase())?se(function(e,n){var r,o=i(e,t),a=o.length;while(a--)e[r=O(e,o[a])]=!(n[r]=o[a])}):function(e){return i(e,0,n)}):i}},pseudos:{not:se(f
2024-12-26 20:25:33 UTC	16384	IN	Data Raw: 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 47 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 47 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 67 65 74 28 65 2c 74 29 3a 28 74 68 69 73 2e 73 65 74 28 65 2c 74 2c 6e 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 29 7d Data Ascii: =n;else for(r in t)i[G(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][G(t)]},access:function(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)}
2024-12-26 20:25:33 UTC	16384	IN	Data Raw: 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 4c 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e Data Ascii: this.nodeType){var t=Le(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return Re(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return Re(this,arguments,function(e){this.parentNode&&this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49778	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	600	OUT	GET /imgs/owlting_logo_big.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:35 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:34 GMT Content-Type: image/svg+xml Content-Length: 18178 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "4702-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:35 UTC	16142	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=
2024-12-26 20:25:35 UTC	2036	IN	Data Raw: 2e 33 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 2c 30 2e 34 68 2d 32 2e 35 0a 09 09 63 2d 30 2e 33 2c 30 2d 30 2e 35 2d 30 2e 32 2d 30 2e 36 2d 30 2e 35 4c 39 35 2c 32 32 2e 39 6c 2d 31 2e 33 2c 36 2e 39 63 30 2c 30 2e 33 2d 30 2e 33 2c 30 2e 35 2d 30 2e 36 2c 30 2e 35 68 2d 32 2e 34 63 2d 30 2e 33 2c 30 2d 30 2e 35 2d 30 2e 32 2d 30 2e 35 2d 30 2e 34 6c 2d 33 2e 37 2d 31 35 63 2d 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 37 2c 30 2e 35 2d 30 2e 37 0a 09 09 68 32 2e 31 63 30 2e 33 2c 30 2c 30 2e 35 2c 30 2e 32 2c 30 2e 35 2c 30 2e 34 6c 32 2c 38 2e 33 6c 31 2e 35 2d 38 2e 32 63 30 2d 30 2e 33 2c 30 2e 33 2d 30 2e 35 2c 30 2e 36 2d 30 2e 35 68 32 2e 33 63 30 2e 33 2c 30 2c 30 2e 35 2c 30 2e 32 2c 30 2e 36 2c 30 2e 35 4c 39 38 2e 33 2c 32 33 2e 31 7a 20 4d 38 37 Data Ascii: .3-0.3,0.4-0.5,0.4h-2.5c-0.3,0-0.5-0.2-0.6-0.5L95,22.9l-1.3,6.9c0,0.3-0.3,0.5-0.6,0.5h-2.4c-0.3,0-0.5-0.2-0.5-0.4l-3.7-15c-0.1-0.4,0.2-0.7,0.5-0.7h2.1c0.3,0,0.5,0.2,0.5,0.4l2,8.3l1.5-8.2c0-0.3,0.3-0.5,0.6-0.5h2.3c0.3,0,0.5,0.2,0.6,0.5L98.3,23.1z M87

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49775	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	349	OUT	GET /js/lib.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:34 UTC	272	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:34 GMT Content-Type: application/javascript Content-Length: 3498 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "daa-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:34 UTC	3498	IN	Data Raw: 24 2e 61 6a 61 78 53 65 74 75 70 28 7b 0a 20 20 20 20 68 65 61 64 65 72 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 27 58 2d 43 53 52 46 2d 54 4f 4b 45 4e 27 3a 20 24 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 5d 27 29 2e 61 74 74 72 28 27 63 6f 6e 74 65 6e 74 27 29 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 65 72 3b 0a 0a 20 20 20 20 69 66 20 28 20 24 28 27 66 6f 72 6d 27 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 20 66 6f 72 6d 65 72 20 29 20 64 65 6c 65 74 65 20 66 6f 72 6d 65 72 3b 0a 0a 20 20 20 20 66 6f 72 6d 65 72 20 3d 20 6c 69 62 2e 66 6f 72 6d 65 72 2e 69 6e 69 74 28 20 24 28 27 66 6f 72 6d 27 Data Ascii: $.ajaxSetup({ headers: { 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content') }});$(function(){ var former; if ( $('form').length == 0 ) return; if ( former ) delete former; former = lib.former.init( $('form'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49776	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	356	OUT	GET /js/lib.former.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:34 UTC	273	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:34 GMT Content-Type: application/javascript Content-Length: 4794 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "12ba-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:34 UTC	4794	IN	Data Raw: 6c 69 62 2e 66 6f 72 6d 65 72 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 76 61 72 20 73 65 6c 65 63 74 6f 72 2c 20 73 75 62 6d 69 74 65 72 3b 0a 0a 09 72 65 74 75 72 6e 20 7b 0a 0a 09 09 69 6e 69 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 20 29 7b 0a 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 73 3b 0a 0a 09 09 09 24 28 20 27 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 27 20 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 20 24 28 27 3c 62 75 74 74 6f 6e 3e 27 2c 20 7b 0a 09 09 09 09 27 74 79 70 65 27 09 20 20 20 20 3a 20 27 73 75 62 6d 69 74 27 2c 0a 09 09 09 09 27 63 6c 61 73 73 27 20 20 20 20 20 3a 20 24 28 20 27 69 6e 70 75 74 5b 74 79 70 65 20 3d 20 73 75 62 6d 69 74 5d 27 20 29 2e 61 74 74 72 28 27 63 6c 61 73 73 27 29 2c 0a 09 09 Data Ascii: lib.former = (function(){var selector, submiter;return {init : function( s ){selector = s;$( 'input[type=submit]' ).replaceWith( $('<button>', {'type' : 'submit','class' : $( 'input[type = submit]' ).attr('class'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49779	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	591	OUT	GET /imgs/sidebar.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:35 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:34 GMT Content-Type: image/svg+xml Content-Length: 14928 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "3a50-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:35 UTC	14928	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 37 22 20 68 65 69 67 68 74 3d 22 39 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 37 20 39 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 36 38 20 30 2e 38 36 33 39 39 39 56 31 38 48 31 33 2e 37 30 34 56 31 35 2e 37 36 38 48 34 2e 32 37 32 56 30 2e 38 36 33 39 39 39 48 31 2e 36 38 5a 4d 32 30 2e 38 37 35 37 20 35 2e 32 35 36 43 31 39 2e 30 35 31 37 20 35 2e 32 35 36 20 31 37 2e 35 38 37 37 20 35 2e 38 38 20 31 36 2e 35 33 31 37 20 37 2e 31 35 32 43 31 35 2e 34 32 37 37 20 38 2e 34 20 31 34 2e 38 39 39 37 20 39 2e 39 33 36 20 31 34 2e 38 39 39 37 20 31 31 2e 37 38 34 Data Ascii: <svg width="167" height="91" viewBox="0 0 167 91" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.68 0.863999V18H13.704V15.768H4.272V0.863999H1.68ZM20.8757 5.256C19.0517 5.256 17.5877 5.88 16.5317 7.152C15.4277 8.4 14.8997 9.936 14.8997 11.784

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49777	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	391	OUT	GET /bower_components/bootstrap/dist/js/bootstrap.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:35 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:35 GMT Content-Type: application/javascript Content-Length: 37045 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "90b5-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:35 UTC	16110	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquer
2024-12-26 20:25:35 UTC	16384	IN	Data Raw: 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 2c 74 68 69 73 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 28 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 66 6f 72 63 65 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f Data Ascii: .$element.hasClass("fade")?this.$element.one("bsTransitionEnd",a.proxy(this.hideModal,this)).emulateTransitionEnd(c.TRANSITION_DURATION):this.hideModal())},c.prototype.enforceFocus=function(){a(document).off("focusin.bs.modal").on("focusin.bs.modal",a.pro
2024-12-26 20:25:35 UTC	4551	IN	Data Raw: 69 6f 6e 73 2e 74 61 72 67 65 74 2c 22 2e 61 63 74 69 76 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3b 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 63 2c 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 62 2c 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 64 2c 74 68 69 73 7d 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 2e 62 73 2e 73 63 72 6f 6c 6c 73 70 79 2e 64 61 74 61 2d 61 70 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d Data Ascii: ions.target,".active").removeClass("active")};var d=a.fn.scrollspy;a.fn.scrollspy=c,a.fn.scrollspy.Constructor=b,a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=d,this},a(window).on("load.bs.scrollspy.data-api",function(){a('[data-spy="scroll"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49780	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:34 UTC	380	OUT	GET /plugins/sweetalert/src/sweetalert.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:35 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:35 GMT Content-Type: application/javascript Content-Length: 40802 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "9f62-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:35 UTC	16110	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 73 77 61 6c 3d 65 28 29 3a 74 2e 73 77 61 6c 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[
2024-12-26 20:25:35 UTC	16384	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 31 3b 74 72 Data Ascii: ;background-color:#fff;text-align:center;border-radius:5px;position:static;margin:20px auto;display:inline-block;vertical-align:middle;-webkit-transform:scale(1);transform:scale(1);-webkit-transform-origin:50% 50%;transform-origin:50% 50%;z-index:10001;tr
2024-12-26 20:25:35 UTC	8308	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 2b 22 2d 2d 73 75 63 63 65 73 73 22 3b 72 65 74 75 72 6e 27 5c 6e 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 74 2b 22 5f 5f 6c 69 6e 65 20 22 2b 74 2b 27 5f 5f 6c 69 6e 65 2d 2d 6c 6f 6e 67 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 74 2b 22 5f 5f 6c 69 6e 65 20 22 2b 74 2b 27 5f 5f 6c 69 6e 65 2d 2d 74 69 70 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 74 2b 27 5f 5f 72 69 6e 67 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 74 2b 27 5f 5f 68 69 64 65 2d 63 6f 72 6e 65 72 73 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e Data Ascii: nction(){var t=r+"--success";return'\n <span class="'+t+"__line "+t+'__line--long"></span>\n <span class="'+t+"__line "+t+'__line--tip"></span>\n\n <div class="'+t+'__ring"></div>\n <div class="'+t+'__hide-corners"></div>\n '}},function(t,e,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49781	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:35 UTC	373	OUT	GET /plugins/tingle/dist/tingle.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:35 UTC	273	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:35 GMT Content-Type: application/javascript Content-Length: 7185 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "1c11-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:35 UTC	7185	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6f 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6f 28 29 3a 74 2e 74 69 6e 67 6c 65 3d 6f 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6f 3d 7b 6f 6e 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 6f 6e 4f 70 65 6e 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 4f 70 65 6e 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 73 74 69 63 6b 79 46 6f 6f 74 65 72 3a 21 31 2c 66 6f 6f 74 65 72 3a 21 31 2c 63 73 73 43 6c 61 73 73 3a 5b 5d 2c 63 Data Ascii: !function(t,o){"function"==typeof define&&define.amd?define(o):"object"==typeof exports?module.exports=o():t.tingle=o()}(this,function(){function t(t){var o={onClose:null,onOpen:null,beforeOpen:null,beforeClose:null,stickyFooter:!1,footer:!1,cssClass:[],c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49783	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:35 UTC	590	OUT	GET /imgs/global.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:36 UTC	229	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 26 Dec 2024 20:25:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Cache-Control: no-cache, private
2024-12-26 20:25:36 UTC	1484	IN	Data Raw: 35 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c Data Ascii: 5c0<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Page Not Found</titl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49782	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:35 UTC	589	OUT	GET /imgs/arrow.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:36 UTC	239	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:35 GMT Content-Type: image/svg+xml Content-Length: 385 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "181-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:36 UTC	385	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 22 20 68 65 69 67 68 74 3d 22 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 20 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 33 30 30 34 20 31 2e 34 34 32 38 32 4c 33 2e 32 36 33 31 34 20 35 2e 36 38 30 39 37 43 33 2e 31 34 37 32 39 20 35 2e 38 37 32 30 37 20 32 2e 38 37 30 30 39 20 35 2e 38 37 32 34 32 20 32 2e 37 35 34 32 34 20 35 2e 36 38 31 33 32 4c 30 2e 31 36 36 33 33 39 20 31 2e 34 31 39 33 37 43 30 2e 30 34 35 35 38 38 39 20 31 2e 32 32 30 32 Data Ascii: <svg width="6" height="6" viewBox="0 0 6 6" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83004 1.44282L3.26314 5.68097C3.14729 5.87207 2.87009 5.87242 2.75424 5.68132L0.166339 1.41937C0.0455889 1.2202

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49784	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:35 UTC	624	OUT	GET /imgs/sidebar_bottom.png HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.owlting.com/css/style2.css?v=20221226 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:36 UTC	239	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:36 GMT Content-Type: image/png Content-Length: 68968 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "10d68-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:36 UTC	16145	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 b4 08 06 00 00 00 88 48 1a 5b 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 0c fd 49 44 41 54 78 01 ec bd 07 60 1c d7 79 2d 7c a6 6d 47 ef bd 77 10 ec bd 53 bd 37 53 92 6d 59 96 2d 47 6e b1 e3 9a f8 39 ef 7f 4f 79 e9 89 5b 9c c4 76 5c 65 59 72 11 d5 25 4b a2 44 89 60 ef 24 d8 50 88 de 7b c7 62 eb cc fc df 9d 5d 00 0b 60 41 82 24 48 82 e4 1c e9 72 76 67 67 67 67 17 33 67 ce 77 be ef de 0b e8 d0 a1 43 87 0e 1d 3a 74 e8 d0 a1 43 87 0e 1d 3a 74 e8 d0 a1 43 87 0e 1d 3a 74 dc 2c 78 fc f1 af a5 7f e2 13 5f cb 84 0e 1d 37 39 78 e8 98 f7 f0 78 f8 7f 74 b9 b8 37 1f 79 e4 1b 5f fe d4 a7 be Data Ascii: PNGIHDR,H[pHYs%%IR$sRGBgAMAaIDATx`y-\|mGwS7SmY-Gn9Oy[v\eYr%KD`$P{b]`A$Hrvgggg3gwC:tC:tC:t,x_79xxt7y_
2024-12-26 20:25:36 UTC	16384	IN	Data Raw: 53 b1 24 76 76 d9 6f 37 19 25 52 5c 4b ea 9a 9a 8e 5f d3 82 eb 79 49 58 2c 8b 33 3a 6a f8 eb 88 d8 98 07 ef f9 fc 13 38 b1 63 2f 9a 4e 57 e0 f1 bf f8 18 12 53 12 ce fb 5e 93 d9 88 ec c2 2c 54 9c eb c4 f6 43 3d 58 94 ac 22 92 dd fc d4 f3 37 89 fe 9e c5 89 f4 77 55 38 73 45 27 6e f5 84 28 dd 2b 57 e6 1e 2b 2f 2f 57 a1 e3 ba 45 61 e1 fa 15 f4 57 fd d5 5d 0f dd 12 fb d8 a7 ef 83 69 b4 02 86 d3 ff 44 9e 50 c7 b4 f0 68 52 53 a7 3c 87 09 4a dc 16 78 f2 be 02 6f fa 27 c9 97 4a 26 a2 92 30 ef 20 98 29 0c 8d a6 90 b1 10 72 f2 ed 90 63 e8 eb 8b 74 37 56 79 f2 c0 ba a6 84 86 7c d0 70 91 23 4f d8 e8 ee 43 b2 f7 2c d6 52 e6 34 2e ab c8 36 e0 34 2d ec e9 ee 7f 88 8c 79 31 25 65 61 55 53 53 d9 28 ae 01 e6 25 61 45 46 ae 59 22 08 dc ff db f2 89 87 22 6c 11 a1 f8 e0 b7 db Data Ascii: S$vvo7%R\K_yIX,3:j8c/NWS^,TC=X"7wU8sE'n(+W+//WEaW]iDPhRS<Jxo'J&0 )rct7Vy\|p#OC,R4.64-y1%eaUSS(%aEFY""l
2024-12-26 20:25:36 UTC	16384	IN	Data Raw: dc 89 bb a2 96 22 4c b4 4e 3e 36 75 e2 f1 18 3a 3d 03 78 a5 73 2f 9c 9c b3 a0 b4 f4 b9 4a dc c4 58 b3 e6 53 b1 22 2f 7c c9 68 35 7d 7b c9 96 0d 96 f5 0f dc 4d 59 dc 10 ed 35 ed b7 d3 26 06 c6 a4 a6 fd a4 53 d6 8d bd a0 06 99 91 5c 91 15 74 b5 b4 a0 ea f4 49 9c 3c b0 0f 92 48 4a 37 35 01 c9 1b 56 a2 a3 b0 18 27 8c a1 1a 59 5c 28 b3 38 5b 30 93 9d 15 a6 b2 ee 39 ac 16 8b 3d 67 64 35 d3 c4 38 8c 04 19 09 b1 04 81 9d 9a 83 c8 6b e8 12 dc 4d 4b 57 27 72 7f fb 1b 74 ac 59 87 8e b5 eb a6 1d 53 1e 5d ba 9f b6 78 11 5d 73 0e cf ff e4 8f 18 e8 b0 63 65 f1 dd c8 4b 5d 8c 91 91 01 bc be f7 7f d0 37 d8 fd 95 3d fb 7e fd df ac 08 6b ea fe e7 8d c2 1a 03 2b f4 4b 4c 5a 76 c0 ed b6 47 36 d6 57 2d 4d 4a ce 04 cb 1e 92 21 8f d3 75 67 d0 ee 20 a5 65 8e d6 d4 c9 4c 0a 62 b6 Data Ascii: "LN>6u:=xs/JXS"/\|h5}{MY5&S\tI<HJ75V'Y\(8[09=gd58kMKW'rtYS]x]sceK]7=~k+KLZvG6W-MJ!ug eLb
2024-12-26 20:25:36 UTC	16384	IN	Data Raw: fe ea 97 1e 8f f0 55 51 e4 58 ae fb 27 d0 71 59 e0 54 4e 91 15 55 f5 7a 64 2e d8 3d ab 6b 54 9d d5 30 50 e9 06 e0 9b b1 1c 8e ab 1c 7a c9 6c f7 ce 72 b4 3f d9 e1 41 ff e1 26 38 8f 55 c2 66 76 c3 6a 70 92 e7 35 02 b3 ab 87 5e a4 18 73 a6 61 b8 38 01 9e 82 07 7d 13 48 5c 24 84 06 f2 c9 87 3b a6 0d ec a0 46 2d c1 f6 37 ea 11 12 16 8d 34 96 99 0c c2 93 6e 97 0b 0d 35 15 4c 01 6e 2f dd f3 42 2b f0 22 ae 14 5e 7a e9 07 ce 87 1e fa fa 63 03 03 e1 ce 2b a9 e4 ae 57 5c 17 15 b4 7f f8 c3 7f 74 52 7a f7 1d 3a dc ff 4f 9f 0e ec f2 41 81 57 b7 cb e1 94 45 47 f0 49 48 87 c8 3c 1f 9d 45 58 68 a3 8b ff b1 28 0e ff 2f 5f c0 ff 5a 66 c0 43 0b 44 64 c4 5e c4 a0 7f 94 79 53 46 9d 50 06 e9 38 d8 a4 a5 de f3 67 01 94 e4 a5 50 12 4a 70 d1 b3 62 28 5e 88 95 6f 83 53 a6 48 47 83 Data Ascii: UQX'qYTNUzd.=kT0Pzlr?A&8Ufvjp5^sa8}H\$;F-74n5Ln/B+"^zc+W\tRz:OAWEGIH<EXh(/_ZfCDd^ySFP8gPJpb(^oSHG
2024-12-26 20:25:36 UTC	3671	IN	Data Raw: 63 d8 10 56 7e fe 0a 4e e3 9e 2a 7b c5 05 12 88 0a 03 30 ba d7 4b ac 20 a9 43 82 8a 3e c1 44 5a bb 6f df 9b 55 74 8d 86 5b f9 f9 4b 8d b2 6c 78 1a 8b f4 02 81 84 a9 06 bd 3e 22 2e 21 4e e0 e4 54 6e 99 3b 10 62 3d 37 20 f4 42 7f 61 bd 8b 9b ff b1 db 18 15 19 36 60 3d e1 af 2c 9e eb 94 e6 84 03 29 9e 57 57 d7 70 11 b4 22 9e 0b 92 bc cd e5 55 ad fe 06 f1 5c 98 36 ed c9 74 95 4a b8 17 ae e1 22 fc 3b 2c 72 72 ef bd ed 2d 98 4c ef 92 48 9b db da e8 d0 f1 e3 ab ad 14 80 cf 31 e4 09 0b 6e 9f 29 c4 e0 9a e3 25 7a 12 17 3b 1e 4f a5 f6 7a 89 1b 5e ca 5f 05 51 f8 48 ad f6 ee 9d 35 2b bd ee 46 f4 89 3b ee 58 1e ed 70 88 53 58 a8 c7 ed 9c 07 d7 26 96 ad ae a4 a4 44 45 f3 f2 57 64 8f ad 06 d6 b8 b8 1c a4 bc ac 52 89 32 72 a2 67 1a 48 6b c2 84 51 ca 66 0d fe b2 00 99 a8 Data Ascii: cV~N*{0K C>DZoUt[Klx>".!NTn;b=7 Ba6`=,)WWp"U\6tJ";,rr-LH1n)%z;Oz^_QH5+F;XpSX&DEWdR2rgHkQf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49785	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:36 UTC	381	OUT	GET /plugins/datepicker/dist/datepicker.min.js HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:36 UTC	274	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:36 GMT Content-Type: application/javascript Content-Length: 17269 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "4375-6174a1e70ed80" Accept-Ranges: bytes Vary: Accept-Encoding
2024-12-26 20:25:36 UTC	16110	IN	Data Raw: 2f 2a 21 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 76 31 2e 30 2e 30 2d 62 65 74 61 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 66 65 6e 67 79 75 61 6e 63 68 65 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 64 61 74 65 70 69 63 6b 65 72 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 70 72 65 73 65 6e 74 20 43 68 65 6e 20 46 65 6e 67 79 75 61 6e 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 36 2d 33 30 54 30 39 3a 31 35 3a 34 39 2e 37 31 37 5a 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d Data Ascii: /! Datepicker v1.0.0-beta * https://fengyuanchen.github.io/datepicker * * Copyright 2014-present Chen Fengyuan * Released under the MIT license * * Date: 2018-06-30T09:15:49.717Z */!function(e,t){"object"==typeof exports&&"undefined"!=typeof m
2024-12-26 20:25:36 UTC	1159	IN	Data Raw: 73 29 2c 61 2e 70 69 63 6b 65 64 26 26 73 2e 70 75 73 68 28 74 2e 70 69 63 6b 65 64 43 6c 61 73 73 29 2c 61 2e 64 69 73 61 62 6c 65 64 26 26 73 2e 70 75 73 68 28 74 2e 64 69 73 61 62 6c 65 64 43 6c 61 73 73 29 2c 22 3c 22 2b 69 2b 27 20 63 6c 61 73 73 3d 22 27 2b 73 2e 6a 6f 69 6e 28 22 20 22 29 2b 27 22 20 64 61 74 61 2d 76 69 65 77 3d 22 27 2b 61 2e 76 69 65 77 2b 27 22 3e 27 2b 61 2e 74 65 78 74 2b 22 3c 2f 22 2b 69 2b 22 3e 22 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 6e 70 75 74 3f 65 2e 76 61 6c 28 29 3a 65 2e 74 65 78 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 56 61 6c 75 65 22 Data Ascii: s),a.picked&&s.push(t.pickedClass),a.disabled&&s.push(t.disabledClass),"<"+i+' class="'+s.join(" ")+'" data-view="'+a.view+'">'+a.text+"</"+i+">"}},{key:"getValue",value:function(){var e=this.$element;return this.isInput?e.val():e.text()}},{key:"setValue"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49788	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:37 UTC	356	OUT	GET /imgs/sidebar.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:38 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:37 GMT Content-Type: image/svg+xml Content-Length: 14928 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "3a50-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:38 UTC	14928	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 37 22 20 68 65 69 67 68 74 3d 22 39 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 37 20 39 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 36 38 20 30 2e 38 36 33 39 39 39 56 31 38 48 31 33 2e 37 30 34 56 31 35 2e 37 36 38 48 34 2e 32 37 32 56 30 2e 38 36 33 39 39 39 48 31 2e 36 38 5a 4d 32 30 2e 38 37 35 37 20 35 2e 32 35 36 43 31 39 2e 30 35 31 37 20 35 2e 32 35 36 20 31 37 2e 35 38 37 37 20 35 2e 38 38 20 31 36 2e 35 33 31 37 20 37 2e 31 35 32 43 31 35 2e 34 32 37 37 20 38 2e 34 20 31 34 2e 38 39 39 37 20 39 2e 39 33 36 20 31 34 2e 38 39 39 37 20 31 31 2e 37 38 34 Data Ascii: <svg width="167" height="91" viewBox="0 0 167 91" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.68 0.863999V18H13.704V15.768H4.272V0.863999H1.68ZM20.8757 5.256C19.0517 5.256 17.5877 5.88 16.5317 7.152C15.4277 8.4 14.8997 9.936 14.8997 11.784

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49787	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:37 UTC	365	OUT	GET /imgs/owlting_logo_big.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:38 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:37 GMT Content-Type: image/svg+xml Content-Length: 18178 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "4702-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:38 UTC	16142	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=
2024-12-26 20:25:38 UTC	2036	IN	Data Raw: 2e 33 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 2c 30 2e 34 68 2d 32 2e 35 0a 09 09 63 2d 30 2e 33 2c 30 2d 30 2e 35 2d 30 2e 32 2d 30 2e 36 2d 30 2e 35 4c 39 35 2c 32 32 2e 39 6c 2d 31 2e 33 2c 36 2e 39 63 30 2c 30 2e 33 2d 30 2e 33 2c 30 2e 35 2d 30 2e 36 2c 30 2e 35 68 2d 32 2e 34 63 2d 30 2e 33 2c 30 2d 30 2e 35 2d 30 2e 32 2d 30 2e 35 2d 30 2e 34 6c 2d 33 2e 37 2d 31 35 63 2d 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 37 2c 30 2e 35 2d 30 2e 37 0a 09 09 68 32 2e 31 63 30 2e 33 2c 30 2c 30 2e 35 2c 30 2e 32 2c 30 2e 35 2c 30 2e 34 6c 32 2c 38 2e 33 6c 31 2e 35 2d 38 2e 32 63 30 2d 30 2e 33 2c 30 2e 33 2d 30 2e 35 2c 30 2e 36 2d 30 2e 35 68 32 2e 33 63 30 2e 33 2c 30 2c 30 2e 35 2c 30 2e 32 2c 30 2e 36 2c 30 2e 35 4c 39 38 2e 33 2c 32 33 2e 31 7a 20 4d 38 37 Data Ascii: .3-0.3,0.4-0.5,0.4h-2.5c-0.3,0-0.5-0.2-0.6-0.5L95,22.9l-1.3,6.9c0,0.3-0.3,0.5-0.6,0.5h-2.4c-0.3,0-0.5-0.2-0.5-0.4l-3.7-15c-0.1-0.4,0.2-0.7,0.5-0.7h2.1c0.3,0,0.5,0.2,0.5,0.4l2,8.3l1.5-8.2c0-0.3,0.3-0.5,0.6-0.5h2.3c0.3,0,0.5,0.2,0.6,0.5L98.3,23.1z M87

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49789	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:38 UTC	354	OUT	GET /imgs/arrow.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:38 UTC	239	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:38 GMT Content-Type: image/svg+xml Content-Length: 385 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "181-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:38 UTC	385	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 22 20 68 65 69 67 68 74 3d 22 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 20 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 33 30 30 34 20 31 2e 34 34 32 38 32 4c 33 2e 32 36 33 31 34 20 35 2e 36 38 30 39 37 43 33 2e 31 34 37 32 39 20 35 2e 38 37 32 30 37 20 32 2e 38 37 30 30 39 20 35 2e 38 37 32 34 32 20 32 2e 37 35 34 32 34 20 35 2e 36 38 31 33 32 4c 30 2e 31 36 36 33 33 39 20 31 2e 34 31 39 33 37 43 30 2e 30 34 35 35 38 38 39 20 31 2e 32 32 30 32 Data Ascii: <svg width="6" height="6" viewBox="0 0 6 6" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.83004 1.44282L3.26314 5.68097C3.14729 5.87207 2.87009 5.87242 2.75424 5.68132L0.166339 1.41937C0.0455889 1.2202

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49796	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:38 UTC	363	OUT	GET /imgs/sidebar_bottom.png HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:39 UTC	239	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:39 GMT Content-Type: image/png Content-Length: 68968 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "10d68-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:39 UTC	16145	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 b4 08 06 00 00 00 88 48 1a 5b 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 0c fd 49 44 41 54 78 01 ec bd 07 60 1c d7 79 2d 7c a6 6d 47 ef bd 77 10 ec bd 53 bd 37 53 92 6d 59 96 2d 47 6e b1 e3 9a f8 39 ef 7f 4f 79 e9 89 5b 9c c4 76 5c 65 59 72 11 d5 25 4b a2 44 89 60 ef 24 d8 50 88 de 7b c7 62 eb cc fc df 9d 5d 00 0b 60 41 82 24 48 82 e4 1c e9 72 76 67 67 67 67 17 33 67 ce 77 be ef de 0b e8 d0 a1 43 87 0e 1d 3a 74 e8 d0 a1 43 87 0e 1d 3a 74 e8 d0 a1 43 87 0e 1d 3a 74 dc 2c 78 fc f1 af a5 7f e2 13 5f cb 84 0e 1d 37 39 78 e8 98 f7 f0 78 f8 7f 74 b9 b8 37 1f 79 e4 1b 5f fe d4 a7 be Data Ascii: PNGIHDR,H[pHYs%%IR$sRGBgAMAaIDATx`y-\|mGwS7SmY-Gn9Oy[v\eYr%KD`$P{b]`A$Hrvgggg3gwC:tC:tC:t,x_79xxt7y_
2024-12-26 20:25:39 UTC	16384	IN	Data Raw: 53 b1 24 76 76 d9 6f 37 19 25 52 5c 4b ea 9a 9a 8e 5f d3 82 eb 79 49 58 2c 8b 33 3a 6a f8 eb 88 d8 98 07 ef f9 fc 13 38 b1 63 2f 9a 4e 57 e0 f1 bf f8 18 12 53 12 ce fb 5e 93 d9 88 ec c2 2c 54 9c eb c4 f6 43 3d 58 94 ac 22 92 dd fc d4 f3 37 89 fe 9e c5 89 f4 77 55 38 73 45 27 6e f5 84 28 dd 2b 57 e6 1e 2b 2f 2f 57 a1 e3 ba 45 61 e1 fa 15 f4 57 fd d5 5d 0f dd 12 fb d8 a7 ef 83 69 b4 02 86 d3 ff 44 9e 50 c7 b4 f0 68 52 53 a7 3c 87 09 4a dc 16 78 f2 be 02 6f fa 27 c9 97 4a 26 a2 92 30 ef 20 98 29 0c 8d a6 90 b1 10 72 f2 ed 90 63 e8 eb 8b 74 37 56 79 f2 c0 ba a6 84 86 7c d0 70 91 23 4f d8 e8 ee 43 b2 f7 2c d6 52 e6 34 2e ab c8 36 e0 34 2d ec e9 ee 7f 88 8c 79 31 25 65 61 55 53 53 d9 28 ae 01 e6 25 61 45 46 ae 59 22 08 dc ff db f2 89 87 22 6c 11 a1 f8 e0 b7 db Data Ascii: S$vvo7%R\K_yIX,3:j8c/NWS^,TC=X"7wU8sE'n(+W+//WEaW]iDPhRS<Jxo'J&0 )rct7Vy\|p#OC,R4.64-y1%eaUSS(%aEFY""l
2024-12-26 20:25:39 UTC	16384	IN	Data Raw: dc 89 bb a2 96 22 4c b4 4e 3e 36 75 e2 f1 18 3a 3d 03 78 a5 73 2f 9c 9c b3 a0 b4 f4 b9 4a dc c4 58 b3 e6 53 b1 22 2f 7c c9 68 35 7d 7b c9 96 0d 96 f5 0f dc 4d 59 dc 10 ed 35 ed b7 d3 26 06 c6 a4 a6 fd a4 53 d6 8d bd a0 06 99 91 5c 91 15 74 b5 b4 a0 ea f4 49 9c 3c b0 0f 92 48 4a 37 35 01 c9 1b 56 a2 a3 b0 18 27 8c a1 1a 59 5c 28 b3 38 5b 30 93 9d 15 a6 b2 ee 39 ac 16 8b 3d 67 64 35 d3 c4 38 8c 04 19 09 b1 04 81 9d 9a 83 c8 6b e8 12 dc 4d 4b 57 27 72 7f fb 1b 74 ac 59 87 8e b5 eb a6 1d 53 1e 5d ba 9f b6 78 11 5d 73 0e cf ff e4 8f 18 e8 b0 63 65 f1 dd c8 4b 5d 8c 91 91 01 bc be f7 7f d0 37 d8 fd 95 3d fb 7e fd df ac 08 6b ea fe e7 8d c2 1a 03 2b f4 4b 4c 5a 76 c0 ed b6 47 36 d6 57 2d 4d 4a ce 04 cb 1e 92 21 8f d3 75 67 d0 ee 20 a5 65 8e d6 d4 c9 4c 0a 62 b6 Data Ascii: "LN>6u:=xs/JXS"/\|h5}{MY5&S\tI<HJ75V'Y\(8[09=gd58kMKW'rtYS]x]sceK]7=~k+KLZvG6W-MJ!ug eLb
2024-12-26 20:25:39 UTC	16384	IN	Data Raw: fe ea 97 1e 8f f0 55 51 e4 58 ae fb 27 d0 71 59 e0 54 4e 91 15 55 f5 7a 64 2e d8 3d ab 6b 54 9d d5 30 50 e9 06 e0 9b b1 1c 8e ab 1c 7a c9 6c f7 ce 72 b4 3f d9 e1 41 ff e1 26 38 8f 55 c2 66 76 c3 6a 70 92 e7 35 02 b3 ab 87 5e a4 18 73 a6 61 b8 38 01 9e 82 07 7d 13 48 5c 24 84 06 f2 c9 87 3b a6 0d ec a0 46 2d c1 f6 37 ea 11 12 16 8d 34 96 99 0c c2 93 6e 97 0b 0d 35 15 4c 01 6e 2f dd f3 42 2b f0 22 ae 14 5e 7a e9 07 ce 87 1e fa fa 63 03 03 e1 ce 2b a9 e4 ae 57 5c 17 15 b4 7f f8 c3 7f 74 52 7a f7 1d 3a dc ff 4f 9f 0e ec f2 41 81 57 b7 cb e1 94 45 47 f0 49 48 87 c8 3c 1f 9d 45 58 68 a3 8b ff b1 28 0e ff 2f 5f c0 ff 5a 66 c0 43 0b 44 64 c4 5e c4 a0 7f 94 79 53 46 9d 50 06 e9 38 d8 a4 a5 de f3 67 01 94 e4 a5 50 12 4a 70 d1 b3 62 28 5e 88 95 6f 83 53 a6 48 47 83 Data Ascii: UQX'qYTNUzd.=kT0Pzlr?A&8Ufvjp5^sa8}H\$;F-74n5Ln/B+"^zc+W\tRz:OAWEGIH<EXh(/_ZfCDd^ySFP8gPJpb(^oSHG
2024-12-26 20:25:39 UTC	3671	IN	Data Raw: 63 d8 10 56 7e fe 0a 4e e3 9e 2a 7b c5 05 12 88 0a 03 30 ba d7 4b ac 20 a9 43 82 8a 3e c1 44 5a bb 6f df 9b 55 74 8d 86 5b f9 f9 4b 8d b2 6c 78 1a 8b f4 02 81 84 a9 06 bd 3e 22 2e 21 4e e0 e4 54 6e 99 3b 10 62 3d 37 20 f4 42 7f 61 bd 8b 9b ff b1 db 18 15 19 36 60 3d e1 af 2c 9e eb 94 e6 84 03 29 9e 57 57 d7 70 11 b4 22 9e 0b 92 bc cd e5 55 ad fe 06 f1 5c 98 36 ed c9 74 95 4a b8 17 ae e1 22 fc 3b 2c 72 72 ef bd ed 2d 98 4c ef 92 48 9b db da e8 d0 f1 e3 ab ad 14 80 cf 31 e4 09 0b 6e 9f 29 c4 e0 9a e3 25 7a 12 17 3b 1e 4f a5 f6 7a 89 1b 5e ca 5f 05 51 f8 48 ad f6 ee 9d 35 2b bd ee 46 f4 89 3b ee 58 1e ed 70 88 53 58 a8 c7 ed 9c 07 d7 26 96 ad ae a4 a4 44 45 f3 f2 57 64 8f ad 06 d6 b8 b8 1c a4 bc ac 52 89 32 72 a2 67 1a 48 6b c2 84 51 ca 66 0d fe b2 00 99 a8 Data Ascii: cV~N*{0K C>DZoUt[Klx>".!NTn;b=7 Ba6`=,)WWp"U\6tJ";,rr-LH1n)%z;Oz^_QH5+F;XpSX&DEWdR2rgHkQf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49801	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:44 UTC	591	OUT	GET /imgs/favicon.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:45 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:45 GMT Content-Type: image/svg+xml Content-Length: 11575 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "2d37-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:45 UTC	11575	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 2e 30 38 32 31 32 20 32 31 2e 30 33 37 39 43 38 2e 31 33 34 33 38 20 31 39 2e 33 35 31 34 20 31 30 2e 39 31 35 37 20 31 38 2e 38 37 33 38 20 31 33 2e 34 30 33 31 20 31 39 2e 37 36 33 38 43 31 32 2e 39 39 39 33 20 32 30 2e 33 36 37 36 20 31 32 2e 35 31 30 32 20 32 30 2e 39 30 36 38 20 31 31 2e 39 34 32 31 20 32 31 2e 33 37 33 37 43 31 31 2e 37 37 30 35 20 32 31 2e 35 31 34 39 20 31 31 2e 35 39 32 32 20 32 31 2e 36 34 34 36 20 31 31 2e 34 31 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M6.08212 21.0379C8.13438 19.3514 10.9157 18.8738 13.4031 19.7638C12.9993 20.3676 12.5102 20.9068 11.9421 21.3737C11.7705 21.5149 11.5922 21.6446 11.41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49802	54.168.109.197	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:47 UTC	356	OUT	GET /imgs/favicon.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:48 UTC	242	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 26 Dec 2024 20:25:47 GMT Content-Type: image/svg+xml Content-Length: 11575 Connection: close Last-Modified: Tue, 30 Apr 2024 06:02:46 GMT ETag: "2d37-6174a1e70ed80" Accept-Ranges: bytes
2024-12-26 20:25:48 UTC	11575	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 2e 30 38 32 31 32 20 32 31 2e 30 33 37 39 43 38 2e 31 33 34 33 38 20 31 39 2e 33 35 31 34 20 31 30 2e 39 31 35 37 20 31 38 2e 38 37 33 38 20 31 33 2e 34 30 33 31 20 31 39 2e 37 36 33 38 43 31 32 2e 39 39 39 33 20 32 30 2e 33 36 37 36 20 31 32 2e 35 31 30 32 20 32 30 2e 39 30 36 38 20 31 31 2e 39 34 32 31 20 32 31 2e 33 37 33 37 43 31 31 2e 37 37 30 35 20 32 31 2e 35 31 34 39 20 31 31 2e 35 39 32 32 20 32 31 2e 36 34 34 36 20 31 31 2e 34 31 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M6.08212 21.0379C8.13438 19.3514 10.9157 18.8738 13.4031 19.7638C12.9993 20.3676 12.5102 20.9068 11.9421 21.3737C11.7705 21.5149 11.5922 21.6446 11.41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49804	3.114.85.154	443	6100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-26 20:25:58 UTC	590	OUT	GET /imgs/global.svg HTTP/1.1 Host: auth.owlting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://auth-owlting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-26 20:25:59 UTC	229	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 26 Dec 2024 20:25:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Cache-Control: no-cache, private
2024-12-26 20:25:59 UTC	1484	IN	Data Raw: 35 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c Data Ascii: 5c0<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Page Not Found</titl

Target ID:	0
Start time:	15:24:58
Start date:	26/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:25:02
Start date:	26/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2244,i,13090271568516702117,15639840964998321001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:25:08
Start date:	26/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://auth-owlting.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://auth-owlting.com/css/index.3413bd13.css	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/img/icon_reload.12563642.svg	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/js/index.5edd0040.js	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/img/img-logo-arrows.7350f8b2.png	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/css/chunk-vendors.0d8d4f33.css	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/js/runtime~index.4b783e04.js	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/js/chunk-vendors.9651c0b9.js	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/img/logo-full.acc3a999.svg	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/loginpersonal.php	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/img/zh_tw.544fe750.svg	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/img/kv-map.02597139.svg	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/favicon.png	Avira URL Cloud: Label: phishing
Source: http://auth-owlting.com/personal	Avira URL Cloud: Label: phishing

Source: Email	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: http://auth-owlting.com
Source: Email	Joe Sandbox AI: AI detected Typosquatting in URL: http://auth-owlting.com

Source: http://auth-owlting.com/personal/	HTTP Parser: Form action: /loginpersonal.php
Source: http://auth-owlting.com/personal/	HTTP Parser: Form action: /loginpersonal.php

Source: http://auth-owlting.com/	HTTP Parser: No favicon
Source: http://auth-owlting.com/	HTTP Parser: No favicon
Source: http://auth-owlting.com/	HTTP Parser: No favicon

Source: http://auth-owlting.com/personal/	HTTP Parser: No <meta name="author".. found
Source: http://auth-owlting.com/personal/	HTTP Parser: No <meta name="author".. found

Source: http://auth-owlting.com/personal/	HTTP Parser: No <meta name="copyright".. found
Source: http://auth-owlting.com/personal/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: auth-owlting.com
Source: global traffic	DNS traffic detected: DNS query: auth.owlting.com
Source: global traffic	DNS traffic detected: DNS query: site.ru

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://auth-owlting.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
http://auth-owlting.com